JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.91.97.132

149.91.97.132 was found in our database!

This IP was reported 728 times. Confidence of Abuse is 100%: ?

100%

ISP	PROCONO S.A.
Usage Type	Fixed Line ISP
ASN	AS34977
Hostname(s)	132.red.97.91.149.procono.es
Domain Name	ptvtelecom.com
Country	🇪🇸 Spain
City	Madrid, Madrid

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.91.97.132

Whois 149.91.97.132

IP Abuse Reports for 149.91.97.132:

This IP address has been reported a total of 728 times from 376 distinct sources. 149.91.97.132 was first reported on June 9th 2026, and the most recent report was 49 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 andypiper	2026-06-18 01:01:58 (49 minutes ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇪🇸 scotynau	2026-06-18 00:53:08 (58 minutes ago)	2026-06-18T00:44:49.900028+00:00 bastionez sshd[778910]: Invalid user ec2-user from 149.91.97.132 po ... show more 2026-06-18T00:44:49.900028+00:00 bastionez sshd[778910]: Invalid user ec2-user from 149.91.97.132 port 41660 2026-06-18T00:53:07.212989+00:00 bastionez sshd[779019]: Invalid user luis from 149.91.97.132 port 45406 ... show less	Brute-Force SSH
🇺🇸 r	2026-06-18 00:44:08 (1 hour ago)	Jun 18 00:44:05 vpn sshd[3657884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more Jun 18 00:44:05 vpn sshd[3657884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.91.97.132 Jun 18 00:44:07 vpn sshd[3657884]: Failed password for invalid user ec2-user from 149.91.97.132 port 43472 ssh2 ... show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-06-17 23:20:10 (2 hours ago)	Unauthorized connection to FTP port 21	FTP Brute-Force Brute-Force
🇩🇪 ipcop.net	2026-06-17 22:54:52 (2 hours ago)	2026-06-18T00:45:31.248040+02:00 gw-de17-01.guestgw.net sshd[23760]: Disconnected from authenticatin ... show more 2026-06-18T00:45:31.248040+02:00 gw-de17-01.guestgw.net sshd[23760]: Disconnected from authenticating user root 149.91.97.132 port 53434 [preauth] 2026-06-18T00:52:56.480766+02:00 gw-de17-01.guestgw.net sshd[25958]: Invalid user ari from 149.91.97.132 port 53004 2026-06-18T00:52:56.561823+02:00 gw-de17-01.guestgw.net sshd[25958]: Disconnected from invalid user ari 149.91.97.132 port 53004 [preauth] 2026-06-18T00:54:51.871000+02:00 gw-de17-01.guestgw.net sshd[26519]: Invalid user odoo from 149.91.97.132 port 37198 2026-06-18T00:54:51.965451+02:00 gw-de17-01.guestgw.net sshd[26519]: Disconnected from invalid user odoo 149.91.97.132 port 37198 [preauth] show less	Brute-Force
🇺🇸 bigscoots.com	2026-06-17 22:48:10 (3 hours ago)	149.91.97.132 (ES/Spain/132.red.97.91.149.procono.es), 5 distributed sshd attacks on account [root] ... show more 149.91.97.132 (ES/Spain/132.red.97.91.149.procono.es), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 17 17:47:49 14474 sshd[4743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.133.245.20 user=root Jun 17 17:46:32 14474 sshd[4550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.91.97.132 user=root Jun 17 17:46:34 14474 sshd[4550]: Failed password for root from 149.91.97.132 port 50874 ssh2 Jun 17 17:14:22 14474 sshd[31441]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.222.96 user=root Jun 17 17:14:24 14474 sshd[31441]: Failed password for root from 159.65.222.96 port 57172 ssh2 IP Addresses Blocked: 95.133.245.20 (DE/Germany/-) show less	Brute-Force SSH
🇩🇪 AnonDrop	2026-06-17 22:46:21 (3 hours ago)	Credential/password theft attempt - Commands: cd ~; chattr -ia .ssh; lockr -ia .ssh, cd ~; chattr -i ... show more Credential/password theft attempt - Commands: cd ~; chattr -ia .ssh; lockr -ia .ssh, cd ~; chattr -ia .ssh; lockr -ia .ssh, cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ show less	Brute-Force
🇺🇸 anon333	2026-06-17 22:33:36 (3 hours ago)	Hacker syslog review 1781735616	Hacking
🇺🇸 anon333	2026-06-17 21:46:16 (4 hours ago)	Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-17T21:36:37Z and 2026-06-1 ... show more Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-17T21:36:37Z and 2026-06-17T21:46:16Z show less	Brute-Force SSH
🇵🇱 Wepted	2026-06-17 21:44:52 (4 hours ago)	2026-06-17T23:38:29.970976+02:00 axisverse sshd-session[1643150]: Invalid user ubuntu from 149.91.97 ... show more 2026-06-17T23:38:29.970976+02:00 axisverse sshd-session[1643150]: Invalid user ubuntu from 149.91.97.132 port 34248 2026-06-17T23:42:52.406335+02:00 axisverse sshd-session[1653888]: Invalid user liwei from 149.91.97.132 port 46140 2026-06-17T23:44:51.808510+02:00 axisverse sshd-session[1658830]: Invalid user jay from 149.91.97.132 port 41872 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-06-17 21:42:00 (4 hours ago)	(sshd) Failed SSH login from 149.91.97.132 (ES/Spain/132.red.97.91.149.procono.es): 5 in the last 36 ... show more (sshd) Failed SSH login from 149.91.97.132 (ES/Spain/132.red.97.91.149.procono.es): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 17 16:34:28 15365 sshd[11175]: Invalid user omm from 149.91.97.132 port 46108 Jun 17 16:34:30 15365 sshd[11175]: Failed password for invalid user omm from 149.91.97.132 port 46108 ssh2 Jun 17 16:39:43 15365 sshd[14531]: Invalid user ubuntu from 149.91.97.132 port 57378 Jun 17 16:39:45 15365 sshd[14531]: Failed password for invalid user ubuntu from 149.91.97.132 port 57378 ssh2 Jun 17 16:41:54 15365 sshd[15958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.91.97.132 user=root show less	Brute-Force SSH
🇫🇷 danirod	2026-06-17 21:39:36 (4 hours ago)	Jun 17 21:33:23 vps324820 sshd[2332613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Jun 17 21:33:23 vps324820 sshd[2332613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.91.97.132 Jun 17 21:33:25 vps324820 sshd[2332613]: Failed password for invalid user omm from 149.91.97.132 port 46954 ssh2 Jun 17 21:39:35 vps324820 sshd[2339100]: Invalid user ubuntu from 149.91.97.132 port 47584 ... show less	Brute-Force SSH
🇮🇱 spd.co.il	2026-06-17 21:01:54 (4 hours ago)	Unauthorized access attempts on ports: 22	Brute-Force SSH
🇺🇸 ezscale	2026-06-17 20:35:52 (5 hours ago)	SSH brute force on cp.vps.ezscale.tech (3 failures). Detected by fail2ban.	Brute-Force SSH
🇮🇳 92kmees	2026-06-17 20:35:10 (5 hours ago)	Fail2Ban ban from SSH jail	Brute-Force SSH

Showing 1 to 15 of 728 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4001:c0d::122

🇺🇸 216.25.89.66

🇩🇪 213.209.159.235

🇺🇸 205.210.31.108

🇰🇷 119.203.251.187

🇮🇳 103.78.182.18

🇦🇲 87.241.191.42

🇩🇪 87.106.29.151

🇺🇸 66.132.186.236

🇸🇬 47.82.52.60

🇳🇱 45.148.10.141

🇺🇸 43.159.140.236

🇨🇳 39.154.11.39

🇷🇺 37.193.56.149

🇨🇳 36.103.222.120

🇬🇧 35.203.210.12

🇫🇷 5.196.106.17

🇨🇳 222.168.35.178

🇨🇳 218.21.182.228

🇷🇺 217.64.147.230