91.211.135.78
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- UARNet-Eksintech
- Usage Type
- Fixed Line ISP
- ASN
- AS206257
- Domain Name
- uar.net
- Country
- 🇺🇦 Ukraine
- City
- Sarny, Rivne Oblast
Abuse Reports
Total reports
19 from
16 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇨🇭 cybsecaoccol |
multiple malicious connection attempts on tcp port 23 - sch
|
DDoS Attack Port Scan Hacking Brute-Force | |
| 🇰🇷 winter |
Connection attemp from 91.211.135.78 to port 22
|
Brute-Force SSH | |
| 🇸🇪 Tsumugi Kotobuki |
Port Scan on Honeypot | Ports: 23/Telnet | Proto: TCP(1) | Flags: all SYN | TTL: 52 | Len: 60B | Win: 65535(1) | F2B/ufw-honeypot@2026-09-14T09:34:26Z
|
Port Scan Hacking | |
| 🇺🇸 MPL |
tcp ports: 22,23 (8 or more attempts)
|
Port Scan | |
| Anonymous |
Cowrie SSH honeypot: cowrie.session.connect
|
Brute-Force SSH | |
| 🇺🇸 NetVexor |
Attack source identified and submitted via NetVexor BGP Blackhole Network
|
Port Scan Hacking Brute-Force | |
| 🇺🇸 RAP |
2026-09-13 02:46:30 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇹🇭 Sawasdee |
SSH break in attempt
...
|
SSH | |
| 🇵🇱 mkey |
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_MULTIPORT | PORTS=22,23 | HITS=2 | IPSET=ADD | FIRST=2026-09-13 02:43:49 | LAST=2026-09-13 02:43:49. Last seen 2026-09-13 02:43:49.
|
Port Scan | |
| 🇵🇱 bart@ |
Automated scan detection against redacted protected targets. Hits=1; port 22 proto 6 detection dark_ip
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 22)
Source port: 49658
TTL: 42
Packet length: 60
TOS: 0x08
This report (for 91.211.135.78) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan SSH Brute-Force | |
| 🇵🇱 mkey |
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_MULTIPORT | PORTS=22,23 | HITS=2 | IPSET=ADD | FIRST=2026-09-12 15:57:57 | LAST=2026-09-12 15:57:57. Last seen 2026-09-12 15:57:57.
|
Port Scan | |
| 🇧🇷 noconex |
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 91.211.135.78
|
Port Scan Brute-Force SSH | |
| 🇺🇸 HamSammich |
Automated sensor: 2 SSH connection/probe attempts over the last 24h (latest 2026-09-11T14:55Z).
|
Brute-Force SSH | |
| 🇺🇸 RAP |
2026-09-11 09:58:21 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown