AbuseIPDB » 91.196.152.249
91.196.152.249 was found in our database!
This IP was reported 177 times. Confidence of Abuse is 55%: ?
| ISP | FR ONYPHE |
|---|---|
| Usage Type | Commercial |
| ASN | AS213412 |
| Hostname(s) |
cervantes.probe.onyphe.net |
| Domain Name | onyphe.io |
| Country | ๐ซ๐ท France |
| City | Roubaix, Hauts-de-France |
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
IP Abuse Reports for 91.196.152.249:
This IP address has been reported a total of 177 times from 40 distinct sources. 91.196.152.249 was first reported on , and the most recent report was .
Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| ๐ช๐ธ librebit |
Brute force
|
Brute-Force | ||
| ๐ธ๐ฐ KZP |
Automatic report from KZP firewall log.
|
Port Scan Hacking Brute-Force | ||
| ๐ฉ๐ช filstal.org |
|
Hacking Brute-Force Web App Attack | ||
| ๐บ๐ธ kosada.com |
Web vulnerability probing: /CHANGELOG.txt
|
Web App Attack | ||
| ๐ช๐ธ librebit |
Brute force
|
Brute-Force | ||
| ๐บ๐ธ MPL |
tcp/8020 (10 or more attempts)
|
Port Scan | ||
| ๐บ๐ธ MPL |
tcp/8020 (5 or more attempts)
|
Port Scan | ||
| ๐ช๐ธ librebit |
Brute force
|
Brute-Force | ||
| ๐ธ๐ฐ KZP |
Automatic report from KZP firewall log.
|
Port Scan Hacking Brute-Force | ||
| ๐ฉ๐ช NxtGenIT |
CiscoASA Honeypot hit, Payload: "GET /+CSCOL+/csvrloader.jar HTTP/1.1" 404 -,
|
Brute-Force | ||
| ๐บ๐ธ kosada.com |
Web vulnerability probing: /CHANGELOG.txt
|
Web App Attack | ||
| ๐ฎ๐ท mreza Rajabi |
Suspicious attempt for accessing ECP from Autodiscover.
|
Web App Attack | ||
| ๐ธ๐ฎ administrator |
|
Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack | ||
| ๐ธ๐ฎ administrator |
2026-05-26 00:03:30,702 fail2ban.actions [1070]: NOTICE [apache-auth] Ban 91.196.152.249
...
|
Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack | ||
| ๐จ๐ญ SOC [GOLINE SA] |
FortiGate detected IPS attack from IPv4 address 91.196.152.249
|
Hacking |
Showing 1 to 15 of 177 reports
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown ๐ฉ