JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.189.28.199

196.189.28.199 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 25%: ?

25%

ISP	Ethio Telecom
Usage Type	Fixed Line ISP
ASN	AS24757
Domain Name	ethiotelecom.et
Country	🇪🇹 Ethiopia
City	Addis Ababa, Addis Ababa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.189.28.199

Whois 196.189.28.199

IP Abuse Reports for 196.189.28.199:

This IP address has been reported a total of 18 times from 13 distinct sources. 196.189.28.199 was first reported on September 19th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 gui-ying233	2026-09-14 06:31:15 (2 days ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-23 16:12:22 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-22 18:27:38 (3 weeks ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 floreriaexpress	2026-08-20 19:02:40 (3 weeks ago)	FakeADS-Anti: country:ET \| https://floreriaexpresschile.cl/catalogo/?max_price=0&min_price=0.110889& ... show more FakeADS-Anti: country:ET \| https://floreriaexpresschile.cl/catalogo/?max_price=0&min_price=0.110889&orderby=price&per_page=24&per_row=2&shop_view=grid&shortcode=1&wmc-currency=USD show less	Bad Web Bot
🇮🇩 sockominfo	2026-08-20 17:00:53 (3 weeks ago)	Zimbra: Bruteforce attempt detected.. Threat Score: 8.9/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 1 ... show more Zimbra: Bruteforce attempt detected.. Threat Score: 8.9/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 10/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 87%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Exploited Host
🇮🇩 sockominfo	2026-08-20 16:00:09 (3 weeks ago)	Zimbra: Bruteforce attempt detected.. Threat Score: 7.9/10 (HIGH). Reported by TangerangKota-CSIRT. ... show more Zimbra: Bruteforce attempt detected.. Threat Score: 7.9/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇺🇸 kosada.com	2026-08-02 19:26:03 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-07-17 19:15:09 (1 month ago)	Large-scale coordinated botnet (777+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ... show more Large-scale coordinated botnet (777+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Attack Signature Blocked: /wishlist/index/add/product/9251/form_key/Eke3d7EFB2aO790R/ \| UA: Mozilla/5.0 (Linux; Android 3.0) AppleWebKit/536.1 (KHTML, like Gecko) Chrome/60.0.848.0 Safari/536.1 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
Anonymous	2026-06-03 07:37:30 (3 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 xmission.com	2026-04-02 15:40:48 (5 months ago)	Blocked by UFW (TCP on 9101) Source port: 22953 TTL: 45 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 9101) Source port: 22953 TTL: 45 Packet length: 60 TOS: 0x08 This report (for 196.189.28.199) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-03-21 19:50:54 (5 months ago)	DDoS botnet 510.000+ IPs; URL with bing/trustpilot/githubhelp and %C2%A4 or \xc2\xa4. NEW 09/2025: a ... show more DDoS botnet 510.000+ IPs; URL with bing/trustpilot/githubhelp and %C2%A4 or \xc2\xa4. NEW 09/2025: amplification attacks via third-parties e.g. HTTP_USER_AGENT facebookexternalhit/meta-externalagent/meta-externalfetcher or IPs from googleusercontent.com with fake HTTP_REFERER foxnews.com/newsweek.com/upwork.com/activision.com/... Port 443. show less	DDoS Attack Bad Web Bot Web App Attack
Anonymous	2025-11-17 12:43:42 (9 months ago)	scanning http requests from known botnet	Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-11-08 18:26:24 (10 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2025-08-11 06:46:12 (1 year ago)	HTTP(S) DDoS %C2%A4 in URL	DDoS Attack
🇪🇸 Global Cyber Police	2025-07-28 08:34:30 (1 year ago)	Malicious bot activity detected: Hitting honeypot page. Part of massive botnet.	DDoS Attack Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 193.46.255.86

🇧🇷 172.69.11.37

🇻🇳 103.172.236.241

🇺🇸 54.173.50.122

🇸🇬 2a12:f540:7708:9498:4ab0:2388:14ab:a3cc

🇿🇼 197.221.232.44

🇺🇸 195.184.76.29

🇨🇺 190.6.76.90

🇦🇷 186.138.232.147

🇺🇸 185.117.225.16

🇨🇳 180.76.233.159

🇦🇹 178.165.202.166

🇩🇪 167.94.146.37

🇧🇷 131.196.48.203

🇹🇼 128.14.226.236

🇵🇱 109.205.211.23

🇧🇩 103.12.205.20

🇳🇱 81.19.216.95

🇫🇮 80.248.243.202

🇷🇺 78.29.105.72