JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 191.96.255.114

191.96.255.114 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 7%: ?

ISP	Internet Utilities Europe and Asia Limited
Usage Type	Fixed Line ISP
ASN	AS174
Domain Name	netutils.io
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 191.96.255.114

Whois 191.96.255.114

IP Abuse Reports for 191.96.255.114:

This IP address has been reported a total of 21 times from 14 distinct sources. 191.96.255.114 was first reported on October 27th 2023, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-05-03 04:21:59 (1 month ago)	Blocked by UFW (TCP on 54579) Source port: 59260 TTL: 119 Packet length: 52 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 54579) Source port: 59260 TTL: 119 Packet length: 52 TOS: 0x08 This report (for 191.96.255.114) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇷 chronos	2026-05-03 01:08:45 (1 month ago)	Generic malicious activity: Tentativa de varredura de porta TCP... \| Port: 59601 \| Proto: TCP \| Loca ... show more Generic malicious activity: Tentativa de varredura de porta TCP... \| Port: 59601 \| Proto: TCP \| Location: United States, Santa Clara show less	Port Scan Hacking
🇬🇧 consul.to	2026-03-29 05:13:35 (2 months ago)	Web attack/malicious scanning detected	Web App Attack
🇨🇭 backslash	2026-02-20 10:42:00 (4 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 xmission.com	2025-12-26 02:58:08 (5 months ago)	Blocked by UFW (TCP on 30918) Source port: 36589 TTL: 119 Packet length: 52 TOS: 0x0A This report ( ... show more Blocked by UFW (TCP on 30918) Source port: 36589 TTL: 119 Packet length: 52 TOS: 0x0A This report (for 191.96.255.114) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2025-12-13 18:10:02 (6 months ago)	\| Common web attack.	Hacking SQL Injection Web App Attack
🇺🇸 TPI-Abuse	2025-11-05 14:41:12 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 191.96.255.114 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 191.96.255.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 05 09:41:06.544016 2025] [security2:error] [pid 8718:tid 8739] [client 191.96.255.114:65038] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|mjkotob.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mjkotob.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aQtiAtKQQJ1d3NS_RCp6oQAAAQ0"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2025-11-05 12:50:08 (7 months ago)	WAF: Found blacklisted crawler 2- alpha	Email Spam Brute-Force
🇺🇸 TPI-Abuse	2025-11-05 12:28:22 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 191.96.255.114 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 191.96.255.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 05 07:28:14.398396 2025] [security2:error] [pid 14553:tid 14553] [client 191.96.255.114:55404] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|phuket-boatcharter.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "phuket-boatcharter.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aQtC3hIGNqDvEvYDrpMAswAAAAA"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-18 04:31:06 (8 months ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇪🇸 www.pk25.com	2025-10-18 02:49:21 (8 months ago)	2025-10-18 04:49:21 dovecot_login authenticator failed for (ADMIN) [191.96.255.114]: 535 Incorrect a ... show more 2025-10-18 04:49:21 dovecot_login authenticator failed for (ADMIN) [191.96.255.114]: 535 Incorrect authentication data ([email protected]) 2025-10-18 04:49:21 dovecot_login authenticator failed for (ADMIN) [191.96.255.114]: 535 Incorrect authentication data ([email protected]) 2025-10-18 04:49:21 dovecot_login authenticator failed for (ADMIN) [191.96.255.114]: 535 Incorrect authentication data ([email protected]) ... show less	Brute-Force
🇩🇪 stalker.to	2025-05-22 05:32:39 (1 year ago)	Datacenter Proxy	Web Spam
🇺🇸 hostseries	2025-05-17 11:38:33 (1 year ago)	Trigger: LF_DISTATTACK	Brute-Force
Anonymous	2025-02-10 20:31:52 (1 year ago)	wordpress-trap	Web App Attack
🇨🇿 lp	2025-02-07 07:20:51 (1 year ago)	Email account brute force: 1 attempts were recorded from 191.96.255.114 2025-02-07T06:43:57+01:00 wa ... show more Email account brute force: 1 attempts were recorded from 191.96.255.114 2025-02-07T06:43:57+01:00 warning: unknown[191.96.255.114]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 165.99.16.135

🇩🇪 69.5.169.55

🇨🇳 47.120.56.129

🇨🇭 179.43.186.241

🇨🇳 123.56.83.180

🇺🇿 62.164.148.87

🇳🇱 45.198.224.115

🇸🇬 43.173.177.103

🇧🇷 43.164.197.146

🇺🇸 2602:80d:1007::1d

🇰🇷 221.165.6.102

🇨🇭 195.15.227.114

🇨🇳 180.102.110.163

🇩🇪 167.94.146.32

🇯🇵 152.32.146.235

🇺🇸 104.234.53.101

🇫🇷 91.231.89.4

🇳🇱 45.156.87.166

🇳🇱 45.153.34.16

🇪🇬 196.202.80.96