JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.189.51.191

196.189.51.191 was found in our database!

This IP was reported 56 times. Confidence of Abuse is 100%: ?

100%

ISP	To__BRAS_DHCP_AD_10800E
Usage Type	Fixed Line ISP
ASN	AS24757
Domain Name	ethiotelecom.et
Country	🇪🇹 Ethiopia
City	Addis Ababa, Addis Ababa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.189.51.191

Whois 196.189.51.191

IP Abuse Reports for 196.189.51.191:

This IP address has been reported a total of 56 times from 38 distinct sources. 196.189.51.191 was first reported on September 12th 2026, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 dot.mg	2026-09-16 07:58:14 (9 hours ago)	Bad behaviour	Web Spam
🇺🇸 VanKoh	2026-09-16 07:04:00 (10 hours ago)	196.189.51.191 - - [16/Sep/2026:01:03:43 -0600] "GET /wp-config.php.orig HTTP/1.1" 301 5 "-" "Mozill ... show more 196.189.51.191 - - [16/Sep/2026:01:03:43 -0600] "GET /wp-config.php.orig HTTP/1.1" 301 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 196.189.51.191 - - [16/Sep/2026:01:03:47 -0600] "GET /wp-config.php.orig HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 196.189.51.191 - - [16/Sep/2026:01:03:59 -0600] "GET /wp-config.php.txt HTTP/1.1" 301 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	DDoS Attack Web App Attack
🇬🇧 Apache	2026-09-16 03:52:24 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 196.189.51.191 (ET/Ethiopia/-): 5 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 196.189.51.191 (ET/Ethiopia/-): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
🇬🇧 consul.to	2026-09-16 03:46:00 (13 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 raph	2026-09-16 01:07:03 (16 hours ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack
Anonymous	2026-09-15 19:29:56 (22 hours ago)	WordPress Gravity SMTP Plugin Information Disclosure (CVE-2026-4020).	Hacking
🇺🇸 TAY	2026-09-15 18:51:43 (22 hours ago)	196.189.51.191 - - [16/Sep/2026:02:50:29 +0800] "GET /wp-config.php~ HTTP/1.1" 301 6143 "-" "Mozilla ... show more 196.189.51.191 - - [16/Sep/2026:02:50:29 +0800] "GET /wp-config.php~ HTTP/1.1" 301 6143 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 196.189.51.191 - - [16/Sep/2026:02:50:39 +0800] "GET /wp-config.php~ HTTP/1.1" 404 48454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 196.189.51.191 - - [16/Sep/2026:02:50:48 +0800] "GET /wp-config.php.save HTTP/1.1" 301 6147 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 196.189.51.191 - - [16/Sep/2026:02:51:17 +0800] "GET /wp-config.php.orig HTTP/1.1" 301 6147 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 196.189.51.191 - - [16/Sep/2026:02:51:18 +0800] "GET /wp-config.php.orig HTTP/1.1" 404 48454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, ... show less	Brute-Force
🇫🇷 solution.it	2026-09-15 18:33:46 (23 hours ago)	[Tue Sep 15 20:33:45.785349 2026] [php7:error] [pid 1744202:tid 1744202] [client 196.189.51.191:3807 ... show more [Tue Sep 15 20:33:45.785349 2026] [php7:error] [pid 1744202:tid 1744202] [client 196.189.51.191:38076] script '/var/www/html/blog.solution.it/test.php' not found or unable to stat show less	Web App Attack
🇩🇪 Holger	2026-09-15 15:26:43 (1 day ago)	WordPress WebAttack	Brute-Force Web App Attack
🇲🇾 Rizzy	2026-09-15 11:29:01 (1 day ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TAY	2026-09-15 08:20:45 (1 day ago)	196.189.51.191 - - [15/Sep/2026:16:20:03 +0800] "GET /wp-config.php.bak HTTP/1.1" 301 474 "-" "Mozil ... show more 196.189.51.191 - - [15/Sep/2026:16:20:03 +0800] "GET /wp-config.php.bak HTTP/1.1" 301 474 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 196.189.51.191 - - [15/Sep/2026:16:20:14 +0800] "GET /wp-config.php~ HTTP/1.1" 301 468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 196.189.51.191 - - [15/Sep/2026:16:20:24 +0800] "GET /wp-config.php.save HTTP/1.1" 301 476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 196.189.51.191 - - [15/Sep/2026:16:20:31 +0800] "GET /wp-config.php.save HTTP/1.1" 301 6129 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 196.189.51.191 - - [15/Sep/2026:16:20:42 +0800] "GET /wp-config.php.old HTTP/1.1" 301 474 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like ... show less	Brute-Force
🇸🇪 vaia.cloud	2026-09-15 07:05:02 (1 day ago)	crowdsecurity/http-cve-probing	Brute-Force Web App Attack
Anonymous	2026-09-15 03:15:13 (1 day ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
Anonymous	2026-09-15 02:22:27 (1 day ago)	196.189.51.191 - - [14/Sep/2026:23:21:38 -0300] "GET /?rest_route=/gravitysmtp/v1/tests/mock-data&pa ... show more 196.189.51.191 - - [14/Sep/2026:23:21:38 -0300] "GET /?rest_route=/gravitysmtp/v1/tests/mock-data&page=gravitysmtp-settings HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 196.189.51.191 - - [14/Sep/2026:23:22:24 -0300] "GET /?rest_route=/gravitysmtp/v1/tests/mock-data&page=gravitysmtp-settings HTTP/1.1" 200 507264 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 196.189.51.191 - - [14/Sep/2026:23:22:25 -0300] "GET /index.php?rest_route=/gravitysmtp/v1/tests/mock-data&page=gravitysmtp-settings HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Port Scan
Anonymous	2026-09-14 19:16:55 (1 day ago)	Detected by CrowdSec: crowdsecurity/http-cve-probing	Web App Attack

Showing 1 to 15 of 56 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.222.205.45

🇻🇳 113.163.202.114

🇺🇸 66.132.195.39

🇲🇲 37.111.56.83

🇻🇳 171.244.5.213

🇵🇰 139.135.44.113

🇨🇳 116.247.121.90

🇻🇳 115.75.146.12

🇩🇪 94.26.106.143

🇷🇴 92.118.39.14

🇸🇪 81.235.26.145

🇪🇸 79.117.164.83

🇨🇱 181.72.14.243

🇺🇸 154.222.99.35

🇸🇬 152.32.217.179

🇺🇦 77.109.21.190

🇪🇬 41.33.199.217

🇺🇸 35.235.87.159

🇺🇸 34.26.152.184

🇧🇷 191.17.231.111