JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.189.56.236

196.189.56.236 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 23%: ?

23%

ISP	To__BRAS_DHCP_AD_10800E
Usage Type	Fixed Line ISP
ASN	AS24757
Domain Name	ethiotelecom.et
Country	🇪🇹 Ethiopia
City	Addis Ababa, Addis Ababa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.189.56.236

Whois 196.189.56.236

IP Abuse Reports for 196.189.56.236:

This IP address has been reported a total of 13 times from 7 distinct sources. 196.189.56.236 was first reported on December 10th 2020, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 CoreTech srl	2026-10-27 05:08:57 (5 hours ago)	cloudlinux2 fail2ban: 2026-10-27 06:04:28,068 fail2ban.filter [1596]: INFO [plesk-wordpre ... show more cloudlinux2 fail2ban: 2026-10-27 06:04:28,068 fail2ban.filter [1596]: INFO [plesk-wordpress] Found 45.146.55.11 - 2026-10-27 06:04:27cloudlinux2 fail2ban: 2026-10-27 06:05:17,615 fail2ban.filter [1596]: INFO [plesk-modsecurity] Found 180.253.14.243 - 2026-10-27 06:05:17cloudlinux2 fail2ban: 2026-10-27 06:05:27,319 fail2ban.filter [1596]: INFO [plesk-wordpress] Found 170.245.158.160 - 2026-10-27 06:05:26cloudlinux2 fail2ban: 2026-10-27 06:05:32,451 fail2ban.filter [1596]: INFO [plesk-modsecurity] Found 37.189.221.177 - 2026-10-27 06:05:32cloudlinux2 fail2ban: 2026-10-27 06:05:52,475 fail2ban.filter [1596]: INFO [plesk-wordpress] Found 196.189.56.236 - 2026-10-27 06:05:52cloudlinux2 fail2ban: 2026-10-27 06:06:34,254 fail2ban.filter [1596]: INFO [plesk-modsecurity] Found 103.211.54.109 - 2026-10-27 06:06:34cloudlinux2 fail2ban: 2026-10-27 06:07:16,877 fail2ban.filter [1596]: INFO [plesk-modsecurity] Found 103.211.54.109 - 2026-10-27 06: show less	Web App Attack
Anonymous	2026-10-21 08:00:34 (6 days ago)	Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ... show more Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group \| Offpeak: Sessionless Catalog Access Blocked: /catalog/product_compare/add/product/10947/uenc/aHR0cHM6Ly93d3cuZDJvZmZpY2UucnUvYnJhbmRzL25lYy9zaG9wYnkvcHJvamVjdG9yX2x1bWVuLTI2MDAtMzUwMC0zMzAwLTIzMDAuaHRtbD9tb2RlPWdyaWQ,/form_key/riFQCHpblBy6qWlC/ \| UA: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/4.1) \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-26 14:32:01 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-20 10:02:29 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-17 08:08:20 (1 month ago)	(mod_security) mod_security (id:210350) triggered by 196.189.56.236 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 196.189.56.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 04:08:13.731210 2026] [security2:error] [pid 2268:tid 2268] [client 196.189.56.236:30866] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.ezsmiledental.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ezsmiledental.com"] [uri "/"] [unique_id "aquf7YlIWiF_YPr9qELAKAAAABY"], referer: https://backlinechecker.space/dir/relevant-seo-backlinks-51435 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-03 09:48:44 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 MPL	2026-05-12 12:46:16 (5 months ago)	tcp/23	Port Scan
Anonymous	2026-01-30 18:50:46 (8 months ago)	scanning http requests from known botnet	Web App Attack
🇺🇸 TPI-Abuse	2025-12-10 14:52:11 (10 months ago)	"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ... show more "Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access" show less	DDoS Attack SQL Injection Exploited Host
Anonymous	2025-11-24 17:50:39 (11 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-21 05:57:52 (11 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-15 16:31:35 (11 months ago)	scanning http requests from known botnet	Web App Attack
🇩🇪 Little Iguana	2020-12-10 03:57:40 (5 years ago)	trying to access non-authorized port	Port Scan

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 178.178.194.151

🇻🇳 152.32.163.183

🇩🇪 178.104.243.191

🇳🇱 164.92.155.32

🇩🇪 161.35.206.208

🇩🇪 151.243.11.49

🇺🇸 147.185.132.10

🇺🇸 143.198.161.227

🇳🇱 138.226.239.21

🇺🇸 129.121.115.239

🇺🇸 129.121.76.151

🇻🇳 117.2.125.84

🇨🇳 111.21.60.158

🇲🇦 105.77.202.159

🇧🇩 103.159.2.113

🇵🇰 103.49.139.116

🇷🇺 82.151.97.152

🇻🇳 79.108.220.136

🇩🇪 68.183.213.71

🇸🇬 43.98.162.26