JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 191.96.168.40

191.96.168.40 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 0%: ?

ISP	Internet Utilities Europe and Asia Limited
Usage Type	Fixed Line ISP
ASN	AS174
Domain Name	netutils.io
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 191.96.168.40

Whois 191.96.168.40

IP Abuse Reports for 191.96.168.40:

This IP address has been reported a total of 37 times from 22 distinct sources. 191.96.168.40 was first reported on July 23rd 2021, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-12-01 11:48:18 (6 months ago)	191.96.168.40 - - [01/Dec/2025:12:48:17 +0100] "GET /shop/wp-login.php HTTP/1.1" 403 4958 "-" "Mozil ... show more 191.96.168.40 - - [01/Dec/2025:12:48:17 +0100] "GET /shop/wp-login.php HTTP/1.1" 403 4958 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" ... show less	Web App Attack
🇫🇷 Sklurk	2025-11-11 12:03:50 (7 months ago)	Web App Attack	Web App Attack
🇩🇪 BestFans.com	2025-11-07 21:15:53 (7 months ago)	Credential brute-force attacks on webpage logins	Brute-Force
🇺🇸 TPI-Abuse	2025-03-09 23:01:20 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 191.96.168.40 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 191.96.168.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 09 19:01:15.097181 2025] [security2:error] [pid 1477:tid 1477] [client 191.96.168.40:49493] [client 191.96.168.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "informativearticles.com"] [uri "/.git/HEAD"] [unique_id "Z84duzq6T1Rf2R6mLk5OlQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Kimax	2025-03-09 19:49:20 (1 year ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇺🇸 TPI-Abuse	2025-03-09 17:52:07 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 191.96.168.40 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 191.96.168.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 09 13:52:00.607289 2025] [security2:error] [pid 22541:tid 22541] [client 191.96.168.40:49966] [client 191.96.168.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chicagoinquirer.com"] [uri "/.git/HEAD"] [unique_id "Z83VQD7G_kkO5f6-IrZ7GwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-09 17:07:27 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 191.96.168.40 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 191.96.168.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 09 13:07:20.895322 2025] [security2:error] [pid 2513667:tid 2513667] [client 191.96.168.40:59552] [client 191.96.168.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "apbb.net"] [uri "/.git/HEAD"] [unique_id "Z83KyFn5yu0CsAoNNorMrwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-09 11:53:35 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 191.96.168.40 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 191.96.168.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 09 07:53:32.265917 2025] [security2:error] [pid 23093:tid 23093] [client 191.96.168.40:63133] [client 191.96.168.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "norun.net"] [uri "/.git/HEAD"] [unique_id "Z82BPF_0EHQQQK0Cm6lPzQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-09 11:10:58 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 191.96.168.40 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 191.96.168.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 09 07:10:50.085655 2025] [security2:error] [pid 25303:tid 25303] [client 191.96.168.40:63538] [client 191.96.168.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arttechnology.net"] [uri "/.git/HEAD"] [unique_id "Z813OuT21dlvvoU9DcUVMQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-09 07:57:11 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 191.96.168.40 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 191.96.168.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 09 03:57:07.600195 2025] [security2:error] [pid 1568:tid 1568] [client 191.96.168.40:64221] [client 191.96.168.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scala-global.com"] [uri "/.git/HEAD"] [unique_id "Z81J0wllt-fFM5D4F8gIggAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 oncord	2024-12-13 22:38:42 (1 year ago)	Form spam	Web Spam
🇧🇷 diego	2024-09-13 19:22:11 (1 year ago)	Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds	DDoS Attack
🇧🇷 diego	2024-09-12 06:08:50 (1 year ago)	Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds	DDoS Attack
🇺🇦 URAN Publishing Service	2024-08-28 19:21:34 (1 year ago)	191.96.168.40 - - [28/Aug/2024:22:21:33 +0300] "GET /article/view/2413-4260.X.1.35.2020.2/wp-login.p ... show more 191.96.168.40 - - [28/Aug/2024:22:21:33 +0300] "GET /article/view/2413-4260.X.1.35.2020.2/wp-login.php HTTP/1.1" 404 283 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2024-08-28 13:35:23 (1 year ago)	191.96.168.40 - - [28/Aug/2024:16:35:22 +0300] "GET /article/view/252005/wp-login.php?action=registe ... show more 191.96.168.40 - - [28/Aug/2024:16:35:22 +0300] "GET /article/view/252005/wp-login.php?action=register HTTP/1.1" 404 277 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.0.0 Safari/537.36" ... show less	Web App Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:4:9882:e001

🇹🇷 185.139.5.123

🇺🇸 162.216.149.151

🇩🇪 154.14.23.208

🇫🇷 91.196.152.34

🇧🇷 45.205.1.243

🇺🇸 17.22.237.89

🇩🇪 209.38.251.46

🇺🇸 184.105.247.200

🇺🇸 136.144.35.231

🇨🇳 117.147.70.201

🇺🇸 95.164.235.66

🇷🇺 92.53.96.141

🇫🇷 91.231.89.66

🇪🇸 79.72.57.232

🇺🇸 65.111.9.193

🇳🇱 45.156.128.13

🇺🇸 45.79.207.110

🇬🇧 35.203.211.75

🇨🇳 27.37.101.88