This IP address has been reported a total of
28
times from
19 distinct
sources.
91.243.6.36 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
France
with 1
report;
Netherlands
with 1
report.
The most common categories in these recent reports were:
Exploited Host
2
times;
DDoS Attack
2
times.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
DDoS flood attack against 82.153.147.0/24 on 2026/09/09 around 23:43 UTC. This IP sent approximately ...
show moreDDoS flood attack against 82.153.147.0/24 on 2026/09/09 around 23:43 UTC. This IP sent approximately 1.13 million UDP packets, totaling 49.7 MiB, during the attack window. The overall attack reached approximately 3.3 Mpps and primarily consisted of minimum sized UDP packets distributed across multiple destination IPs. Likely a compromised device or spoofed source participating in a botnet flood.
show less
DDoS flood attack against 31.56.58.0 (2026-08-20 19:05:36 -> 2026-08-20 19:20:36 UTC) targeting AS21 ...
show moreDDoS flood attack against 31.56.58.0 (2026-08-20 19:05:36 -> 2026-08-20 19:20:36 UTC) targeting AS215599. This IP (AS41911) sent ~7380 packets (0.45 MB) during the attack window. Likely a compromised device (botnet).
show less
DDoS Attack
Exploited Host
Anonymous
MikroTik Enterprise Honeypot
Port Scan
Anonymous
Blocked by firewall on hugin [23/tcp] | Rule: UFW | SPT: 60560 | TTL: 49 | LEN: 60 | TOS: 0x00 • Rep ...
show moreBlocked by firewall on hugin [23/tcp] | Rule: UFW | SPT: 60560 | TTL: 49 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Telnet credential brute-force observed by honeypot.
Source IP: 91.243.6.36
Targeted device: Ubuntu s ...
show moreTelnet credential brute-force observed by honeypot.
Source IP: 91.243.6.36
Targeted device: Ubuntu server
First seen: 11 Aug 2026 21:48:02 UTC
Last seen: 11 Aug 2026 21:48:02 UTC
Attempts: 1
Sample credentials: root:oelinux123
show less
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS ...
show moreVerified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=23 | HITS=2 | IPSET=ADD | FIRST=2026-08-09 10:34:05 | LAST=2026-08-09 10:34:06. Last seen 2026-08-09 10:34:06.
show less
