91.128.143.229

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
117 reports
80 reporters ยท latest 6 hours ago
ISP
Tele2 Sverige AB
Usage Type
Fixed Line ISP
ASN
AS1257
Hostname(s)
c91-128-143-229.bredband.tele2.se
Domain Name
tele2.se
Country
๐Ÿ‡ธ๐Ÿ‡ช Sweden
City
Kista, Stockholm
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
117 from 80 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡บ๐Ÿ‡ธ United States of America 33 ๐Ÿ‡ฉ๐Ÿ‡ช Germany 17 ๐Ÿ‡ซ๐Ÿ‡ท France 12
Most common categories Port Scan 70 SSH 38 Brute-Force 37 Hacking 33 Web App Attack 12
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡บ๐Ÿ‡ธ freehosts.eu
Blocked by UFW [22/tcp] | SPT: 35816 | TTL: 47 | LEN: 60 | TOS: 0x00 โ€ข Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan SSH Brute-Force
๐Ÿ‡ฎ๐Ÿ‡น RaffOne
SSH - Attempt to login using invalid or illegal credential
Brute-Force SSH
๐Ÿ‡ท๐Ÿ‡ธ Smel
SSH/22 MH Probe, BF, Hack -
Hacking Brute-Force SSH
๐Ÿ‡ซ๐Ÿ‡ท security.rdmc.fr
Activity from blacklisted IP
Hacking
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-11-12 20:54:59 UTC Unauthorized activity to TCP port 22. SSH
SSH
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-11-12 16:53:12 UTC Unauthorized activity to TCP port 22. SSH
SSH
๐Ÿ‡บ๐Ÿ‡ธ MPL
tcp ports: 23,22 (12 or more attempts)
Port Scan
๐Ÿ‡ท๐Ÿ‡ธ Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
๐Ÿ‡บ๐Ÿ‡ธ cwytech
Fleet-wide ban from the Ghostfleet ๐Ÿ‘ป. Triggered by scenario: cwy/pf-geofence-high.
Hacking
๐Ÿ‡ซ๐Ÿ‡ท security.rdmc.fr
Activity from blacklisted IP
Hacking
๐Ÿ‡จ๐Ÿ‡ฟ Prcek
PortScan:HOST=91.128.143.229,DPORTS=22,23
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ genjikai666
Automated honeypot & gateway log: Coordinated port scan and brute-force targeting both SSH (22) and Honeypot sensors. Detected on honeypot/firewall sensors.
Port Scan Brute-Force SSH
๐Ÿ‡ฆ๐Ÿ‡น urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
๐Ÿ‡ง๐Ÿ‡ท aosafeshield
AOSafe Shield: connected to a honeypot port (TCP 23) that no legitimate service uses.
Port Scan Hacking
๐Ÿ‡ฉ๐Ÿ‡ช bescared
F2B - Malicious activity detected. Unauthorized connection attempt: Telnet. -c23856ef-
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ณ๐Ÿ‡ฑ 213.209.159.236
๐Ÿ‡ณ๐Ÿ‡ฑ 213.209.159.226
๐Ÿ‡บ๐Ÿ‡ธ 198.74.58.130
๐Ÿ‡บ๐Ÿ‡ธ 192.178.115.213
๐Ÿ‡จ๐Ÿ‡ณ 112.103.128.95
๐Ÿ‡บ๐Ÿ‡ธ 100.29.192.49
๐Ÿ‡ท๐Ÿ‡ด 92.118.39.77
๐Ÿ‡ท๐Ÿ‡บ 84.42.47.124
๐Ÿ‡บ๐Ÿ‡ธ 70.183.226.52
๐Ÿ‡บ๐Ÿ‡ธ 48.216.219.33
๐Ÿ‡บ๐Ÿ‡ธ 35.184.117.96
๐Ÿ‡ฒ๐Ÿ‡ฝ 187.190.35.163
๐Ÿ‡บ๐Ÿ‡ธ 100.28.153.226
๐Ÿ‡ณ๐Ÿ‡ฑ 45.148.10.141
๐Ÿ‡บ๐Ÿ‡ธ 34.19.118.192
๐Ÿ‡ญ๐Ÿ‡ฐ 20.205.56.255
๐Ÿ‡จ๐Ÿ‡ณ 220.250.11.253
๐Ÿ‡ฎ๐Ÿ‡ฉ 202.51.214.98
๐Ÿ‡ฌ๐Ÿ‡ง 193.163.125.225
๐Ÿ‡บ๐Ÿ‡ฆ 188.163.88.50
feedback