JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.189.144.53

196.189.144.53 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 19%: ?

19%

ISP	Ethio Telecom
Usage Type	Mobile ISP
ASN	AS24757
Domain Name	ethiotelecom.et
Country	🇪🇹 Ethiopia
City	Addis Ababa, Addis Ababa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.189.144.53

Whois 196.189.144.53

IP Abuse Reports for 196.189.144.53:

This IP address has been reported a total of 18 times from 15 distinct sources. 196.189.144.53 was first reported on October 12th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 ALPHANET	2026-10-04 02:36:00 (1 week ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇺🇸 TPI-Abuse	2026-09-26 15:22:45 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 196.189.144.53 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 196.189.144.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 11:22:40.606524 2026] [security2:error] [pid 10910:tid 10910] [client 196.189.144.53:25363] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|whore-cams.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "whore-cams.com"] [uri "/"] [unique_id "arfjQIUKxQOp9Zdz7xRbVgAAAAo"], referer: https://drcheckerfree.space/dir/backlinks-for-organic-growth-232045 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-08-27 06:46:04 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 鬼影233	2026-08-25 10:20:43 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 synthient	2026-07-17 08:22:26 (2 months ago)	Earnify Botnet DDoS Attack July 17th. IOCs: https://github.com/deepfield/public-research/tree/main/m ... show more Earnify Botnet DDoS Attack July 17th. IOCs: https://github.com/deepfield/public-research/tree/main/maskify show less	Brute-Force DDoS Attack
Anonymous	2026-05-30 04:39:06 (4 months ago)	Attack Signature Blocked: /wishlist/index/add/product/4445/form_key/bcFOsY4i6cNNGBrm/ \| UA: Mozilla/ ... show more Attack Signature Blocked: /wishlist/index/add/product/4445/form_key/bcFOsY4i6cNNGBrm/ \| UA: Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_7_1 rv:4.0; nn-NO) AppleWebKit/534.24.1 (KHTML, like Gecko) Version/5.0 Safari/534.24.1 \| (Magento Site) (Botnet activ... show less	Web App Attack Bad Web Bot
🇩🇪 SMARTNET	2026-05-27 06:03:53 (4 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 4acf41a8-b801-4675-a9cd-4cf95dcec3e7	DDoS Attack
🇩🇪 403veli	2025-12-27 20:14:59 (9 months ago)	Confirmed malicious activity observed via T-Pot honeypot Observed 13 events on port 443 (unknown) fr ... show more Confirmed malicious activity observed via T-Pot honeypot Observed 13 events on port 443 (unknown) from 2025-12-27T03:36:07+00:00 to 2025-12-27T03:46:15.911000+00:00. Sample: {"src_port": 20571, "dest_port": 80, "src_ip": "196.189.144.53"} show less	Port Scan
🇮🇹 VHosting	2025-12-24 04:35:05 (9 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇺🇸 TPI-Abuse	2025-12-10 14:52:11 (10 months ago)	"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ... show more "Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access" show less	DDoS Attack SQL Injection Exploited Host
🇩🇪 SMARTNET	2025-11-30 18:38:00 (10 months ago)	Aisuru(Mirai variant) DDoS	DDoS Attack
Anonymous	2025-11-25 09:03:54 (10 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-19 11:35:34 (10 months ago)	scanning http requests from known botnet	Web App Attack
🇩🇪 pressler.pro	2025-09-23 08:21:58 (1 year ago)	Fail2ban - DDoS attack on woocommerce shop ...	DDoS Attack
🇩🇪 Packets-Decreaser.NET	2025-09-05 20:05:24 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.166

🇳🇱 195.178.110.241

🇳🇱 193.47.62.69

🇲🇽 187.136.8.187

🇲🇾 183.171.7.160

🇪🇨 181.211.106.56

🇧🇷 179.105.25.50

🇺🇸 172.191.239.155

🇫🇷 169.40.142.172

🇺🇸 66.132.195.106

🇰🇷 218.234.186.2

🇳🇱 204.76.203.4

🇳🇱 195.178.110.199

🇵🇰 182.190.220.20

🇷🇺 178.20.44.82

🇮🇩 163.7.6.41

🇺🇸 159.223.163.22

🇨🇱 144.22.57.95

🇳🇱 109.160.32.147

🇬🇧 86.38.187.130