191.96.106.199

Classification: Malicious

191.96.106.199 is a malicious IP address. Reported by 6 threat sources, last seen 2026-09-09. Network: AS174 Private Customer.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
HTTP Spammer StopForumSpam.com 2023-07-28 03:13:45 2026-09-09 07:42:45 malicious-activity
Suspicious Host AbuseIPDB 2026-04-09 14:33:33 2026-04-09 14:33:33 anomalous-activity
VPN Private Internet Access Maltiverse Threat Observatory 2025-09-04 08:00:24 2025-09-06 08:00:22 country_code:do country_code:pl country_code:us industry:education-and-nonprofits industry:financial-services industry:healthcare-and-pharmaceutical industry:retail-and-hospitality
Proxy IPWhois.io 2025-04-27 22:45:55 2025-04-27 22:45:55 anonymization
VPN IPWhois.io 2025-03-16 11:46:11 2025-03-16 11:46:11 anonymization
IMAP Attacker Blocklist.de 2024-12-09 09:41:48 2024-12-10 11:53:39 malicious-activity
Mail Spammer Blocklist.de 2024-12-09 10:04:15 2024-12-09 10:04:15 malicious-activity
Mail Spammer Abuseat.org 2023-07-28 03:13:46 2023-07-28 03:13:46

Tags

bot abuse attacker imap pop3 sasl mail spam port:1194 port:51820 port:992 port:5555 port:500 port:4500 port:1701 port:1723 port:443

Whois information

AS name
AS174 Private Customer
AS registry
ripencc
AS date
2014-03-13 00:00:00
AS CIDR
191.96.106.0/24
CIDR
191.96.106.0/24
Registrant
Private Customer
Address
Private Residence
City
Los Angeles
State
CA
Postal code
90012
Country
US — United States 🇺🇸
First indexed
2023-07-28 03:13:45
Last updated
2026-09-09 07:42:45

Malicious IPs in the same CIDR

191.96.106.191 191.96.106.139 191.96.106.212 191.96.106.219 191.96.106.131 191.96.106.197 191.96.106.60 191.96.106.66 191.96.106.69 191.96.106.28 191.96.106.162 191.96.106.63 191.96.106.39 191.96.106.59 191.96.106.50 191.96.106.213 191.96.106.189 191.96.106.184 191.96.106.153 191.96.106.159 191.96.106.199 191.96.106.14 191.96.106.25 191.96.106.146 191.96.106.148