91.196.178.232
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- LUX.NET, LLC
- Usage Type
- Fixed Line ISP
- ASN
- AS43175
- Domain Name
- lux-net.com.ua
- Country
- 🇺🇦 Ukraine
- City
- Malyn, Zhytomyr Oblast
Abuse Reports
Total reports
48 from
28 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇺🇦 URAN Publishing Service |
SQLi Attempt
|
Hacking SQL Injection Web App Attack | |
| 🇵🇱 bart@ |
Automated scan detection against redacted protected targets. Hits=1; port 23 proto 6 detection honeypot_tcp
|
Port Scan | |
| 🇺🇸 RAP |
2026-08-30 17:11:05 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇺🇸 MPL |
tcp/23 (4 or more attempts)
|
Port Scan | |
| Anonymous |
suricata IPS/IDS detection, ruleset ET SCAN Potential SSH Scan
|
Port Scan | |
| 🇺🇸 sumnone |
Port probing on unauthorized port 23
|
Port Scan Hacking Exploited Host | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 22)
Source port: 2019
TTL: 45
Packet length: 60
TOS: 0x08
This report (for 91.196.178.232) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan SSH Brute-Force | |
| 🇺🇸 kosada.com |
Web bot: denial-of-service flood
|
DDoS Attack Bad Web Bot | |
| 🇺🇸 kosada.com |
Web bot: denial-of-service flood
|
DDoS Attack Bad Web Bot | |
| 🇺🇸 RAP |
2026-08-04 08:09:55 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇺🇸 donarev419 |
Port scan detected on port 23 (connection without data transfer)
|
Port Scan | |
| 🇺🇸 kosada.com |
Web bot: denial-of-service flood
|
DDoS Attack Bad Web Bot | |
| 🇰🇷 2048 |
Telnet credential brute-force observed by honeypot. | Source IP: 91.196.178.232 | Targeted device: OpenWrt router | First seen: 31 Jul 2026 13:45:11 UTC | Last seen: 31 Jul 2026 13:45:11 UTC | Attempts: 1 | Sample credentials: root:root621
|
Brute-Force IoT Targeted |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown