AbuseIPDB » 196.189.225.77
196.189.225.77
This IP was reported 6 times. Confidence of
Abuse
is 22% : ?
ISP
Ethio Telecom
Usage Type
Fixed Line ISP
ASN
AS24757
Domain Name
ethiotelecom.et
Country
🇪🇹
Ethiopia
City
Addis Ababa, Addis Ababa
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 196.189.225.77 :
This IP address has been reported a total of
6
times from
4 distinct
sources.
196.189.225.77 was first reported on
November 5th 2024 , and the most recent report was
1 day ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-06-24 19:14:04
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 196.189.225.77 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 196.189.225.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 15:13:55.891543 2026] [security2:error] [pid 16337:tid 16337] [client 196.189.225.77:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.swarnar.com|F|2"] [data ".dawn.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.swarnar.com"] [uri "/www.dawn.com"] [unique_id "ajwsc57NWnHZl-2TDqIA2AAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
MatStef132
2026-06-21 21:25:45
(4 days ago)
MatShield L7: blocked on mathost.eu (ua-quarantined)
Bad Web Bot
🇩🇪
EGP Abuse Dept
2026-06-09 04:48:36
(2 weeks ago)
Scanning for port/service exploits on tpc-004.mach3builders.nl
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-04-05 17:20:08
(2 months ago)
(mod_security) mod_security (id:211030) triggered by 196.189.225.77 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:211030) triggered by 196.189.225.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 13:19:54.647101 2026] [security2:error] [pid 15810:tid 15810] [client 196.189.225.77:34738] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at ARGS. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "17"] [id "211030"] [rev "3"] [msg "COMODO WAF: LDAP Injection Attack||hanabritgermanshepherds.com|F|2"] [data "Matched Data: )>(/*! found within ARGS: 0"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "hanabritgermanshepherds.com"] [uri "/index.php/component/content/article/pack-social-walk"] [unique_id "adKZugBIkBK3Ot1KG3rbHQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
exxos
2025-08-27 22:04:58
(9 months ago)
Attacks with Bad user agents
Hacking
🇺🇸
TPI-Abuse
2024-11-05 19:53:39
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 196.189.225.77 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 196.189.225.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 05 14:53:34.166499 2024] [security2:error] [pid 16440:tid 16440] [client 196.189.225.77:35949] [client 196.189.225.77] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||grabagame.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "grabagame.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "Zyp3vkSdHFT0czsAZmO9cwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: