JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

91.122.56.218

Neutral Activity

Abuse confidence score ?

0% Low Risk

134 reports

88 reporters · latest 2 years ago

ISP	OJSC Rostelecom
Usage Type	Fixed Line ISP
ASN	AS12389
Domain Name	rt.ru
Country	🇷🇺 Russian Federation
City	Saint Petersburg, St.-Petersburg

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

91.122.56.218 has been reported 134 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 91.122.56.218

This IP address has been reported a total of 134 times from 88 distinct sources. 91.122.56.218 was first reported on September 1st 2023, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Linuxmalwarehuntingnl	2024-07-01 10:53:55 (2 years ago)	Unauthorized connection attempt	Brute-Force
🇨🇳 ThreatBook.io	2023-09-21 00:00:55 (3 years ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/91.122.56.218 20 ... show more ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/91.122.56.218 2023-09-20 11:01:44 http://61.136.212.202:8081/phpmyadmin/scripts/setup.php 2023-09-20 11:01:45 http://61.136.212.202:8081/phpMyAdmin-2.11.3/scripts/setup.php 2023-09-20 11:01:44 http://61.136.212.202:8081/phpMyAdmin-2.11.4/scripts/setup.php 2023-09-20 11:01:43 http://61.136.212.202:8081/phpMyAdmin/scripts/setup.php show less	Web App Attack
🇷🇸 Smel	2023-09-19 11:33:03 (3 years ago)	Unauthorized Probe/Connection, Hack -	Port Scan Hacking
🇺🇸 RAP	2023-09-19 05:44:05 (3 years ago)	2023-09-19 05:44:05 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
🇺🇸 RAP	2023-09-18 06:18:50 (3 years ago)	2023-09-18 06:18:50 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
🇨🇳 ThreatBook.io	2023-09-17 23:52:37 (3 years ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/91.122.56.218 20 ... show more ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/91.122.56.218 2023-09-17 11:02:02 http://112.111.19.5:81/phpmyadmin/scripts/setup.php 2023-09-17 11:02:03 http://112.111.19.5:81/phpMyAdmin-2.10.0.2/scripts/setup.php 2023-09-17 11:02:02 http://112.111.19.5:81/phpMyAdmin-2.11.4/scripts/setup.php 2023-09-17 11:02:02 http://112.111.19.5:81/phpMyAdmin/scripts/setup.php 2023-09-17 11:02:04 http://112.111.19.5:81/phpMyAdmin-2.10.3/scripts/setup.php 2023-09-17 11:02:03 http://112.111.19.5:81/phpMyAdmin-2.11.3/scripts/setup.php 2023-09-17 11:02:05 http://112.111.19.5:81/phpMyAdmin-2.11.0/scripts/setup.php 2023-09-17 11:02:04 http://112.111.19.5:81/phpMyAdmin-2.10.2/scripts/setup.php 2023-09-17 11:02:04 http://112.111.19.5:81/phpMyAdmin-2.8.0.2/scripts/setup.php 2023-09-17 11:02:05 http://112.111.19.5:81/phpMyAdmin-2.11.9.2/scripts/setup.php show less	Web App Attack
🇺🇸 vestibtech	2023-09-16 05:23:43 (3 years ago)	91.122.56.218 - - [15/Sep/2023:23:23:43 -0600] "GET http://185.198.26.142:80/web/phpMyAdmin/scripts/ ... show more 91.122.56.218 - - [15/Sep/2023:23:23:43 -0600] "GET http://185.198.26.142:80/web/phpMyAdmin/scripts/setup.php HTTP/1.0" 404 8201 "-" "-" ... show less	Web App Attack
🇬🇧 WebServ	2023-09-15 04:59:57 (3 years ago)	2023-09-15T05:59:53.054449+01:00 new-vm kernel: [2534321.325327] [UFW BLOCK] IN=eth0 OUT= MAC=c6:1a: ... show more 2023-09-15T05:59:53.054449+01:00 new-vm kernel: [2534321.325327] [UFW BLOCK] IN=eth0 OUT= MAC=c6:1a:30:11:c3:71:fe:00:00:00:01:01:08:00 SRC=91.122.56.218 DST=178.62.105.126 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=42633 DF PROTO=TCP SPT=36062 DPT=81 WINDOW=64240 RES=0x00 SYN URGP=0 2023-09-15T05:59:54.052915+01:00 new-vm kernel: [2534322.323787] [UFW BLOCK] IN=eth0 OUT= MAC=c6:1a:30:11:c3:71:fe:00:00:00:01:01:08:00 SRC=91.122.56.218 DST=178.62.105.126 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=42634 DF PROTO=TCP SPT=36062 DPT=81 WINDOW=64240 RES=0x00 SYN URGP=0 2023-09-15T05:59:55.071489+01:00 new-vm kernel: [2534323.342358] [UFW BLOCK] IN=eth0 OUT= MAC=c6:1a:30:11:c3:71:fe:00:00:00:01:01:08:00 SRC=91.122.56.218 DST=178.62.105.126 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=46368 DF PROTO=TCP SPT=40214 DPT=8000 WINDOW=64240 RES=0x00 SYN URGP=0 2023-09-15T05:59:56.077345+01:00 new-vm kernel: [2534324.347158] [UFW BLOCK] IN=eth0 OUT= MAC=c6:1a:30:11:c3:71:fe:00:00:00:01:01:08:00 SRC=91.122.56.218 DST=178 ... show less	Brute-Force
🇨🇳 ThreatBook.io	2023-09-14 00:11:40 (3 years ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/91.122.56.218 20 ... show more ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/91.122.56.218 2023-09-13 02:43:14 ["uname -a"] 2023-09-13 02:43:05 ["uname -a"] 2023-09-13 02:43:12 ["uname -a"] 2023-09-13 02:43:16 ["uname -a"] 2023-09-13 02:43:00 ["uname -a"] 2023-09-13 02:42:57 ["uname -a"] show less	Brute-Force
🇺🇸 BSG Webmaster	2023-09-13 07:00:13 (3 years ago)	SSH Attack (Port 22)	Brute-Force SSH
🇮🇹 dwmp	2023-09-13 01:56:38 (3 years ago)	2023-09-13T03:56:31.387586news3.dwmp.it sshd[39579]: refused connect from 91.122.56.218 (91.122.56.2 ... show more 2023-09-13T03:56:31.387586news3.dwmp.it sshd[39579]: refused connect from 91.122.56.218 (91.122.56.218) 2023-09-13T03:56:31.388263news3.dwmp.it sshd[39580]: refused connect from 91.122.56.218 (91.122.56.218) 2023-09-13T03:56:35.815616news3.dwmp.it sshd[39581]: refused connect from 91.122.56.218 (91.122.56.218) ... show less	Brute-Force SSH
🇷🇴 www.hazi.ro	2023-09-13 00:08:27 (3 years ago)	[2023-09-13 03:08:26] SSH Bruteforce Attack	Brute-Force SSH
🇨🇳 ThreatBook.io	2023-09-12 23:38:40 (3 years ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/91.122.56.218	SSH
🇮🇹 dwmp	2023-09-12 23:28:25 (3 years ago)	2023-09-13T01:28:19.219047news2.dwmp.it sshd[33090]: refused connect from 91.122.56.218 (91.122.56.2 ... show more 2023-09-13T01:28:19.219047news2.dwmp.it sshd[33090]: refused connect from 91.122.56.218 (91.122.56.218) 2023-09-13T01:28:19.219730news2.dwmp.it sshd[33089]: refused connect from 91.122.56.218 (91.122.56.218) 2023-09-13T01:28:23.242874news2.dwmp.it sshd[33091]: refused connect from 91.122.56.218 (91.122.56.218) ... show less	Brute-Force SSH
🇧🇾 sashan	2023-09-12 23:19:43 (3 years ago)	Sep 13 02:19:43 gate kernel: [86975.488103] nftables: JAIL-SSH IN=wan OUT= MAC= SRC=91.122.56.218 DS ... show more Sep 13 02:19:43 gate kernel: [86975.488103] nftables: JAIL-SSH IN=wan OUT= MAC= SRC=91.122.56.218 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=21070 DF PROTO=TCP SPT=51966 DPT=22 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan

Showing 1 to 15 of 134 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 210.197.78.241

🇺🇸 209.38.65.67

🇧🇷 205.210.31.177

🇺🇸 199.19.225.232

🇹🇼 198.235.24.100

🇳🇱 185.242.226.8

🇳🇱 185.189.182.234

🇪🇸 104.22.7.72

🇧🇬 91.191.209.118

🇳🇱 77.239.124.63

🇮🇳 66.116.224.33

🇺🇸 43.153.114.203

🇺🇸 20.221.75.253

🇰🇿 212.154.234.9

🇵🇪 209.61.68.134

🇲🇾 195.86.192.66

🇫🇷 188.165.207.175

🇨🇷 177.93.15.54

🇩🇪 139.59.208.225

🇳🇵 103.162.235.77