91.196.231.4
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Sergey Kus
- Usage Type
- Fixed Line ISP
- ASN
- AS207558
- Domain Name
- expres.net.ua
- Country
- 🇺🇦 Ukraine
- City
- Vynohradiv, Zakarpattia
Abuse Reports
Total reports
42 from
27 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 RAP |
2026-09-14 19:05:59 UTC Unauthorized activity to TCP port 22. SSH
|
SSH | |
| 🇦🇺 dyln |
Dyls honeypot brute-force: Telnet (27 total hits)
|
Brute-Force | |
| 🇦🇺 Block Rockin' Beats |
Attempted connection to TCP port 23
|
Port Scan | |
| 🇺🇸 MPL |
tcp/23 (4 or more attempts)
|
Port Scan | |
| 🇩🇪 bescared |
F2B - Malicious activity detected. Unauthorized connection attempt: Telnet. -8ff06ede-
|
Port Scan | |
| 🇵🇱 bart@ |
Automated scan detection against redacted protected targets. Hits=1; port 23 proto 6 detection honeypot_tcp
|
Port Scan | |
| Anonymous |
Blocked by firewall on hugin [23/tcp] | Rule: UFW | SPT: 44178 | TTL: 53 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan IoT Targeted | |
| 🇺🇸 RAP |
2026-08-27 01:22:29 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| Anonymous |
denied Telnet access attempt. destination port 23.
|
Port Scan Brute-Force | |
| 🇺🇸 LSPCCU |
|
Port Scan Hacking Brute-Force Web App Attack SSH IoT Targeted | |
| 🇳🇵 radheykrishna.com.np |
Aug 26 06:34:59 kernel: [1421554.476877] [UFW BLOCK] IN=ens160 OUT= SRC=91.196.231.4 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=7776 DF PROTO=TCP SPT=6126 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0
...
|
Port Scan | |
| 🇮🇹 Fusty |
Unauthorized attempt on (TCP on port 23).
Source port: 59170
TTL: 53
Packet length: 60
Timestamp: 2026-08-26 02:40:10
|
Port Scan Hacking Brute-Force | |
| Anonymous |
Drop from IP address 91.196.231.4 to tcp-port 23
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:28904 dst:23
|
Port Scan | |
| 🇺🇸 NetVexor |
Attack source identified and submitted via NetVexor BGP Blackhole Network
|
Port Scan Hacking Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown