AbuseIPDB » 196.25.111.66
196.25.111.66
This IP was reported 6 times. Confidence of
Abuse
is 37% : ?
ISP
SAIX
Usage Type
Fixed Line ISP
ASN
AS5713
Hostname(s)
telkom-sa-limited-gw.telkom-ipnet.co.za
Domain Name
openserve.co.za
Country
🇿🇦
South Africa
City
Delmas, Mpumalanga
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 196.25.111.66 :
This IP address has been reported a total of
6
times from
6 distinct
sources.
196.25.111.66 was first reported on
June 22nd 2026 , and the most recent report was
3 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
kosada.com
2026-07-07 21:43:05
(3 days ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-07-06 19:25:18
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 196.25.111.66 (telkom-sa-limited-gw.telkom-ipne ...
show more
(mod_security) mod_security (id:210730) triggered by 196.25.111.66 (telkom-sa-limited-gw.telkom-ipnet.co.za): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 15:25:12.218322 2026] [security2:error] [pid 3969:tid 3989] [client 196.25.111.66:61162] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||digital4z.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "digital4z.com"] [uri "/wp-content/plugins/jetpack/modules/protect/WS_FTP.LOG"] [unique_id "akwBGPYmr2MhRkSjRLcGFQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
MusicLibrary
2026-07-03 17:38:54
(1 week ago)
Attempted access to non existent wordpress urls
Bad Web Bot
🇺🇸
stechusa
2026-07-02 11:17:38
(1 week ago)
ELEVATED_THREAT | 109 IPs targeting /brand/satco-products-inc.html | URL template shared by 6 IPs: / ...
show more
ELEVATED_THREAT | 109 IPs targeting /brand/satco-products-inc.html | URL template shared by 6 IPs: /brand/satco-products-inc.html?bulb_shape=*&bulb_base=*&bulb_type=*&mode=list&p= | Facet request during elevated threat (facet_ratio=0.94, unique_ips=604)
show less
Bad Web Bot
DDoS Attack
🇸🇬
mypatricks
2026-06-26 05:26:50
(2 weeks ago)
196.25.111.66 | Port: 11682 | DNS: telkom-sa-limited-gw.telkom-ipnet.co.za 2026-06-26T13:26:49+08:00 ...
show more
196.25.111.66 | Port: 11682 | DNS: telkom-sa-limited-gw.telkom-ipnet.co.za 2026-06-26T13:26:49+08:00 Africa/Johannesburg | IPs res erved list | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 HTTP/1.1 443 GET | URL: /zh/?9cf8ddbe8dba9d9b=524 | Ref: https://xxxxxx/zh?9cf8ddbe8dba9d9b=524 | Country: ZA/South Africa/+02:00 IP City: Delmas Windows a119cc90d9537388-JNB/Johannesburg, South Africa 1 hits/0 secs Browser 1
show less
Brute-Force
Web App Attack
Blog Spam
Web Spam
Exploited Host
🇺🇸
island-freaks.com
2026-06-22 19:20:32
(2 weeks ago)
Attack Type: WordPress Exploit Bot attempt on /login/wp-login.php | DNS telkom-sa-limited-gw.telkom- ...
show more
Attack Type: WordPress Exploit Bot attempt on /login/wp-login.php | DNS telkom-sa-limited-gw.telkom-ipnet.co.za | Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
show less
Port Scan
Hacking
Bad Web Bot
Exploited Host
Web App Attack
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: