JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.189.255.250

196.189.255.250 was found in our database!

This IP was reported 70 times. Confidence of Abuse is 0%: ?

ISP	IP_Pool_for_NAT_NZ_GER
Usage Type	Fixed Line ISP
ASN	AS24757
Domain Name	ethiotelecom.et
Country	🇪🇹 Ethiopia
City	Nazret, Oromiya

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.189.255.250

Whois 196.189.255.250

IP Abuse Reports for 196.189.255.250:

This IP address has been reported a total of 70 times from 40 distinct sources. 196.189.255.250 was first reported on November 15th 2022, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Bytemark	2025-06-26 12:20:53 (1 year ago)	Jun 26 13:20:52 dlcentre3 postfix/smtpd[27031]: NOQUEUE: reject: RCPT from unknown[196.189.255.250]: ... show more Jun 26 13:20:52 dlcentre3 postfix/smtpd[27031]: NOQUEUE: reject: RCPT from unknown[196.189.255.250]: 554 5.7.1 Service unavailable; Client host [196.189.255.250] blocked using cbl.abuseat.org; Listed by XBL, see https://check.spamhaus.org/query/ip/196.189.255.250; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[196.189.255.250]> show less	Email Spam Spoofing Brute-Force Exploited Host
🇵🇹 rnl	2025-05-26 05:40:06 (1 year ago)	postfix (unknown user, SPF fail or relay access denied)	Brute-Force
🇵🇹 rnl	2025-05-23 12:23:49 (1 year ago)	postfix (unknown user, SPF fail or relay access denied)	Brute-Force
🇳🇱 Mangelot Hosting	2025-05-14 08:10:51 (1 year ago)	(RCPT) RCPT NOT ALLOWED FROM 196.189.255.250 (ET/Ethiopia/-): 1 in the last 3600 secs; Ports: ; Di ... show more (RCPT) RCPT NOT ALLOWED FROM 196.189.255.250 (ET/Ethiopia/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
Anonymous	2025-04-24 06:11:22 (1 year ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇿🇦 Melcom	2025-04-02 13:12:00 (1 year ago)	Failed DKIM/SPF for melcom.co.za	Email Spam Spoofing
🇮🇹 LTM	2025-03-31 06:20:01 (1 year ago)	Mail - Generic Spam	Email Spam Spoofing
🇬🇧 Hobby Bob	2025-03-06 06:12:30 (1 year ago)	Mar 6 06:12:30 mail postfix/smtpd[4175798]: NOQUEUE: reject: RCPT from unknown[196.189.255.250]: 554 ... show more Mar 6 06:12:30 mail postfix/smtpd[4175798]: NOQUEUE: reject: RCPT from unknown[196.189.255.250]: 554 5.7.1 Service unavailable; Client host [196.189.255.250] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/196.189.255.250 / Listed by PBL, see https://check.spamhaus.org/query/ip/196.189.255.250 / Listed by XBL, see https://check.spamhaus.org/query/ip/196.189.255.250; from= to= proto=ESMTP helo= show less	Email Spam
🇳🇱 Mangelot Hosting	2025-03-05 07:11:15 (1 year ago)	(RCPT) RCPT NOT ALLOWED FROM 196.189.255.250 (ET/Ethiopia/-): 1 in the last 3600 secs; Ports: ; Di ... show more (RCPT) RCPT NOT ALLOWED FROM 196.189.255.250 (ET/Ethiopia/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
Anonymous	2025-01-28 05:38:34 (1 year ago)	Jan 28 06:38:33 gollum postfix/smtpd[2205622]: NOQUEUE: reject: RCPT from unknown[196.189.255.250]: ... show more Jan 28 06:38:33 gollum postfix/smtpd[2205622]: NOQUEUE: reject: RCPT from unknown[196.189.255.250]: 554 5.7.1 Service unavailable; Client host [196.189.255.250] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/196.189.255.250 / Listed by PBL, see https://check.spamhaus.org/query/ip/196.189.255.250 / Listed by XBL, see https://check.spamhaus.org/query/ip/196.189.255.250; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[196.189.255.250]> ... show less	Email Spam
🇵🇹 rnl	2025-01-14 08:16:15 (1 year ago)	postfix (unknown user, SPF fail or relay access denied)	Brute-Force
🇺🇸 TPI-Abuse	2025-01-05 07:56:08 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 196.189.255.250 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 196.189.255.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 05 02:56:01.787892 2025] [security2:error] [pid 22904:tid 22904] [client 196.189.255.250:44873] [client 196.189.255.250] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.newdirectionsinmusic.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.newdirectionsinmusic.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "Z3o7Ef2Xs4GUt0Vk_zPeYwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-01-02 12:10:10 (1 year ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2024-12-30 12:05:08 (1 year ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2024-12-27 12:00:13 (1 year ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking

Showing 1 to 15 of 70 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 103.161.113.136

🇺🇸 63.42.190.241

🇺🇸 52.128.40.35

🇯🇵 20.243.176.67

🇮🇪 3.249.239.161

🇳🇱 195.178.110.227

🇳🇱 195.178.110.26

🇷🇴 193.32.162.42

🇨🇴 190.67.106.221

🇳🇱 167.71.72.95

🇮🇩 163.7.6.114

🇺🇸 162.216.150.91

🇫🇮 147.185.133.82

🇺🇸 143.198.62.143

🇩🇪 130.12.180.65

🇻🇳 116.110.6.146

🇷🇴 89.33.25.241

🇺🇸 69.164.214.243

🇩🇪 68.183.77.29

🇺🇸 64.23.188.3