JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.196.121.153

91.196.121.153 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 82%: ?

82%

ISP	Vedekon Ltd
Usage Type	Fixed Line ISP
ASN	AS35795
Domain Name	vedekon.ua
Country	🇺🇦 Ukraine
City	Kyiv, Kyiv City

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.196.121.153

Whois 91.196.121.153

IP Abuse Reports for 91.196.121.153:

This IP address has been reported a total of 60 times from 34 distinct sources. 91.196.121.153 was first reported on December 1st 2020, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇬 garrymenata	2026-08-24 00:23:55 (3 hours ago)	91.196.121.153 - - [24/Aug/2026:01:39:08 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; ... show more 91.196.121.153 - - [24/Aug/2026:01:39:08 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" 91.196.121.153 - - [24/Aug/2026:01:39:11 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" 91.196.121.153 - - [24/Aug/2026:01:39:13 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" ... show less	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-08-22 12:16:03 (1 day ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 HamSammich	2026-08-21 21:21:44 (2 days ago)	Automated sensor: 62 telnet brute-force attempts over the last 24h (latest 2026-08-21T21:21Z). Usern ... show more Automated sensor: 62 telnet brute-force attempts over the last 24h (latest 2026-08-21T21:21Z). Usernames tried: root, admin, support, vstarcam2015. show less	Brute-Force IoT Targeted
🇧🇾 sashan	2026-08-20 16:24:03 (3 days ago)	2026-08-20T19:24:02.541405+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=91.196.121. ... show more 2026-08-20T19:24:02.541405+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=91.196.121.153 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=53274 DF PROTO=TCP SPT=40384 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 gui-ying233	2026-08-20 15:47:42 (3 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 Zkillu	2026-08-19 22:29:22 (4 days ago)	UDP flood (DDoS) vs AS215599: 153950 pkts / 220.13 MB to UDP 80/8443 across 631 dst IP(s), 2026-08-1 ... show more UDP flood (DDoS) vs AS215599: 153950 pkts / 220.13 MB to UDP 80/8443 across 631 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 22:29:22 (4 days ago)	UDP flood (DDoS) vs AS215599: 153950 pkts / 220.13 MB to UDP 80/8443 across 631 dst IP(s), 2026-08-1 ... show more UDP flood (DDoS) vs AS215599: 153950 pkts / 220.13 MB to UDP 80/8443 across 631 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇺🇸 kosada.com	2026-08-18 19:17:17 (5 days ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 nodepile	2026-08-18 14:25:27 (5 days ago)	Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/diode-dynamics.html ua='Mozilla/5. ... show more Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/diode-dynamics.html ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36') show less	Open Proxy VPN IP
🇺🇸 MPL	2026-08-18 10:10:52 (5 days ago)	tcp/23 (2 or more attempts)	Port Scan
🇦🇹 urnilxfgbez	2026-08-17 22:45:00 (6 days ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 HamSammich	2026-08-13 15:09:13 (1 week ago)	Automated sensor: 18 telnet brute-force attempts over the last 24h (latest 2026-08-13T15:09Z). Usern ... show more Automated sensor: 18 telnet brute-force attempts over the last 24h (latest 2026-08-13T15:09Z). Usernames tried: root, admin. show less	Brute-Force IoT Targeted
🇫🇷 security.rdmc.fr	2026-08-12 03:26:01 (1 week ago)	Port Scan Attack proto:TCP src:40892 dst:23	Port Scan
🇺🇦 URAN Publishing Service	2026-08-11 16:31:34 (1 week ago)	SQLi Attempt	Hacking SQL Injection Web App Attack
🇩🇪 LRob	2026-08-11 14:43:34 (1 week ago)	Web application probing \| req: \x11\x00\xF7\x05 \| 11 distinct paths \| UA: -	Port Scan Web App Attack

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.49

🇧🇷 181.224.80.64

🇺🇸 138.197.93.234

🇹🇼 114.41.156.50

🇺🇸 100.58.116.226

🇱🇹 78.63.133.64

🇺🇸 73.233.199.199

🇸🇬 35.187.231.181

🇺🇸 23.247.177.139

🇰🇷 203.142.160.143

🇵🇾 181.91.84.202

🇸🇬 172.71.82.116

🇨🇳 115.190.52.2

🇮🇹 80.211.147.146

🇮🇹 31.59.89.50

🇺🇸 23.247.176.215

🇬🇧 2a06:4884:7000::82

🇬🇧 2a06:4883:9000::ad

🇺🇸 205.210.31.44

🇺🇸 147.182.243.3