JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.207.177.56

196.207.177.56 was found in our database!

This IP was reported 1,931 times. Confidence of Abuse is 100%: ?

100%

ISP	Wananchi Group Kenya
Usage Type	Fixed Line ISP
ASN	AS15399
Domain Name	wananchi.com
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.207.177.56

Whois 196.207.177.56

IP Abuse Reports for 196.207.177.56:

This IP address has been reported a total of 1,931 times from 276 distinct sources. 196.207.177.56 was first reported on January 12th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 chrisj	2026-05-23 23:08:33 (1 week ago)	2026-05-23T23:08:33.148770+00:00 aws postfix/smtps/smtpd[698285]: warning: unknown[196.207.177.56]: ... show more 2026-05-23T23:08:33.148770+00:00 aws postfix/smtps/smtpd[698285]: warning: unknown[196.207.177.56]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-05-23T23:08:33.401458+00:00 aws postfix/smtps/smtpd[698285]: lost connection after AUTH from unknown[196.207.177.56] 2026-05-23T23:08:33.401578+00:00 aws postfix/smtps/smtpd[698285]: disconnect from unknown[196.207.177.56] ehlo=1 auth=0/1 commands=1/2 ... show less	Brute-Force
🇹🇷 ferique	2026-05-23 20:53:05 (1 week ago)	Real-time Intercept: SMTP attack. Reference: 2026-05-23 23:53:02.5741 Login failure: 196.207.177.56 ... show more Real-time Intercept: SMTP attack. Reference: 2026-05-23 23:53:02.5741 Login failure: 196.207.177.56 SMTP show less	Brute-Force Email Spam
🇵🇾 SecOpsSL	2026-05-23 19:27:16 (1 week ago)	May 23 15:27:15 mail postfix/smtps/smtpd[8376]: warning: unknown[196.207.177.56]: SASL LOGIN authent ... show more May 23 15:27:15 mail postfix/smtps/smtpd[8376]: warning: unknown[196.207.177.56]: SASL LOGIN authentication failed: authentication failure show less	Email Spam Brute-Force
🇩🇪 kreativstrecke	2026-05-23 16:19:09 (1 week ago)	2026-05-23T17:19:08.341439+01:00 srv03 postfix/smtps/smtpd[232184]: warning: unknown[196.207.177.56] ... show more 2026-05-23T17:19:08.341439+01:00 srv03 postfix/smtps/smtpd[232184]: warning: unknown[196.207.177.56]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=dustin.hillers_fvs 2026-05-23T17:19:09.061072+01:00 srv03 postfix/smtps/smtpd[232184]: lost connection after AUTH from unknown[196.207.177.56] 2026-05-23T17:19:09.061545+01:00 srv03 postfix/smtps/smtpd[232184]: disconnect from unknown[196.207.177.56] ehlo=1 auth=0/1 commands=1/2 ... show less	Brute-Force
Anonymous	2026-05-23 14:44:12 (1 week ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
🇨🇿 sajmon0011	2026-05-23 06:40:28 (1 week ago)	2026-05-23T08:40:28.009892 server1.sajmon0011.cz auth[2490782]: pam_unix(dovecot:auth): authenticati ... show more 2026-05-23T08:40:28.009892 server1.sajmon0011.cz auth[2490782]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=support rhost=196.207.177.56 ... show less	Brute-Force
🇮🇳 evicky2002	2026-05-23 06:15:15 (1 week ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇫🇷 basing	2026-05-23 06:12:43 (1 week ago)	2026-05-23 07:12:43 pzb SASL PLAIN auth failed: rhost=196.207.177.56...	Brute-Force
🇩🇪 EGP Abuse Dept	2026-05-23 01:22:26 (1 week ago)	SMTP AUTH attack	Brute-Force
🇪🇸 alferez	2026-05-22 20:59:02 (1 week ago)	Searching random mail account login	Email Spam
Anonymous	2026-05-22 20:23:47 (1 week ago)	2026-05-22 22:23:38.780 [1598525] no host name found for IP address 196.207.177.56 2026-05-22 22:23: ... show more 2026-05-22 22:23:38.780 [1598525] no host name found for IP address 196.207.177.56 2026-05-22 22:23:45.499 [1598525] dovecot_login authenticator failed for ([154.62.176.134]) [196.207.177.56]:33613 I=[217.197.86.168]:465 Ci=1598525: 535 Incorrect authentication data 2026-05-22 22:23:46.369 [1598525] no MAIL in SMTP connection from ([154.62.176.134]) [196.207.177.56]:33613 I=[217.197.86.168]:465 Ci=1598525 D=8s X=TLS1.2:ECDHE_SECP256R1__ECDSA_SHA512__AES_256_GCM:256 CV=no C=EHLO,AUTH ... show less	Email Spam
🇧🇬 sanitariu	2026-05-22 19:37:46 (1 week ago)	May 22 22:37:46 dri postfix/smtpd[3101306]: warning: unknown[196.207.177.56]: SASL LOGIN authenticat ... show more May 22 22:37:46 dri postfix/smtpd[3101306]: warning: unknown[196.207.177.56]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=nasko ... show less	Brute-Force
🇬🇧 cticom.ms	2026-05-22 19:25:09 (1 week ago)	Email Auth Brute force attack 3/3 in last day	Brute-Force
🇦🇺 AWW-Admin	2026-05-22 18:45:31 (1 week ago)	(smtpauth) Failed SMTP AUTH login from 196.207.177.56 (KE/Kenya/-)	Brute-Force
🇵🇱 bmino.pl	2026-05-22 18:12:20 (1 week ago)	Autoban IP(2): 196.207.177.56 - Hostname: Wananchi Group (K) LTD - City: Nairobi - Region: Nairobi C ... show more Autoban IP(2): 196.207.177.56 - Hostname: Wananchi Group (K) LTD - City: Nairobi - Region: Nairobi County - Country: Kenya - Location: - Organization: Wananchi Group - failed attempts. show less	Brute-Force

Showing 166 to 180 of 1931 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.237

🇫🇷 144.91.91.231

🇬🇧 217.146.80.102

🇰🇷 211.253.10.61

🇸🇾 193.43.145.66

🇯🇵 168.138.197.172

🇭🇰 152.32.226.102

🇮🇩 103.143.12.163

🇺🇸 91.230.168.124

🇧🇬 89.106.123.142

🇺🇸 84.32.131.217

🇸🇬 43.156.136.152

🇬🇧 35.203.210.64

🇰🇷 8.213.137.21

🇺🇸 209.85.210.68

🇺🇸 172.96.182.111

🇸🇬 165.154.205.91

🇮🇳 125.17.233.246

🇺🇸 107.167.34.125

🇺🇸 88.216.73.14