JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

91.234.26.136

Neutral Activity

Abuse Confidence Score

0% Low Risk

42 reports

32 reporters · latest 1 month ago

ISP: FOP Kondratyuk Evgeniy Vladimirovich
Usage Type: Fixed Line ISP
ASN: AS198356
Domain Name: isp.net.ua
Country: 🇺🇦 Ukraine
City: Tulchyn, Vinnytsia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

42 from 32 distinct reporters

First reported

January 14th 2025

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇷🇺 Russian Federation 1

Most common categories Hacking 1 Bad Web Bot 1

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-25 05:45:30 UTC · (1 month ago)	Large-scale coordinated botnet (6M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ... show more Large-scale coordinated botnet (6M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group \| Offpeak: Sessionless Catalog Access Blocked: /brands/apc/shopby/manufacturer-lifesize-extron-apc-hp-projectiondesign.html?stock=1 \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot
🇫🇷 Zkillu	2026-08-19 22:29:28 UTC · (2 months ago)	UDP flood (DDoS) vs AS215599: 44231 pkts / 63.25 MB to UDP 80/8443 across 686 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised ... show more UDP flood (DDoS) vs AS215599: 44231 pkts / 63.25 MB to UDP 80/8443 across 686 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 HaloAgencySAS	2026-08-19 22:29:28 UTC · (2 months ago)	UDP flood (DDoS) vs AS215599: 44231 pkts / 63.25 MB to UDP 80/8443 across 686 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised ... show more UDP flood (DDoS) vs AS215599: 44231 pkts / 63.25 MB to UDP 80/8443 across 686 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇺🇸 RAP	2026-08-16 09:04:57 UTC · (2 months ago)	2026-08-16 09:04:57 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 RAP	2026-08-12 06:11:29 UTC · (2 months ago)	2026-08-12 06:11:29 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇩🇪 XYCoderXY	2026-08-12 05:32:02 UTC · (2 months ago)	SSH/web brute-force & exploit scanning against lumerux.com (automated report).	Brute-Force SSH
Anonymous	2026-08-12 02:26:40 UTC · (2 months ago)	unsolicited connect TCP dport 23 (sport 57567)	Hacking
Anonymous	2026-08-12 01:59:28 UTC · (2 months ago)	denied traffic to a honeypot network. destination port 23.	Port Scan Hacking
🇬🇧 Nov	2026-08-12 01:48:39 UTC · (2 months ago)	Unauthorized access attempt (tcp/23)	Port Scan
Anonymous	2026-08-12 00:57:43 UTC · (2 months ago)	Tried our host z.	Port Scan Hacking Exploited Host
Anonymous	2026-08-12 00:49:50 UTC · (2 months ago)	2026-08-12T02:49:48.764759+02:00 vps kernel: [2866625.653821] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=91.234.26.136 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x00 TTL=46 ID=8638 DF PROTO=TCP SPT=37853 DPT=23 WIN ... show more 2026-08-12T02:49:48.764759+02:00 vps kernel: [2866625.653821] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=91.234.26.136 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x00 TTL=46 ID=8638 DF PROTO=TCP SPT=37853 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇫🇷 EvoX	2026-08-12 00:20:17 UTC · (2 months ago)	🛡️ Honeypot [bsts-tpot-hive]: Unauthorized connection attempt detected on 23/TELNET	Hacking Port Scan
🇺🇸 RAP	2026-08-11 23:50:44 UTC · (2 months ago)	2026-08-11 23:50:44 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇩🇪 guldkage	2026-08-11 23:41:47 UTC · (2 months ago)	Unauthorized connection attempt detected from IP address 91.234.26.136 to port 23 (ger-02) [TELNET]	Exploited Host
Anonymous	2026-08-11 22:55:12 UTC · (2 months ago)	Blocked by firewall on hugin [23/tcp] \| Rule: UFW \| SPT: 52798 \| TTL: 52 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan IoT Targeted

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇻🇳 2402:800:62cd:dcc7:3022:86a9:cc06:f973

🇫🇷 185.194.178.69

🇺🇸 167.253.17.75

🇧🇩 103.77.252.233

🇨🇲 102.244.78.57

🇩🇪 102.220.163.250

🇺🇸 100.29.192.104

🇺🇸 66.132.172.201

🇺🇸 2a10:7b07:9ddb:b44:b077:f491:e9f7:c4fb

🇩🇪 188.245.254.209

🇺🇸 185.88.103.166

🇺🇸 172.238.188.122

🇩🇪 57.129.127.178

🇩🇪 46.224.19.183

🇵🇱 45.152.202.75

🇺🇸 40.223.85.206

🇬🇧 35.203.211.187

🇺🇸 216.25.89.110

🇺🇸 185.150.189.60

🇮🇩 165.101.179.131