JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.188.126.68

196.188.126.68 was found in our database!

This IP was reported 83 times. Confidence of Abuse is 49%: ?

49%

ISP	Ethio Telecom
Usage Type	Fixed Line ISP
ASN	AS24757
Domain Name	ethiotelecom.et
Country	🇪🇹 Ethiopia
City	Addis Ababa, Addis Ababa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.188.126.68

Whois 196.188.126.68

IP Abuse Reports for 196.188.126.68:

This IP address has been reported a total of 83 times from 41 distinct sources. 196.188.126.68 was first reported on September 28th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇹 Information Security	2026-10-14 21:51:23 (1 day ago)	Web App Attack ...	Web App Attack
Anonymous	2026-10-10 08:01:00 (6 days ago)	WordPress Brute Force	Brute-Force
🇺🇸 TPI-Abuse	2026-10-01 19:10:46 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 196.188.126.68 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 196.188.126.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 15:10:43.092345 2026] [security2:error] [pid 20066:tid 20066] [client 196.188.126.68:16033] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|smotheredhope.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "smotheredhope.com"] [uri "/"] [unique_id "ar6wM9hpZM1vPCThDxSPTAAAAA8"], referer: https://createwebsitebacklinks.website/dir/relevant-seo-backlinks-192935 show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-09-30 04:00:02 (2 weeks ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local blo ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local block policy. Evidence: High Abuse + Suspicion (62, Abuse: 55) show less	Hacking Exploited Host Web App Attack
🇨🇿 lp	2026-09-27 12:56:14 (2 weeks ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 196.188.126.68 2026-09-27T14:43:36+02 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 196.188.126.68 2026-09-27T14:43:36+02:00 vpn Access-Reject 'xurar00' station: 196.188.126.68 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇪🇸 librebit	2026-09-26 02:19:26 (2 weeks ago)	Brute force	Brute-Force
🇺🇸 TPI-Abuse	2026-09-25 04:04:30 (3 weeks ago)	(mod_security) mod_security (id:210350) triggered by 196.188.126.68 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 196.188.126.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 00:04:26.006599 2026] [security2:error] [pid 15271:tid 15271] [client 196.188.126.68:12302] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|brodyworks.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "brodyworks.com"] [uri "/"] [unique_id "arXyyhIPx3m9kJsmvtuVgAAAAA0"], referer: https://tfchecker.online/dir/trusted-link-building-29519 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-24 15:31:49 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 10:37:23 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-22 09:44:02 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇪🇸 librebit	2026-09-22 02:42:37 (3 weeks ago)	Brute force	Brute-Force
🇺🇸 鬼影233	2026-09-20 12:25:49 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇪🇸 el-brujo	2026-09-18 14:38:00 (4 weeks ago)	HTTP DDoS Attack Layer 7	DDoS Attack
🇺🇸 鬼影233	2026-09-17 11:34:31 (4 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-15 18:02:13 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot

Showing 1 to 15 of 83 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 34.96.46.167

🇫🇮 196.244.192.202

🇬🇧 193.163.125.18

🇦🇿 188.253.220.79

🇭🇰 154.212.234.154

🇯🇵 153.120.36.138

🇧🇪 130.211.55.221

🇨🇳 125.84.251.15

🇧🇩 103.131.156.148

🇨🇦 45.198.224.125

🇷🇺 31.13.19.104

🇬🇧 195.206.169.209

🇧🇬 193.24.211.219

🇷🇺 188.133.198.24

🇸🇮 130.12.182.223

🇮🇳 122.165.243.245

🇳🇱 80.242.246.50

🇳🇱 77.83.39.40

🇺🇸 52.36.5.236

🇦🇿 37.114.149.192