JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.245.161.17

196.245.161.17

Neutral Activity

15 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Usage Type

Data Center/Web Hosting/Transit

ASN

AS58065

Domain Name

fibergrid.co.za

Country

🇷🇴 Romania

City

Bucharest, Bucharest

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

196.245.161.17 has been reported 15 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 196.245.161.17:

This IP address has been reported a total of 15 times from 4 distinct sources. 196.245.161.17 was first reported on December 12th 2024, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-30 11:35:29 (2 months ago)	(mod_security) mod_security (id:210740) triggered by 196.245.161.17 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210740) triggered by 196.245.161.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 07:35:23.340515 2026] [security2:error] [pid 7372:tid 7372] [client 196.245.161.17:54017] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|www.thejuniverse.org\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.thejuniverse.org"] [uri "/PUBLIC/Professional/WebCV/publications.html/trackback/"] [unique_id "akOp-8CpOsi0GheOB2IZ2gAAABE"], referer: http://www.thejuniverse.org/PUBLIC/Professional/WebCV/publications.html/trackback/ show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2026-03-30 23:07:39 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from RO. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from RO. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1264.71 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 windowsforum	2026-03-30 06:35:16 (5 months ago)	Spam bot registration: triggers=timing, js_challenge, inv_honeypot, pow_fail, username=OmaBll2332	Web Spam Bad Web Bot
🇳🇿 Tripwire	2026-03-23 04:09:59 (5 months ago)	Suspicious Fake User Agents - 2 hits, 18 blocks, 11 user agents	Bad Web Bot
🇺🇸 windowsforum	2026-03-22 14:59:04 (5 months ago)	Spam bot registration: triggers=js_challenge, inv_honeypot, pow_fail, username=CheryleHue	Web Spam Bad Web Bot
🇺🇸 TPI-Abuse	2026-02-04 07:02:06 (7 months ago)	(mod_security) mod_security (id:210740) triggered by 196.245.161.17 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210740) triggered by 196.245.161.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 04 02:01:57.189026 2026] [security2:error] [pid 14977:tid 14977] [client 196.245.161.17:48041] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|tulsatvmemories.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "tulsatvmemories.com"] [uri "/chewsept.html/trackback/"] [unique_id "aYLu5dlRFeahS4EN9YV5IwAAAAU"], referer: http://tulsatvmemories.com/chewsept.html/trackback/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-05 15:43:08 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 196.245.161.17 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210740) triggered by 196.245.161.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 05 10:43:01.650087 2025] [security2:error] [pid 32265:tid 32343] [client 196.245.161.17:59414] [client 196.245.161.17] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|www.property-management-companies-chicago.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.property-management-companies-chicago.com"] [uri "/trackback/"] [unique_id "Z8hxBZ1QlMstqonBzzv3aAAAARM"], referer: http://www.property-management-companies-chicago.com/trackback/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-01-29 22:04:19 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 196.245.161.17 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210740) triggered by 196.245.161.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 29 17:04:12.036269 2025] [security2:error] [pid 17054:tid 17054] [client 196.245.161.17:54674] [client 196.245.161.17] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|calvarycavaliers.org\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "calvarycavaliers.org"] [uri "/trackback/"] [unique_id "Z5ql3N7shWsoCSs00sqF2QAAABc"], referer: http://calvarycavaliers.org/trackback/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-01-29 19:10:12 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 196.245.161.17 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210740) triggered by 196.245.161.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 29 14:10:09.120744 2025] [security2:error] [pid 227905:tid 227905] [client 196.245.161.17:46959] [client 196.245.161.17] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|www.beirutbazar.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.beirutbazar.com"] [uri "/trackback/"] [unique_id "Z5p9ESyiJf7MyeahKZx5pAAAABw"], referer: http://www.beirutbazar.com/trackback/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-01-28 21:47:57 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 196.245.161.17 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210740) triggered by 196.245.161.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 28 16:47:50.020813 2025] [security2:error] [pid 6730:tid 6730] [client 196.245.161.17:41356] [client 196.245.161.17] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|www.mariettacaseyclub.org\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mariettacaseyclub.org"] [uri "/trackback/"] [unique_id "Z5lQhlYke3q1yT8E4XU1YAAAAAk"], referer: http://www.mariettacaseyclub.org/trackback/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-01-24 15:55:47 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 196.245.161.17 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210740) triggered by 196.245.161.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 24 10:55:40.847644 2025] [security2:error] [pid 6110:tid 6110] [client 196.245.161.17:40811] [client 196.245.161.17] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|kountz.org\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "kountz.org"] [uri "/suggest.php/trackback/"] [unique_id "Z5O3_H_InXomA87pUGeaoAAAAAA"], referer: http://kountz.org/suggest.php/trackback/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-01-23 14:38:05 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 196.245.161.17 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210740) triggered by 196.245.161.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 23 09:38:01.919926 2025] [security2:error] [pid 4209:tid 4209] [client 196.245.161.17:43130] [client 196.245.161.17] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|newdirectionsinmusic.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "newdirectionsinmusic.com"] [uri "/apogee-revisited/trackback/"] [unique_id "Z5JUSemknfYkWYrJERexuAAAABA"], referer: http://newdirectionsinmusic.com/apogee-revisited/trackback/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-01-22 21:10:05 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 196.245.161.17 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210740) triggered by 196.245.161.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 22 16:10:00.266260 2025] [security2:error] [pid 20592:tid 20592] [client 196.245.161.17:42637] [client 196.245.161.17] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|dualspiralsystems.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "dualspiralsystems.com"] [uri "/contact_us.html/trackback/"] [unique_id "Z5FeqA1-C4EywM3JcV1QWgAAAAQ"], referer: http://dualspiralsystems.com/contact_us.html/trackback/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-12-15 02:12:24 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 196.245.161.17 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210740) triggered by 196.245.161.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 14 21:12:16.679894 2024] [security2:error] [pid 11434:tid 11434] [client 196.245.161.17:45994] [client 196.245.161.17] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|investorsfundingusa.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "investorsfundingusa.com"] [uri "/trackback/"] [unique_id "Z147AEEgQPMszT6TZ0cjrwAAAAM"], referer: http://investorsfundingusa.com/trackback/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-12-12 19:11:28 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 196.245.161.17 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210740) triggered by 196.245.161.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 12 14:11:24.921554 2024] [security2:error] [pid 9194:tid 9194] [client 196.245.161.17:54247] [client 196.245.161.17] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|www.bigchus.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.bigchus.com"] [uri "/caleidoscopia/wp-comments-post.php"] [unique_id "Z1s1XNUublIelNfLWDEThAAAABk"], referer: http://www.bigchus.com/caleidoscopia/?p=305 show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 185.73.23.133

🇦🇷 200.61.246.198

🇹🇼 198.235.24.103

🇱🇧 194.246.89.160

🇺🇸 162.216.150.119

🇭🇰 156.225.1.98

🇫🇮 147.185.133.147

🇺🇸 147.185.132.87

🇧🇬 109.160.32.208

🇮🇷 87.248.145.229

🇪🇸 83.50.247.92

🇫🇷 77.239.124.173

🇺🇸 66.132.195.65

🇺🇸 64.62.156.142

🇸🇬 43.160.203.192

🇰🇿 5.180.42.23

🇺🇸 216.180.246.131

🇵🇦 200.75.242.55

🇺🇸 144.225.8.54

🇺🇸 136.112.166.8