91.107.148.8

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
47 reports
44 reporters · latest 4 hours ago
ISP
Hetzner Online GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS24940
Hostname(s)
static.8.148.107.91.clients.your-server.de
Domain Name
hetzner.com
Country
🇩🇪 Germany
City
Nuremberg, Bavaria
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
47 from 44 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 18 🇫🇷 France 11 🇫🇮 Finland 5
Most common categories Port Scan 42 Brute-Force 14 Hacking 11 Exploited Host 1 SSH 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇦🇹 joe-abuse
Honeypot: 1 unsolicited connection attempt(s) to ports where no service is offered (3389/tcp); first 2026-11-07 05:41:57 UTC, last 2026-11-07 05:41:57 UTC. Reported by ipdb-security/fitzgerald.eu
Port Scan
🇩🇪 KPS
PortscanM
Port Scan
🇩🇪 Jochen Pretli
connection to honeypot
Email Spam Port Scan
🇫🇷 Entalpi.net
Tried to hit sensible closed port commonly used in attacks
Port Scan Hacking
🇷🇴 Viperel
RouterOS: Repeated connections to sensitive (SSH/RDP/TELNET/DB/MGM) ports detected.
Port Scan Brute-Force
🇫🇷 Hiigara
connection attempt : 91.107.148.8 on port : tcp/3389 (RDP)
Port Scan
🇩🇪 IP Analyzer
Unauthorized connection attempt from IP address 91.107.148.8 on Port 3389(RDP)
Port Scan
🇫🇷 Petre 21_ip
Port Scan
🇮🇹 Fusty
Unauthorized attempt on (TCP on port 3389). Source port: 47248 TTL: 241 Packet length: 40 Timestamp: 2026-11-07 06:58:32
Port Scan Hacking Brute-Force
🇸🇪 SkyDancer
Multiple intrusion attempts via RDP. Attack automatically blocked by SkyDancer Ai(RDP-X).
Hacking Brute-Force
🇳🇱 StopAbuse
tcp/3389
Port Scan
🇫🇮 Maxetow
Scan port: 3389 | 1 total | size=40B
Port Scan
🇳🇱 VMHeaven.io
Blocked by UFW [3389/tcp] Source port: 47248 TTL: 244 Packet length: 40
Port Scan Hacking Brute-Force
Anonymous
Blocked by firewall on hugin [3389/tcp] | Rule: UFW | SPT: 47248 | TTL: 246 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇩🇪 Fahreddin Ergin
Detected by CrowdSec / Wazuh on Echoserver Hetzner cluster (automated brute-force ban)
Brute-Force SSH Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 170.233.57.246
🇮🇩 202.91.14.2
🇨🇳 123.14.123.226
🇧🇦 109.163.174.72
🇺🇿 94.158.58.222
🇳🇱 64.205.72.138
🇺🇸 45.131.195.219
🇦🇹 5.183.217.146
🇮🇩 103.157.48.74
🇧🇪 35.210.115.86
🇭🇺 5.38.176.109
🇨🇳 218.78.186.58
🇲🇲 202.165.90.172
🇨🇳 124.74.97.18
🇨🇳 122.191.115.237
🇮🇳 122.168.241.118
feedback