JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.228.7.148

91.228.7.148 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 100%: ?

100%

ISP	GARMTECH LP
Usage Type	Data Center/Web Hosting/Transit
ASN	AS43108
Hostname(s)	salons.lv
Domain Name	garmtech.com
Country	🇱🇻 Latvia
City	Riga, Riga

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.228.7.148

Whois 91.228.7.148

IP Abuse Reports for 91.228.7.148:

This IP address has been reported a total of 20 times from 19 distinct sources. 91.228.7.148 was first reported on June 17th 2026, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 lp	2026-06-17 13:49:27 (18 hours ago)	SSH Brute force: 97 attempts were recorded from 91.228.7.148 2026-06-17T14:19:53+02:00 Invalid user ... show more SSH Brute force: 97 attempts were recorded from 91.228.7.148 2026-06-17T14:19:53+02:00 Invalid user admin from 91.228.7.148 port 53164 2026-06-17T14:20:27+02:00 Invalid user orangepi from 91.228.7.148 port 41898 2026-06-17T14:21:03+02:00 Connection closed by authenticating user root 91.228.7.148 port 46562 [preauth] 2026-06-17T14:21:37+02:00 Connection closed by authenticating user root 91.228.7.148 port 34588 [preauth] 2026-06-17T14:22:12+02:00 Connection closed by authenticating user root 91.228.7.148 port 36446 [preauth] 2026-06-17T14:22:47+02:00 Connection closed by authenticating user root 91.228.7.148 port 60662 [preauth] 2026-06-17T14:23:19+02:00 Connection closed by authenticating user root 91.228.7.148 port 36022 [preauth] 2026-06-17T14:23:54+02:00 Connection closed by authenticating user root 91.228.7.148 port 36326 [preauth] 2026-06-17T14:24:27+02:00 Invalid user test from 91. show less	Brute-Force SSH
🇫🇷 mtawolf	2026-06-17 13:11:27 (19 hours ago)	2026-06-17T15:06:52.690232+02:00 sd-64746 sshd[1621719]: Invalid user admin from 91.228.7.148 port 6 ... show more 2026-06-17T15:06:52.690232+02:00 sd-64746 sshd[1621719]: Invalid user admin from 91.228.7.148 port 60470 2026-06-17T15:07:24.748292+02:00 sd-64746 sshd[1621865]: Invalid user orangepi from 91.228.7.148 port 50408 2026-06-17T15:11:26.522779+02:00 sd-64746 sshd[1622972]: Invalid user test from 91.228.7.148 port 53460 ... show less	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-06-17 12:59:31 (19 hours ago)	(mod_security) mod_security (id:218420) triggered by 91.228.7.148 (salons.lv): 1 in the last 300 sec ... show more (mod_security) mod_security (id:218420) triggered by 91.228.7.148 (salons.lv): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 08:59:27.884917 2026] [security2:error] [pid 30398:tid 30398] [client 91.228.7.148:34736] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.20:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.20"] [uri "/hello.world"] [unique_id "ajKaLwg5u0VeLxcUTiF0_gAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 morm	2026-06-17 12:40:05 (19 hours ago)	Jun 17 06:33:41 fortemn sshd[3804820]: Invalid user admin from 91.228.7.148 port 39948 Jun 17 06:34: ... show more Jun 17 06:33:41 fortemn sshd[3804820]: Invalid user admin from 91.228.7.148 port 39948 Jun 17 06:34:16 fortemn sshd[3804844]: Invalid user orangepi from 91.228.7.148 port 59048 Jun 17 06:38:22 fortemn sshd[3805553]: Invalid user test from 91.228.7.148 port 47712 Jun 17 06:38:56 fortemn sshd[3805557]: Invalid user user from 91.228.7.148 port 42354 Jun 17 06:40:05 fortemn sshd[3806234]: Invalid user admin from 91.228.7.148 port 51756 ... show less	Brute-Force SSH
🇳🇱 Savvii	2026-06-17 12:39:25 (19 hours ago)	20 attempts against mh-ssh on ricardo-dev	Brute-Force SSH
🇩🇪 formality	2026-06-17 12:34:11 (19 hours ago)	Invalid user admin from 91.228.7.148 port 60746	Brute-Force SSH
🇩🇪 ErdbeerbaerLP	2026-06-17 12:31:13 (19 hours ago)	2026-06-17T12:26:34.135918+00:00 erdbeerbaerlp.de sshd[2017575]: Invalid user admin from 91.228.7.14 ... show more 2026-06-17T12:26:34.135918+00:00 erdbeerbaerlp.de sshd[2017575]: Invalid user admin from 91.228.7.148 port 47184 2026-06-17T12:27:06.052184+00:00 erdbeerbaerlp.de sshd[2037984]: Invalid user orangepi from 91.228.7.148 port 40434 2026-06-17T12:31:12.258240+00:00 erdbeerbaerlp.de sshd[2194173]: Invalid user test from 91.228.7.148 port 51626 ... show less	Brute-Force
🇩🇪 ManagedStack	2026-06-17 12:30:01 (19 hours ago)	Probing access to unauthorized locations	Hacking Exploited Host Web App Attack
🇩🇪 24-seven.io	2026-06-17 12:26:11 (19 hours ago)	2026-06-17T13:25:29.879755+01:00 srv02 sshd-session[577694]: Invalid user orangepi from 91.228.7.148 ... show more 2026-06-17T13:25:29.879755+01:00 srv02 sshd-session[577694]: Invalid user orangepi from 91.228.7.148 port 53206 2026-06-17T13:25:29.883362+01:00 srv02 sshd-session[577694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.228.7.148 2026-06-17T13:25:31.724326+01:00 srv02 sshd-session[577694]: Failed password for invalid user orangepi from 91.228.7.148 port 53206 ssh2 2026-06-17T13:26:09.191370+01:00 srv02 sshd-session[578165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.228.7.148 user=root 2026-06-17T13:26:11.048636+01:00 srv02 sshd-session[578165]: Failed password for root from 91.228.7.148 port 40012 ssh2 ... show less	Brute-Force SSH
🇺🇸 clair	2026-06-17 12:15:10 (20 hours ago)	2026-06-17T08:10:32.470139-04:00 clair-mc sshd-session[120941]: Invalid user admin from 91.228.7.148 ... show more 2026-06-17T08:10:32.470139-04:00 clair-mc sshd-session[120941]: Invalid user admin from 91.228.7.148 port 54972 2026-06-17T08:11:06.500705-04:00 clair-mc sshd-session[120945]: Invalid user orangepi from 91.228.7.148 port 41116 2026-06-17T08:15:09.952782-04:00 clair-mc sshd-session[120990]: Invalid user test from 91.228.7.148 port 38914 ... show less	Brute-Force SSH
🇩🇪 1000grad.com	2026-06-17 11:59:11 (20 hours ago)	5x Failed Password	Brute-Force SSH
🇳🇱 VMHeaven.io	2026-06-17 11:56:20 (20 hours ago)	Blocked by UFW [2375/tcp] Source port: 44261 TTL: 50 Packet length: 40	Port Scan
🇺🇸 TPI-Abuse	2026-06-17 11:48:21 (20 hours ago)	(mod_security) mod_security (id:218420) triggered by 91.228.7.148 (salons.lv): 1 in the last 300 sec ... show more (mod_security) mod_security (id:218420) triggered by 91.228.7.148 (salons.lv): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 07:48:14.633974 2026] [security2:error] [pid 29166:tid 29201] [client 91.228.7.148:45868] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.18:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.18"] [uri "/hello.world"] [unique_id "ajKJfunH6ItbZqRH_ki5UgAAANY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 kleine babykatze	2026-06-17 11:36:54 (20 hours ago)	2026-06-17T13:36:15.228940+02:00 vmd172806 sshd[1640357]: pam_unix(sshd:auth): authentication failur ... show more 2026-06-17T13:36:15.228940+02:00 vmd172806 sshd[1640357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.228.7.148 2026-06-17T13:36:16.836942+02:00 vmd172806 sshd[1640357]: Failed password for invalid user admin from 91.228.7.148 port 36350 ssh2 2026-06-17T13:36:51.076393+02:00 vmd172806 sshd[1640568]: Invalid user orangepi from 91.228.7.148 port 42242 ... show less	Brute-Force SSH FTP Brute-Force
🇩🇪 Viveronese	2026-06-17 11:28:13 (20 hours ago)	HTTP vulnerability scanning	Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 124.223.112.24

🇨🇳 123.245.84.48

🇺🇸 104.164.173.116

🇭🇰 45.142.154.98

🇨🇳 219.151.181.207

🇷🇺 185.238.199.140

🇨🇭 179.43.168.58

🇹🇭 159.192.144.206

🇧🇷 152.237.142.166

🇫🇮 147.185.133.114

🇺🇸 107.174.13.204

🇭🇰 103.100.208.168

🇵🇱 62.133.151.137

🇺🇸 52.14.18.30

🇺🇸 204.111.226.252

🇺🇸 162.216.149.101

🇺🇸 136.144.43.175

🇨🇳 106.53.68.34

🇷🇺 94.243.13.224

🇱🇹 91.224.92.17