196.189.89.254
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Ethio Telecom
- Usage Type
- Fixed Line ISP
- ASN
- AS24757
- Domain Name
- ethiotelecom.et
- Country
- 🇪🇹 Ethiopia
- City
- Addis Ababa, Addis Ababa
Abuse Reports
Total reports
14 from
13 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 RAP |
2026-10-26 06:50:04 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇺🇸 cwytech |
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/pf-geofence-high.
|
Hacking | |
| 🇳🇱 EGP Abuse Dept |
Unauthorized connection to Telnet port 23
|
Port Scan Hacking | |
| 🇹🇼 kk_it_man |
honey catch
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:3000 dst:23
|
Port Scan | |
| 🇺🇸 jaxyral |
|
Brute-Force SSH Hacking | |
| 🇺🇸 cybsecaoccol |
unauthorized connection or malicious port scan attempted on tcp port - corp
|
Port Scan Hacking | |
| 🇫🇷 Hiigara |
connection attempt : 196.189.89.254 on port : tcp/23 (Telnet)
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 23)
Source port: 3835
TTL: 45
Packet length: 60
TOS: 0x08
This report (for 196.189.89.254) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇧🇾 stroytrest |
2026-10-13T12:55:36.780729+03:00 gate kernel: [947626.670386] nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=196.189.89.254 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=46 ID=44508 DF PROTO=TCP SPT=6494 DPT=23 WINDOW=29200 RES=0x00 SYN URGP=0
...
|
Port Scan | |
| 🇧🇾 sashan |
2026-10-13T12:45:24.962081+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=196.189.89.254 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=46 ID=60534 DF PROTO=TCP SPT=5182 DPT=23 WINDOW=29200 RES=0x00 SYN URGP=0
...
|
Port Scan | |
| Anonymous |
denied Telnet access attempt. destination port 23.
|
Port Scan Brute-Force | |
| 🇧🇾 sashan |
2026-10-12T23:35:29.264051+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=196.189.89.254 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=3974 DF PROTO=TCP SPT=7370 DPT=23 WINDOW=29200 RES=0x00 SYN URGP=0
...
|
Port Scan | |
| Anonymous |
Unauthorized connection to SMB port 445
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown