JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.207.218.167

196.207.218.167 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 19%: ?

19%

ISP	Pool-ADSL-Sonatel-Multimedia
Usage Type	Fixed Line ISP
ASN	AS8346
Domain Name	orange-sonatel.sn
Country	🇸🇳 Senegal
City	Thies, Thies

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.207.218.167

Whois 196.207.218.167

IP Abuse Reports for 196.207.218.167:

This IP address has been reported a total of 12 times from 10 distinct sources. 196.207.218.167 was first reported on March 31st 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-20 22:16:26 (5 hours ago)	(mod_security) mod_security (id:210350) triggered by 196.207.218.167 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 196.207.218.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 18:16:22.893167 2026] [security2:error] [pid 5078:tid 5078] [client 196.207.218.167:46029] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|firstunitedreserve.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "firstunitedreserve.com"] [uri "/"] [unique_id "arBbNpCHKt0izY737ftqPAAAAAs"], referer: https://backlinkmaker.com/dir/ranking-boost-backlinks-73037 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-08-11 05:00:38 (1 month ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇩🇪 LRob	2026-08-05 23:22:59 (1 month ago)	CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_forma ... show more CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_format~json) - DDoS \| req: /calendrier-2/action~agenda/time_limit~1764370800/cat_ids~172,300/tag_ids~619,565,493,484,275,571/request_format~json/ \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 show less	DDoS Attack Web App Attack
🇮🇹 A000Z	2026-08-02 13:34:03 (1 month ago)	Fail2Ban: 196.207.218.167 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/ ... show more Fail2Ban: 196.207.218.167 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇩🇪 HandyTreff.de	2026-06-15 07:23:59 (3 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -44.51 (Bad < -10 / Very Bad < -20 / ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -44.51 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18. show less	Web App Attack Bad Web Bot
🇩🇪 iNetWorker	2026-06-13 07:20:52 (3 months ago)	firewall-block, port(s): 54641/udp	Port Scan
Anonymous	2026-06-13 06:31:51 (3 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 xmission.com	2026-05-11 15:03:59 (4 months ago)	Blocked by UFW (TCP on 9101) Source port: 31572 TTL: 108 Packet length: 52 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 9101) Source port: 31572 TTL: 108 Packet length: 52 TOS: 0x08 This report (for 196.207.218.167) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-09 10:29:59 (4 months ago)	Blocked by UFW (TCP on 9101) Source port: 39616 TTL: 108 Packet length: 52 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 9101) Source port: 39616 TTL: 108 Packet length: 52 TOS: 0x08 This report (for 196.207.218.167) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 RAP	2026-05-02 21:51:20 (4 months ago)	2026-05-02 21:51:20 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 xmission.com	2026-04-19 19:12:07 (5 months ago)	Blocked by UFW (TCP on 9101) Source port: 64637 TTL: 108 Packet length: 52 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 9101) Source port: 64637 TTL: 108 Packet length: 52 TOS: 0x08 This report (for 196.207.218.167) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-03-31 19:48:30 (5 months ago)	DDoS botnet 510.000+ IPs; URL with bing/trustpilot/githubhelp and %C2%A4 or \xc2\xa4. NEW 09/2025: a ... show more DDoS botnet 510.000+ IPs; URL with bing/trustpilot/githubhelp and %C2%A4 or \xc2\xa4. NEW 09/2025: amplification attacks via third-parties e.g. HTTP_USER_AGENT facebookexternalhit/meta-externalagent/meta-externalfetcher or IPs from googleusercontent.com with fake HTTP_REFERER foxnews.com/newsweek.com/upwork.com/activision.com/... Port 443. show less	DDoS Attack Bad Web Bot Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇪 190.153.103.198

🇧🇷 186.236.19.110

🇦🇷 186.58.31.154

🇮🇩 49.0.3.142

🇩🇪 209.38.193.20

🇧🇷 201.17.133.138

🇹🇼 198.235.24.75

🇧🇷 179.130.20.0

🇩🇪 93.198.64.181

🇳🇱 89.248.165.203

🇵🇱 87.251.64.19

🇫🇷 85.217.140.39

🇷🇴 80.94.92.55

🇺🇸 64.225.123.171

🇰🇷 210.90.191.70

🇭🇰 199.45.154.188

🇹🇼 198.235.24.55

🇧🇫 196.49.19.79

🇺🇸 170.187.165.218

🇺🇸 146.235.232.8