JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 176.96.132.206

176.96.132.206 was found in our database!

This IP was reported 100 times. Confidence of Abuse is 58%: ?

58%

ISP	LLC Ukrtele-Service
Usage Type	Fixed Line ISP
ASN	AS35352
Hostname(s)	206.132.96.176.misto-tv.ua
Domain Name	ukrtelebud.com.ua
Country	🇺🇦 Ukraine
City	Kyiv, Kyiv City

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 176.96.132.206

Whois 176.96.132.206

IP Abuse Reports for 176.96.132.206:

This IP address has been reported a total of 100 times from 46 distinct sources. 176.96.132.206 was first reported on July 31st 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-14 02:43:39 (3 days ago)	(mod_security) mod_security (id:210730) triggered by 176.96.132.206 (206.132.96.176.misto-tv.ua): 1 ... show more (mod_security) mod_security (id:210730) triggered by 176.96.132.206 (206.132.96.176.misto-tv.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 22:43:34.026230 2026] [security2:error] [pid 16949:tid 16949] [client 176.96.132.206:33142] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|alexgitlin.com\|F\|2"] [data ".thehighwaystar.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "alexgitlin.com"] [uri "/npp/www.thehighwaystar.com"] [unique_id "alWiVji_kVzyyO0ioEHeMQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-07-12 00:44:03 (5 days ago)	CrowdSec: crowdsecurity/http-probing \| req: ["/search/search_term_string/_src=%2F","/search/search_t ... show more CrowdSec: crowdsecurity/http-probing \| req: ["/search/search_term_string/_src=%2F","/search/search_term_string/URL=%2F","/search/search_term_string/_href=%2F","/search/search_term_string/_src_=%2Ffetch(","/search/search_term_string/_src_=%2F.src+=","/search/search_term_string/_src_=%2FURL=","/ \| UA: ["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36"] show less	Port Scan Web App Attack
🇧🇪 cmbplf	2026-07-08 20:05:57 (1 week ago)	13.698 requests in 1 hour (1mo2w4d)	Brute-Force Bad Web Bot
🇮🇱 spd.co.il	2026-07-04 23:15:11 (1 week ago)	Web application attack detected	Hacking Web App Attack
🇩🇪 findlab	2026-07-02 23:05:02 (2 weeks ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇬🇧 Apache	2026-06-25 21:05:06 (3 weeks ago)	(mod_security) mod_security (id:20000010) triggered by 176.96.132.206 (UA/Ukraine/206.132.96.176.mis ... show more (mod_security) mod_security (id:20000010) triggered by 176.96.132.206 (UA/Ukraine/206.132.96.176.misto-tv.ua): 5 in the last 300 secs show less	Brute-Force Web App Attack
🇫🇷 IRISIO	2026-06-25 10:32:26 (3 weeks ago)	scans/SQL injection/spam posts : 287 queries	Web App Attack SQL Injection
🇦🇹 penguin-solutions.at	2026-06-25 08:49:16 (3 weeks ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack
🇦🇷 whost	2026-06-23 15:37:00 (3 weeks ago)	bfa - reported by silicomnetwork.com	Brute-Force
🇺🇸 Lee Daniel	2026-06-23 00:07:54 (3 weeks ago)	176.96.132.206 - - [22/Jun/2026:20:07:54 -0400] "GET /plantation/rum/where-purchase HTTP/1.1" 404 26 ... show more 176.96.132.206 - - [22/Jun/2026:20:07:54 -0400] "GET /plantation/rum/where-purchase HTTP/1.1" 404 26522 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 176.96.132.206 - - [22/Jun/2026:20:07:54 -0400] "GET /plantation/terms-use HTTP/1.1" 404 26583 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 176.96.132.206 - - [22/Jun/2026:20:07:54 -0400] "GET /plantation/weddings/pricing HTTP/1.1" 404 26523 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 176.96.132.206 - - [22/Jun/2026:20:07:54 -0400] "GET /plantation/www.kirstendear.com HTTP/1.1" 404 26531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 176.96.132.206 - - [22/Jun/2026:20:07:54 -0400] "GET /plantation/weddings/planning-your-wedding HTTP/1.1" 404 26604 "-" "M ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇨🇭 Origon	2026-06-21 16:44:12 (3 weeks ago)	http-crawl-non_statics - IP: 176.96.132.206 - time="2026-06-21T18:44:12+02:00" level=info msg="(555 ... show more http-crawl-non_statics - IP: 176.96.132.206 - time="2026-06-21T18:44:12+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-crawl-non_statics by ip 176.96.132.206 (UA/35352) : 4h ban on Ip 176.96.132.206" module=db show less	Bad Web Bot
Anonymous	2026-06-21 02:05:16 (3 weeks ago)	Blocked: Reason='Suspicious traffic score=75 (review-based detection)'; Requests=1283	Hacking
🇩🇪 Ba-Yu	2026-06-18 06:57:56 (4 weeks ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 mnsf	2026-06-18 01:07:58 (4 weeks ago)	Too many Status 40X (11)	Brute-Force Web App Attack
🇺🇸 ChamberofCommerce.com	2026-06-16 05:56:26 (1 month ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:228 show less	Bad Web Bot

Showing 1 to 15 of 100 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.195

🇷🇴 193.46.255.86

🇺🇸 192.169.249.148

🇨🇳 121.41.169.9

🇧🇷 35.215.250.249

🇱🇻 213.232.204.130

🇬🇧 194.50.235.140

🇺🇸 162.216.149.149

🇰🇪 129.222.187.15

🇨🇳 58.23.69.251

🇵🇸 46.43.103.42

🇳🇱 45.148.10.157

🇰🇿 5.180.42.23

🇺🇸 192.3.21.67

🇧🇷 186.225.74.184

🇩🇪 185.242.3.189

🇺🇸 152.32.207.172

🇫🇮 147.185.133.4

🇺🇸 107.150.102.191

🇰🇪 102.222.6.60