JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.188.226.25

196.188.226.25 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 23%: ?

23%

ISP	Ethio Telecom
Usage Type	Fixed Line ISP
ASN	AS24757
Domain Name	ethiotelecom.et
Country	🇪🇹 Ethiopia
City	Addis Ababa, Addis Ababa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.188.226.25

Whois 196.188.226.25

IP Abuse Reports for 196.188.226.25:

This IP address has been reported a total of 22 times from 17 distinct sources. 196.188.226.25 was first reported on December 20th 2022, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2026-09-30 21:55:04 (2 weeks ago)	Detected mail brute force attack from different servers	Brute-Force
🇩🇪 LRob	2026-09-28 20:33:26 (2 weeks ago)	Not following 301 redirects — wasted requests \| method: GET \| path: / \| ua: Mozilla/5.0 (Windows NT ... show more Not following 301 redirects — wasted requests \| method: GET \| path: / \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0 show less	Bad Web Bot
🇨🇿 lp	2026-09-28 13:55:18 (2 weeks ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 196.188.226.25 2026-09-28T14:53:36+02 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 196.188.226.25 2026-09-28T14:53:36+02:00 vpn Access-Reject 'xvasa03' station: 196.188.226.25 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇺🇸 鬼影233	2026-09-24 10:21:31 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-09 21:30:34 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-08-30 14:15:58 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
Anonymous	2026-08-06 20:45:41 (2 months ago)	Large-scale coordinated botnet (1M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ... show more Large-scale coordinated botnet (1M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan) employed by Angara Technologies Group \| Attack Signature Blocked: /wishlist/index/add/product/11262/form_key/nFhNDDiZyB64Hqic/ \| UA: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 5.01; Trident/3.1) \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇺🇸 pixelmemory.us	2026-08-05 05:54:50 (2 months ago)	2026-08-05T05:53:32 196.188.226.25 GET /Photos/Vacation/2019-09%20Kauai/raw/DSC02501.ARW.xmp Mozilla ... show more 2026-08-05T05:53:32 196.188.226.25 GET /Photos/Vacation/2019-09%20Kauai/raw/DSC02501.ARW.xmp Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 ... show less	Bad Web Bot
🇩🇪 SMARTNET	2026-05-27 06:03:53 (4 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d	DDoS Attack
🇸🇬 mypatricks	2026-03-15 05:04:50 (7 months ago)	196.188.226.25 \| Port: 11590 \| DNS: 196.188.226.25 2026-03-15T13:04:48+08:00 Africa/Addis_Ababa \| IP ... show more 196.188.226.25 \| Port: 11590 \| DNS: 196.188.226.25 2026-03-15T13:04:48+08:00 Africa/Addis_Ababa \| IPs reserved list \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 Edg/135.0.0.0 HTTP/1.1 443 GET \| URL: /fondant-3d-cakes-1st-birthday-giraffe/?7ddd0af061864b1186b7388f4=JPY&code=JPY \| Ref: https://xxxxxx/fondant-3d-cakes-1st-birthday-giraffe/?110c73837467b9b303d6dd91080c=zh-cn&code=zh-cn \| Country: ET/Ethiopia/+02:00 IP City: Addis Ababa Windows 9dc8fac15858e6b4-ADD/ADD 1 hits/0 secs Robots 3 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
Anonymous	2026-01-17 12:38:05 (9 months ago)	Unauthorized connection to Telnet port 23	Port Scan
Anonymous	2026-01-17 03:20:10 (9 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇩🇪 SMARTNET	2025-11-30 18:38:00 (10 months ago)	Aisuru(Mirai variant) DDoS	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-24 09:23:35 (10 months ago)	(mod_security) mod_security (id:210730) triggered by 196.188.226.25 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 196.188.226.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:23:30.510817 2025] [security2:error] [pid 27821:tid 27821] [client 196.188.226.25:16853] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.onlinesoldier.com\|F\|2"] [data ".cafepress.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.onlinesoldier.com"] [uri "/Promotion/www.cafepress.com"] [unique_id "aSQkEscaXwZnJRw6_W-6zwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-18 16:06:16 (10 months ago)	scanning http requests from known botnet	Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 120.48.124.164

🇰🇷 119.204.122.94

🇧🇬 91.191.209.46

🇱🇹 77.90.185.78

🇦🇿 37.61.125.170

🇧🇷 186.237.54.112

🇳🇱 185.93.89.167

🇧🇷 177.84.26.45

🇸🇬 167.88.173.161

🇩🇿 154.242.154.35

🇬🇧 154.16.44.122

🇫🇷 141.95.162.162

🇺🇸 136.87.7.143

🇺🇸 136.66.62.213

🇳🇱 109.160.32.31

🇸🇪 104.22.219.6

🇧🇬 91.191.209.98

🇮🇹 79.3.96.178

🇺🇸 63.65.203.83

🇨🇳 61.129.41.146