🇷🇴
clauss
2026-03-21 11:11:20
(2 months ago)
IP reached maximum auth failures for a one day block
Brute-Force
🇫🇷
UM3
2026-03-21 10:51:34
(2 months ago)
Exim Auth Failed
Brute-Force
🇮🇹
www.tana.it
2026-03-21 09:51:21
(2 months ago)
SMTP auth dictionary attack
Brute-Force
2026-03-21 09:39:02
(2 months ago)
...
Brute-Force
🇺🇦
MakselPr
2026-03-21 09:37:27
(2 months ago)
Mar 21 11:37:19 mail postfix/smtpd[327843]: warning: unknown[191.96.36.155]: SASL PLAIN authenticati ...
show more
Mar 21 11:37:19 mail postfix/smtpd[327843]: warning: unknown[191.96.36.155]: SASL PLAIN authentication failed: (reason unavailable), [email protected]
Mar 21 11:37:25 mail postfix/smtpd[327843]: warning: unknown[191.96.36.155]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
...
show less
Brute-Force
🇨🇿
lp
2026-03-21 09:10:16
(2 months ago)
Email account brute force: 5 attempts were recorded from 191.96.36.155
2026-03-21T09:24:59+01:00 war ...
show more
Email account brute force: 5 attempts were recorded from 191.96.36.155
2026-03-21T09:24:59+01:00 warning: unknown[191.96.36.155]: SASL PLAIN authentication failed: authentication failure, [email protected]
2026-03-21T09:24:59+01:00 warning: unknown[191.96.36.155]: SASL LOGIN authentication failed: authentication failure, [email protected]
2026-03-21T09:25:00+01:00 warning: unknown[191.96.36.155]: SASL PLAIN authentication failed: authentication failure, [email protected]
2026-03-21T09:25:01+01:00 warning: unknown[191.96.36.155]: SASL LOGIN authentication failed: authentication failure, [email protected]
2026-03-21T09:25:09+01:00 warning: unknown[191.96.36.155]: SASL PLAIN authentication failed: authentication failure, [email protected]
show less
Brute-Force
🇬🇧
cg-design.co.uk
2026-03-21 07:57:00
(2 months ago)
(smtpauth) Failed SMTP AUTH login from 191.96.36.155 (CA/Canada/-)
Brute-Force
🇪🇸
Nudisco
2026-03-21 07:53:03
(2 months ago)
Brute-Force
🇫🇷
masterguru
2026-02-22 04:38:50
(3 months ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 191.96.36.155 (CA/Canada/-): 1 in the ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 191.96.36.155 (CA/Canada/-): 1 in the last 3600 secs (0-193)
show less
Hacking
🇩🇪
marzzzello
2025-12-20 01:48:04
(5 months ago)
Ports: 24x 1194
Port Scan
🇩🇪
Jochen Pretli
2025-09-13 20:42:37
(9 months ago)
connection to honeypot
Email Spam
Port Scan
2025-09-13 10:50:03
(9 months ago)
| Suspicious URL access.
Hacking
SQL Injection
Web App Attack
🇺🇸
xmission.com
2025-08-03 07:35:11
(10 months ago)
Blocked by UFW (TCP on 1)
Source port: 63080
TTL: 117
Packet length: 52
TOS: 0x08
This report (for ...
show more
Blocked by UFW (TCP on 1)
Source port: 63080
TTL: 117
Packet length: 52
TOS: 0x08
This report (for 191.96.36.155) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
2024-09-09 10:27:58
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2024-04-22 13:17:47
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 191.96.36.155 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 191.96.36.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 22 09:17:44.293204 2024] [security2:error] [pid 30542] [client 191.96.36.155:41975] [client 191.96.36.155] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||wickedworks.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wickedworks.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZiZjeHkS7gEE_3lSchRrNQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack