91.214.208.231
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- UARNet-Eksintech
- Usage Type
- Fixed Line ISP
- ASN
- AS3255
- Domain Name
- uar.net
- Country
- 🇺🇦 Ukraine
- City
- Rava-Ruska, Lviv
Abuse Reports
Total reports
26 from
21 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| Anonymous |
denied SSH access attempt. destination port 22.
|
Port Scan Brute-Force SSH | |
| 🇮🇩 IndoAbuse |
Wordfence 503 block: Repeated malicious requests and bot attacks blocked by WAF.
|
Brute-Force Web App Attack | |
| 🇧🇾 stroytrest |
2026-10-12T04:49:51.285544+03:00 gate kernel: [832081.175201] nftables: JAIL-SSH IN=wan OUT= MAC= SRC=91.214.208.231 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=42416 DF PROTO=TCP SPT=52734 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0
...
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:36530 dst:23
|
Port Scan | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=15653 dstport=23
|
Port Scan | |
| 🇺🇸 Cyber Crusader |
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
|
Port Scan Hacking Brute-Force | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:64655 dst:23
|
Port Scan | |
| 🇹🇷 ozyurterdem |
T-Pot honeypot: 14 SSH/RDP attempts in 24h. SiberKale Threat Intel.
|
Brute-Force SSH | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:51588 dst:23
|
Port Scan | |
| Anonymous |
Unauthorized connection to SSH port 22
|
Port Scan SSH | |
| Anonymous |
denied traffic to a honeypot network. destination port 23.
|
Port Scan Hacking | |
| 🇩🇪 ksol-hostmaster |
2026/10/02 17:17:32 [error] 98721#266206: *523676 access forbidden by rule, client: 91.214.208.231, server: new.hondaforum.hu, request: "GET /topic/honda-legend/584095/ HTTP/1.1", host: "new.hondaforum.hu"
...
|
Web Spam | |
| 🇨🇭 ALPHANET |
Botnet or web spider not respecting robots.txt
|
DDoS Attack Exploited Host | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
|
Bad Web Bot |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown
Recently Reported IPs:
🇷🇴
2.57.121.112