JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 191.96.106.61

191.96.106.61 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 0%: ?

ISP	Internet Utilities Europe and Asia Limited
Usage Type	Fixed Line ISP
ASN	AS174
Domain Name	netutils.io
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 191.96.106.61

Whois 191.96.106.61

IP Abuse Reports for 191.96.106.61:

This IP address has been reported a total of 15 times from 13 distinct sources. 191.96.106.61 was first reported on June 14th 2021, and the most recent report was 7 months ago.

Old Reports: The most recent abuse report for this IP address is from 7 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 Progetto1	2025-11-01 05:21:02 (7 months ago)	Mail - Multiple failed login attempts	Brute-Force Exploited Host
🇩🇪 stinpriza	2025-07-13 03:44:09 (11 months ago)	Web App Attack	Web App Attack
🇩🇪 stalker.to	2025-05-22 04:02:59 (1 year ago)	Datacenter Proxy	Web Spam
🇦🇺 MAGIC	2025-05-14 03:00:26 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇻🇳 Xuan Can	2025-05-05 23:26:35 (1 year ago)	(mod_security) mod_security (id:6) triggered by 191.96.106.61 (US/United States/-): 1 in the last 36 ... show more (mod_security) mod_security (id:6) triggered by 191.96.106.61 (US/United States/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 06 06:26:31.855547 2025] [security2:error] [pid 19224:tid 19259] [client 191.96.106.61:51945] [client 191.96.106.61] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "62"] [id "6"] [severity "CRITICAL"] [hostname "store.pavietnam.com"] [uri "/wp/wp-login.php"] [unique_id "aBlJJz68lZsW01S3y8MQEAAAAQU"] show less	Brute-Force SSH
🇦🇺 oncord	2025-05-03 04:43:56 (1 year ago)	Form spam	Web Spam
Anonymous	2025-03-29 04:30:10 (1 year ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇧🇷 SvrAdmin	2025-03-28 18:03:54 (1 year ago)	[101] (smtpauth) Failed SMTP AUTH login from 191.96.106.61 (US/United States/-): 5 in the last 3600 ... show more [101] (smtpauth) Failed SMTP AUTH login from 191.96.106.61 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2025-03-28 15:01:01 dovecot_login authenticator failed for (ADMIN) [191.96.106.61]:31249: 535 Incorrect authentication data ([email protected]) 2025-03-28 15:01:17 dovecot_login authenticator failed for (ADMIN) [191.96.106.61]:44641: 535 Incorrect authentication data ([email protected]) 2025-03-28 15:02:00 dovecot_login authenticator failed for (ADMIN) [191.96.106.61]:3600: 535 Incorrect authentication data ([email protected]) 2025-03-28 15:02:57 dovecot_login authenticator failed for (ADMIN) [191.96.106.61]:19248: 535 Incorrect authentication data ([email protected]) 2025-03-28 15:03:50 dovecot_login authenticator failed for (ADMIN) [191.96.106.61]:1930: 535 Incorrect authentication data ([email protected]) show less	Port Scan Hacking Brute-Force Exploited Host
🇺🇸 ChamberofCommerce.com	2024-09-21 15:31:14 (1 year ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2024-08-16 10:04:51 (1 year ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
Anonymous	2024-05-01 15:29:20 (2 years ago)	Malicious activity detected	Hacking Web App Attack
🇺🇸 TPI-Abuse	2024-02-10 07:31:15 (2 years ago)	(mod_security) mod_security (id:217200) triggered by 191.96.106.61 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:217200) triggered by 191.96.106.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 10 02:31:07.979506 2024] [security2:error] [pid 600] [client 191.96.106.61:52125] [client 191.96.106.61] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header\|\|www.jaxlist.org\|F\|2"] [data "/index.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jaxlist.org"] [uri "/index.php"] [unique_id "ZccmO_Dia2kkAxYbEYohQQAAAAo"], referer: https://www.jaxlist.org/index.php?page=register&action=register show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ChamberofCommerce.com	2024-02-08 10:37:25 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇬🇧 Steve	2021-06-15 20:57:03 (5 years ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇬🇧 UKFast Security	2021-06-14 21:09:12 (5 years ago)	WordPress XML RPC POST Brute Force Attack	Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.32.249.165

🇮🇹 188.219.104.210

🇳🇱 176.65.132.149

🇹🇼 111.70.11.78

🇺🇸 108.62.62.183

🇺🇸 47.24.27.63

🇱🇹 46.29.234.126

🇳🇱 45.148.10.141

🇺🇸 162.216.150.215

🇮🇩 103.154.231.122

🇫🇷 91.196.152.221

🇺🇸 40.121.200.75

🇺🇸 198.46.134.48

🇹🇬 156.38.73.89

🇧🇷 136.248.121.226

🇨🇳 123.138.18.10

🇨🇦 104.255.152.29

🇳🇱 45.198.224.143

🇳🇬 41.242.115.83

🇨🇳 36.111.40.138