91.237.203.54
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- LLC MediaKvant
- Usage Type
- Fixed Line ISP
- ASN
- AS52040
- Domain Name
- soyka.su
- Country
- 🇷🇺 Russian Federation
- City
- Semenov, Nizhny Novgorod Oblast
Abuse Reports
Total reports
21 from
20 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 xdee111 |
Unauthorized SSH connection attempt (cowrie) on home server, banned by fail2ban
|
Brute-Force SSH | |
| 🇫🇮 mikkopal88 |
TCP SYN port scan to SSH 22
|
Port Scan SSH | |
| 🇷🇸 Smel |
SSH/22 MH Probe, BF, Hack -
|
Hacking Brute-Force SSH | |
| 🇩🇪 von44bis33 |
Cowrie SSH honeypot: unauthorized login attempts/commands observed.
|
Brute-Force SSH | |
| 🇧🇷 noconex |
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 91.237.203.54
|
Port Scan Brute-Force SSH | |
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan | |
| 🇺🇸 RAP |
2026-09-25 10:27:33 UTC Unauthorized activity to TCP port 22. SSH
|
SSH | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇳🇱 EGP Abuse Dept |
Unauthorized connection to SSH port 22
|
Port Scan Hacking SSH | |
| 🇮🇩 Indobsd |
|
Port Scan Web App Attack SSH | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:37512 dst:23
|
Port Scan | |
| 🇬🇧 wiredalter |
Blocked by UFW on f2VPS [22/tcp]
Source Port: 36452
TTL: 53
Packet Length: 60
TOS: 0x00
Analyzed by https://ip.wiredalter.com
|
Port Scan Brute-Force | |
| Anonymous |
Blocked by UFW [23/tcp] | SPT: 46104 | TTL: 56 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan IoT Targeted | |
| Anonymous |
Trying ports that it shouldn't be.
|
Port Scan Hacking Exploited Host | |
| 🇺🇸 MPL |
tcp ports: 23,22 (8 or more attempts)
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown