JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 177.234.197.189

177.234.197.189 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 25%: ?

25%

ISP	NEGOCIOS Y TELEFONIA NEDETEL S.A.
Usage Type	Fixed Line ISP
ASN	AS52468
Hostname(s)	189-197-234-177.ufinetlatam.net.ec
Domain Name	nedetel.net
Country	🇪🇨 Ecuador
City	Guayaquil, Guayas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 177.234.197.189

Whois 177.234.197.189

IP Abuse Reports for 177.234.197.189:

This IP address has been reported a total of 9 times from 4 distinct sources. 177.234.197.189 was first reported on June 25th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-10-22 15:06:40 (4 days ago)	Code forge crawl (headless) \| path: /WP/cookie-consent/blame/commit/979901868436c96ec2fc6518cc5b1de0 ... show more Code forge crawl (headless) \| path: /WP/cookie-consent/blame/commit/979901868436c96ec2fc6518cc5b1de0097a209a/src/Frontend/Banner.php \| src_port: 57317 \| 2026-10-22 15:06 UTC show less	Bad Web Bot
🇺🇸 kosada.com	2026-10-14 08:04:58 (1 week ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=51&topics%5B2%5D=59&topics%5B3%5D=67&topics%5B4%5D=40 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-07 12:23:04 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 177.234.197.189 (189-197-234-177.ufinetlatam.ne ... show more (mod_security) mod_security (id:210730) triggered by 177.234.197.189 (189-197-234-177.ufinetlatam.net.ec): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 08:22:57.502141 2026] [security2:error] [pid 20195:tid 20195] [client 177.234.197.189:35004] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|darkcodeproductions.com.darkcodedesign.net\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "darkcodeproductions.com.darkcodedesign.net"] [uri "/sites/default/files/mysql.sql"] [unique_id "asY5oVN0IpWe9aIP7UB6AwAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-27 11:21:08 (4 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-20 01:04:55 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 LRob	2026-08-18 19:08:50 (2 months ago)	Application-layer flood: hammering search, login or AJAX endpoints far beyond any human use \| path: ... show more Application-layer flood: hammering search, login or AJAX endpoints far beyond any human use \| path: /131-gravel show less	DDoS Attack Web App Attack
🇺🇸 kosada.com	2026-08-14 07:11:30 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-24 18:50:40 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-06-25 21:57:24 (4 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇴 181.115.171.210

🇵🇰 160.30.108.206

🇳🇱 45.156.128.245

🇺🇸 216.180.246.184

🇺🇸 195.184.76.204

🇰🇷 175.209.156.146

🇨🇳 116.179.32.44

🇿🇦 102.64.39.73

🇮🇹 95.255.158.96

🇨🇳 47.111.8.83

🇬🇧 46.101.53.179

🇧🇷 45.160.221.144

🇮🇷 2.179.8.183

🇩🇪 194.88.98.104

🇩🇪 165.245.218.249

🇹🇹 161.0.236.9

🇵🇰 153.117.15.74

🇵🇭 143.44.165.97

🇧🇷 131.0.31.255

🇨🇳 106.59.139.19