JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 180.94.2.196

180.94.2.196 was found in our database!

This IP was reported 5 times. Confidence of Abuse is 18%: ?

18%

ISP	OSIFA ONLINE
Usage Type	Fixed Line ISP
ASN	AS132408
Domain Name	osifaonline.com
Country	🇧🇩 Bangladesh
City	Dhaka, Dhaka Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 180.94.2.196

Whois 180.94.2.196

IP Abuse Reports for 180.94.2.196:

This IP address has been reported a total of 5 times from 5 distinct sources. 180.94.2.196 was first reported on July 7th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-17 10:37:24 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 180.94.2.196 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 180.94.2.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 06:37:16.997173 2026] [security2:error] [pid 22484:tid 22484] [client 180.94.2.196:60296] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|willowriver3.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "willowriver3.com"] [uri "/"] [unique_id "aqvC3IkmajXrkD3MKVME3wAAAC8"], referer: https://dupurgeniefr.com/all/3184/6.html show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 bigorre.org	2026-08-31 06:52:50 (2 weeks ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇨🇭 backslash	2026-08-02 20:06:03 (1 month ago)	block ruleset DA4A07AEE48B136A3922182BE8AA8BFBC1840803	Bad Web Bot
🇺🇸 kosada.com	2026-07-13 14:19:34 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 netclix.gr	2025-07-07 14:58:03 (1 year ago)	180.94.2.196 (BD/Bangladesh/-), 3 distributed imapd attacks on account [[email protected]] ... show more 180.94.2.196 (BD/Bangladesh/-), 3 distributed imapd attacks on account [[email protected]] in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Jul 7 17:51:57 anak dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=45.249.87.138, lip=157.90.1.68, session=<8aQi/Fc5Hawt+VeK> Jul 7 17:51:44 anak dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 7 secs): user=<[email protected]>, method=PLAIN, rip=180.94.2.196, lip=157.90.1.68, TLS: Connection closed, session=<9/YW+1c5ZI+0XgLE> Jul 7 17:57:54 anak dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=45.118.105.32, lip=157.90.1.68, TLS: Connection closed, session=<9cdxEVg5i2wtdmkg> IP Addresses Blocked: 45.249.87.138 (IN/India/-) show less	Port Scan

Showing 1 to 5 of 5 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.155

🇫🇮 193.187.110.213

🇺🇦 178.159.221.63

🇸🇬 152.42.248.227

🇨🇳 103.217.186.187

🇫🇮 45.87.249.146

🇻🇳 27.77.243.32

🇨🇳 223.221.38.226

🇺🇸 195.63.15.17

🇮🇩 182.253.156.184

🇺🇸 147.185.132.179

🇧🇬 109.160.32.13

🇲🇦 105.154.62.69

🇨🇳 101.35.99.29

🇺🇸 70.173.249.180

🇺🇦 45.151.238.166

🇺🇸 16.216.88.46

🇩🇪 2.26.60.113

🇺🇸 216.73.161.114

🇹🇳 197.5.145.114