AbuseIPDB » 91.218.247.89
91.218.247.89
This IP was reported 8 times. Confidence of
Abuse
is 36% : ?
ISP
LLC IT BASIS
Usage Type
Data Center/Web Hosting/Transit
ASN
AS50867
Domain Name
hostkey.ru
Country
🇷🇺
Russian Federation
City
Moscow, Moscow
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 91.218.247.89 :
This IP address has been reported a total of
8
times from
7 distinct
sources.
91.218.247.89 was first reported on
May 2nd 2026 , and the most recent report was
18 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
micropedro
2026-06-17 22:30:48
(18 hours ago)
3 incidents: malicious activity. First: 2026-06-10 17:30, Last: 2026-06-17 18:30 UTC. Triggers: ufw- ...
show more
3 incidents: malicious activity. First: 2026-06-10 17:30, Last: 2026-06-17 18:30 UTC. Triggers: ufw-repeater.
show less
Port Scan
🇺🇸
aks4226
2026-06-04 05:16:15
(2 weeks ago)
Attacking common web applications. (n01)
Web App Attack
🇹🇭
Sawasdee
2026-06-03 20:53:17
(2 weeks ago)
Port Scan
...
Port Scan
🇺🇸
micropedro
2026-06-03 20:33:40
(2 weeks ago)
6 incidents: web scanning/attack, port scanning. Ports: 2375/TCP(1), 8000/TCP(1), 8001/TCP(1), 8080/ ...
show more
6 incidents: web scanning/attack, port scanning. Ports: 2375/TCP(1), 8000/TCP(1), 8001/TCP(1), 8080/TCP(1), 8081/TCP(1). Detected: 2026-06-03 16:33 UTC. Triggers: ufw-repeater,non-public-port,port-trap,recidive,firewall-tcp,firewall-http.
show less
Port Scan
Brute-Force
Web App Attack
🇬🇧
pearbright
2026-06-03 20:01:27
(2 weeks ago)
2026-06-03T20:01:26.167139+00:00 srv1093252 kernel: [1262879.850538] [UFW BLOCK] IN=eth0 OUT= MAC=28 ...
show more
2026-06-03T20:01:26.167139+00:00 srv1093252 kernel: [1262879.850538] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=91.218.247.89 DST=72.61.19.109 LEN=60 TOS=0x08 PREC=0x20 TTL=46 ID=55598 DF PROTO=TCP SPT=40800 DPT=8000 WINDOW=64240 RES=0x00 SYN URGP=0
2026-06-03T20:01:26.170058+00:00 srv1093252 kernel: [1262879.852146] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=91.218.247.89 DST=72.61.19.109 LEN=60 TOS=0x08 PREC=0x20 TTL=46 ID=49859 DF PROTO=TCP SPT=52216 DPT=8001 WINDOW=64240 RES=0x00 SYN URGP=0
2026-06-03T20:01:26.170304+00:00 srv1093252 kernel: [1262879.855161] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=91.218.247.89 DST=72.61.19.109 LEN=60 TOS=0x08 PREC=0x20 TTL=46 ID=39333 DF PROTO=TCP SPT=41906 DPT=2375 WINDOW=64240 RES=0x00 SYN URGP=0
2026-06-03T20:01:26.170457+00:00 srv1093252 kernel: [1262879.855195] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=91.218.
...
show less
Port Scan
🇧🇷
marlorodrigues
2026-06-03 19:58:52
(2 weeks ago)
Brute Force SSH or Port Scan
Port Scan
🇩🇪
bescared
2026-06-01 07:03:32
(2 weeks ago)
F2B - Malicious activity detected. Bad requests. -1ce9a8a2-
Hacking
Bad Web Bot
Web App Attack
🇨🇳
ThreatBook.io
2026-05-02 22:39:49
(1 month ago)
2026-05-02 01:38:10 /
2026-05-02 04:58:31 /
Web App Attack
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: