JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.232.29.206

91.232.29.206 was found in our database!

This IP was reported 3,022 times. Confidence of Abuse is 100%: ?

100%

ISP	Network in Kyiv, Ukraine
Usage Type	Data Center/Web Hosting/Transit
ASN	AS3236
Hostname(s)	29.232.91.in-addr.arpa.server.ua
Domain Name	omnilance.com
Country	🇺🇦 Ukraine
City	Kyiv, Kyiv City

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.232.29.206

Whois 91.232.29.206

IP Abuse Reports for 91.232.29.206:

This IP address has been reported a total of 3,022 times from 214 distinct sources. 91.232.29.206 was first reported on February 27th 2024, and the most recent report was 26 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 LiftUp Hosting	2026-06-06 12:54:09 (26 minutes ago)	Honeypot hit: MSSQL traffic (on 1433) with username sa and empty password	Brute-Force
🇩🇪 AS213449.net	2026-06-06 07:23:09 (5 hours ago)	06/06/2026-09:23:09.125228 src=91.232.29.206 dst=89.144.63.14:1433 proto=6 msg=ET SCAN Suspicious in ... show more 06/06/2026-09:23:09.125228 src=91.232.29.206 dst=89.144.63.14:1433 proto=6 msg=ET SCAN Suspicious inbound to MSSQL port 1433 show less	SQL Injection
🇩🇪 AS213449.net	2026-06-06 07:07:39 (6 hours ago)	06/06/2026-09:07:29.442328 src=91.232.29.206 dst=89.144.63.92:1433 proto=6 msg=ET SCAN Suspicious in ... show more 06/06/2026-09:07:29.442328 src=91.232.29.206 dst=89.144.63.92:1433 proto=6 msg=ET SCAN Suspicious inbound to MSSQL port 1433 show less	SQL Injection
🇩🇪 AS213449.net	2026-06-06 06:21:37 (6 hours ago)	06/06/2026-08:21:37.110899 src=91.232.29.206 dst=89.144.63.176:1433 proto=6 msg=ET SCAN Suspicious i ... show more 06/06/2026-08:21:37.110899 src=91.232.29.206 dst=89.144.63.176:1433 proto=6 msg=ET SCAN Suspicious inbound to MSSQL port 1433 show less	SQL Injection
🇩🇪 AS213449.net	2026-06-06 05:49:11 (7 hours ago)	06/06/2026-07:49:11.204272 src=91.232.29.206 dst=89.144.63.26:1433 proto=6 msg=ET SCAN Suspicious in ... show more 06/06/2026-07:49:11.204272 src=91.232.29.206 dst=89.144.63.26:1433 proto=6 msg=ET SCAN Suspicious inbound to MSSQL port 1433 show less	SQL Injection
🇩🇪 AS213449.net	2026-06-06 04:49:53 (8 hours ago)	06/06/2026-06:49:53.234294 src=91.232.29.206 dst=89.144.63.148:1433 proto=6 msg=ET SCAN Suspicious i ... show more 06/06/2026-06:49:53.234294 src=91.232.29.206 dst=89.144.63.148:1433 proto=6 msg=ET SCAN Suspicious inbound to MSSQL port 1433 show less	SQL Injection
🇩🇪 AS213449.net	2026-06-06 04:11:51 (9 hours ago)	06/06/2026-06:11:51.390905 src=91.232.29.206 dst=89.144.63.10:1433 proto=6 msg=ET SCAN Suspicious in ... show more 06/06/2026-06:11:51.390905 src=91.232.29.206 dst=89.144.63.10:1433 proto=6 msg=ET SCAN Suspicious inbound to MSSQL port 1433 show less	SQL Injection
🇩🇪 AS213449.net	2026-06-06 03:22:36 (9 hours ago)	06/06/2026-05:22:36.814304 src=91.232.29.206 dst=89.144.63.84:1433 proto=6 msg=ET SCAN Suspicious in ... show more 06/06/2026-05:22:36.814304 src=91.232.29.206 dst=89.144.63.84:1433 proto=6 msg=ET SCAN Suspicious inbound to MSSQL port 1433 show less	SQL Injection
🇦🇹 urnilxfgbez	2026-06-05 22:45:00 (14 hours ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇫🇮 iamxorum	2026-06-04 17:02:43 (1 day ago)	2026-06-04T17:02:42.827515+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74 ... show more 2026-06-04T17:02:42.827515+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=91.232.29.206 DST=46.62.222.43 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=22663 PROTO=TCP SPT=58724 DPT=1433 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 centurion	2026-06-04 13:02:50 (2 days ago)	Blocked by UFW on dc00 [1433/tcp] Source port: 58724 TTL: 241 Packet length: 40 TOS: 0x00 This repo ... show more Blocked by UFW on dc00 [1433/tcp] Source port: 58724 TTL: 241 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 Andrew	2026-06-04 00:49:23 (2 days ago)	Blocked by UFW (TCP on port 1433). Source port: 52304 TTL: 246 Packet length: 40 TOS: 0x00 This rep ... show more Blocked by UFW (TCP on port 1433). Source port: 52304 TTL: 246 Packet length: 40 TOS: 0x00 This report (for 91.232.29.206) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 urnilxfgbez	2026-06-03 22:45:00 (2 days ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 MPL	2026-06-03 15:37:08 (2 days ago)	tcp/1433 (2 or more attempts)	Port Scan
🇬🇧 PeravixGroup	2026-06-03 11:46:05 (3 days ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host

Showing 1 to 15 of 3022 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 203.83.45.107

🇩🇪 165.227.129.77

🇦🇱 130.49.189.41

🇦🇪 87.200.146.124

🇫🇮 31.134.5.129

🇸🇬 2a09:bac5:55fe:18d2::279:57

🇧🇷 179.159.35.47

🇧🇷 177.74.188.179

🇺🇸 135.237.122.43

🇫🇷 45.84.137.192

🇸🇬 43.160.214.131

🇨🇳 14.103.127.7

🇸🇬 2a09:bac5:55fd:18d2::279:57

🇮🇳 175.101.131.169

🇭🇰 103.210.22.74

🇩🇪 69.5.169.203

🇳🇱 64.89.162.15

🇬🇧 217.146.80.125

🇺🇸 194.62.107.225

🇺🇸 162.216.149.243