JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 191.96.168.49

191.96.168.49 was found in our database!

This IP was reported 52 times. Confidence of Abuse is 0%: ?

ISP	Internet Utilities Europe and Asia Limited
Usage Type	Fixed Line ISP
ASN	AS174
Domain Name	netutils.io
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 191.96.168.49

Whois 191.96.168.49

IP Abuse Reports for 191.96.168.49:

This IP address has been reported a total of 52 times from 38 distinct sources. 191.96.168.49 was first reported on May 1st 2022, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Charlesiv	2026-04-17 04:05:24 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from NL. Action taken: BLOCK ASN: 174 (COGENT-174 - Cogent ... show more Triggered Cloudflare WAF (firewallCustom) from NL. Action taken: BLOCK ASN: 174 (COGENT-174 - Cogent Communications, LLC) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-04-17T02:43:11Z Ray ID: 9ed814aa4ab5971b UA: Go-http-client/1.1 show less	Bad Web Bot
🇫🇷 ✨	2026-04-17 01:55:15 (2 months ago)	Rule : FTP 2026-04-17 00:42:35 191.96.168.49 - *hidden-privacy* 21 NOOP - 530 776 0 65 6 0 48fb4 ... show more Rule : FTP 2026-04-17 00:42:35 191.96.168.49 - *hidden-privacy* 21 NOOP - 530 776 0 65 6 0 48fb423c-580a-4f6b-b899-fed8d0772027 - show less	FTP Brute-Force
🇷🇺 DZBOT	2026-04-17 01:01:41 (2 months ago)	DZBOT: [MTA] NO LOGIN / auth failed	Port Scan Brute-Force
🇺🇸 mutebot.net	2026-04-17 00:01:35 (2 months ago)	SRC=191.96.168.49, PROTO=TCP, SPT=41222, DPT=6080 SRC=191.96.168.49, PROTO=TCP, SPT=41864, DPT=3003 ... show more SRC=191.96.168.49, PROTO=TCP, SPT=41222, DPT=6080 SRC=191.96.168.49, PROTO=TCP, SPT=41864, DPT=3003 SRC=191.96.168.49, PROTO=TCP, SPT=57038, DPT=60080 SRC=191.96.168.49, PROTO=TCP, SPT=57038, DPT=60080 SRC=191.96.168.49, PROTO=TCP, SPT=41864, DPT=3003 show less	Port Scan
🇫🇷 GoodOldTOS	2026-04-16 22:13:31 (2 months ago)	Connection to FTP honeypot	Hacking
🇨🇳 pengpeng	2026-04-13 05:33:30 (2 months ago)	monitor: on VM-0-7-ubuntu \| port: 20576 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 20576 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-01-07 12:50:30 (5 months ago)	2026-01-07T13:50:29.886163+01:00 rendez-vous dovecot[921]: imap-login: Disconnected: Too many invali ... show more 2026-01-07T13:50:29.886163+01:00 rendez-vous dovecot[921]: imap-login: Disconnected: Too many invalid commands (no auth attempts in 0 secs): user=<>, rip=191.96.168.49, lip=*, session=<iJSwvMtHOqS/YKgx> show less	Brute-Force
🇳🇱 Study Bitcoin 🤗	2025-10-22 22:08:05 (7 months ago)	4 port probes: 2x tcp/8083, 2x tcp/9000 (cslistener) [ros]	Port Scan
🇹🇷 rtbh.com.tr	2025-02-06 20:50:06 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 Vegascosmetics	2025-02-05 22:52:00 (1 year ago)	Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.	Bad Web Bot
🇹🇷 rtbh.com.tr	2025-02-05 20:50:07 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 Vegascosmetics	2025-02-05 07:01:40 (1 year ago)	Kingcopy(AI-IDS):IP does Excessive BAD Request Abuse	Bad Web Bot
🇨🇿 plzenskypruvodce.cz	2025-02-05 04:47:35 (1 year ago)	2025-02-05T05:47:33.335744+01:00 web wordpress(ckvilla.cz)[2089570]: Authentication failure for ckvi ... show more 2025-02-05T05:47:33.335744+01:00 web wordpress(ckvilla.cz)[2089570]: Authentication failure for ckvilla from 191.96.168.49 2025-02-05T05:47:34.306844+01:00 web wordpress(ckvilla.cz)[2089566]: Authentication failure for ckvilla from 191.96.168.49 2025-02-05T05:47:35.138345+01:00 web wordpress(ckvilla.cz)[2090109]: Authentication failure for ckvilla from 191.96.168.49 ... show less	Brute-Force
🇫🇷 N3ilawx	2025-02-05 02:16:10 (1 year ago)	Fail2Ban detect something wrong with this ip 191.96.168.49 - GET - 404 - [05/Feb/2025:02:16:06 +0000 ... show more Fail2Ban detect something wrong with this ip 191.96.168.49 - GET - 404 - [05/Feb/2025:02:16:06 +0000] 191.96.168.49 - GET - 404 - [05/Feb/2025:02:16:07 +0000] 191.96.168.49 - GET - 404 - [05/Feb/2025:02:16:07 +0000] 191.96.168.49 - GET - 404 - [05/Feb/2025:02:16:07 +0000] 191.96.168.49 - GET - 404 - [05/Feb/2025:02:16:08 +0000] 191.96.168.49 - GET - 404 - [05/Feb/2025:02:16:08 +0000] 191.96.168.49 - GET - 404 - [05/Feb/2025:02:16:08 +0000] 191.96.168.49 - GET - 404 - [05/Feb/2025:02:16:09 +0000] 191.96.168.49 - GET - 404 - [05/Feb/2025:02:16:09 +0000] 191.96.168.49 - GET - 404 - [05/Feb/2025:02:16:09 +0000] ... show less	Brute-Force Web App Attack
Anonymous	2025-02-05 00:01:52 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 52 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 165.154.162.81

🇫🇷 146.70.194.236

🇳🇱 91.92.42.147

🇩🇪 162.19.243.145

🇺🇸 159.65.222.96

🇧🇭 89.148.35.90

🇳🇱 45.198.224.115

🇮🇳 4.240.96.30

🇺🇸 2a0c:9f00:a000:b639::1

🇨🇳 202.105.98.252

🇸🇬 152.32.220.188

🇺🇸 98.90.206.95

🇺🇸 57.132.175.132

🇧🇷 43.135.211.148

🇪🇬 197.47.228.194

🇷🇼 196.216.81.126

🇧🇷 187.51.84.86

🇸🇬 172.188.218.162

🇺🇸 45.205.31.150

🇳🇱 45.156.128.148