JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 189.196.196.45

189.196.196.45 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 50%: ?

50%

ISP	Mega Cable, S.A. de C.V.
Usage Type	Fixed Line ISP
ASN	AS13999
Hostname(s)	customer-gdl-cgn-196-45.megared.net.mx
Domain Name	mega.mx
Country	🇲🇽 Mexico
City	Guadalajara, Jalisco

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 189.196.196.45

Whois 189.196.196.45

IP Abuse Reports for 189.196.196.45:

This IP address has been reported a total of 12 times from 9 distinct sources. 189.196.196.45 was first reported on September 12th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-10-23 00:41:28 (2 hours ago)	Not following 301 redirects — wasted requests \| host: pestacolo.com \| method: POST \| path: /wp-login ... show more Not following 301 redirects — wasted requests \| host: pestacolo.com \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 \| src_port: 65081 show less	Bad Web Bot
🇺🇸 mnsf	2026-10-22 11:05:59 (16 hours ago)	Too many Status 40X (11)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-10-20 04:52:06 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 189.196.196.45 (customer-GDL-CGN-196-45.megared ... show more (mod_security) mod_security (id:225170) triggered by 189.196.196.45 (customer-GDL-CGN-196-45.megared.net.mx): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 00:52:02.683606 2026] [security2:error] [pid 26998:tid 26998] [client 189.196.196.45:6699] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|brewcitybros.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "brewcitybros.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atbzcugCmSUfZoLktuQ3WwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-10-17 10:45:44 (5 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-10-17 02:40:56 (6 days ago)	(mod_security) mod_security (id:225170) triggered by 189.196.196.45 (customer-GDL-CGN-196-45.megared ... show more (mod_security) mod_security (id:225170) triggered by 189.196.196.45 (customer-GDL-CGN-196-45.megared.net.mx): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 22:40:52.154511 2026] [security2:error] [pid 1897:tid 1897] [client 189.196.196.45:7847] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|onlinesuretybonds.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "onlinesuretybonds.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atLgNG4oe3Gz5LvFeFkNWwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 Mugen	2026-10-15 23:59:24 (1 week ago)	Unauthorized VPN login attempts	Brute-Force
Anonymous	2026-10-14 23:54:58 (1 week ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇷🇺 AbuseIPDB informer	2026-10-12 17:31:48 (1 week ago)	nfdump top talker: 189.196.196.45 \| first seen 2026-10-12 20:31:48.864 \| duration 00:00:00.090 \| flo ... show more nfdump top talker: 189.196.196.45 \| first seen 2026-10-12 20:31:48.864 \| duration 00:00:00.090 \| flows=1 \| packets=65472 \| bytes=47.3 M \| pps=726 \| bps=4.2 M \| bpp=722 \| proto=udp show less	DDoS Attack Exploited Host
🇷🇺 AbuseIPDB informer	2026-10-12 09:28:06 (1 week ago)	nfdump top talker: 189.196.196.45 \| first seen 2026-10-12 12:28:06.912 \| duration 00:00:00.096 \| flo ... show more nfdump top talker: 189.196.196.45 \| first seen 2026-10-12 12:28:06.912 \| duration 00:00:00.096 \| flows=5 \| packets=306900 \| bytes=223.2 M \| pps=3188 \| bps=18.5 M \| bpp=727 \| proto=udp show less	DDoS Attack Exploited Host
🇷🇺 AbuseIPDB informer	2026-10-03 17:15:52 (2 weeks ago)	nfdump top talker: 189.196.196.45 \| first seen 2026-10-03 20:15:52.192 \| duration 00:00:00.064 \| flo ... show more nfdump top talker: 189.196.196.45 \| first seen 2026-10-03 20:15:52.192 \| duration 00:00:00.064 \| flows=1 \| packets=66495 \| bytes=65.2 M \| pps=1034 \| bps=8.1 M \| bpp=980 \| proto=udp show less	DDoS Attack Port Scan Exploited Host
🇨🇿 lp	2026-09-30 22:51:46 (3 weeks ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 189.196.196.45 2026-09-30T23:46:47+02 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 189.196.196.45 2026-09-30T23:46:47+02:00 vpn Access-Reject 'lasova' station: 189.196.196.45 auth-type: PAP realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇫🇮 saamkuu	2026-09-12 04:56:41 (1 month ago)	DDoS botnet: TCP connection flood, 204 connections to port 443.	DDoS Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 104.236.83.130

🇧🇷 201.87.253.109

🇺🇸 195.184.76.241

🇦🇫 180.94.75.146

🇫🇮 147.185.133.8

🇺🇸 136.71.174.168

🇰🇷 125.246.95.152

🇳🇱 94.154.43.188

🇨🇦 85.217.149.17

🇺🇸 66.132.224.57

🇺🇸 64.62.197.172

🇧🇷 45.164.7.173

🇳🇱 45.148.10.125

🇬🇧 35.203.210.173

🇨🇴 190.60.54.54

🇮🇳 185.100.212.141

🇫🇷 169.58.228.57

🇩🇴 148.0.86.58

🇨🇦 142.93.146.198

🇹🇼 123.192.123.125