🇪🇹 Ethiopia: live cyber threat activity

Malicious IPs, malware and ransomware victims in Ethiopia.

63Malicious IPs listed#58 of 182 countries · 0.1% of the world

13New in the last 24hfirst seen by any feed

10Reported by 2+ feedsindependent sources agree

0Ransomware victimsposted in the last 30 days

View Ethiopia on the live map →All listed IPs in Ethiopia

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

By state or region

Addis Ababa61
Amhara1
Oromiya1

By city

Addis Ababa61
Kombolcha1
Jimma1

Networks hosting the most

Network	IPs
AS24757 EthioNet	62
AS328988 SAFARICOM TELECOMMUNICATIONS ETHIOPIA PLC	1

Malware families served from Ethiopia

AdaptixC21

Most recently reported

IP	Role	Family / threat	Where	Network	Reported by	Last reported (UTC)
196.189.98[.]110	Malware	Malware download	Addis Ababa, Addis Ababa	AS24757 EthioNet	aggregated list	2026-10-12 06:02
102.213.71[.]234	Attacker	Attacking host	Addis Ababa, Addis Ababa	AS328988 SAFARICOM TELECOMMUNICATIONS ETHIOPIA PLC	1 feed	2026-10-12 05:55
196.189.130[.]28	Malware	Malware download	Addis Ababa, Addis Ababa	AS24757 EthioNet	aggregated list	2026-10-12 04:35
196.189.35[.]172	Malware	Malware download	Addis Ababa, Addis Ababa	AS24757 EthioNet	aggregated list	2026-10-12 04:35
196.189.35[.]226	Malware	Malware download	Addis Ababa, Addis Ababa	AS24757 EthioNet	aggregated list	2026-10-12 04:35
196.189.96[.]59	Malware	Malware download	Addis Ababa, Addis Ababa	AS24757 EthioNet	aggregated list	2026-10-12 04:35
196.189.98[.]77	Malware	Malware download	Addis Ababa, Addis Ababa	AS24757 EthioNet	aggregated list	2026-10-12 04:35
196.190.1[.]39	Malware	Malware download	Addis Ababa, Addis Ababa	AS24757 EthioNet	aggregated list	2026-10-12 04:35
196.190.69[.]149	Malware	Malware download	Kombolcha, Amhara	AS24757 EthioNet	aggregated list	2026-10-12 04:35
196.191.231[.]12	Malware	Malware download	Addis Ababa, Addis Ababa	AS24757 EthioNet	aggregated list	2026-10-12 04:35
196.188.63[.]222	Attacker	On multiple blocklists	Addis Ababa, Addis Ababa	AS24757 EthioNet	1 feed	2026-10-12 04:35
213.55.72[.]171	Attacker	Attacking host	Addis Ababa, Addis Ababa	AS24757 EthioNet	1 feed	2026-10-12 01:40
196.191.133[.]60	Attacker	Attacking host	Addis Ababa, Addis Ababa	AS24757 EthioNet	1 feed	2026-10-11 14:56
196.189.197[.]131	Malware	Malware download	Addis Ababa, Addis Ababa	AS24757 EthioNet	aggregated list	2026-10-11 04:31
196.189.68[.]239	Malware	Malware download	Addis Ababa, Addis Ababa	AS24757 EthioNet	aggregated list	2026-10-11 04:31
197.156.113[.]122	Attacker	Attacking host	Addis Ababa, Addis Ababa	AS24757 EthioNet	2 feeds	2026-10-11 04:30
196.189.91[.]218	Attacker	Attacking host	Addis Ababa, Addis Ababa	AS24757 EthioNet	2 feeds	2026-10-10 04:30
196.188.75[.]58	Malware	Malware download	Addis Ababa, Addis Ababa	AS24757 EthioNet	aggregated list	2026-10-10 04:30
196.188.97[.]116	Attacker	Attacking host	Addis Ababa, Addis Ababa	AS24757 EthioNet	1 feed	2026-10-10 04:30
196.190.229[.]115	Malware	Malware download	Addis Ababa, Addis Ababa	AS24757 EthioNet	aggregated list	2026-10-09 17:32
196.188.175[.]244	Attacker	Attacking host	Addis Ababa, Addis Ababa	AS24757 EthioNet	1 feed	2026-10-09 16:50
196.191.104[.]40	Malware	Malware download	Addis Ababa, Addis Ababa	AS24757 EthioNet	aggregated list	2026-10-09 04:47
196.188.187[.]21	Attacker	On multiple blocklists	Addis Ababa, Addis Ababa	AS24757 EthioNet	2 feeds	2026-10-09 04:27
196.189.51[.]64	Attacker	On multiple blocklists	Addis Ababa, Addis Ababa	AS24757 EthioNet	1 feed	2026-10-09 04:27
196.190.180[.]18	Attacker	On multiple blocklists	Addis Ababa, Addis Ababa	AS24757 EthioNet	1 feed · 1 sandbox sample	2026-10-09 04:27

See every listed IP in Ethiopia →

Ransomware victims in Ethiopia

No ransomware victims from Ethiopia posted in the last 90 days.