196.191.48.3
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- IP_Pool_for_NAT_DD_GER
- Usage Type
- Fixed Line ISP
- ASN
- AS24757
- Domain Name
- ethiotelecom.et
- Country
- 🇪🇹 Ethiopia
- City
- Harar, Harari
Abuse Reports
Total reports
14 from
13 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
SMTP brute force - auth failed
|
Brute-Force Exploited Host | |
| 🇫🇷 ingroscart.it |
(smtpauth) Failed SMTP AUTH login from 196.191.48.3 (ET/Ethiopia/Addis Ababa/Addis Ababa/-/[redacted])
|
Brute-Force | |
| 🇩🇪 nyuuzyou |
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-03T10:34:58Z.
|
Bad Web Bot | |
| Anonymous |
SMTP brute force - auth failed
|
Brute-Force Exploited Host | |
| 🇳🇱 maxxsense |
(postfix-unknown) Failed postfix unknown login with username [redacted] from 196.191.48.3 (ET/Ethiopia/-)
|
Hacking | |
| 🇷🇴 clauss |
IP reached maximum auth failures for a one day block
|
Brute-Force | |
| Anonymous |
Oct 29 13:18:27 bka postfix/submission/smtpd[234284]: warning: unknown[196.191.48.3]: SASL PLAIN authentication failed: (reason unavailable)
...
|
Brute-Force | |
| 🇫🇷 pwozniak |
lost connection after AUTH from unknown[196.191.48.3]
|
Brute-Force | |
| 🇨🇦 DidierMX |
Wazuh Alert: Exim Auth Failed from 196.191.48.3
|
Brute-Force Web App Attack | |
| 🇬🇧 killian7603 |
Logon Policy Violation
|
Email Spam Spoofing Brute-Force | |
| 🇳🇿 Tripwire |
Wordpress login attempts
|
Brute-Force Web App Attack | |
| 🇩🇪 niceshops.com |
Web Attack ([25/May/2023:09:22:16.974] GET /wp-login.php)
|
Web App Attack | |
| 🇲🇾 Sean64 |
|
Email Spam Brute-Force | |
| 🇺🇸 VSM Networks |
Credential Stuffing
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown