JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 191.96.168.76

191.96.168.76 was found in our database!

This IP was reported 93 times. Confidence of Abuse is 24%: ?

24%

ISP	Internet Utilities Europe and Asia Limited
Usage Type	Fixed Line ISP
ASN	AS174
Domain Name	netutils.io
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 191.96.168.76

Whois 191.96.168.76

IP Abuse Reports for 191.96.168.76:

This IP address has been reported a total of 93 times from 56 distinct sources. 191.96.168.76 was first reported on July 15th 2021, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 MAGIC	2026-05-14 00:51:50 (1 month ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇬🇧 thetomtaylor.co.uk	2026-05-06 00:08:04 (1 month ago)	Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [mx02]	Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-05-05 15:54:40 (1 month ago)	[redacted] 191.96.168.76 - - [05/May/2026:16:54:37 +0100] "GET /[redacted] HTTP/1.1" 302 5258 0/2166 ... show more [redacted] 191.96.168.76 - - [05/May/2026:16:54:37 +0100] "GET /[redacted] HTTP/1.1" 302 5258 0/216604 "http://[redacted]/[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" [redacted] 191.96.168.76 - - [05/May/2026:16:54:37 +0100] "GET / HTTP/1.1" 200 12634 0/441307 "https://[redacted]/[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" show less	Bad Web Bot Web App Attack
🇺🇸 xserverx.ru	2026-05-05 12:34:04 (1 month ago)	Honeypot triggered: IP: 191.96.168.76 Request to: https://xserverx.ru/xmlrpc.php Method: GET Host: x ... show more Honeypot triggered: IP: 191.96.168.76 Request to: https://xserverx.ru/xmlrpc.php Method: GET Host: xserverx.ru User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1 Referer: http://xserverx.ru/xmlrpc.php Country: NL ASN: Unknown Triggered rules: /xmlrpc\.php, \.php Timestamp: 2026-05-05T12:34:04.011Z show less	Hacking Bad Web Bot Web App Attack
Anonymous	2026-05-05 11:56:39 (1 month ago)	(wordpress) Failed wordpress login from 191.96.168.76 (NL/Netherlands/-)	Brute-Force
Anonymous	2026-05-05 11:25:13 (1 month ago)	(wordpress) Failed wordpress login from 191.96.168.76 (NL/Netherlands/North Holland/Amsterdam/-/[red ... show more (wordpress) Failed wordpress login from 191.96.168.76 (NL/Netherlands/North Holland/Amsterdam/-/[redacted]) show less	Brute-Force
🇫🇷 Baking333	2026-05-05 11:16:14 (1 month ago)	[redacted] 191.96.168.76 - - [05/May/2026:12:16:11 +0100] "GET /[redacted] HTTP/1.1" 302 1528 0/3733 ... show more [redacted] 191.96.168.76 - - [05/May/2026:12:16:11 +0100] "GET /[redacted] HTTP/1.1" 302 1528 0/373337 "http://[redacted]/[redacted]" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" [redacted] 191.96.168.76 - - [05/May/2026:12:16:13 +0100] "GET / HTTP/1.1" 200 8609 0/154675 "https://[redacted]/[redacted]" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" show less	Bad Web Bot Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-05-05 10:08:24 (1 month ago)	Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [ice02]	Bad Web Bot Web App Attack
🇨🇭 4server	2026-05-03 23:15:14 (1 month ago)	[MonMay0401:15:07.6493762026][security2:error][pid2647709:tid2648441][client191.96.168.76:0]ModSecur ... show more [MonMay0401:15:07.6493762026][security2:error][pid2647709:tid2648441][client191.96.168.76:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.r102.ch\"][uri\"/contacts/\"][unique_id\"affW-0d8XGjjtQU3GahTJwAAAAM\"]\,referer:https://www.r102.ch/contacts/ show less	Hacking Web App Attack
🇩🇪 paissangroup	2026-05-03 23:02:53 (1 month ago)	Multiple WAF Violations	Web App Attack
🇦🇺 oncord	2026-05-03 22:07:34 (1 month ago)	Form spam	Web Spam
🇨🇭 4server	2026-04-30 13:59:21 (1 month ago)	[ThuApr3015:59:18.6602672026][security2:error][pid2752804:tid2753142][client191.96.168.76:0]ModSecur ... show more [ThuApr3015:59:18.6602672026][security2:error][pid2752804:tid2753142][client191.96.168.76:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.giuristifriburgo.ch\"][uri\"/contatti-e-iscrizioni/\"][unique_id\"afNgNnZt3dHsIUxzXyaN1wAAAQc\"]\,referer:https://www.giuristifriburgo.ch/contatti-e-iscrizioni/ show less	Hacking Web App Attack
🇩🇪 conseilgouz	2026-04-30 13:50:50 (1 month ago)	vew-(visforms) : try to access forms...	Hacking
🇱🇻 garmtech.com	2026-04-30 13:02:33 (1 month ago)	IM360 WAF: Block URI containing malicious URLs	Web App Attack
🇦🇺 oncord	2026-04-30 12:59:39 (1 month ago)	Form spam	Web Spam

Showing 1 to 15 of 93 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇴 190.167.237.191

🇵🇱 172.253.255.52

🇫🇷 152.228.213.32

🇧🇬 79.124.59.10

🇦🇺 65.254.93.170

🇺🇸 65.49.1.38

🇺🇸 64.62.156.131

🇺🇸 162.216.149.30

🇫🇷 85.217.140.52

🇮🇹 82.180.56.17

🇬🇪 2.57.217.229

🇺🇸 216.25.89.99

🇳🇱 176.65.131.188

🇳🇱 164.90.195.107

🇸🇪 158.174.210.161

🇷🇺 95.108.213.226

🇱🇹 81.30.98.49

🇧🇪 34.38.149.206

🇻🇳 113.160.142.119

🇰🇷 112.216.129.27