AbuseIPDB » 23.91.96.164

23.91.96.164
Recent Activity This IP has received recent abuse reports, which causes the score to increase.
119 reports found in our database
100% Critical
Abuse confidence score ?
ISP
UCLOUD
Usage Type
Data Center/Web Hosting/Transit
ASN
Domain Name
ucloud.cn
Country
🇭🇰 Hong Kong
City
Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Log in to view charts and search reports for this IP. Log In

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview
Account required for the enhanced features Log in Sign up

IP Abuse Reports for 23.91.96.164:

This IP address has been reported a total of 119 times from 100 distinct sources. 23.91.96.164 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: United States of America with 34 reports; Germany with 25 reports; Netherlands with 6 reports. The most common categories in these recent reports were: Brute-Force 67 times; SSH 59 times; Web App Attack 22 times; Port Scan 22 times; Bad Web Bot 13 times; Other 14 times.

Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Portscan: TCP/23 (3x), TCP/2222, TCP/2375, TCP/443
Port Scan
🇮🇩 sockominfo
Reported by TangerangKota-CSIRT. Status: MALICIOUS
Hacking Email Spam
🇮🇱 i553041
Brute-Force SSH
🇺🇸 MPL
tcp/443 (2 or more attempts)
Port Scan
🇮🇪 AutosOnShow
blocked for webapp attack | path requested: /index.php | seen at 2026-09-03 21:27:41.485 |
Web App Attack
Anonymous
Drop from IP address 23.91.96.164 to tcp-port 23
Port Scan
🇳🇱 majo-it.nl
Brute-Force SSH
🇺🇸 SiteHUB Agency
Brute force activities detected and blocked
Brute-Force
🇩🇪 palzer.IT
Brute-Force SSH
🇩🇪 hostopya.com
Brute-Force SSH
Anonymous
IP & Port Scan.
SSH Port Scan Brute-Force
🇮🇩 sockominfo
Double URL encoding detection. Threat Score: 6.8/10 (MEDIUM). Reported by TangerangKota-CSIRT
Hacking Web App Attack
🇦🇺 Terrier
Blocked for HTTP vulnerability scanning (excessive 40x)
Web App Attack
🇺🇸 SANYALnet Labs
Brute-Force
🇸🇪 paradoxnetworks
Brute-Force SSH

Showing 1 to 15 of 119 reports


Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.223.235.36
🇧🇷 177.36.185.62
🇺🇸 162.216.150.141
🇺🇸 158.51.96.38
🇨🇳 124.222.170.15
🇮🇳 122.165.141.198
🇳🇱 45.148.10.151
🇸🇪 20.91.137.76
🇨🇱 200.54.212.162
🇺🇸 192.169.232.223
🇩🇪 165.227.168.96
🇺🇸 147.185.132.80
🇺🇸 71.6.240.150
🇺🇸 69.12.59.68
🇺🇸 45.159.20.198
🇮🇳 45.114.151.77
🇷🇴 2.57.122.209
🇩🇪 167.172.163.226
🇺🇸 66.132.186.206
🇪🇸 172.233.120.230