196.196.53.110

Classification: Malicious

196.196.53.110 is a malicious IP address. Reported by 6 threat sources, last seen 2026-09-01. Network: AS41564 SA.

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • VPN node — Provides anonymization that can hide an attacker.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
HTTP Spammer StopForumSpam.com 2022-07-25 04:41:47 2026-09-01 07:33:55 attacker malicious-activity
VPN IPWhois.io 2025-04-27 23:37:41 2026-07-20 17:37:02 anonymization vpn
HTTP Spammer Sblam 2022-09-29 01:23:29 2026-06-20 07:03:16 malicious-activity
Suspicious Host AbuseIPDB 2024-07-25 21:26:06 2026-05-28 11:24:52 anomalous-activity
Proxy IPWhois.io 2025-06-12 00:58:31 2025-06-15 06:17:26 anonymization
HTTP bot Blocklist.de 2024-08-01 09:13:31 2025-01-29 11:35:45 malicious-activity
HTTP Spammer Cleantalk.org 2023-06-18 09:17:33 2024-08-21 19:49:40 malicious-activity
Bruteforce login attacker Blocklist.de 2022-08-10 01:54:57 2022-08-11 01:54:46 malicious-activity
HTTP Attacker Blocklist.de 2022-08-10 01:49:12 2022-08-11 01:49:01 malicious-activity

Tags

bot abuse attacker login bruteforce joomla wordpress apache ddos rfi spam

Whois information

AS name
AS41564 SA
AS registry
afrinic
AS date
2012-11-21 00:00:00
AS CIDR
196.196.53.0/24
CIDR
196.196.0.0/18
Registrant
SA
Address
N5 Sturdee Avenue, Suite 301 2196, Rosebank, Johannesburg, South Africa
City
Riga
Postal code
LV-1050
Country
LV — Latvia 🇱🇻
First indexed
2022-07-25 04:41:47
Last updated
2026-09-01 07:33:55

Malicious IPs in the same CIDR

196.196.53.104 196.196.53.140 196.196.53.102 196.196.53.100 196.196.53.19 196.196.53.142 196.196.53.91 196.196.53.136 196.196.53.99 196.196.53.92 196.196.53.101 196.196.53.109 196.196.53.107 196.196.53.108 196.196.53.131 196.196.53.132 196.196.53.133 196.196.53.137 196.196.53.134 196.196.53.141 196.196.53.105 196.196.53.110 196.196.53.135 196.196.53.138 196.196.53.139