JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 191.96.67.106

191.96.67.106 was found in our database!

This IP was reported 46 times. Confidence of Abuse is 32%: ?

32%

ISP	Internet Utilities Europe and Asia Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	netutils.io
Country	🇺🇸 United States of America
City	Houston, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 191.96.67.106

Whois 191.96.67.106

IP Abuse Reports for 191.96.67.106:

This IP address has been reported a total of 46 times from 22 distinct sources. 191.96.67.106 was first reported on December 1st 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 hostseries	2026-06-10 15:05:07 (1 week ago)	Trigger: LF_SMTPAUTH	Brute-Force
🇧🇷 SvrAdmin	2026-06-10 14:51:36 (1 week ago)	[101] (smtpauth) Failed SMTP AUTH login from 191.96.67.106 (US/United States/-): 5 in the last 3600 ... show more [101] (smtpauth) Failed SMTP AUTH login from 191.96.67.106 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-06-10 11:50:24 dovecot_login authenticator failed for H=(uw5Udm2) [191.96.67.106]:26259: 535 Incorrect authentication data ([email protected]) 2026-06-10 11:50:33 dovecot_login authenticator failed for H=(Tp8246) [191.96.67.106]:21717: 535 Incorrect authentication data ([email protected]) 2026-06-10 11:50:47 dovecot_login authenticator failed for H=(3YQoPsdE6S) [191.96.67.106]:35677: 535 Incorrect authentication data ([email protected]) 2026-06-10 11:51:08 dovecot_login authenticator failed for H=(q6FmABoB) [191.96.67.106]:65212: 535 Incorrect authentication data ([email protected]) 2026-06-10 11:51:30 dovecot_login authenticator failed for H=(NI3Cl6vP) [191.96.67.106]:40045: 535 Incorrect authentication data ([email protected]) show less	Port Scan Hacking Brute-Force Exploited Host
Anonymous	2026-06-10 14:51:07 (1 week ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
🇫🇷 polido	2026-06-07 06:23:46 (1 week ago)	Unauthorized connection attempt to port 443 from 191.96.67.106	Port Scan
🇬🇧 consul.to	2026-05-19 16:17:27 (4 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 milcraft.nl	2026-05-15 12:10:08 (1 month ago)	Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi ... show more Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi patterns: filter_, add-to-cart=, orderby=, product_count=. Activity is consistent with high-volume request abuse. show less	DDoS Attack Web App Attack
🇺🇸 xmission.com	2026-02-19 12:53:48 (4 months ago)	Blocked by UFW (TCP on 1) Source port: 41450 TTL: 117 Packet length: 52 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 1) Source port: 41450 TTL: 117 Packet length: 52 TOS: 0x08 This report (for 191.96.67.106) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇹 VHosting	2025-12-19 21:35:05 (5 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
Anonymous	2025-11-15 18:45:15 (7 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2025-11-12 18:45:12 (7 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2025-11-09 18:45:12 (7 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2025-10-14 16:30:31 (8 months ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
Anonymous	2025-09-25 09:15:11 (8 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇫🇷 Thomas Basset	2025-09-13 13:49:29 (9 months ago)	Sep 13 15:30:34 ns0 postfix/smtpd[1850087]: improper command pipelining after CONNECT from unknown[1 ... show more Sep 13 15:30:34 ns0 postfix/smtpd[1850087]: improper command pipelining after CONNECT from unknown[191.96.67.106]: \026\003\001\000\361\001\000\000\355\003\003h\305q\365\314\2364-\371\300\275\375A\216\253\372\216(M\005F\313\340\242({E\250\0049\025\206\000\000T\300+\300,\300\206\300\207\300\t\300\n\300\254\300\255\300\b\300\a\300/\3000\300\212\300\213\300\023\300\024\300\022\300\021\000\234\000\235\300z\300{\000/\0005\000A\000\204\300\234 Sep 13 15:30:34 ns0 postfix/smtpd[1850087]: improper command pipelining after CONNECT from unknown[191.96.67.106]: GET / HTTP/1.0\r\nHost: vau75-1-78-194-209-98.fbxo.proxad.net\r\n\r\n Sep 13 15:49:29 ns0 postfix/smtpd[1851192]: NOQUEUE: reject: RCPT from unknown[191.96.67.106]: 554 5.7.1 <[email protected]>: Relay access denied; from=<openvasvt@gap3-059> to=<[email protected]> proto=SMTP helo=<example.com> ... show less	Brute-Force
🇨🇴 j458rjqwi348fhjq46	2025-08-08 06:25:22 (10 months ago)	Malicious IP detected by WAF with anomaly score 11.0. Attack types: Timestamp deviates by 2.0 hours, ... show more Malicious IP detected by WAF with anomaly score 11.0. Attack types: Timestamp deviates by 2.0 hours, Timestamp deviates by 5.0 hours, Timestamp deviates by 3.2 hours (+7 more). Activity: 9740 requests to 50 URLs. Period: 2025-08-08 01:18:47 - 2025-08-08 01:18:47 (America/Bogota). Origin: US. Source: Automated WAF log analysis. show less	Hacking

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.89

🇮🇩 118.99.114.224

🇸🇬 45.78.198.199

🇩🇪 43.165.3.187

🇩🇪 2a01:4f8:c014:7309::1

🇨🇳 223.109.252.191

🇮🇳 117.206.79.215

🇱🇹 81.30.98.142

🇻🇳 2405:4803:a5ff:c480:f089:9eb4:4755:5767

🇨🇳 180.110.149.157

🇩🇪 46.224.142.23

🇧🇪 34.78.184.254

🇻🇳 27.78.86.101

🇺🇸 18.217.208.51

🇻🇳 2001:ee0:5546:3940:6e83:b99:3553:2dbf

🇩🇪 216.26.249.138

🇺🇸 167.172.201.89

🇩🇪 139.59.208.225

🇿🇦 102.213.134.220

🇳🇱 91.92.40.200