JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

196.242.178.241

Activity Trending Down

Abuse confidence score ?

21% Elevated

47 reports

20 reporters · latest 4 weeks ago

ISP	SA
Usage Type	Data Center/Web Hosting/Transit
ASN	AS58065
Domain Name	fibergrid.co.za
Country	🇨🇦 Canada
City	Vancouver, British Columbia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 196.242.178.241

Export CSV

This IP address has been reported a total of 47 times from 20 distinct sources. 196.242.178.241 was first reported on February 12th 2022, and the most recent report was 4 weeks ago. In the last 60 days, the top reporter locations were: United States of America with 4 reports; Australia with 2 reports; Germany with 2 reports. The most common categories in these recent reports were: Bad Web Bot 6 times; Web App Attack 5 times; Exploited Host 3 times; DDoS Attack 3 times; Hacking 2 times; Other 5 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇮 administrator	2026-09-23 22:11:51 (4 weeks ago)	2026-09-22 17:32:59,429 fail2ban.actions [1182]: NOTICE [error-bots] Ban 196.242.178.241 202 ... show more 2026-09-22 17:32:59,429 fail2ban.actions [1182]: NOTICE [error-bots] Ban 196.242.178.241 2026-09-22 17:32:59,429 fail2ban.actions [1182]: NOTICE [error-bots] Ban 196.242.178.241 2026-09-22 17:32:59,429 fail2ban.actions [1182]: NOTICE [error-bots] Ban 196.242.178.241 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇦🇺 paulshipley.com.au	2026-09-21 19:33:09 (1 month ago)	[Tue Sep 22 05:33:08.336410 2026] [security2:error] [pid 148657] [client 196.242.178.241:45579] [cli ... show more [Tue Sep 22 05:33:08.336410 2026] [security2:error] [pid 148657] [client 196.242.178.241:45579] [client 196.242.178.241] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.com.au"] [uri "/xmlrpc.php"] [unique_id "arGGdFG-xDoKEBpsFsb9IQAAABE"], referer: https://paulshipley.com.au/xmlrpc.php?rsd ... show less	Web App Attack
🇦🇺 paulshipley.com.au	2026-09-21 13:33:35 (1 month ago)	[Mon Sep 21 23:33:34.303990 2026] [security2:error] [pid 112708] [client 196.242.178.241:57359] [cli ... show more [Mon Sep 21 23:33:34.303990 2026] [security2:error] [pid 112708] [client 196.242.178.241:57359] [client 196.242.178.241] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.com.au"] [uri "/xmlrpc.php"] [unique_id "arEyLr7mXSSOQXM8m8l5TwAAACs"], referer: https://paulshipley.com.au/xmlrpc.php?rsd ... show less	Web App Attack
🇺🇸 SX Communications	2026-09-20 16:11:43 (1 month ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 196.242.178.241: traffic from this ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 196.242.178.241: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 SX Communications	2026-09-19 13:27:02 (1 month ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 196.242.178.241: traffic from this ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 196.242.178.241: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇩🇪 LRob	2026-09-18 07:03:11 (1 month ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /wp-login.php \| 2026-09-18 07:03 UTC show less	Hacking Web App Attack
🇺🇸 ipblock.com	2026-09-12 03:50:00 (1 month ago)	IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇩🇪 LRob	2026-09-11 16:11:23 (1 month ago)	Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ... show more Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for \| method: GET \| path: /qtg_msg_add.php \| 2026-09-11 16:11 UTC show less	Bad Web Bot
🇺🇸 SX Communications	2026-09-02 07:39:47 (1 month ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 196.242.178.241: traffic from this ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 196.242.178.241: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
Anonymous	2025-11-18 20:25:47 (11 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 22-25.196.242.178.241.web-spam ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 22-25.196.242.178.241.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇵🇱 sefinek.net	2025-11-01 15:40:02 (11 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇵🇱 sefinek.net	2025-10-17 13:49:52 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2025-10-16 02:10:09 (1 year ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 05-10.196.242.178.241.web-spam ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 05-10.196.242.178.241.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇵🇱 sefinek.net	2025-10-04 06:34:12 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇵🇱 sefinek.net	2025-06-08 09:41:54 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 209.99.190.113

🇺🇸 205.210.31.86

🇨🇴 190.14.240.94

🇩🇰 154.14.31.34

🇧🇴 131.0.199.147

🇱🇹 62.60.130.242

🇫🇷 51.254.136.153

🇲🇾 47.250.83.81

🇫🇷 37.59.229.51

🇺🇸 2604:a880:400:d1:0:4:dedf:7001

🇺🇸 216.73.216.108

🇺🇸 129.121.78.222

🇩🇪 109.160.32.120

🇷🇺 94.243.8.92

🇬🇧 86.38.187.90

🇩🇪 69.5.169.209

🇧🇪 34.14.43.169

🇧🇷 16.5.0.207

🇬🇧 193.176.29.24

🇨🇳 183.224.123.132