JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.213.203.203

91.213.203.203 was found in our database!

This IP was reported 126 times. Confidence of Abuse is 0%: ?

ISP	Underworld
Usage Type	Data Center/Web Hosting/Transit
ASN	AS50213
Hostname(s)	proxyscanner.underworld.no
Domain Name	underworld.no
Country	🇳🇴 Norway
City	Trondheim, Trondelag

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.213.203.203

Whois 91.213.203.203

IP Abuse Reports for 91.213.203.203:

This IP address has been reported a total of 126 times from 13 distinct sources. 91.213.203.203 was first reported on December 18th 2020, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 kkw	2025-08-03 20:12:15 (10 months ago)	2025-08-03T22:12:14.724718+02:00 valhalla kernel: [7786364.392953] honeypot: IN=eno1 OUT= MAC=8c:04: ... show more 2025-08-03T22:12:14.724718+02:00 valhalla kernel: [7786364.392953] honeypot: IN=eno1 OUT= MAC=8c:04:ba:9b:39:89:08:7e:64:2d:89:24:08:00 SRC=91.213.203.203 DST=192.168.0.6 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=14957 DF PROTO=TCP SPT=53716 DPT=1644 WINDOW=29200 RES=0x00 SYN URGP=0 2025-08-03T22:12:14.725166+02:00 valhalla kernel: [7786364.393393] honeypot: IN=eno1 OUT= MAC=8c:04:ba:9b:39:89:08:7e:64:2d:89:24:08:00 SRC=91.213.203.203 DST=192.168.0.6 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=35781 DF PROTO=TCP SPT=53715 DPT=1644 WINDOW=29200 RES=0x00 SYN URGP=0 ... (mode: port scanning, honeypot) show less	Port Scan
Anonymous	2025-07-01 14:44:00 (11 months ago)	Attempt to find proxies	Brute-Force Web App Attack
🇩🇪 marzzzello	2025-03-29 01:24:21 (1 year ago)	Ports: multiple (29), 354 attempts	Port Scan
🇩🇪 gnb	2025-02-09 00:22:08 (1 year ago)	2025-02-09T01:21:36.018472+01:00 atlas kernel: [4899146.432210] [UFW BLOCK] IN=eth0 OUT= MAC=(redact ... show more 2025-02-09T01:21:36.018472+01:00 atlas kernel: [4899146.432210] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=91.213.203.203 DST=(redacted) LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=39431 DF PROTO=TCP SPT=38102 DPT=8118 WINDOW=29200 RES=0x00 SYN URGP=0 2025-02-09T01:21:51.054416+01:00 atlas kernel: [4899161.467111] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=91.213.203.203 DST=(redacted) LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=46492 DF PROTO=TCP SPT=41952 DPT=6588 WINDOW=29200 RES=0x00 SYN URGP=0 2025-02-09T01:22:07.082959+01:00 atlas kernel: [4899177.494350] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=91.213.203.203 DST=(redacted) LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=35718 DF PROTO=TCP SPT=38103 DPT=8118 WINDOW=29200 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 gnb	2024-12-14 07:23:07 (1 year ago)	2024-12-14T08:23:05.437297+01:00 atlas kernel: [ 154.888247] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted ... show more 2024-12-14T08:23:05.437297+01:00 atlas kernel: [ 154.888247] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=91.213.203.203 DST=(redacted) LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=56560 DF PROTO=TCP SPT=55507 DPT=8080 WINDOW=29200 RES=0x00 SYN URGP=0 2024-12-14T08:23:05.437383+01:00 atlas kernel: [ 154.888264] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=91.213.203.203 DST=(redacted) LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=6287 DF PROTO=TCP SPT=55508 DPT=8080 WINDOW=29200 RES=0x00 SYN URGP=0 2024-12-14T08:23:06.433299+01:00 atlas kernel: [ 155.884313] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=91.213.203.203 DST=(redacted) LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=56561 DF PROTO=TCP SPT=55507 DPT=8080 WINDOW=29200 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 gnb	2024-08-23 16:53:48 (1 year ago)	2024-08-23T18:53:16.885686+02:00 atlas kernel: [32444192.961939] [UFW BLOCK] IN=eth0 OUT= MAC=(redac ... show more 2024-08-23T18:53:16.885686+02:00 atlas kernel: [32444192.961939] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=91.213.203.203 DST=(redacted) LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=23043 DF PROTO=TCP SPT=55908 DPT=8080 WINDOW=29200 RES=0x00 SYN URGP=0 2024-08-23T18:53:23.894632+02:00 atlas kernel: [32444199.970320] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=91.213.203.203 DST=(redacted) LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=62906 DF PROTO=TCP SPT=43554 DPT=8000 WINDOW=29200 RES=0x00 SYN URGP=0 2024-08-23T18:53:47.942327+02:00 atlas kernel: [32444224.018152] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=91.213.203.203 DST=(redacted) LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=23048 DF PROTO=TCP SPT=55908 DPT=8080 WINDOW=29200 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 gnb	2024-02-14 13:31:37 (2 years ago)	2024-02-14T14:31:37.466717+01:00 atlas kernel: [15929727.331710] [UFW BLOCK] IN=eth0 OUT= MAC=(redac ... show more 2024-02-14T14:31:37.466717+01:00 atlas kernel: [15929727.331710] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=91.213.203.203 DST=(redacted) LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=15383 DF PROTO=TCP SPT=42630 DPT=8080 WINDOW=29200 RES=0x00 SYN URGP=0 2024-02-14T14:31:37.466768+01:00 atlas kernel: [15929727.331732] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=91.213.203.203 DST=(redacted) LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=21807 DF PROTO=TCP SPT=42631 DPT=8080 WINDOW=29200 RES=0x00 SYN URGP=0 2024-02-14T14:31:37.466770+01:00 atlas kernel: [15929727.331746] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=91.213.203.203 DST=(redacted) LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=9622 DF PROTO=TCP SPT=39181 DPT=8118 WINDOW=29200 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇱🇹 shizophrenic	2023-08-31 04:40:39 (2 years ago)	91.213.203.203:59388 - cisco:telnet 91.213.203.203 6667 >> telnet	Brute-Force IoT Targeted
🇳🇱 trentwiles.com	2023-08-12 00:36:55 (2 years ago)	Unauthorized connection attempt detected from IP address 91.213.203.203 to port 443 [AMS]	Port Scan Hacking
🇳🇱 trentwiles.com	2023-08-12 00:36:55 (2 years ago)	Unauthorized connection attempt detected from IP address 91.213.203.203 to port 8080 [AMS]	Port Scan Hacking
🇳🇱 trentwiles.com	2023-08-12 00:36:55 (2 years ago)	Unauthorized connection attempt detected from IP address 91.213.203.203 to port 9999 [AMS]	Port Scan Hacking
🇳🇱 trentwiles.com	2023-08-12 00:36:55 (2 years ago)	Unauthorized connection attempt detected from IP address 91.213.203.203 to port 23 [AMS]	Port Scan Hacking
🇳🇱 tmiland	2023-05-05 07:28:54 (3 years ago)	Port Scan detected from 91.213.203.203 (NO/Norway/proxyscanner.underworld.no). 7 hits in the last ... show more Port Scan detected from 91.213.203.203 (NO/Norway/proxyscanner.underworld.no). 7 hits in the last 85 seconds show less	Port Scan Brute-Force
🇳🇱 tmiland	2023-05-04 07:20:10 (3 years ago)	Cluster member (-) said, TEMPDENY , Reason:[Port Scan detected from (NO/Norway/proxyscanner.unde ... show more Cluster member (-) said, TEMPDENY , Reason:[Port Scan detected from (NO/Norway/proxyscanner.underworld.no). 7 hits in the last 206 seconds] show less	Port Scan Brute-Force
🇳🇱 tmiland	2023-05-03 04:36:47 (3 years ago)	Cluster member (-) said, TEMPDENY , Reason:[Port Scan detected from (NO/Norway/proxyscanner.unde ... show more Cluster member (-) said, TEMPDENY , Reason:[Port Scan detected from (NO/Norway/proxyscanner.underworld.no). 7 hits in the last 41 seconds] show less	Port Scan Brute-Force

Showing 1 to 15 of 126 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇺 123.51.53.12

🇬🇧 194.50.235.132

🇺🇸 172.71.195.72

🇸🇬 152.42.175.17

🇨🇦 85.217.149.58

🇱🇺 46.151.182.69

🇧🇷 45.140.193.156

🇨🇳 42.83.147.54

🇰🇿 185.233.3.95

🇺🇸 172.81.62.90

🇺🇸 172.70.38.22

🇩🇪 162.158.111.169

🇻🇳 125.212.244.35

🇳🇱 45.148.10.230

🇳🇱 45.148.10.151

🇨🇦 34.0.44.211

🇻🇳 2402:800:63b6:bcb8:915e:da85:8714:43d3

🇰🇷 221.162.3.119

🇵🇱 194.180.48.33

🇺🇸 188.213.202.94