JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.188.126.66

196.188.126.66 was found in our database!

This IP was reported 88 times. Confidence of Abuse is 47%: ?

47%

ISP	Ethio Telecom
Usage Type	Fixed Line ISP
ASN	AS24757
Domain Name	ethiotelecom.et
Country	🇪🇹 Ethiopia
City	Addis Ababa, Addis Ababa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.188.126.66

Whois 196.188.126.66

IP Abuse Reports for 196.188.126.66:

This IP address has been reported a total of 88 times from 46 distinct sources. 196.188.126.66 was first reported on October 28th 2022, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-10-14 11:54:45 (2 days ago)	WordPress: User enumeration. Pattern match "(author\\\\= (88030-193)	Hacking
🇺🇸 TPI-Abuse	2026-10-14 06:34:38 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 196.188.126.66 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 196.188.126.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 02:34:32.459538 2026] [security2:error] [pid 11186:tid 11186] [client 196.188.126.66:36792] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|lambert-heating-and-air.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lambert-heating-and-air.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as8ieAZd5QziV9xJAEA99QAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇹 Information Security	2026-10-08 19:36:06 (1 week ago)	Web App Attack ...	Web App Attack
🇮🇩 hermawan	2026-10-04 00:21:51 (1 week ago)	[Sun Oct 04 06:55:16.213732 2026] [security2:error] [pid 977855:tid 139889836291776] [client 196.188 ... show more [Sun Oct 04 06:55:16.213732 2026] [security2:error] [pid 977855:tid 139889836291776] [client 196.188.126.66:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "208"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: ?id= found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?id=1159:prakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-27-september-03-oktober-2016&catid=472 HTTP/1.1 Request URI RAW = /index.php/profil/arsip-artikel?id=1159:prakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-27-september-03-oktober-2016&catid=4..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "asGV5NSKDVN ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-10-04 00:06:27 (1 week ago)	Captured JA4H: ge11n_80262f89317d \| Log: 196.188.126.66 - - [04/Oct/2026:06:55:16 +0700] "GET /index ... show more Captured JA4H: ge11n_80262f89317d \| Log: 196.188.126.66 - - [04/Oct/2026:06:55:16 +0700] "GET /index.php/profil/arsip-artikel?id=1159:prakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-27-september-03-oktober-2016&catid=472 HTTP/1.1" 403 3738 "https://staklim-jatim.bmkg.go.id/" "Mozilla/5.0 (Linux; Android 8.0.0; SM-J330G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 EdgA/114.0.1823.74" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,user-agent,sec-ch-ua,referer,accept,cf-ray,sec-ch-ua-platform,sec-ch-ua-mobile,sec-fetch-dest,accept-encoding,sec-fetch-site,sec-fetch-mode,accept-language,cdn-loop,cf-connecting-ip,cf-ipcountry,cf-visitor... ... show less	Email Spam Hacking
🇺🇸 TPI-Abuse	2026-10-03 12:38:02 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 196.188.126.66 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 196.188.126.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 08:37:55.479843 2026] [security2:error] [pid 22839:tid 22839] [client 196.188.126.66:58417] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.colemangray.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.colemangray.com"] [uri "/"] [unique_id "asD3I8J7Gni_-2LI1IGexAAAABg"], referer: https://unlimitedbacklinkgenerator.shop/dir/natural-seo-backlinks-42934 show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 librebit	2026-09-25 17:01:14 (3 weeks ago)	Brute force	Brute-Force
🇺🇸 鬼影233	2026-09-24 17:26:00 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 14:01:10 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 08:09:28 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-22 09:52:15 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇪🇸 librebit	2026-09-22 02:22:37 (3 weeks ago)	Brute force	Brute-Force
🇩🇪 Vegascosmetics	2026-09-21 07:37:10 (3 weeks ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nest ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nesting / CPU-drain risk). Evidence: High Priority: %25252F show less	Hacking Exploited Host Web App Attack
🇺🇸 鬼影233	2026-09-18 10:21:29 (4 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-16 15:26:22 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot

Showing 1 to 15 of 88 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.109.255.143

🇧🇪 146.148.14.215

🇺🇸 136.87.117.82

🇨🇳 112.102.87.20

🇨🇭 104.251.180.112

🇷🇺 91.215.85.193

🇸🇬 47.84.139.171

🇳🇱 45.148.10.35

🇪🇨 38.19.73.81

🇧🇪 34.140.234.80

🇧🇪 34.78.64.142

🇧🇪 34.22.126.178

🇦🇺 217.79.116.151

🇦🇷 190.183.134.222

🇳🇱 178.128.247.154

🇫🇮 147.185.133.13

🇺🇸 99.7.112.60

🇺🇸 91.230.168.72

🇺🇸 76.33.47.3

🇩🇪 69.5.169.106