JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.189.25.14

196.189.25.14 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 16%: ?

16%

ISP	Ethio Telecom
Usage Type	Fixed Line ISP
ASN	AS24757
Domain Name	ethiotelecom.et
Country	🇪🇹 Ethiopia
City	Addis Ababa, Addis Ababa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.189.25.14

Whois 196.189.25.14

IP Abuse Reports for 196.189.25.14:

This IP address has been reported a total of 12 times from 9 distinct sources. 196.189.25.14 was first reported on June 12th 2021, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-03 00:45:34 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 196.189.25.14 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 196.189.25.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 20:45:26.669972 2026] [security2:error] [pid 10776:tid 10776] [client 196.189.25.14:31318] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|sailinghonu.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "sailinghonu.com"] [uri "/"] [unique_id "asBQJn-dgg2EfjitJiDlgQAAAAk"], referer: https://highqualitybacklinks.site/dir/backlinks-for-traffic-181250 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-22 08:36:52 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 kosada.com	2026-09-07 05:33:33 (1 month ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_key_terms%3A315&f%5B1%5D=digest_key_terms%3A325&f%5B2%5D=digest_key_terms%3A329&f%5B3%5D=digest_key_terms%3A531&f%5B4%5D=digest_publication_type%3A927&field_article_edition%5B504%5D=504&field_key_terms%5B319%5D=319 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0") show less	DDoS Attack Bad Web Bot
🇺🇸 鬼影233	2026-09-02 13:34:37 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇮🇹 A000Z	2026-07-05 14:36:29 (3 months ago)	Fail2Ban: 196.189.25.14 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ... show more Fail2Ban: 196.189.25.14 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 kosada.com	2026-06-29 14:50:14 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-05-06 11:25:15 (5 months ago)	Unauthorized connection attempt on Port 2323	Port Scan Hacking Exploited Host
Anonymous	2025-11-25 11:26:12 (10 months ago)	scanning http requests from known botnet	Web App Attack
🇲🇾 Sean64	2022-03-02 10:00:14 (4 years ago)	Mar 2 22:59:01 sean postfix/smtpd[2530245]: NOQUEUE: reject: RCPT from unknown[196.189.25.14]: 554 ... show more Mar 2 22:59:01 sean postfix/smtpd[2530245]: NOQUEUE: reject: RCPT from unknown[196.189.25.14]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[196.189.25.14]> Mar 2 22:59:49 sean postfix/smtpd[2536711]: NOQUEUE: reject: RCPT from unknown[196.189.25.14]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[196.189.25.14]> Mar 2 23:00:14 sean postfix/smtpd[2540309]: NOQUEUE: reject: RCPT from unknown[196.189.25.14]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[196.189.25.14]> ... show less	Email Spam Brute-Force
🇺🇸 TheCluePhone	2022-02-06 01:24:10 (4 years ago)	Spam	Email Spam Port Scan
🇩🇪 creoline GmbH	2021-06-12 12:53:13 (5 years ago)	E-Mail Spam (RBL) [T60C4FF7FL00000000]	Email Spam
🇩🇪 creoline GmbH	2021-06-12 12:08:17 (5 years ago)	E-Mail Spam (RBL) [T60C4F75DL00000001]	Email Spam

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.149

🇵🇰 182.176.88.232

🇵🇦 179.43.153.2

🇮🇶 169.224.6.17

🇺🇸 162.216.150.169

🇳🇬 102.88.137.213

🇺🇸 100.29.192.70

🇧🇬 78.128.113.22

🇺🇸 64.62.197.119

🇨🇳 61.179.24.55

🇯🇵 34.146.72.70

🇰🇷 20.214.147.109

🇺🇸 3.151.116.231

🇧🇪 198.235.24.146

🇳🇱 192.253.248.173

🇺🇸 192.253.209.100

🇫🇮 147.185.133.106

🇰🇷 121.184.128.107

🇸🇬 114.119.140.50

🇳🇱 109.160.32.162