JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

We resolved the domain cppg.co.za to IP address 196.40.97.128.

AbuseIPDB » 196.40.97.128

196.40.97.128 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 0%: ?

ISP	CPT Managed 2
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37153
Hostname(s)	dedi118.cpt1.host-h.net
Domain Name	hetzner.co.za
Country	🇿🇦 South Africa
City	Cape Town, Western Cape

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.40.97.128

Whois 196.40.97.128

IP Abuse Reports for 196.40.97.128:

This IP address has been reported a total of 9 times from 4 distinct sources. 196.40.97.128 was first reported on May 14th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-12 22:19:10 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 196.40.97.128 (dedi118.cpt1.host-h.net): 1 in t ... show more (mod_security) mod_security (id:225170) triggered by 196.40.97.128 (dedi118.cpt1.host-h.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 18:19:03.579922 2026] [security2:error] [pid 13779:tid 13796] [client 196.40.97.128:53474] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.giere.us\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.giere.us"] [uri "/wp-json/wp/v2/users"] [unique_id "aiyF1_H4erGtdvIuhVFErAAAAU0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-14 17:18:38 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 196.40.97.128 (dedi118.cpt1.host-h.net): 1 in t ... show more (mod_security) mod_security (id:225170) triggered by 196.40.97.128 (dedi118.cpt1.host-h.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 13:18:32.746437 2026] [security2:error] [pid 26304:tid 26304] [client 196.40.97.128:60586] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|rochesterhistorical.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rochesterhistorical.org"] [uri "/wp-json/wp/v2/users"] [unique_id "agYD6G9Jn9vvH34IsZaP7wAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-14 16:48:40 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 196.40.97.128 (dedi118.cpt1.host-h.net): 1 in t ... show more (mod_security) mod_security (id:225170) triggered by 196.40.97.128 (dedi118.cpt1.host-h.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 12:48:34.458421 2026] [security2:error] [pid 30843:tid 30843] [client 196.40.97.128:41386] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|mosheimlib.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mosheimlib.org"] [uri "/wp-json/wp/v2/users"] [unique_id "agX84vUaDHCeqnpq7uMr5wAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-14 16:00:40 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 196.40.97.128 (dedi118.cpt1.host-h.net): 1 in t ... show more (mod_security) mod_security (id:225170) triggered by 196.40.97.128 (dedi118.cpt1.host-h.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 12:00:34.633139 2026] [security2:error] [pid 17315:tid 17315] [client 196.40.97.128:54454] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|intothebigempty.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "intothebigempty.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agXxopnS5xYCsI4RFg_zkAAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-14 15:21:53 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 196.40.97.128 (dedi118.cpt1.host-h.net): 1 in t ... show more (mod_security) mod_security (id:225170) triggered by 196.40.97.128 (dedi118.cpt1.host-h.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 11:21:46.224171 2026] [security2:error] [pid 18810:tid 18810] [client 196.40.97.128:56324] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.hawaiireservations.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.hawaiireservations.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agXoitekt_NcADM0lpC9hAAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 bazter.pro	2026-05-14 15:09:20 (2 months ago)	Fail2Ban: plesk-bot-aggressive - 15 failures	Port Scan Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-05-14 13:05:57 (2 months ago)	Too many Status 40X (12) Scanning/Probing (12)	Brute-Force Web App Attack
🇦🇺 paulshipley.com.au	2026-05-14 12:22:46 (2 months ago)	paulshipley.info:443 196.40.97.128 - - [14/May/2026:22:22:44 +1000] "GET /?author=1 HTTP/1.1" 404 21 ... show more paulshipley.info:443 196.40.97.128 - - [14/May/2026:22:22:44 +1000] "GET /?author=1 HTTP/1.1" 404 21883 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:41.0) Gecko/20100101 Firefox/41.0" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-05-14 11:49:29 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 196.40.97.128 (dedi118.cpt1.host-h.net): 1 in t ... show more (mod_security) mod_security (id:225170) triggered by 196.40.97.128 (dedi118.cpt1.host-h.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 07:49:20.282813 2026] [security2:error] [pid 20616:tid 20636] [client 196.40.97.128:51496] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|frannykingsmith.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "frannykingsmith.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agW2wJ3-gdaVSPNFKudYtAAAAJE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 138.97.14.106

🇮🇹 4.232.80.255

🇮🇳 2401:4900:1c5e:6c10:612b:689:e4b0:10f5

🇫🇷 213.136.81.58

🇧🇪 198.235.24.223

🇬🇧 193.46.0.221

🇮🇩 180.252.199.123

🇩🇪 167.94.145.29

🇮🇩 156.230.182.151

🇪🇸 88.21.167.156

🇩🇪 69.5.169.153

🇲🇾 49.125.201.86

🇺🇸 20.14.73.1

🇺🇸 13.86.113.214

🇮🇹 4.232.189.50

🇮🇹 4.232.189.4

🇮🇹 4.232.188.10

🇮🇹 4.232.186.233

🇨🇳 220.180.171.157

🇬🇧 193.46.0.33