This IP address has been reported a total of
22
times from
16 distinct
sources.
196.189.245.145 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Blocked by UFW (TCP on 23)
Source port: 62866
TTL: 44
Packet length: 60
TOS: 0x08
This report (for ...
show moreBlocked by UFW (TCP on 23)
Source port: 62866
TTL: 44
Packet length: 60
TOS: 0x08
This report (for 196.189.245.145) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
(smtpauth) Failed SMTP AUTH login from 196.189.245.145 (ET/Ethiopia/-): 5 in the last 3600 secs; Por ...
show more(smtpauth) Failed SMTP AUTH login from 196.189.245.145 (ET/Ethiopia/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2025-11-18 14:47:42 dovecot_plain authenticator failed for (DESKTOP-RBCE7C0) [196.189.245.145]:34214: 535 Incorrect authentication data
2025-11-18 14:47:47 dovecot_plain authenticator failed for (DESKTOP-RBCE7C0) [196.189.245.145]:33169: 535 Incorrect authentication data
2025-11-18 14:48:15 dovecot_plain authenticator failed for (DESKTOP-RBCE7C0) [196.189.245.145]:33759: 535 Incorrect authentication data
2025-11-18 14:51:27 dovecot_plain authenticator failed for (DESKTOP-RBCE7C0) [196.189.245.145]:33339: 535 Incorrect authentication data ([email protected])
2025-11-18 14:51:34 dovecot_plain authenticator failed for (DESKTOP-RBCE7C0) [196.189.245.145]:33195: 535 Incorrect authentication data (set_id=alyssa)
show less
(smtpauth) Failed SMTP AUTH login from 196.189.245.145 (ET/Ethiopia/-): 5 in the last 3600 secs; Por ...
show more(smtpauth) Failed SMTP AUTH login from 196.189.245.145 (ET/Ethiopia/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2025-11-18 06:11:53 dovecot_plain authenticator failed for (DESKTOP-RBCE7C0) [196.189.245.145]:32802: 535 Incorrect authentication data ([email protected])
2025-11-18 06:12:01 dovecot_plain authenticator failed for (DESKTOP-RBCE7C0) [196.189.245.145]:34076: 535 Incorrect authentication data ([email protected])
2025-11-18 06:12:07 dovecot_plain authenticator failed for (DESKTOP-RBCE7C0) [196.189.245.145]:32854: 535 Incorrect authentication data (set_id=9813773888941)
2025-11-18 06:12:22 dovecot_plain authenticator failed for (DESKTOP-RBCE7C0) [196.189.245.145]:34320: 535 Incorrect authentication data ([email protected])
2025-11-18 06:12:28 dovecot_plain authenticator failed for (DESKTOP-RBCE7C0) [196.189.245.145]:33740: 535 Incorrect authentication data (set_id=9813773888941)
show less
Brute-Force
SSH
Anonymous
scanning http requests from known botnet
Web App Attack
Anonymous
scanning http requests from known botnet
Web App Attack
Anonymous
Nov 15 19:50:18 shubashi sshd[1443962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ...
show moreNov 15 19:50:18 shubashi sshd[1443962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.189.245.145 user=[redacted]
Nov 15 19:50:20 shubashi sshd[1443962]: Failed password for [redacted] from 196.189.245.145 port 34187 ssh2
Nov 15 19:50:22 shubashi sshd[1443976]: Invalid user [redacted] from 196.189.245.145 port 33797
Nov 15 19:50:23 shubashi sshd[1443976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.189.245.145
Nov 15 19:50:25 shubashi sshd[1443976]: Failed password for [redacted] from 196.189.245.145 port 33797 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 22 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ