91.211.134.85

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
41% Elevated
17 reports
14 reporters · latest 2 weeks ago
ISP
UARNet-Eksintech
Usage Type
Fixed Line ISP
ASN
AS206257
Domain Name
uar.net
Country
🇺🇦 Ukraine
City
Sarny, Rivne Oblast
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
17 from 14 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 7 🇫🇮 Finland 1 🇫🇷 France 1
Most common categories Port Scan 11 Brute-Force 6 SSH 4 Hacking 2
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 sojan
UFW: Portscan on PROTO=TCP. Targeted ports: DPT=23 DPT=22 DPT=23
Port Scan
🇩🇪 sojan
UFW: Portscan on PROTO=TCP. Targeted ports: DPT=23 DPT=22 DPT=23
Port Scan
🇩🇪 sojan
UFW: Portscan on PROTO=TCP. Targeted ports: DPT=23 DPT=22 DPT=23
Port Scan
🇮🇪 wiredalter
Blocked by UFW on vhVPS [23/tcp] Source Port: 60616 TTL: 48 Packet Length: 60 TOS: 0x08 Analyzed by https://ip.wiredalter.com
Port Scan Brute-Force
🇫🇮 jonahtebaa
SSH tarpit (endlessh) capture on jonahtebaa infra
Port Scan Brute-Force SSH
🇮🇳 Mr.Singh
NFT blocked 91.211.134.85 after 2 rejections on 17-Oct-2026.
Port Scan Brute-Force
🇩🇪 sojan
UFW: Portscan on PROTO=TCP. Targeted ports: DPT=23 DPT=22 DPT=23
Port Scan
🇫🇷 TheHoneyPotter
Honeypot detection: SSH brute-force authentication attempt on port 22 (2 or more attempts) - Logs: 2026-10-15T23:55:24.544Z ACCEPT host=::ffff:91.211.134.85 port=35522 fd=4 n=2/4096 ...
Brute-Force SSH
🇩🇪 D3vNu11
Level: (LOW): Reputation Unknown via Cowrie IOC Country: Ukraine 1x -> Target Country: Frankreich SSH
Brute-Force SSH
🇺🇸 RAP
2026-10-15 08:55:52 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇳🇱 EGP Abuse Dept
Unauthorized connection to Telnet port 23
Port Scan Hacking
🇮🇹 RaffOne
SSH - Attempt to login using invalid or illegal credential
Brute-Force SSH
Anonymous
denied traffic to a honeypot network. destination port 23.
Port Scan Hacking
🇩🇪 psauxit
Fail2Ban - UFW port probing on unauthorized port
Port Scan
🇺🇸 kosada.com
Web bot: denial-of-service flood
DDoS Attack Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇩 160.236.207.67
🇧🇪 35.205.115.235
🇳🇱 193.47.62.69
🇵🇦 186.73.150.99
🇺🇸 165.245.164.2
🇺🇸 162.216.150.217
🇦🇷 143.105.137.80
🇲🇽 138.84.45.107
🇺🇸 136.27.90.191
🇨🇳 113.24.225.244
🇺🇸 104.250.236.190
🇬🇧 91.201.161.18
🇳🇱 86.38.187.39
🇳🇱 77.67.26.82
🇧🇷 45.179.42.101
🇳🇱 45.115.26.203
🇺🇸 45.41.180.229
🇺🇸 40.67.171.18
🇧🇪 35.210.99.13
🇻🇳 14.224.231.146
feedback