AbuseIPDB » 191.116.96.172
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example previewIP Abuse Reports for 191.116.96.172:
This IP address has been reported a total of 26 times from 22 distinct sources. 191.116.96.172 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: United States of America with 7 reports; Germany with 6 reports; Brazil with 3 reports. The most common categories in these recent reports were: Port Scan 20 times; Brute-Force 10 times; SSH 9 times; Hacking 7 times; Web App Attack 3 times; Other 1 time.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇩🇪 andorin |
|
Port Scan Brute-Force SSH | ||
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:36406 dst:23
|
Port Scan | ||
| 🇺🇸 NetVexor |
Attack source identified and submitted via NetVexor BGP Blackhole Network
|
Port Scan Hacking Brute-Force | ||
| 🇩🇪 genokrad |
Unauthorized connection attempt on TCP/23 (Telnet)
|
Port Scan | ||
| 🇺🇸 RAP |
2026-09-11 20:32:51 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | ||
| 🇧🇷 noconex |
|
Port Scan Brute-Force SSH | ||
| 🇹🇷 SeczarSecureOps |
Auto-blocked by Seczar SecureOps — SSH Brute Force (6 events in 5min) at 2026-09-10 11:04
|
Web App Attack | ||
| 🇹🇷 teklasbt |
|
Web App Attack | ||
| 🇺🇸 RAP |
2026-09-09 15:53:04 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | ||
| 🇫🇷 Entalpi.net |
Tried to hit sensible closed port commonly used in attacks
|
Port Scan Hacking | ||
| 🇺🇸 HamSammich |
Automated sensor: 1 SSH connection/probe attempts over the last 24h (latest 2026-09-08T15:07Z).
|
Brute-Force SSH | ||
| 🇧🇷 noconex |
|
Port Scan Brute-Force SSH | ||
| Anonymous |
suricata IPS/IDS detection, ruleset ET SCAN Potential SSH Scan
|
Port Scan | ||
| 🇺🇸 sumnone |
Port probing on unauthorized port 23
|
Port Scan Hacking Exploited Host | ||
| Anonymous |
denied traffic to a honeypot network. destination port 22.
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩