JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

196.191.48.241

Activity Trending Down

Abuse confidence score ?

23% Elevated

139 reports

71 reporters · latest 1 week ago

ISP	IP_Pool_for_NAT_DD_GER
Usage Type	Fixed Line ISP
ASN	AS24757
Domain Name	ethiotelecom.et
Country	🇪🇹 Ethiopia
City	Dire Dawa, Dire Dawa

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 196.191.48.241

Export CSV

This IP address has been reported a total of 139 times from 71 distinct sources. 196.191.48.241 was first reported on June 10th 2021, and the most recent report was 1 week ago. In the last 60 days, the top reporter locations were: Switzerland with 2 reports; Spain with 2 reports; Germany with 1 report. The most common categories in these recent reports were: Email Spam 4 times; Brute-Force 3 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-28 13:35:49 (1 week ago)	2026-09-28T15:35:48.087266+02:00 gollum postfix/smtpd[424481]: NOQUEUE: reject: RCPT from unknown[19 ... show more 2026-09-28T15:35:48.087266+02:00 gollum postfix/smtpd[424481]: NOQUEUE: reject: RCPT from unknown[196.191.48.241]: 554 5.7.1 Service unavailable; Client host [196.191.48.241] blocked using zen.spamhaus.org; Listed by PBL, see https://check.spamhaus.org/query/ip/196.191.48.241 / Listed by XBL, see https://check.spamhaus.org/query/ip/196.191.48.241 / Listed by CSS, see https://check.spamhaus.org/query/ip/196.191.48.241; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<smtpclient.apple> ... show less	Email Spam
🇨🇭 Origon	2026-09-28 12:46:12 (1 week ago)	NOQUEUE - IP: 196.191.48.241 - Sep 28 14:46:11 plesk postfix/smtpd[1103771]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 196.191.48.241 - Sep 28 14:46:11 plesk postfix/smtpd[1103771]: NOQUEUE: reject: RCPT from unknown[196.191.48.241]: 554 5.7.1 Service unavailable; Client host [196.191.48.241] blocked using dnsbl-1.uceprotect.net; IP 196.191.48.241 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=196.191.48.241; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[196.191.48.241]> show less	Email Spam
🇨🇭 Origon	2026-09-24 13:06:25 (2 weeks ago)	NOQUEUE - IP: 196.191.48.241 - Sep 24 15:06:25 plesk postfix/smtpd[3562542]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 196.191.48.241 - Sep 24 15:06:25 plesk postfix/smtpd[3562542]: NOQUEUE: reject: RCPT from unknown[196.191.48.241]: 554 5.7.1 Service unavailable; Client host [196.191.48.241] blocked using dnsbl-2.uceprotect.net; Net 196.190.0.0/15 is UCEPROTECT-Level2 listed because 602 impacts are seen from EthioNet-AS, ET/AS24757 there. See: http://www.uceprotect.net/rblcheck.php?ipr=196.191.48.241 / Net 196.188.0.0/14 is UCEPROTECT-Level2 listed because 2065 impacts are seen from EthioNet-AS, ET/AS24757 there. See: http://www.uceprotect.net/rblcheck.php?ipr=196.191.48.241; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[196.191.48.241]> show less	Email Spam
🇪🇸 librebit	2026-09-05 22:59:49 (1 month ago)	Brute force	Brute-Force
🇵🇹 rnl	2026-09-03 12:05:27 (1 month ago)	postfix (unknown user, SPF fail or relay access denied)	Brute-Force
🇳🇱 soverin	2026-09-01 21:06:05 (1 month ago)	spam	Email Spam
🇪🇸 librebit	2026-09-01 06:20:17 (1 month ago)	Brute force	Brute-Force
🇨🇭 Origon	2026-07-31 13:32:10 (2 months ago)	NOQUEUE - IP: 196.191.48.241 - Jul 31 15:32:10 plesk postfix/smtpd[1534199]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 196.191.48.241 - Jul 31 15:32:10 plesk postfix/smtpd[1534199]: NOQUEUE: reject: RCPT from unknown[196.191.48.241]: 554 5.7.1 Service unavailable; Client host [196.191.48.241] blocked using dnsbl-1.uceprotect.net; IP 196.191.48.241 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=196.191.48.241; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[196.191.48.241]> show less	Email Spam
🇳🇱 soverin	2026-07-28 14:25:06 (2 months ago)	spam	Email Spam
Anonymous	2026-07-27 08:11:28 (2 months ago)	Inbound email denied: 2 rejected connection(s) in 24h detected by CRMON security monitor. AbuseIPDB ... show more Inbound email denied: 2 rejected connection(s) in 24h detected by CRMON security monitor. AbuseIPDB confidence score at block time: 7%. show less	Email Spam
🇩🇪 EGP Abuse Dept	2026-06-19 10:53:18 (3 months ago)	Numeric HELO: 196.191.48.241	Email Spam Exploited Host
🇮🇩 hermawan	2026-06-01 06:47:52 (4 months ago)	[Mon Jun 01 13:47:36.420656 2026] [authz_core:error] [pid 1692871:tid 140649975183040] [client 196.1 ... show more [Mon Jun 01 13:47:36.420656 2026] [authz_core:error] [pid 1692871:tid 140649975183040] [client 196.191.48.241:62654] AH01630: client denied by server configuration: /var/www/images/Klimatologi/Infografis/Infografis-Iklim/Info/2024/10_Master_Infografis_Infrastruktur_Rev_2-05-600.webp [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1692891] [BmHRkauXmNo] [ah0rCPJf6vwCNxEkGhRQtgAADRM] keep_alive=[1] [2026-06-01 13:47:36.420659] [R:ah0rCPJf6vwCNxEkGhRQtgAADRM] UA:'Mozilla/5.0 (Linux; Android 13; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36' Host:'staklim-jatim.bmkg.go.id:443' ACCEPT:'text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7' Accept-Encoding:'gzip, deflate, br Accept-Language:'en-US,en;q=0.8 Upgrade-Insecure-Requests:'1 ... show less	Email Spam Hacking
🇩🇪 SMARTNET	2026-05-27 06:03:53 (4 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d	DDoS Attack
🇺🇸 MPL	2026-05-24 05:02:43 (4 months ago)	tcp/23	Port Scan
Anonymous	2026-04-30 21:40:14 (5 months ago)	Port scanning. Port: 23	Port Scan

Showing 1 to 15 of 139 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 223.185.54.20

🇨🇦 167.99.176.73

🇺🇸 2a10:3c0:100:0:1:36:0:5

🇺🇸 2604:a880:400:d1:0:5:266a:c001

🇺🇸 205.210.31.36

🇧🇪 198.235.24.149

🇺🇸 198.74.52.167

🇺🇸 184.105.139.72

🇧🇷 168.205.220.201

🇨🇳 125.91.35.169

🇺🇸 69.125.91.192

🇫🇷 51.254.103.32

🇫🇷 45.134.79.167

🇺🇸 45.8.19.154

🇩🇪 109.160.32.136

🇮🇩 103.101.52.197

🇺🇸 85.239.151.10

🇬🇧 84.32.41.248

🇬🇧 45.82.76.119

🇹🇿 41.78.169.229