91.211.133.149

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
85% Critical
25 reports
22 reporters · latest 8 hours ago
ISP
UARNet-Eksintech
Usage Type
Fixed Line ISP
ASN
AS206257
Domain Name
uar.net
Country
🇺🇦 Ukraine
City
Sarny, Rivne Oblast
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
25 from 22 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 4 🇨🇿 Czechia 3 🇩🇪 Germany 3
Most common categories Port Scan 11 Hacking 5 Brute-Force 5 Web App Attack 5 VPN IP 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇵🇱 mkey
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=23 | HITS=2 | IPSET=ADD | FIRST=2026-11-08 01:24:18 | LAST=2026-11-08 01:24:19. Last seen 2026-11-08 01:24:19.
Port Scan
🇫🇮 mikkopal88
TCP SYN port scan to Telnet 23-2323
Port Scan IoT Targeted
Anonymous
MikroTik Enterprise Honeypot
Port Scan
🇬🇧 Comberton
Ban via F2B web files probes
Brute-Force Web App Attack
🇨🇿 Countryman
repeated unauthorized VPN login attempt, user sweep
VPN IP Hacking Brute-Force
🇺🇸 lostswordfish.com
Wordfence waf block on parsol
Web App Attack
🇨🇿 Countryman
repeated unauthorized VPN login attempt, user sweep
VPN IP Hacking Brute-Force
🇺🇸 MPL
tcp/23 (2 or more attempts)
Port Scan
🇩🇪 hotzmatic
Cowrie Honeypot: New connection: 91.211.133.149:42732 (172.30.0.2:23) [session: b26fc6e3376e] (1 events observed on private honeypot sensor)
Port Scan
🇲🇽 octageeks.com
Wordpress malicious attack:[octaflood]
Web App Attack
🇨🇿 Countryman
repeated unauthorized VPN login attempt, user sweep
VPN IP Hacking Brute-Force
🇩🇪 LRob
Vulnerability scanning | host: tailor-made.fr | method: GET | path: /wp-json/wp/v2/users | src_port: 46088
Port Scan Web App Attack
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:41614 dst:23
Port Scan
🇦🇺 dyln
Dyls honeypot brute-force: Telnet (10 total hits)
Brute-Force
🇳🇱 EGP Abuse Dept
Unauthorized connection to Telnet port 23
Port Scan Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇩 202.91.14.2
🇫🇷 85.217.140.9
🇩🇪 69.5.169.17
🇲🇾 202.184.148.229
🇪🇬 196.219.216.146
🇳🇱 188.166.43.103
🇩🇪 151.243.11.26
🇳🇱 193.47.62.98
🇬🇧 178.62.38.96
🇫🇮 147.185.133.147
🇧🇷 69.6.221.177
🇰🇷 61.84.4.230
🇺🇸 52.204.37.237
🇧🇷 45.70.131.22
🇩🇪 8.211.12.142
🇿🇦 4.168.232.22
feedback