196.189.237.117

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
449 reports
305 reporters · latest 3 hours ago
ISP
Ethio Telecom
Usage Type
Fixed Line ISP
ASN
AS24757
Domain Name
ethiotelecom.et
Country
🇪🇹 Ethiopia
City
Addis Ababa, Addis Ababa

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV
Total reports
449 from 305 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 99 🇺🇸 United States of America 93 🇫🇷 France 33
Most common categories SSH 422 Brute-Force 419 Hacking 14 Port Scan 10 Exploited Host 6
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Log in to search reports. Log In
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 NikkoCasa34
Fail2ban jail sshd: 3 tentatives. Dernier log: $f2bV_matches
Brute-Force SSH
🇺🇸 sh97
nws.sh: SSH Brute Force from 196.189.237.117 at 2026-11-13 16:37:33 IST
Brute-Force SSH
🇩🇪 flixie
Brute-Force SSH
🇭🇰 SentinalX by uzumaru
SSH brute-force detected: 15 failed login attempts in the last 1 hour.
Brute-Force SSH
🇩🇪 Ilop
[bas-9] SSH brute-force: 44 failed sshd authentication attempt(s) from 196.189.237.117 on port 22 (automated sensor)
Brute-Force SSH
🇭🇰 SentinalX by uzumaru
SSH brute-force detected: 5 failed login attempts in the last 1 hour.
Brute-Force SSH
🇫🇮 210kur
SSH brute-force detected from 196.189.237.117
Brute-Force SSH
🇮🇹 gothaf
Brute-Force SSH
🇫🇮 Phish.gg
Brute-Force SSH
🇩🇪 Tom Langer
2026-11-13T08:19:20.522198+00:00 ubuntu sshd[366269]: Invalid user deploy from 196.189.237.117 port 60314 2026-11-13T08:19:20.641692+00:00 ubuntu sshd[366269]: Received disconnect from 196.189.237.117 port 60314:11: Bye Bye [preauth] ...
Brute-Force SSH
Anonymous
Brute-Force SSH
🇫🇷 Lunix
FTP Brute-Force Brute-Force
Anonymous
Brute-Force SSH
🇩🇪 LRob
SSH brute force | 2026-11-13 06:45 UTC
Brute-Force SSH
🇧🇷 helix
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
Brute-Force SSH

Showing 1 to 15 of 449 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 185.223.235.38
🇺🇸 157.254.102.88
🇧🇩 117.103.83.1
🇳🇱 89.21.67.174
🇳🇱 81.19.216.67
🇮🇳 45.120.127.115
🇧🇪 35.210.223.144
🇧🇪 35.206.150.39
🇬🇧 5.226.140.86
🇧🇷 205.210.31.210
🇺🇸 185.61.221.89
🇺🇸 173.211.32.198
🇺🇸 167.71.30.248
🇩🇪 69.5.169.30
🇨🇳 58.48.170.235
🇺🇸 57.141.16.94
🇺🇸 52.103.7.21
🇳🇱 45.148.10.171
🇺🇸 23.95.157.44
🇲🇽 189.232.41.11
feedback