JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.196.121.246

91.196.121.246 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 43%: ?

43%

ISP	Vedekon Ltd
Usage Type	Fixed Line ISP
ASN	AS35795
Domain Name	vedekon.ua
Country	🇺🇦 Ukraine
City	Baranivka, Zhytomyr Oblast

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.196.121.246

Whois 91.196.121.246

IP Abuse Reports for 91.196.121.246:

This IP address has been reported a total of 37 times from 28 distinct sources. 91.196.121.246 was first reported on February 9th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 cybsecaoccol	2026-08-16 09:46:19 (1 day ago)	multiple malicious connection attempts on tcp port 22 - dr	DDoS Attack Port Scan Hacking Brute-Force
🇹🇷 SeczarSecureOps	2026-08-15 07:23:57 (2 days ago)	Auto-blocked by Seczar SecureOps — SSH Brute Force (5 events in 5min) at 2026-08-15 07:23	Web App Attack
🇦🇺 foobax	2026-08-11 09:27:32 (6 days ago)	closed the connection from port 45692	SSH Port Scan
🇺🇸 kosada.com	2026-08-06 00:28:23 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 wiredalter	2026-07-30 05:28:30 (2 weeks ago)	Blocked by UFW on dVPS [37777/tcp] Source Port: 53628 TTL: 115 Packet Length: 52 TOS: 0x00 Analyzed ... show more Blocked by UFW on dVPS [37777/tcp] Source Port: 53628 TTL: 115 Packet Length: 52 TOS: 0x00 Analyzed by https://ip.wiredalter.com show less	Port Scan Brute-Force
Anonymous	2026-07-27 13:07:56 (3 weeks ago)	denied Telnet access attempt. destination port 23.	Port Scan Brute-Force
Anonymous	2026-07-19 06:47:18 (4 weeks ago)	Jul 19 02:47:17 localhost kernel: [112788860.951626] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Jul 19 02:47:17 localhost kernel: [112788860.951626] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=91.196.121.246 DST=[mungedIP2] LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=52973 DF PROTO=TCP SPT=53686 DPT=37777 WINDOW=64240 RES=0x00 SYN URGP=0 Jul 19 02:47:17 localhost kernel: [112788860.951648] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=91.196.121.246 DST=[mungedIP2] LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=52973 DF PROTO=TCP SPT=53686 DPT=37777 SEQ=2414554580 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B40103030801010402) Jul 19 02:47:18 localhost kernel: [112788861.962154] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=91.196.121.246 DST=[mungedIP2] LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=52974 DF PROTO=TCP SPT=53686 DPT=37777 WINDOW=64240 RES=0x00 SYN URGP=0 Jul 19 02:47:18 localhost kernel: [112788861.962186] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08: show less	Port Scan
🇧🇷 Sipo Chutão	2026-07-19 03:00:01 (4 weeks ago)	/secrets.txt	Hacking
🇫🇮 6kilowatti	2026-07-15 16:26:14 (1 month ago)	2026-07-15T19:26:13.068959+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ... show more 2026-07-15T19:26:13.068959+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=91.196.121.246 DST=83.148.240.21 LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=22899 DF PROTO=TCP SPT=56811 DPT=37777 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇮 6kilowatti	2026-07-13 20:20:53 (1 month ago)	2026-07-13T23:20:52.614869+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-07-13T23:20:52.614869+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=91.196.121.246 DST=5.61.88.83 LEN=52 TOS=0x00 PREC=0x00 TTL=116 ID=52801 DF PROTO=TCP SPT=65450 DPT=37777 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 nodepile	2026-06-07 14:01:59 (2 months ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 Xarcotic	2026-06-04 13:56:26 (2 months ago)	SSH login on honeypot.	Brute-Force SSH
🇹🇭 Sawasdee	2026-06-01 07:50:22 (2 months ago)	Port Scan ...	Port Scan
🇺🇸 RAP	2026-05-25 20:51:27 (2 months ago)	2026-05-25 20:51:27 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇮🇩 hermawan	2026-05-24 08:44:15 (2 months ago)	05/24/2026-15:44:11.024207 [Drop] [] [1:2100001898:0] Suricata match TLS ja4 scan Uniq Zeek no 18 ... show more 05/24/2026-15:44:11.024207 [Drop] [] [1:2100001898:0] Suricata match TLS ja4 scan Uniq Zeek no 1898 with hash_t13d1812h1_85036bcba153_d41ae481755e [**] [Classification: (null)] [Priority: 3] {TCP} 91.196.121.246:33254 -> 103.166.156.58:443 ... show less	Email Spam Hacking

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 2602:80d:1003::21

🇻🇪 190.198.44.238

🇻🇪 190.153.51.68

🇫🇷 109.208.208.204

🇪🇸 62.93.179.137

🇳🇴 20.251.48.93

🇳🇱 5.61.209.44

🇨🇳 218.244.147.31

🇱🇹 213.176.26.144

🇱🇹 213.176.26.22

🇨🇷 200.119.184.55

🇷🇴 193.32.162.9

🇨🇷 186.159.173.194

🇺🇸 185.191.171.15

🇺🇸 170.106.11.117

🇺🇸 158.94.211.103

🇹🇼 128.14.239.38

🇺🇸 52.91.195.196

🇱🇺 46.151.182.247

🇪🇬 41.35.173.240