JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.191.50.116

196.191.50.116 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 24%: ?

24%

ISP	IP_Pool_for_NAT_DD_GER
Usage Type	Fixed Line ISP
ASN	AS24757
Domain Name	ethiotelecom.et
Country	🇪🇹 Ethiopia
City	Dire Dawa, Dire Dawa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.191.50.116

Whois 196.191.50.116

IP Abuse Reports for 196.191.50.116:

This IP address has been reported a total of 10 times from 6 distinct sources. 196.191.50.116 was first reported on March 17th 2022, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-17 15:15:04 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 196.191.50.116 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 196.191.50.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 11:14:58.308778 2026] [security2:error] [pid 15907:tid 15907] [client 196.191.50.116:12613] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|haidarlawfirm.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "haidarlawfirm.com"] [uri "/"] [unique_id "aqwD8outIBuV3XxsJz6OPwAAABM"], referer: https://massbacklinkchecker.website/dir/advanced-link-building-88132 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 13:20:36 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 196.191.50.116 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 196.191.50.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 09:20:31.094060 2026] [security2:error] [pid 13972:tid 13972] [client 196.191.50.116:60256] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|undergroundh2o.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "undergroundh2o.com"] [uri "/"] [unique_id "aqvpH_KuH9WkOP8zZh_3nAAAAAM"], referer: https://seorankingchecker.space/dir/contextual-link-building-221261 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-09-17 06:52:09 (2 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-09-09 19:03:23 (1 week ago)	Repeated requests classified as pathological web bot behavior, for example: /search?f%5B0%5D=key_ter ... show more Repeated requests classified as pathological web bot behavior, for example: /search?f%5B0%5D=key_terms%3A311&f%5B10%5D=key_terms%3A524&f%5B11%5D=key_terms%3A543&f%5B1%5D=key_terms%3A312&f%5B2%5D=key_terms%3A315&f%5B3%5D=key_terms%3A316&f%5B4%5D=key_terms%3A318&f%5B5%5D=key_terms%3A325&f%5B6%5D=key_terms%3A507&f%5B7%5D=key_terms%3A518&f%5B8%5D=key_terms%3A520&f%5B9%5D=key_terms%3A522 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-08-23 15:13:18 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-06-29 14:14:18 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 SMARTNET	2025-11-30 18:38:00 (9 months ago)	Aisuru(Mirai variant) DDoS	DDoS Attack
🇩🇪 SMARTNET	2025-11-30 18:38:00 (9 months ago)	Aisuru(Mirai variant) DDoS	DDoS Attack
Anonymous	2025-11-20 15:55:29 (9 months ago)	Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
🇺🇸 mastertoolsupply	2022-03-17 18:52:37 (4 years ago)	(postfix2) Client ip rejected can not find your reverse hostname 196.191.50.116 (ET/Ethiopia/-)	Hacking

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.206.99.253

🇭🇰 165.154.40.244

🇭🇰 118.26.38.251

🇨🇳 58.211.39.86

🇪🇸 185.9.193.111

🇵🇱 176.115.248.66

🇭🇰 154.83.17.226

🇬🇧 154.16.44.35

🇵🇭 112.200.192.65

🇫🇷 91.196.152.10

🇺🇸 48.216.210.93

🇨🇳 36.154.134.146

🇨🇳 36.135.93.37

🇺🇸 34.221.211.226

🇧🇷 205.210.31.254

🇭🇰 194.187.178.137

🇲🇾 165.154.147.69

🇵🇭 139.135.78.105

🇮🇳 117.244.249.67

🇨🇳 112.27.76.17