191.96.11.207

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse confidence score ?
91% Critical
22 reports
21 reporters ยท latest 1 day ago
ISP Chunkserve Mateusz Peplinski
Usage Type Data Center/Web Hosting/Transit
ASN AS214481
Domain Name abuseradar.com
Country ๐Ÿ‡ณ๐Ÿ‡ฑ Netherlands
City Amsterdam, North Holland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Log in to view charts and search reports for this IP. Log In

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview
Account required for the enhanced features Log in Sign up

IP Abuse Reports for 191.96.11.207

This IP address has been reported a total of 22 times from 21 distinct sources. 191.96.11.207 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: Germany with 11 reports; France with 4 reports; United States of America with 3 reports. The most common categories in these recent reports were: Web App Attack 15 times; Hacking 7 times; Brute-Force 5 times; Bad Web Bot 5 times; Port Scan 4 times; Other 4 times.

Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ฒ๐Ÿ‡ณ Public CSIRT/CC of Mongolia
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ SuperCores Hosting
[2026-09-21 11:54:47.648160] TELNET/8080 Unautorized connection, Suspicious Mirai Botnet.
IoT Targeted Brute-Force Hacking Port Scan DDoS Attack
Anonymous
Probing\(3\) HTTP Ports ...
Bad Web Bot Web App Attack
Anonymous
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช pscriptos
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack Hacking
๐Ÿ‡ฉ๐Ÿ‡ช Richie
[HOST1] Git metadata discovery probe: GET /.git-credentials -> HTTP 400; UA: opendirme-credhunt/1.0
Bad Web Bot Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช sigurg
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack Hacking
๐Ÿ‡ฉ๐Ÿ‡ช Hans Wurst
Many 404-Error: Suspicion of URL-Fuzzing/Bot-Scan.
Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช DocNetzwerk
(mod_security) mod_security triggered on hostname [redacted] 191.96.11.207 (-)
SQL Injection
๐Ÿ‡ฉ๐Ÿ‡ช ddobko
Bad Web Bot Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช Serpentex
Bad Web Bot Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช XYCoderXY
SSH/web brute-force & exploit scanning against lumerux.com (automated report).
Brute-Force SSH
๐Ÿ‡ฉ๐Ÿ‡ช mravb
Web App Attack Hacking
๐Ÿ‡บ๐Ÿ‡ธ JCB
Web App Attack Hacking
๐Ÿ‡บ๐Ÿ‡ธ Starburst SysOp Team
Host header is a numeric IP address. Pattern match "(?:^( (920350-iad5-2)
Hacking Bad Web Bot

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown ๐Ÿšฉ

Recently Reported IPs:

๐Ÿ‡ฉ๐Ÿ‡ช 69.5.169.38
๐Ÿ‡ฎ๐Ÿ‡ฉ 34.50.88.91
๐Ÿ‡ถ๐Ÿ‡ฆ 178.153.120.238
๐Ÿ‡ง๐Ÿ‡ท 177.126.90.235
๐Ÿ‡ซ๐Ÿ‡ท 163.172.70.159
๐Ÿ‡ธ๐Ÿ‡ฌ 143.198.199.107
๐Ÿ‡ซ๐Ÿ‡ท 91.231.89.177
๐Ÿ‡ฉ๐Ÿ‡ช 77.20.250.67
๐Ÿ‡ญ๐Ÿ‡ฐ 65.181.71.117
๐Ÿ‡ฎ๐Ÿ‡ณ 59.145.170.227
๐Ÿ‡ฐ๐Ÿ‡ท 52.231.79.181
๐Ÿ‡จ๐Ÿ‡ณ 42.100.25.141
๐Ÿ‡ฐ๐Ÿ‡ท 39.118.24.100
๐Ÿ‡ฌ๐Ÿ‡ง 5.252.83.184
๐Ÿ‡ท๐Ÿ‡บ 213.234.5.66
๐Ÿ‡ณ๐Ÿ‡ฑ 195.178.110.30
๐Ÿ‡ณ๐Ÿ‡ฑ 185.223.235.59
๐Ÿ‡ฒ๐Ÿ‡พ 175.138.203.88
๐Ÿ‡ฟ๐Ÿ‡ฆ 165.16.166.117
๐Ÿ‡จ๐Ÿ‡ณ 115.191.62.128