Log in to view charts and search reports for this IP.
Log In
Reports Activity
Example preview
Report Categories (Last 60 Days)
Example preview
Top Reporter Countries (Last 60 Days)
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 91.238.166.134
This IP address has been reported a total of
9
times from
9 distinct
sources.
91.238.166.134 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 3
reports;
Germany
with 2
reports;
Russian Federation
with 2
reports.
The most common categories in these recent reports were:
Brute-Force
8
times;
SSH
7
times;
Hacking
1
time;
Port Scan
1
time;
Web App Attack
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-29T23:57:11.042455-03:00 bravo sshd-session[3247352]: Invalid user user1 from 91.238.166.134 ...
show more2026-09-29T23:57:11.042455-03:00 bravo sshd-session[3247352]: Invalid user user1 from 91.238.166.134 port 32972
2026-09-29T23:57:11.044384-03:00 bravo sshd-session[3247352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.238.166.134
2026-09-29T23:57:13.158925-03:00 bravo sshd-session[3247352]: Failed password for invalid user user1 from 91.238.166.134 port 32972 ssh2
2026-09-29T23:59:00.899535-03:00 bravo sshd-session[3249670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.238.166.134 user=root
2026-09-29T23:59:02.827712-03:00 bravo sshd-session[3249670]: Failed password for root from 91.238.166.134 port 45660 ssh2
...
show less
SSH brute-force detected. Evidence: 2026-09-30T02:57:58.102575+00:00 [HOSTNAME] sshd[298917]: Connec ...
show moreSSH brute-force detected. Evidence: 2026-09-30T02:57:58.102575+00:00 [HOSTNAME] sshd[298917]: Connection [IP]rom [IP] port 47266 on [IP] port 22 rdomain ""
2026-09-30T02:57:59.366221+00:00 [HOSTNAME] sshd[298917]: Invalid user user1 from [IP] port 47266
show less
2026-09-30T05:49:36.371180+03:00 HOST sshd-session[242634]: pam_unix(sshd:auth): authentication fail ...
show more2026-09-30T05:49:36.371180+03:00 HOST sshd-session[242634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.238.166.134
2026-09-30T05:49:38.666409+03:00 HOST sshd-session[242634]: Failed password for invalid user admin1 from 91.238.166.134 port 56094 ssh2
2026-09-30T05:57:17.908501+03:00 HOST sshd-session[242658]: Invalid user user1 from 91.238.166.134 port 35256
...
show less
2026-09-30T07:53:18.132898+05:30 ndc-hv01 sshd[3411756]: Invalid user maarch from 91.238.166.134 por ...
show more2026-09-30T07:53:18.132898+05:30 ndc-hv01 sshd[3411756]: Invalid user maarch from 91.238.166.134 port 48482
2026-09-30T07:53:18.136008+05:30 ndc-hv01 sshd[3411756]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.238.166.134
2026-09-30T07:53:20.718263+05:30 ndc-hv01 sshd[3411756]: Failed password for invalid user maarch from 91.238.166.134 port 48482 ssh2
2026-09-30T07:55:26.251150+05:30 ndc-hv01 sshd[3412749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.238.166.134 user=root
2026-09-30T07:55:28.070876+05:30 ndc-hv01 sshd[3412749]: Failed password for root from 91.238.166.134 port 37038 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-09-30T05:22:58.419189+03:00 main sshd-session[3711986]: Failed password for invalid user maarch ...
show more2026-09-30T05:22:58.419189+03:00 main sshd-session[3711986]: Failed password for invalid user maarch from 91.238.166.134 port 59288 ssh2
2026-09-30T05:22:58.942975+03:00 main sshd-session[3711986]: Disconnected from invalid user maarch 91.238.166.134 port 59288 [preauth]
2026-09-30T05:25:05.545488+03:00 main sshd-session[3712236]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.238.166.134 user=root
2026-09-30T05:25:06.783205+03:00 main sshd-session[3712236]: Failed password for root from 91.238.166.134 port 43886 ssh2
2026-09-30T05:25:08.110899+03:00 main sshd-session[3712236]: Disconnected from authenticating user root 91.238.166.134 port 43886 [preauth]
...
show less
WordPress REST-API user enumeration (probing CVE-2017-5487 to harvest usernames) | req: /wp-json/wp/ ...
show moreWordPress REST-API user enumeration (probing CVE-2017-5487 to harvest usernames) | req: /wp-json/wp/v2/users/ | UA: Go-http-client/1.1
show less
Hacking
Web App Attack
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
