91.237.200.12

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
137 reports
76 reporters · latest 6 hours ago
ISP
LLC MediaKvant
Usage Type
Fixed Line ISP
ASN
AS52040
Domain Name
soyka.su
Country
🇷🇺 Russian Federation
City
Semenov, Nizhny Novgorod Oblast
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
137 from 76 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 24 🇦🇹 Austria 9 🇨🇿 Czechia 7
Most common categories Port Scan 43 Brute-Force 29 Hacking 22 SSH 19 Web App Attack 10
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 avgsmoe
Connection to a honeypot port. Automated report (firemon).
Port Scan
🇳🇱 IPCollective Intelligence
Residential Proxy - IPCollective Intelligence
Open Proxy
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇺🇸 MPL
tcp ports: 23,22 (8 or more attempts)
Port Scan
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
🇫🇷 TheHoneyPotter
Honeypot detection: SSH brute-force authentication attempt on port 22 (2 or more attempts) - Logs: 2026-11-09T05:09:51.963Z ACCEPT host=::ffff:91.237.200.12 port=49630 fd=4 n=1/4096 ...
Brute-Force SSH
🇳🇱 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 23/Telnet | Proto: TCP(1) | Flags: all SYN | TTL: 55 | Len: 60B | Win: 65535(1) | F2B/ufw-honeypot@2026-11-08T23:16:12Z
Port Scan Hacking
🇦🇺 LiftUp Hosting
Honeypot hit: Unauthorized connection attempt detected on 22/SSH
SSH Port Scan
🇦🇺 foobax
closed the connection from port 42003
SSH Port Scan
🇮🇹 CoreTech srl
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_unsafe_protocol,ndpi_tcp_issues,ndpi_probing_attempt
Hacking
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
🇨🇦 lakered
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | Evidence: Repeat-Offender (Past Bans: 2)
Port Scan
🇨🇦 Franscobec
SSH Honeypot Reached by IP 91.237.200.12 on franscorack.com:22
Brute-Force SSH
Anonymous
PORT & IP Scan.
Port Scan Brute-Force
🇫🇷 Kejult
Honeypot Finding: verified TCP multi-port scan/probing; 3 application-level events across 2 target ports and 3 source port(s). Ports: 23/Telnet, 22/SSH. Sensors: Cowrie.
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 195.178.110.217
🇺🇸 146.88.240.28
🇧🇷 45.229.91.2
🇳🇱 192.253.248.223
🇨🇳 112.109.170.220
🇧🇬 78.128.114.162
🇳🇱 77.239.124.158
🇺🇸 66.132.224.91
🇺🇸 54.167.251.208
🇵🇰 39.35.138.175
🇧🇪 35.195.85.59
🇰🇷 222.118.59.16
🇺🇸 216.105.184.29
🇬🇧 195.206.182.211
🇨🇦 173.32.220.8
🇮🇳 150.242.151.56
🇪🇸 92.59.76.2
🇺🇸 70.142.207.168
🇺🇸 66.132.172.130
🇳🇱 64.205.72.194
feedback