196.189.239.200

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
26% Elevated
25 reports
21 reporters · latest 6 hours ago
ISP
Ethio Telecom
Usage Type
Fixed Line ISP
ASN
AS24757
Domain Name
ethiotelecom.et
Country
🇪🇹 Ethiopia
City
Addis Ababa, Addis Ababa
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
25 from 21 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 3 🇦🇺 Australia 1
Most common categories Port Scan 3 Brute-Force 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 vtchost.com
portscan on honeypot system ...
Port Scan
🇫🇷 noi
honeypot proto=TCP dpt=445 flags=SYN hits=1 window=1h
Port Scan
🇦🇺 dyln
Dyls honeypot brute-force: SMB (4 total hits)
Brute-Force
🇫🇷 Kejult
Honeypot Finding: SMB activity on TCP/445; 4 Dionaea events.
Port Scan
🇩🇪 mist x
Honeypot SMB Probe: Port 445 SMB scan and exploit handshake probe.
Port Scan Hacking
Anonymous
denied SMB access attempt. destination port 445.
Port Scan Hacking
🇩🇪 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 445/SMB | Proto: TCP(1) | Flags: all SYN | TTL: 114 | Len: 52B | Win: 8192(1) | F2B/ufw-honeypot@2026-08-27T07:27:33Z
Port Scan Hacking
🇩🇪 VentryShield
p0t honeypot: unknown connection on port 445/tcp, 88 bytes received from client
Port Scan
🇫🇷 EvoX
Hacking
🇫🇷 vtchost.com
Port Scan
🇫🇷 vtchost.com
Port Scan
🇵🇱 nfsec.pl
Detected: TCP scan on port: 445 with flags: SYN
Port Scan
🇦🇺 Block Rockin' Beats
Attempted connection to TCP port 445 (SMB)
Port Scan
🇬🇧 PeravixGroup
Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud
Hacking Exploited Host
🇬🇧 PeravixGroup
Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud
Hacking Exploited Host

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 191.7.159.201
🇨🇴 186.81.124.49
🇺🇸 129.121.143.150
🇻🇳 123.31.31.125
🇨🇿 85.207.93.67
🇳🇱 77.239.124.33
🇬🇧 51.68.214.191
🇪🇸 217.76.139.77
🇳🇱 160.119.71.56
🇫🇷 147.135.213.170
🇳🇱 86.38.187.127
🇦🇪 83.110.166.247
🇭🇰 52.128.227.50
🇸🇻 45.180.240.2
🇨🇦 34.186.208.160
🇯🇵 34.84.183.201
🇸🇬 194.5.82.102
🇺🇸 162.216.150.159
🇬🇧 89.37.172.143
🇧🇬 79.124.58.18
feedback