JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.107.122.52

91.107.122.52 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 45%: ?

45%

ISP	JSC IOT
Usage Type	Data Center/Web Hosting/Transit
ASN	AS29182
Hostname(s)	micbuh.fvds.ru
Domain Name	aoiot.ru
Country	🇷🇺 Russian Federation
City	Moscow, Moscow

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.107.122.52

Whois 91.107.122.52

IP Abuse Reports for 91.107.122.52:

This IP address has been reported a total of 26 times from 17 distinct sources. 91.107.122.52 was first reported on April 15th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 sargetun	2026-06-04 08:00:27 (2 weeks ago)	Honeypot: Auto-ban: 24 hour idle after honeypot interaction. Auto-reported from VPS honeypot.	Brute-Force SSH Hacking
Anonymous	2026-06-03 20:53:14 (2 weeks ago)	Portscan: TCP/990 (7x), TCP/21 (2x)	Port Scan
🇳🇱 EGP Abuse Dept	2026-06-03 11:21:06 (3 weeks ago)	Unauthorized connection to FTP port 21	Port Scan Hacking
🇺🇸 sargetun	2026-06-03 07:55:54 (3 weeks ago)	Honeypot: VNC probe on port 5900 at 2026-06-03 07:54:44.150840. Automated report from VPS honeypot.	Port Scan
Anonymous	2026-05-31 04:31:18 (3 weeks ago)	Failed login attempt detected by Fail2Ban in plesk-proftpd jail	Brute-Force
🇳🇱 wlt-blocker	2026-05-31 00:02:41 (3 weeks ago)	Attempts to login to FTP server with wrong username and/or password	FTP Brute-Force
🇺🇸 LSPCCU	2026-05-30 07:05:11 (3 weeks ago)	TSEC Honeypot Network report. Threat score: 100/100. Categories: Port Scan, Brute-Force, SSH. Honeyp ... show more TSEC Honeypot Network report. Threat score: 100/100. Categories: Port Scan, Brute-Force, SSH. Honeypot: cowrie, ssh-telnet. Context: 91. show less	Port Scan Brute-Force SSH
🇫🇷 tecnicorioja	2026-05-28 06:02:51 (3 weeks ago)	FTP attack May 28 04:50:34	Brute-Force FTP Brute-Force
🇺🇸 katawajojo	2026-05-27 07:19:47 (4 weeks ago)	2026-05-26T23:55:04.806500-07:00 lain sshd-session[224133]: pam_unix(sshd:auth): authentication fail ... show more 2026-05-26T23:55:04.806500-07:00 lain sshd-session[224133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.107.122.52 user=root 2026-05-26T23:55:06.837383-07:00 lain sshd-session[224133]: Failed password for root from 91.107.122.52 port 58588 ssh2 2026-05-27T00:19:43.568899-07:00 lain sshd-session[224285]: Invalid user lostinrouter from 91.107.122.52 port 59786 2026-05-27T00:19:44.203539-07:00 lain sshd-session[224285]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.107.122.52 2026-05-27T00:19:46.540973-07:00 lain sshd-session[224285]: Failed password for invalid user lostinrouter from 91.107.122.52 port 59786 ssh2 ... show less	Brute-Force SSH
🇺🇸 katawajojo	2026-05-27 05:15:13 (4 weeks ago)	2026-05-26T21:50:29.619167-07:00 lain sshd-session[223020]: pam_unix(sshd:auth): authentication fail ... show more 2026-05-26T21:50:29.619167-07:00 lain sshd-session[223020]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.107.122.52 user=root 2026-05-26T21:50:31.960774-07:00 lain sshd-session[223020]: Failed password for root from 91.107.122.52 port 40884 ssh2 2026-05-26T22:15:10.596467-07:00 lain sshd-session[223183]: Invalid user lostinrouter from 91.107.122.52 port 38902 2026-05-26T22:15:10.797576-07:00 lain sshd-session[223183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.107.122.52 2026-05-26T22:15:12.392378-07:00 lain sshd-session[223183]: Failed password for invalid user lostinrouter from 91.107.122.52 port 38902 ssh2 ... show less	Brute-Force SSH
🇺🇸 katawajojo	2026-05-27 04:01:17 (4 weeks ago)	2026-05-26T20:09:24.359796-07:00 lain sshd-session[221941]: Failed password for invalid user lostinr ... show more 2026-05-26T20:09:24.359796-07:00 lain sshd-session[221941]: Failed password for invalid user lostinrouter from 91.107.122.52 port 40422 ssh2 2026-05-26T20:37:18.578131-07:00 lain sshd-session[222374]: Invalid user lostinrouter from 91.107.122.52 port 41070 2026-05-26T20:37:19.251196-07:00 lain sshd-session[222374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.107.122.52 2026-05-26T20:37:21.705444-07:00 lain sshd-session[222374]: Failed password for invalid user lostinrouter from 91.107.122.52 port 41070 ssh2 2026-05-26T21:01:16.861983-07:00 lain sshd-session[222585]: Invalid user lostinrouter from 91.107.122.52 port 49096 ... show less	Brute-Force SSH
🇵🇱 alianet	2026-05-27 03:42:26 (4 weeks ago)	May 27 03:16:02 vps-eb8e942e sshd-session[2318867]: Connection closed by invalid user simpleerp 91.1 ... show more May 27 03:16:02 vps-eb8e942e sshd-session[2318867]: Connection closed by invalid user simpleerp 91.107.122.52 port 50274 [preauth] May 27 03:42:23 vps-eb8e942e sshd-session[2436241]: Connection from 91.107.122.52 port 41248 on 57.128.195.69 port 2222 rdomain "" May 27 03:42:25 vps-eb8e942e sshd-session[2436241]: Invalid user simpleerp from 91.107.122.52 port 41248 ... show less	Brute-Force SSH
Anonymous	2026-05-27 03:29:05 (4 weeks ago)	2026-05-27 05:00:44,663 fail2ban.actions [3799592]: NOTICE [sshd] Ban 91.107.122.52 2026-05- ... show more 2026-05-27 05:00:44,663 fail2ban.actions [3799592]: NOTICE [sshd] Ban 91.107.122.52 2026-05-27 05:29:05,099 fail2ban.actions [3799592]: NOTICE [sshd] Ban 91.107.122.52 ... show less	Brute-Force Exploited Host
🇩🇪 london2038.com	2026-05-27 03:25:49 (4 weeks ago)	Unsolicited connect to 2222/TCP 2026-05-27 04:57:23.653938612 +0200 CEST, 91.107.122.52:40772, closi ... show more Unsolicited connect to 2222/TCP 2026-05-27 04:57:23.653938612 +0200 CEST, 91.107.122.52:40772, closing 2026-05-27 05:25:48.521971151 +0200 CEST, 91.107.122.52:35266, closing show less	Port Scan SSH
🇩🇪 rh24	2026-05-27 03:22:05 (4 weeks ago)	91.107.122.52 (GB/United Kingdom/micbuh.fvds.ru), 5 distributed sshd attacks on account [redacted]	Brute-Force SSH

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 202.29.224.166

🇺🇸 151.241.122.108

🇨🇳 111.231.12.65

🇧🇫 102.23.39.152

🇺🇸 66.52.190.27

🇮🇶 65.20.144.171

🇷🇺 46.18.204.177

🇳🇱 45.148.10.147

🇻🇳 14.243.118.187

🇧🇪 2a00:1450:400c:c0d::123

🇻🇳 2402:800:61ef:febc:3d68:735:f88c:e08a

🇰🇷 222.98.122.37

🇬🇧 104.248.169.81

🇮🇳 103.161.93.53

🇫🇷 91.231.89.10

🇳🇱 91.92.40.66

🇮🇳 74.125.178.144

🇧🇷 43.164.193.198

🇯🇵 8.216.7.213

🇸🇬 114.119.139.110