JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.189.27.47

196.189.27.47 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 12%: ?

12%

ISP	Ethio Telecom
Usage Type	Fixed Line ISP
ASN	AS24757
Domain Name	ethiotelecom.et
Country	🇪🇹 Ethiopia
City	Addis Ababa, Addis Ababa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.189.27.47

Whois 196.189.27.47

IP Abuse Reports for 196.189.27.47:

This IP address has been reported a total of 14 times from 11 distinct sources. 196.189.27.47 was first reported on February 20th 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 pltcldvlpr	2026-07-22 23:55:50 (1 day ago)	Bogus Useragent: 196.189.27.47 - - [23/Jul/2026:01:55:50 +0200] "GET /protocol?id=sh_20_108&paragrap ... show more Bogus Useragent: 196.189.27.47 - - [23/Jul/2026:01:55:50 +0200] "GET /protocol?id=sh_20_108&paragraph=12776903&seq=540 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; MSIE 6.0; Windows 98; Trident/4.1)" asn=24757 org="EthioNet" country=ET ... show less	Bad Web Bot
🇺🇸 kosada.com	2026-06-29 11:24:23 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇸🇬 mypatricks	2026-04-19 01:01:31 (3 months ago)	196.189.27.47 \| Port: 14252 \| DNS: 196.189.27.47 2026-04-19T09:01:31+08:00 Africa/Addis_Ababa \| IPs ... show more 196.189.27.47 \| Port: 14252 \| DNS: 196.189.27.47 2026-04-19T09:01:31+08:00 Africa/Addis_Ababa \| IPs res erved list \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /?ecfcaaafddfd=1061 \| Ref: https://xxxxxx/?ebacdccbbb=752 \| Country: ET/Ethiopia/+02:00 IP City: Addis Ababa Windows 9ee7fa794895d981-ADD/ADD 1 hits/0 secs Browser 1 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇺🇸 kosada.com	2026-03-20 08:10:14 (4 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇩🇪 SMARTNET	2025-11-30 18:38:00 (7 months ago)	Aisuru(Mirai variant) DDoS	DDoS Attack
Anonymous	2025-11-26 09:32:14 (7 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-22 11:40:20 (8 months ago)	scanning http requests from known botnet	Web App Attack
🇳🇱 exxos	2025-08-01 11:12:10 (11 months ago)	HTTP1.x attacks	DDoS Attack
🇩🇪 stinpriza	2025-06-09 18:16:01 (1 year ago)	(XMLRPC) xmlrpc banned 196.189.27.47 (ET/Ethiopia/-): 1 in the last 3600 secs	Web App Attack
🇺🇸 TPI-Abuse	2025-06-09 14:40:38 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 196.189.27.47 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 196.189.27.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 09 10:40:32.236178 2025] [security2:error] [pid 1027782:tid 1027782] [client 196.189.27.47:8264] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|transformlovecreate.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "transformlovecreate.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aEbyYKHBhsgTNbltnWPK9gAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-06-09 11:52:43 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 196.189.27.47 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 196.189.27.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 09 07:52:37.384021 2025] [security2:error] [pid 2990217:tid 2990217] [client 196.189.27.47:9639] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|badgerkelley.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "badgerkelley.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aEbLBRmXFRvXesXUuymRsgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-06-09 11:37:28 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 vestibtech	2022-03-26 15:27:18 (4 years ago)	Mar 26 13:27:17 Host-KLAX-C postfix/in_clean/cleanup[1122672]: 9441F1BD0CC: reject: header Subject: ... show more Mar 26 13:27:17 Host-KLAX-C postfix/in_clean/cleanup[1122672]: 9441F1BD0CC: reject: header Subject: Pending for payment. from unknown[196.189.27.47]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[196.189.27.47]>: 5.7.1 Message identified as SPAM - Rule #509 ... show less	Email Spam
🇸🇬 Sean64	2022-02-20 14:22:47 (4 years ago)	Feb 21 03:22:46 sean postfix/smtpd[922708]: NOQUEUE: reject: RCPT from unknown[196.189.27.47]: 554 5 ... show more Feb 21 03:22:46 sean postfix/smtpd[922708]: NOQUEUE: reject: RCPT from unknown[196.189.27.47]: 554 5.7.1 Service unavailable; Client host [196.189.27.47] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/196.189.27.47 / https://www.spamhaus.org/sbl/query/SBLCSS; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[196.189.27.47]> ... show less	Email Spam Brute-Force

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 181.61.251.4

🇰🇿 178.88.4.57

🇺🇸 162.216.150.36

🇸🇪 158.174.210.161

🇻🇳 103.60.242.169

🇩🇪 2a09:bac5:2f1a:2464::3a0:6b

🇺🇸 97.74.236.238

🇮🇱 85.250.160.0

🇺🇸 66.132.195.45

🇨🇳 39.89.135.142

🇨🇳 39.79.8.145

🇷🇴 2.57.122.168

🇩🇪 2a09:bac5:2f18:246e::3a1:5a

🇷🇺 213.141.130.251

🇷🇼 197.243.14.52

🇲🇴 182.93.50.90

🇵🇱 91.233.113.237

🇳🇱 77.83.39.17

🇧🇪 51.75.106.116

🇮🇩 182.23.83.98