196.191.48.92

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
48% Elevated
12 reports
12 reporters · latest 3 days ago
ISP
IP_Pool_for_NAT_DD_GER
Usage Type
Fixed Line ISP
ASN
AS24757
Domain Name
ethiotelecom.et
Country
🇪🇹 Ethiopia
City
Harar, Harari
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
12 from 12 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇮🇹 Italy 2 🇺🇸 United States of America 2 🇧🇷 Brazil 1
Most common categories Brute-Force 9 Bad Web Bot 1 Web App Attack 1 Port Scan 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Failed login attempt detected by Fail2Ban in plesk-postfix jail
Brute-Force
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇧🇷 ICS Labs
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-04 UTC.
Brute-Force
🇹🇷 Jova
Part of a distributed password attack on a mail account (SMTP logins from many IPs).
Brute-Force
Anonymous
Oct 29 23:12:35 bka postfix/submission/smtpd[2822843]: warning: unknown[196.191.48.92]: SASL PLAIN authentication failed: (reason unavailable) ...
Brute-Force
Anonymous
Oct 29 22:43:04 m postfix/smtpd[42218]: warning: unknown[196.191.48.92]: SASL PLAIN authentication failed: (reason unavailable), [email protected] ...
Brute-Force
🇮🇹 Inartis
Oct 28 21:14:10 mail1 postfix/smtpd[281199]: warning: unknown[196.191.48.92]: SASL PLAIN authentication failed: authentication failure, [email protected] ...
Port Scan Brute-Force
🇩🇰 powerhostingdk
[mailserver] CrowdSec detected mailscanner/global-spam-aggregate (31 events). Automated abuse report.
Brute-Force
🇮🇹 VHosting
Detected mail brute force attack from different servers
Brute-Force
🇹🇳 anqa anqa
Fraud Orders DDoS Attack FTP Brute-Force Ping of Death Phishing Fraud VoIP Open Proxy Web Spam Email Spam Blog Spam VPN IP Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇨🇦 Justmee
Hacking Brute-Force
🇺🇸 vestibtech
Email Spam

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 185.176.204.143
🇨🇳 118.25.187.138
🇷🇴 80.94.95.115
🇸🇬 14.102.84.154
🇺🇸 199.165.159.55
🇳🇱 195.178.110.134
🇨🇿 195.123.245.241
🇩🇪 194.5.49.53
🇺🇸 192.255.229.99
🇺🇸 189.75.178.205
🇺🇸 185.195.57.168
🇦🇿 185.143.197.45
🇬🇧 185.55.189.131
🇫🇷 163.172.66.206
🇺🇸 162.216.149.106
🇺🇸 147.185.132.229
🇨🇳 140.246.61.93
🇨🇳 117.50.73.90
🇳🇱 109.160.32.170
🇺🇸 109.105.210.18
feedback