JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

196.191.50.192

Recent Activity

Abuse confidence score ?

12% Caution

13 reports

10 reporters · latest 16 minutes ago

ISP	IP_Pool_for_NAT_DD_GER
Usage Type	Fixed Line ISP
ASN	AS24757
Domain Name	ethiotelecom.et
Country	🇪🇹 Ethiopia
City	Dire Dawa, Dire Dawa

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 196.191.50.192

Export CSV

This IP address has been reported a total of 13 times from 10 distinct sources. 196.191.50.192 was first reported on February 19th 2024, and the most recent report was 16 minutes ago. In the last 60 days, the top reporter locations were: Germany with 2 reports; United States of America with 1 report. The only category in these recent reports was: Bad Web Bot 3 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-10-24 09:25:43 (16 minutes ago)	Not following 301 redirects — wasted requests \| host: escrimeaura.fr \| method: GET \| path: /la-ligue ... show more Not following 301 redirects — wasted requests \| host: escrimeaura.fr \| method: GET \| path: /la-ligue \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0 \| src_port: 63866 \| 2026-10-24 09:25 UTC show less	Bad Web Bot
🇩🇪 LRob	2026-10-22 10:56:22 (1 day ago)	Code forge crawl (headless) \| path: /Shieldlist/shieldlist-agent/blame/commit/b6bd6c5513e225af24171a ... show more Code forge crawl (headless) \| path: /Shieldlist/shieldlist-agent/blame/commit/b6bd6c5513e225af24171a0a84244b0bc941c049/internal/nft/nft_test.go \| src_port: 41512 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-22 06:01:49 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-08-24 20:48:11 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-06 16:49:37 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-06-29 12:17:11 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇨🇿 lp	2026-04-13 07:50:52 (6 months ago)	Email account brute force: 2 attempts were recorded from 196.191.50.192 2026-04-13T08:55:27+02:00 wa ... show more Email account brute force: 2 attempts were recorded from 196.191.50.192 2026-04-13T08:55:27+02:00 warning: unknown[196.191.50.192]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-04-13T08:55:28+02:00 warning: unknown[196.191.50.192]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇺🇸 bigscoots.com	2026-04-13 06:32:15 (6 months ago)	(smtpauth) Failed SMTP AUTH login from 196.191.50.192 (ET/Ethiopia/-): 5 in the last 3600 secs; Port ... show more (smtpauth) Failed SMTP AUTH login from 196.191.50.192 (ET/Ethiopia/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-04-13 01:56:20 dovecot_plain authenticator failed for H=(8N8LN255TCKTWN) [196.191.50.192]:36608: 535 Incorrect authentication data ([email protected]) 2026-04-13 01:56:27 dovecot_login authenticator failed for H=(8N8LN255TCKTWN) [196.191.50.192]:36608: 535 Incorrect authentication data ([email protected]) 2026-04-13 02:32:06 dovecot_plain authenticator failed for H=(X58MAJ152S6) [196.191.50.192]:36198: 535 Incorrect authentication data ([email protected]) 2026-04-13 02:32:10 dovecot_plain authenticator failed for H=(738K4S3IJ) [196.191.50.192]:36201: 535 Incorrect authentication data ([email protected]) 2026-04-13 02:32:13 dovecot_login authenticator failed for H=(X58MAJ152S6) [196.191.50.192]:36198: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
Anonymous	2026-04-13 04:04:40 (6 months ago)	2026-04-13T14:03:32.435695+10:00 garfield postfix/submissions/smtpd[15033]: warning: unknown[196.191 ... show more 2026-04-13T14:03:32.435695+10:00 garfield postfix/submissions/smtpd[15033]: warning: unknown[196.191.50.192]: SASL PLAIN authentication failed: (reason unavailable), [email protected] 2026-04-13T14:03:39.022421+10:00 garfield postfix/submissions/smtpd[15033]: warning: unknown[196.191.50.192]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-04-13T14:04:39.419197+10:00 garfield postfix/submissions/smtpd[15033]: warning: unknown[196.191.50.192]: SASL PLAIN authentication failed: (reason unavailable), [email protected] ... show less	Brute-Force Email Spam
🇩🇪 tentwentyfour	2026-04-13 02:36:56 (6 months ago)	Blocked for probing for SASL accounts (Email)	Brute-Force
🇮🇹 VHosting	2026-04-13 01:47:41 (6 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇳🇱 exxos	2025-08-29 21:03:01 (1 year ago)	Attacks with Bad user agents	Hacking
🇬🇧 Bytemark	2024-02-19 13:59:54 (2 years ago)	196.191.50.192 - - [19/Feb/2024:13:59:53 +0000] "GET /wp-login.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 ... show more 196.191.50.192 - - [19/Feb/2024:13:59:53 +0000] "GET /wp-login.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 196.191.50.192 - - [19/Feb/2024:13:59:54 +0000] "GET /xmlrpc.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 196.191.50.192 - - [19/Feb/2024:13:59:54 +0000] "GET /wp-login.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" show less	Brute-Force Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 223.197.146.159

🇲🇾 202.165.14.135

🇺🇸 184.105.247.238

🇺🇸 129.121.126.188

🇫🇷 85.217.140.50

🇭🇰 47.243.211.170

🇸🇬 43.134.88.163

🇵🇱 172.64.198.147

🇧🇪 104.199.36.53

🇱🇹 77.90.185.122

🇺🇸 35.170.66.148

🇩🇪 34.185.188.218

🇷🇴 2.57.121.25

🇦🇪 2.50.131.226

🇲🇽 148.216.28.11

🇧🇩 103.102.139.102

🇺🇸 65.49.1.31

🇬🇧 64.205.72.109

🇬🇧 51.195.149.120

🇬🇧 35.203.211.59