45.91.139.185

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
37 reports
23 reporters · latest 4 hours ago
ISP
MB Teorita
Usage Type
Data Center/Web Hosting/Transit
ASN
AS7488
Domain Name
netutils.io
Country
🇺🇸 United States of America
City
Los Angeles, California
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
37 from 23 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇨🇿 Czechia 16 🇫🇷 France 4 🇳🇱 Netherlands 4
Most common categories SSH 22 Brute-Force 20 Web App Attack 15 Port Scan 5 Hacking 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇱🇺 SiteXL
Hacking Port Scan Brute-Force SSH
🇨🇿 boitcybersecurity
2026-11-10T14:52:17.892149+01:00 eproxy sshd[2083193]: User root not allowed because account is locked 2026-11-10T14:52:18.050613+01:00 eproxy sshd[2083193]: Connection closed by invalid user root 45.91.139.185 port 49530 [preauth] ...
Web App Attack
🇨🇿 boitcybersecurity
2026-11-10T14:32:05.471111+01:00 eproxy sshd[2080963]: User root not allowed because account is locked 2026-11-10T14:32:05.631084+01:00 eproxy sshd[2080963]: Connection closed by invalid user root 45.91.139.185 port 33502 [preauth] ...
Web App Attack
🇨🇿 boitcybersecurity
2026-11-10T14:11:50.983956+01:00 eproxy sshd[2079369]: User root not allowed because account is locked 2026-11-10T14:11:51.157051+01:00 eproxy sshd[2079369]: Connection closed by invalid user root 45.91.139.185 port 33500 [preauth] ...
Web App Attack
🇫🇷 FastPath
Repeated unauthorized access attempts observed from this IP address.
Brute-Force SSH
🇨🇿 boitcybersecurity
2026-11-10T13:51:34.487949+01:00 eproxy sshd[2077660]: User root not allowed because account is locked 2026-11-10T13:51:34.651963+01:00 eproxy sshd[2077660]: Connection closed by invalid user root 45.91.139.185 port 55668 [preauth] ...
Web App Attack
🇨🇿 boitcybersecurity
2026-11-10T13:31:17.971039+01:00 eproxy sshd[2075542]: User root not allowed because account is locked 2026-11-10T13:31:18.133732+01:00 eproxy sshd[2075542]: Connection closed by invalid user root 45.91.139.185 port 46044 [preauth] ...
Web App Attack
🇨🇿 boitcybersecurity
2026-11-10T13:09:17.042241+01:00 eproxy sshd[2073656]: User root not allowed because account is locked 2026-11-10T13:09:17.218013+01:00 eproxy sshd[2073656]: Connection closed by invalid user root 45.91.139.185 port 37526 [preauth] ...
Web App Attack
🇨🇿 boitcybersecurity
2026-11-10T12:49:04.619460+01:00 eproxy sshd[2071540]: User root not allowed because account is locked 2026-11-10T12:49:04.778268+01:00 eproxy sshd[2071540]: Connection closed by invalid user root 45.91.139.185 port 35004 [preauth] ...
Web App Attack
🇦🇺 Block Rockin' Beats
Attempted connection to TCP port 22
Port Scan SSH
🇨🇿 boitcybersecurity
2026-11-10T12:25:02.830850+01:00 eproxy sshd[2069474]: User root not allowed because account is locked 2026-11-10T12:25:02.996520+01:00 eproxy sshd[2069474]: Connection closed by invalid user root 45.91.139.185 port 52438 [preauth] ...
Web App Attack
🇨🇿 boitcybersecurity
2026-11-10T12:04:46.295633+01:00 eproxy sshd[2067911]: User root not allowed because account is locked 2026-11-10T12:04:46.454801+01:00 eproxy sshd[2067911]: Connection closed by invalid user root 45.91.139.185 port 48674 [preauth] ...
Web App Attack
🇳🇱 COMPLEX
Banned by Multi Agent · node …hkvi · attempts=5 · SSH brute-force / scan
Brute-Force SSH
🇨🇿 boitcybersecurity
2026-11-10T11:41:09.306257+01:00 eproxy sshd[2066242]: User root not allowed because account is locked 2026-11-10T11:41:09.465175+01:00 eproxy sshd[2066242]: Connection closed by invalid user root 45.91.139.185 port 53970 [preauth] ...
Web App Attack
🇩🇪 marcel-knorr.de
[MK-Root1] SSH login failed
Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 222.104.76.94
🇺🇸 157.245.91.65
🇺🇸 143.198.117.135
🇧🇪 104.199.31.254
🇺🇸 104.28.233.161
🇷🇴 80.94.92.28
🇵🇭 58.69.196.148
🇳🇱 45.148.10.152
🇹🇳 41.225.242.220
🇳🇱 204.76.203.43
🇧🇷 189.114.136.231
🇳🇴 167.104.108.17
🇰🇷 118.37.214.187
🇨🇳 117.188.139.227
🇳🇱 109.160.32.162
🇺🇸 104.28.233.155
🇭🇰 49.213.6.30
🇳🇱 45.156.87.150
🇺🇸 43.166.136.153
🇳🇱 213.209.159.242
feedback