This IP address has been reported a total of
117
times from
54 distinct
sources.
91.236.138.140 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-08-22T ...
show moreAuto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-08-22T11:07:01+0200. Last: 2026-08-22T11:07:01+0200.
Samples:
- 2026-08-16 00:37:48,225 fail2ban.actions [4095059]: NOTICE [abuseipdb] Ban 91.236.138.140
show less
Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-08-22T ...
show moreAuto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-08-22T06:07:02+0200. Last: 2026-08-22T06:07:02+0200.
Samples:
- 2026-08-16 00:37:48,225 fail2ban.actions [4095059]: NOTICE [abuseipdb] Ban 91.236.138.140
show less
Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-08-22T ...
show moreAuto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-08-22T01:07:01+0200. Last: 2026-08-22T01:07:01+0200.
Samples:
- 2026-08-16 00:37:48,225 fail2ban.actions [4095059]: NOTICE [abuseipdb] Ban 91.236.138.140
show less
Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-08-21T ...
show moreAuto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-08-21T21:07:01+0200. Last: 2026-08-21T21:07:01+0200.
Samples:
- 2026-08-16 00:37:48,225 fail2ban.actions [4095059]: NOTICE [abuseipdb] Ban 91.236.138.140
show less
Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-08-21T ...
show moreAuto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-08-21T16:07:02+0200. Last: 2026-08-21T16:07:02+0200.
Samples:
- 2026-08-16 00:37:48,225 fail2ban.actions [4095059]: NOTICE [abuseipdb] Ban 91.236.138.140
show less
Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-08-21T ...
show moreAuto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-08-21T11:07:01+0200. Last: 2026-08-21T11:07:01+0200.
Samples:
- 2026-08-16 00:37:48,225 fail2ban.actions [4095059]: NOTICE [abuseipdb] Ban 91.236.138.140
show less
Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-08-21T ...
show moreAuto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-08-21T06:07:02+0200. Last: 2026-08-21T06:07:02+0200.
Samples:
- 2026-08-16 00:37:48,225 fail2ban.actions [4095059]: NOTICE [abuseipdb] Ban 91.236.138.140
show less
Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-08-21T ...
show moreAuto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-08-21T01:07:02+0200. Last: 2026-08-21T01:07:02+0200.
Samples:
- 2026-08-16 00:37:48,225 fail2ban.actions [4095059]: NOTICE [abuseipdb] Ban 91.236.138.140
show less
Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-08-20T ...
show moreAuto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-08-20T21:07:02+0200. Last: 2026-08-20T21:07:02+0200.
Samples:
- 2026-08-16 00:37:48,225 fail2ban.actions [4095059]: NOTICE [abuseipdb] Ban 91.236.138.140
show less
Web App Attack
Anonymous
2026-08-20T14:34:31.782062-04:00 sshd-session: Connection closed by 91.236.138.140 port 45302 [preau ...
show more2026-08-20T14:34:31.782062-04:00 sshd-session: Connection closed by 91.236.138.140 port 45302 [preauth]
2026-08-20T14:40:22.823918-04:00 sshd-session: Connection closed by 91.236.138.140 port 40116 [preauth]
show less
DDoS flood attack against 82.152.54.0 (2026-08-20 16:00:36 -> 2026-08-20 16:15:36 UTC) targeting AS2 ...
show moreDDoS flood attack against 82.152.54.0 (2026-08-20 16:00:36 -> 2026-08-20 16:15:36 UTC) targeting AS215599. This IP (AS61163) sent ~77132 packets (109.60 MB) during the attack window. Likely a compromised device (botnet).
show less