This IP address has been reported a total of
96
times from
43 distinct
sources.
196.244.192.43 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Blocked by UFW (TCP on 56388)
Source port: 35670
TTL: 105
Packet length: 52
TOS: 0x08
This report ( ...
show moreBlocked by UFW (TCP on 56388)
Source port: 35670
TTL: 105
Packet length: 52
TOS: 0x08
This report (for 196.244.192.43) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 196.244.192.43 (FI/Finla ...
show more(apache-scanners) Failed apache-scanners trigger with match [redacted] from 196.244.192.43 (FI/Finland/-)
show less
(mod_security) mod_security (id:234930) triggered by 196.244.192.43 (-): 1 in the last 300 secs; Por ...
show more(mod_security) mod_security (id:234930) triggered by 196.244.192.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 05:09:34.385681 2026] [security2:error] [pid 3305:tid 3305] [client 196.244.192.43:62287] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)||www.connectigramme.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "www.connectigramme.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "agLuTlW-iAtL4xOgur8ibgAAAAI"]
show less
Blocked by ModSecurity. Rule ID: 210730 Message: COMODO WAF: URL file extension is restricted by pol ...
show moreBlocked by ModSecurity. Rule ID: 210730 Message: COMODO WAF: URL file extension is restricted by policy||proxy-server.link|F|2 Phase: 2 Severity: CRITICAL URI: /backup/mysql.sql Server: UK-01
show less
Blocked by ModSecurity. Rule ID: 210730 Message: COMODO WAF: URL file extension is restricted by pol ...
show moreBlocked by ModSecurity. Rule ID: 210730 Message: COMODO WAF: URL file extension is restricted by policy||proxy-server.link|F|2 Phase: 2 Severity: CRITICAL URI: /back/backup.sql Server: UK-01
show less
ban-reviewer auto report; ip=196.244.192.43; scenario=http:scan; verdict=valid_ban; confidence=0.85; ...
show moreban-reviewer auto report; ip=196.244.192.43; scenario=http:scan; verdict=valid_ban; confidence=0.85; categories=14; active_decisions=1; lookback_decisions=1; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=IP flagged for 'http:scan' scenario; Port Scan (category 14) detected in abuseipdb context; No evidence of legitimate activity or high-volume requests
show less
Port Scan
Showing 1 to
15
of 96 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ