AbuseIPDB » 197.156.85.73

197.156.85.73 was found in our database!

This IP was reported 3,319 times. Confidence of Abuse is 100%: ?

100%

ISP	To ERs logically close to BL-BR
Usage Type	Fixed Line ISP
ASN	AS24757
Domain Name	ethiotelecom.et
Country	Ethiopia
City	Addis Ababa, Addis Ababa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 197.156.85.73

Whois 197.156.85.73

IP Abuse Reports for 197.156.85.73:

This IP address has been reported a total of 3,319 times from 807 distinct sources. 197.156.85.73 was first reported on December 1st 2020, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
mielkan.com	2025-06-19 06:01:24 (2 days ago)	| blocked | mielkan-syd [443/tcp] | source port: 50271 | ttl: 104 | packet length: 52 | tos: 0x00 |	Port Scan Web App Attack
rtbh.com.tr	2025-06-06 20:07:00 (2 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
ThreatBook.io	2025-06-05 22:30:58 (2 weeks ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/197.156.85.73	SSH
rtbh.com.tr	2025-06-05 20:06:59 (2 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Study Bitcoin 🤗	2025-06-05 14:02:19 (2 weeks ago)	Port probe to tcp/22 (ssh) [srv128]	Port Scan Brute-Force SSH
Anonymous	2025-06-05 13:46:00 (2 weeks ago)	SSH Brute-Force Attack	Brute-Force SSH
Study Bitcoin 🤗	2025-06-05 13:39:06 (2 weeks ago)	2 port probes: 2x tcp/22 (ssh) [srv128]	Port Scan Brute-Force SSH
Study Bitcoin 🤗	2025-06-05 13:35:19 (2 weeks ago)	SSH Fail2Ban [srv128]	Brute-Force
Study Bitcoin 🤗	2025-06-05 13:26:20 (2 weeks ago)	Port probe to tcp/22 (ssh) [srv128]	Port Scan Brute-Force SSH
Study Bitcoin 🤗	2025-06-05 13:20:26 (2 weeks ago)	Port probe to tcp/22 (ssh) [srv128]	Port Scan Brute-Force SSH
diego	2025-06-05 13:00:30 (2 weeks ago)	[rede-44-49] (sshd) Failed SSH login from 197.156.85.73 (ET/Ethiopia/-): 5 in the last 3600 secs; Po ... show more[rede-44-49] (sshd) Failed SSH login from 197.156.85.73 (ET/Ethiopia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jun 5 09:29:38 sshd[6904]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.156.85.73 user=[USERNAME] Jun 5 09:29:40 sshd[6904]: Failed password for [USERNAME] from 197.156.85.73 port 2035 ssh2 Jun 5 09:50:30 sshd[8286]: Invalid user [USERNAME] from 197.156.85.73 port 55078 Jun 5 09:50:32 sshd[8286]: Failed password for invalid user [USERNAME] from 197.156.85.73 port 55078 ssh2 Jun 5 10:00:26 sshd[8928]: Invalid user [USERNAME] from 197.156.85.73 show less	Port Scan
linuxgemini	2025-06-05 12:46:05 (2 weeks ago)	fail2banned (ssh brute)	Brute-Force SSH
yvoictra	2025-06-05 11:24:59 (2 weeks ago)	Jun 5 13:24:58 muse sshd[604619]: Invalid user kelvin from 197.156.85.73 port 9177 ...	Brute-Force SSH
diego	2025-06-05 11:10:35 (2 weeks ago)	[rede-44-49] (sshd) Failed SSH login from 197.156.85.73 (ET/Ethiopia/-): 5 in the last 3600 secs; Po ... show more[rede-44-49] (sshd) Failed SSH login from 197.156.85.73 (ET/Ethiopia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jun 5 07:55:07 sshd[894]: Invalid user [USERNAME] from 197.156.85.73 port 10059 Jun 5 07:55:09 sshd[894]: Failed password for invalid user [USERNAME] from 197.156.85.73 port 10059 ssh2 Jun 5 08:00:45 sshd[1201]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.156.85.73 user=[USERNAME] Jun 5 08:00:46 sshd[1201]: Failed password for [USERNAME] from 197.156.85.73 port 3559 ssh2 Jun 5 08:10:31 sshd[1826]: pam_unix(sshd:auth): authentication failure; show less	Port Scan
mielkan.com	2025-06-05 10:49:52 (2 weeks ago)	| blocked | mielkan-sfo [22/tcp] | source port: 33207 | ttl: 51 | packet length: 60 | tos: 0x00 |	Port Scan Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩