JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.188.160.157

196.188.160.157 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 15%: ?

15%

ISP	Ethio Telecom
Usage Type	Fixed Line ISP
ASN	AS24757
Domain Name	ethiotelecom.et
Country	🇪🇹 Ethiopia
City	Addis Ababa, Addis Ababa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.188.160.157

Whois 196.188.160.157

IP Abuse Reports for 196.188.160.157:

This IP address has been reported a total of 13 times from 10 distinct sources. 196.188.160.157 was first reported on May 13th 2022, and the most recent report was 54 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-31 09:11:58 (54 minutes ago)	2026-07-31T11:11:42.136804+02:00 postfix/smtpd[2432084]: NOQUEUE: reject: RCPT from unknown[196.188 ... show more 2026-07-31T11:11:42.136804+02:00 postfix/smtpd[2432084]: NOQUEUE: reject: RCPT from unknown[196.188.160.157]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [196.188.160.157]; proto=ESMTP helo=<[196.188.160.157]> show less	Email Spam
🇨🇭 Origon	2026-07-31 07:45:10 (2 hours ago)	NOQUEUE - IP: 196.188.160.157 - Jul 31 09:45:10 plesk postfix/smtpd[1178590]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 196.188.160.157 - Jul 31 09:45:10 plesk postfix/smtpd[1178590]: NOQUEUE: reject: RCPT from unknown[196.188.160.157]: 554 5.7.1 Service unavailable; Client host [196.188.160.157] blocked using dnsbl-1.uceprotect.net; IP 196.188.160.157 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=196.188.160.157; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[196.188.160.157]> show less	Email Spam
🇺🇸 TPI-Abuse	2026-05-19 23:05:40 (2 months ago)	(mod_security) mod_security (id:240335) triggered by 196.188.160.157 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 196.188.160.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 19:05:32.346581 2026] [security2:error] [pid 23311:tid 23311] [client 196.188.160.157:12618] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 196.188.160.157 (+1 hits since last alert)\|lightbender.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lightbender.net"] [uri "/xmlrpc.php"] [unique_id "agzsvH3U9jGLbyscbFJfpgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-19 16:04:45 (2 months ago)	Attac	Brute-Force
🇺🇸 TPI-Abuse	2026-05-19 13:16:18 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 196.188.160.157 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 196.188.160.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 09:16:14.119358 2026] [security2:error] [pid 24130:tid 24130] [client 196.188.160.157:12836] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|johncyphers.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "johncyphers.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agxintoPQWtz_EG07XMRTQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 el-brujo	2025-12-18 19:15:00 (7 months ago)	DDoS Attack Layer 7 Meri Botnet	DDoS Attack
🇳🇱 exxos	2025-08-27 09:03:01 (11 months ago)	Attacks with Bad user agents	Hacking
🇳🇱 exxos	2025-07-30 01:08:27 (1 year ago)	http-no-verb	Hacking
🇳🇱 exxos	2025-07-29 02:28:40 (1 year ago)	http-no-verb	Hacking
🇪🇸 Global Cyber Police	2025-07-28 09:06:36 (1 year ago)	Malicious bot activity detected: Hitting honeypot page. Part of massive botnet.	DDoS Attack Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Web App Attack
🇫🇷 Sklurk	2024-10-17 08:28:53 (1 year ago)	Web App Attack	Web App Attack
🇮🇹 LTM	2023-12-21 07:20:01 (2 years ago)	Mail - Generic Spam	Email Spam Spoofing
🇺🇸 vestibtech	2022-05-13 11:11:58 (4 years ago)	May 13 09:11:57 Host-KLAX-C postfix/in_clean/cleanup[3406561]: 177471C4795: reject: header Subject: ... show more May 13 09:11:57 Host-KLAX-C postfix/in_clean/cleanup[3406561]: 177471C4795: reject: header Subject: You have an outstanding payment. Debt settlement required. from unknown[196.188.160.157]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[196.188.160.157]>: 5.7.1 Message identified as SPAM - Rule #502 ... show less	Email Spam

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.175

🇳🇱 193.25.167.166

🇺🇸 154.30.110.114

🇨🇳 115.191.19.238

🇬🇧 92.41.54.125

🇮🇳 59.95.124.149

🇺🇸 54.235.191.179

🇲🇾 49.124.148.189

🇨🇦 45.38.78.131

🇮🇳 42.110.136.69

🇩🇪 20.113.56.22

🇺🇸 20.65.194.162

🇩🇪 2.27.43.183

🇳🇱 213.176.26.41

🇮🇳 202.141.104.14

🇺🇸 174.83.150.126

🇨🇳 111.113.89.36

🇻🇳 103.200.22.154

🇸🇬 101.47.159.125

🇪🇸 79.116.3.242