JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

196.190.251.56

Recent Activity

Abuse Confidence Score

35% Elevated

446 reports

201 reporters · latest 1 day ago

ISP: Nekemte_GER
Usage Type: Fixed Line ISP
ASN: AS24757
Domain Name: ethitoelecom.et
Country: 🇪🇹 Ethiopia
City: Addis Ababa, Addis Ababa

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

446 from 201 distinct reporters

First reported

July 29th 2025

Most recent report

1 day ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 5 🇹🇷 Turkey 2 🇨🇭 Switzerland 1

Most common categories Email Spam 8 Brute-Force 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ksrd	2026-11-12 19:00:53 UTC · (1 day ago)	Spam email received. 1 message(s) since 2026-11-12. ASN: AS24757 Country: ET. Reported by automated spam-reporting tool.	Email Spam
🇹🇷 ferique	2026-11-12 18:30:26 UTC · (1 day ago)	Real-time Intercept: Email Spam. Reference: Tagged as Spam by SpamAssassin. Score 69/10	Email Spam
🇺🇸 xmission.com	2026-11-12 18:00:43 UTC · (1 day ago)	Blocked 15 connection attempts due to Spamhaus RBL (RJCT05) in the past 4 hours. To request delisting, visit https://www.spamhaus.org/lookup/ to check your IP status and submit a delist request if eligible.	Email Spam
🇺🇸 xmission.com	2026-10-26 21:00:29 UTC · (2 weeks ago)	Blocked 22 connection attempts due to Spamhaus RBL (RJCT05) in the past 4 hours. To request delisting, visit https://www.spamhaus.org/lookup/ to check your IP status and submit a delist request if eligible.	Email Spam
🇨🇭 Origon	2026-10-26 20:51:12 UTC · (2 weeks ago)	NOQUEUE - IP: 196.190.251.56 - Oct 26 21:51:12 plesk postfix/smtpd[3780601]: NOQUEUE: reject: RCPT from unknown[196.190.251.56]: 554 5.7.1 Service unavailable; Client host [196.190.251.56] blocked using dnsbl-1.uceprotect.net; IP 196.190.251.56 is U ... show more NOQUEUE - IP: 196.190.251.56 - Oct 26 21:51:12 plesk postfix/smtpd[3780601]: NOQUEUE: reject: RCPT from unknown[196.190.251.56]: 554 5.7.1 Service unavailable; Client host [196.190.251.56] blocked using dnsbl-1.uceprotect.net; IP 196.190.251.56 is UCEPROTECT-Level 1 listed. See https://[site]/rblcheck.php?ipr=196.190.251.56; from=<[email protected]> to=<[customer]> proto=ESMTP helo=<info.net> show less	Email Spam
🇹🇷 cagatayakinci.com	2026-10-26 20:08:43 UTC · (2 weeks ago)	Oct 26 23:08:39 mail postfix/smtpd[4144]: NOQUEUE: reject: RCPT from unknown[196.190.251.56]: 554 5.7.1 Service unavailable; Client host [196.190.251.56] blocked using cvbpdnlshmodmkdfkbr6ojzaau.zen.dq.spamhaus.net; Listed by CSS, see https://check.s ... show more Oct 26 23:08:39 mail postfix/smtpd[4144]: NOQUEUE: reject: RCPT from unknown[196.190.251.56]: 554 5.7.1 Service unavailable; Client host [196.190.251.56] blocked using cvbpdnlshmodmkdfkbr6ojzaau.zen.dq.spamhaus.net; Listed by CSS, see https://check.spamhaus.org/query/ip/196.190.251.56 / Listed by PBL, see https://check.spamhaus.org/query/ip/196.190.251.56; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<info.net> ... show less	Brute-Force Email Spam
🇺🇸 jkhorvath	2026-10-26 19:11:57 UTC · (2 weeks ago)	Unknown SMTP Client 196.190.251.56	Email Spam Brute-Force
🇺🇸 xmission.com	2026-10-26 17:12:48 UTC · (2 weeks ago)	Blocked 20 connection attempts due to Spamhaus RBL (RJCT05) in the past 4 hours. To request delisting, visit https://www.spamhaus.org/lookup/ to check your IP status and submit a delist request if eligible.	Email Spam
🇬🇧 thetomtaylor.co.uk	2026-05-05 16:09:09 UTC · (6 months ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [mx03]	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-09-19 20:08:53 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇳 ThreatBook.io	2025-09-18 23:42:45 UTC · (1 year ago)	ThreatBook Intelligence: Dynamic IP,Spam more details on https://threatbook.io/ip/196.190.251.56	SSH
🇹🇷 rtbh.com.tr	2025-09-18 20:08:53 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 timsan	2025-09-18 14:07:30 UTC · (1 year ago)	2025-09-18T07:06:20.504084-07:00 oef sshd[8134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.190.251.56 user=root 2025-09-18T07:06:22.476642-07:00 oef sshd[8134]: Failed password for root from 196.190. ... show more 2025-09-18T07:06:20.504084-07:00 oef sshd[8134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.190.251.56 user=root 2025-09-18T07:06:22.476642-07:00 oef sshd[8134]: Failed password for root from 196.190.251.56 port 59854 ssh2 2025-09-18T07:07:30.449880-07:00 oef sshd[8172]: Invalid user postgres from 196.190.251.56 port 46186 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-09-18 13:17:52 UTC · (1 year ago)	196.190.251.56 (ET/Ethiopia/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 18 08:16:57 21503 sshd[7874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ... show more 196.190.251.56 (ET/Ethiopia/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 18 08:16:57 21503 sshd[7874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.190.251.56 user=root Sep 18 08:16:59 21503 sshd[7874]: Failed password for root from 196.190.251.56 port 60986 ssh2 Sep 18 08:15:30 21503 sshd[7748]: Failed password for root from 118.41.246.179 port 56266 ssh2 Sep 18 08:17:43 21503 sshd[7948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.191.14.243 user=root Sep 18 08:15:29 21503 sshd[7748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.41.246.179 user=root IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-09-18 10:16:52 UTC · (1 year ago)	(sshd) Failed SSH login from 196.190.251.56 (ET/Ethiopia/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Sep 18 05:11:09 16806 sshd[21892]: Invalid user admin from 196.190.251.56 port 44328 Sep 18 05:11:10 16806 sshd[2189 ... show more (sshd) Failed SSH login from 196.190.251.56 (ET/Ethiopia/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Sep 18 05:11:09 16806 sshd[21892]: Invalid user admin from 196.190.251.56 port 44328 Sep 18 05:11:10 16806 sshd[21892]: Failed password for invalid user admin from 196.190.251.56 port 44328 ssh2 Sep 18 05:15:39 16806 sshd[22239]: Invalid user user from 196.190.251.56 port 38648 Sep 18 05:15:40 16806 sshd[22239]: Failed password for invalid user user from 196.190.251.56 port 38648 ssh2 Sep 18 05:16:49 16806 sshd[22384]: Invalid user prueba from 196.190.251.56 port 35138 show less	Brute-Force SSH

Showing 1 to 15 of 446 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 216.25.90.78

🇺🇸 207.180.11.184

🇸🇬 43.173.182.227

🇳🇱 31.58.208.199

🇷🇴 2.57.122.150

🇺🇸 2602:fa59:10:62::1

🇹🇼 198.235.24.68

🇿🇦 196.25.246.178

🇫🇷 185.194.178.33

🇨🇳 182.61.14.89

🇺🇸 172.56.2.108

🇵🇱 162.158.172.209

🇭🇰 152.32.213.68

🇺🇸 147.185.132.152

🇧🇳 119.160.166.237

🇳🇱 109.160.32.150

🇧🇩 103.136.105.153

🇧🇩 103.78.255.39

🇹🇷 95.10.60.147

🇩🇪 69.5.169.193