JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.80.148.28

91.80.148.28 was found in our database!

This IP was reported 83 times. Confidence of Abuse is 100%: ?

100%

ISP	Fastweb SpA
Usage Type	Fixed Line ISP
ASN	AS30722
Domain Name	fastweb.it
Country	🇮🇹 Italy
City	Bologna, Emilia-Romagna

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.80.148.28

Whois 91.80.148.28

IP Abuse Reports for 91.80.148.28:

This IP address has been reported a total of 83 times from 64 distinct sources. 91.80.148.28 was first reported on February 10th 2022, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇺 SiteXL	2026-07-19 21:06:02 (3 days ago)	{"event":{"DateTime":"2026-07-17T21:07:18Z","RemoteAddr":"91.80.148.28:54428","Protocol":"SSH","Comm ... show more {"event":{"DateTime":"2026-07-17T21:07:18Z","RemoteAddr":"91.80.148.28:54428","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"8694daf5-1981-4bb5-a649-67ebce2d7c80","Environ":"","User":"loguser","Password":"loguser","Client":"SSH-2.0-libssh_0.9.6","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH interactive","SourceIp":"91.80.148.28","SourcePort":"54428","TLSServerName":"","Handler":""},"level":"info","msg":"New Event","status":"Stateless"} {"event":{"DateTime":"2026-07-17T21:10:04Z","RemoteAddr":"91.80.148.28:52022","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"f75a2dfb-9b43-4723-8b44-a88080e2ac98","Environ":"","User":"root","Password":"trust123","Client":"SSH-2.0-libssh_0.9.6","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Desc show less	Hacking Port Scan Brute-Force SSH
🇹🇷 oalver	2026-07-19 04:54:03 (3 days ago)	Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_ssh. So ... show more Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_ssh. Sources: honeypot. First seen: 2026-07-19. Risk score: 100/100. show less	Brute-Force SSH
🇩🇪 formality	2026-07-19 02:00:18 (4 days ago)	Invalid user lorenzo from 91.80.148.28 port 57772	Brute-Force SSH
🇩🇰 ingereck	2026-07-19 01:55:16 (4 days ago)	2026-07-19T01:44:14.729971+00:00 wp20241125 sshd[666948]: Invalid user hari from 91.80.148.28 port 5 ... show more 2026-07-19T01:44:14.729971+00:00 wp20241125 sshd[666948]: Invalid user hari from 91.80.148.28 port 51340 2026-07-19T01:47:00.187553+00:00 wp20241125 sshd[667216]: Invalid user deb from 91.80.148.28 port 34936 2026-07-19T01:49:47.807278+00:00 wp20241125 sshd[667433]: Invalid user ibrahim from 91.80.148.28 port 34786 2026-07-19T01:52:33.304351+00:00 wp20241125 sshd[667652]: Invalid user spike from 91.80.148.28 port 36372 2026-07-19T01:55:15.328646+00:00 wp20241125 sshd[667836]: Invalid user saga from 91.80.148.28 port 50056 ... show less	Brute-Force SSH
🇺🇸 viperishmonkey	2026-07-19 01:04:29 (4 days ago)	Jul 18 20:34:40 uranus sshd[723475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show more Jul 18 20:34:40 uranus sshd[723475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.80.148.28 Jul 18 20:34:40 uranus sshd[723475]: Invalid user abcd from 91.80.148.28 port 38184 Jul 18 20:34:42 uranus sshd[723475]: Failed password for invalid user abcd from 91.80.148.28 port 38184 ssh2 Jul 18 20:37:23 uranus sshd[723708]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.80.148.28 user=root Jul 18 20:37:24 uranus sshd[723708]: Failed password for root from 91.80.148.28 port 39922 ssh2 Jul 18 20:41:41 uranus sshd[724038]: Invalid user ruser from 91.80.148.28 port 39398 Jul 18 20:41:41 uranus sshd[724038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.80.148.28 Jul 18 20:41:41 uranus sshd[724038]: Invalid user ruser from 91.80.148.28 port 39398 Jul 18 20:41:43 uranus sshd[724038]: Failed password for invalid user ruser from 91.80.148.28 port 39398 ssh2 Jul ... show less	Brute-Force SSH
🇫🇷 jst	2026-07-19 00:46:27 (4 days ago)	2026-07-19T02:41:02.329512+02:00 amadeus.freeznet.eu sshd[1098504]: Invalid user ruser from 91.80.14 ... show more 2026-07-19T02:41:02.329512+02:00 amadeus.freeznet.eu sshd[1098504]: Invalid user ruser from 91.80.148.28 port 33420 2026-07-19T02:43:42.373862+02:00 amadeus.freeznet.eu sshd[1100482]: Invalid user pyxis from 91.80.148.28 port 51160 2026-07-19T02:46:26.910213+02:00 amadeus.freeznet.eu sshd[1102571]: Invalid user builder from 91.80.148.28 port 48318 ... show less	Brute-Force SSH
🇩🇪 eminovic.ba	2026-07-19 00:19:18 (4 days ago)	2026-07-19T02:19:16.424221+02:00 sun sshd[571841]: Invalid user nikhil from 91.80.148.28 port 56254 ... show more 2026-07-19T02:19:16.424221+02:00 sun sshd[571841]: Invalid user nikhil from 91.80.148.28 port 56254 2026-07-19T02:19:16.430402+02:00 sun sshd[571841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.80.148.28 2026-07-19T02:19:18.311830+02:00 sun sshd[571841]: Failed password for invalid user nikhil from 91.80.148.28 port 56254 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-07-19 00:08:26 (4 days ago)	Jul 19 01:03:11 conf sshd[2379059]: Disconnected from invalid user 24online 91.80.148.28 port 41728 ... show more Jul 19 01:03:11 conf sshd[2379059]: Disconnected from invalid user 24online 91.80.148.28 port 41728 [preauth] Jul 19 01:08:25 conf sshd[2380692]: Connection from 91.80.148.28 port 53236 on 79.137.33.6 port 22 rdomain "" Jul 19 01:08:25 conf sshd[2380692]: Invalid user admin from 91.80.148.28 port 53236 ... show less	Brute-Force SSH
🇬🇧 paradoxnetworks	2026-07-19 00:07:58 (4 days ago)	2026-07-19T00:01:50.217337+00:00 edge-con-mil01.int.pdx.net.uk sshd-session[3496678]: pam_unix(sshd: ... show more 2026-07-19T00:01:50.217337+00:00 edge-con-mil01.int.pdx.net.uk sshd-session[3496678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.80.148.28 2026-07-19T00:01:51.970355+00:00 edge-con-mil01.int.pdx.net.uk sshd-session[3496678]: Failed password for invalid user 24online from 91.80.148.28 port 40456 ssh2 2026-07-19T00:07:58.409235+00:00 edge-con-mil01.int.pdx.net.uk sshd-session[3498086]: Invalid user admin from 91.80.148.28 port 50370 ... show less	Brute-Force SSH
🇺🇸 paradoxnetworks	2026-07-18 23:38:45 (4 days ago)	2026-07-18T23:26:53.867823+00:00 edge-hiv-tpa01.int.pdx.net.uk sshd[743305]: Invalid user test from ... show more 2026-07-18T23:26:53.867823+00:00 edge-hiv-tpa01.int.pdx.net.uk sshd[743305]: Invalid user test from 91.80.148.28 port 42698 2026-07-18T23:35:46.294459+00:00 edge-hiv-tpa01.int.pdx.net.uk sshd[743797]: Invalid user hernan from 91.80.148.28 port 56902 2026-07-18T23:38:44.419782+00:00 edge-hiv-tpa01.int.pdx.net.uk sshd[743956]: Invalid user prtg from 91.80.148.28 port 37924 ... show less	Brute-Force SSH
🇧🇬 OHOST.BG	2026-07-18 23:34:45 (4 days ago)	Jul 19 02:30:49 lms sshd[21086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Jul 19 02:30:49 lms sshd[21086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.80.148.28 Jul 19 02:30:51 lms sshd[21086]: Failed password for invalid user test from 91.80.148.28 port 52622 ssh2 Jul 19 02:34:43 lms sshd[23497]: Failed password for root from 91.80.148.28 port 37726 ssh2 ... show less	Brute-Force SSH
🇮🇹 CoreTech srl	2026-07-18 22:48:18 (4 days ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact	Hacking
Anonymous	2026-07-18 22:45:29 (4 days ago)	2026-07-19T00:36:06.653864+02:00 HETZNER-FI-1 sshd[3794947]: Invalid user sumit from 91.80.148.28 po ... show more 2026-07-19T00:36:06.653864+02:00 HETZNER-FI-1 sshd[3794947]: Invalid user sumit from 91.80.148.28 port 42464 2026-07-19T00:42:29.979893+02:00 HETZNER-FI-1 sshd[3827887]: Invalid user polls from 91.80.148.28 port 36684 2026-07-19T00:45:28.584509+02:00 HETZNER-FI-1 sshd[3843428]: Invalid user user from 91.80.148.28 port 41648 ... show less	Brute-Force SSH
🇺🇸 yzfdude1	2026-07-18 22:42:40 (4 days ago)	Jul 18 22:36:31 agera sshd[53402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more Jul 18 22:36:31 agera sshd[53402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.80.148.28 Jul 18 22:36:33 agera sshd[53402]: Failed password for invalid user sumit from 91.80.148.28 port 55162 ssh2 Jul 18 22:42:40 agera sshd[53489]: Invalid user polls from 91.80.148.28 port 59130 ... show less	Brute-Force SSH
🇺🇸 COMPLEX	2026-07-18 00:31:57 (5 days ago)	Banned by Multi Agent · node …dqmb · attempts=5 · SSH brute-force / scan	Brute-Force SSH

Showing 1 to 15 of 83 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.176.31.214

🇫🇷 146.70.194.244

🇻🇳 103.149.170.125

🇨🇳 220.189.253.198

🇳🇱 213.177.179.80

🇫🇷 212.47.76.178

🇷🇴 193.32.162.84

🇪🇨 186.66.221.214

🇵🇱 176.53.159.198

🇧🇷 170.254.122.96

🇳🇱 164.92.210.3

🇮🇩 139.255.254.163

🇺🇸 136.117.252.14

🇸🇬 118.26.110.171

🇺🇸 103.195.103.203

🇳🇱 91.92.42.61

🇫🇮 77.105.161.120

🇩🇪 69.5.169.184

🇺🇸 2a09:bac1:76a0:3d0::c:3ca

🇪🇸 196.196.150.5