91.225.202.38
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- PC Astra-net
- Usage Type
- Fixed Line ISP
- ASN
- AS49824
- Domain Name
- astra.in.ua
- Country
- ๐บ๐ฆ Ukraine
- City
- Lviv, Lviv
Abuse Reports
Total reports
51 from
40 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| ๐จ๐ฟ Countryman |
repeated unauthorized VPN login attempt, user sweep
|
VPN IP Hacking Brute-Force | |
| ๐ฎ๐น RaffOne |
SSH - Attempt to login using invalid or illegal credential
|
Brute-Force SSH | |
| ๐บ๐ธ xmission.com |
Blocked by UFW (TCP on 22)
Source port: 60488
TTL: 47
Packet length: 60
TOS: 0x00
This report (for 91.225.202.38) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan SSH Brute-Force | |
| ๐ณ๐ฑ Nrbrtkls |
SSH honeypot (endlessh tarpit) connection from 91.225.202.38
|
SSH Port Scan | |
| ๐ฆ๐บ foobax |
closed the connection from port 40476
|
SSH Port Scan | |
| ๐ซ๐ท Kejult |
Honeypot Finding: repeated TCP service probing on TCP/22 (SSH); 2 application-level events across 2 source port(s). Sensor(s): Cowrie.
|
Port Scan | |
| ๐บ๐ธ RAP |
2026-10-23 13:33:47 UTC Unauthorized activity to TCP port 22. SSH
|
SSH | |
| ๐ท๐ธ Smel |
SSH/22 MH Probe, BF, Hack -
|
Hacking Brute-Force SSH | |
| ๐บ๐ธ kot |
scan port 22, 91.225.202.38 block
|
Port Scan | |
| ๐ฉ๐ช D3vNu11 |
Level: (LOW): Reputation Unknown via Cowrie IOC Country: Ukraine 2x -> Target Country: Finnland SSH
|
Brute-Force SSH | |
| ๐บ๐ธ RAP |
2026-10-19 19:27:16 UTC Unauthorized activity to TCP port 22. SSH
|
SSH | |
| ๐ซ๐ท Hiigara |
connection attempt : 91.225.202.38 on port : tcp/22 (SSH)
|
Port Scan | |
| ๐บ๐ธ TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| ๐จ๐ญ ALPHANET |
Botnet or web spider not respecting robots.txt
|
DDoS Attack Exploited Host | |
| ๐บ๐ธ ้ฌผๅฝฑ233 |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
|
Bad Web Bot |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown