AbuseIPDB » 109.161.190.197
109.161.190.197 was found in our database!
This IP was reported 5 times. Confidence of
Abuse
is 3% : ?
ISP
ZAIN BAHRAIN B.S.C.
Usage Type
Mobile ISP
ASN
AS31452
Hostname(s)
109-161-190-197.rev.bb.zain.com
Domain Name
zain.com
Country
π§π
Bahrain
City
Manama, Manama
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 109.161.190.197 :
This IP address has been reported a total of
5
times from
4 distinct
sources.
109.161.190.197 was first reported on
July 2nd 2025 , and the most recent report was
10 hours ago .
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
π°π·
zlhIcd
2026-06-25 02:21:48
(10 hours ago)
109.161.190.197 - - [16/Jun/2026:09:35:17 +0900] "GET /pcwiki/index.php?days=30&from=20251113171529& ...
show more
109.161.190.197 - - [16/Jun/2026:09:35:17 +0900] "GET /pcwiki/index.php?days=30&from=20251113171529&limit=100&title=%ED%8A%B9%EC%88%98%EA%B8%B0%EB%8A%A5:%EB%A7%81%ED%81%AC%EC%B5%9C%EA%B7%BC%EB%B0%94%EB%80%9C HTTP/1.1" 404 460 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:131.0) Gecko/20100101 Firefox/131.0"
...
show less
Web Spam
SQL Injection
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-04-12 17:52:08
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 109.161.190.197 (109-161-190-197.rev.bb.zain.co ...
show more
(mod_security) mod_security (id:210730) triggered by 109.161.190.197 (109-161-190-197.rev.bb.zain.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 13:52:01.943926 2026] [security2:error] [pid 3700508:tid 3700615] [client 109.161.190.197:48658] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||digital4z.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "digital4z.com"] [uri "/wp-content/plugins/app-your-wordpress-uppsite/admin/js/WS_FTP.LOG"] [unique_id "advbwYE_1OcqlSyokl3VngAAAZE"], referer: https://digital4z.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
johnkarlhill
2026-03-08 05:43:46
(3 months ago)
WebKnight blocked malicious web request on johnkarlhill.com
Brute-Force
SSH
πΊπΈ
TPI-Abuse
2025-12-10 14:52:11
(6 months ago)
"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ...
show more
"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access"
show less
DDoS Attack
SQL Injection
Exploited Host
πΈπͺ
Johan Finn
2025-07-02 13:02:35
(11 months ago)
malicious activity, botnet
Web App Attack
Showing 1 to
5
of 5 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown π©
Recently Reported IPs: