JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.188.113.85

196.188.113.85 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 45%: ?

45%

ISP	Ethio Telecom
Usage Type	Fixed Line ISP
ASN	AS24757
Domain Name	ethiotelecom.et
Country	🇪🇹 Ethiopia
City	Addis Ababa, Addis Ababa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.188.113.85

Whois 196.188.113.85

IP Abuse Reports for 196.188.113.85:

This IP address has been reported a total of 14 times from 12 distinct sources. 196.188.113.85 was first reported on August 3rd 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 ljo	2026-08-29 08:32:59 (3 days ago)	196.188.113.85 - - [29/Aug/2026:10:31:25 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5660 "-" "Jetpack/13 ... show more 196.188.113.85 - - [29/Aug/2026:10:31:25 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5660 "-" "Jetpack/13.0; WordPress/6.1; http://site84620562.com" 196.188.113.85 - - [29/Aug/2026:10:31:37 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5660 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.1)" 196.188.113.85 - - [29/Aug/2026:10:31:45 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5660 "-" "Jetpack by WordPress.com" 196.188.113.85 - - [29/Aug/2026:10:31:56 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5660 "-" "Jetpack by WordPress.com" 196.188.113.85 - - [29/Aug/2026:10:32:07 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5660 "-" "WordPress.com; https://wordpress.com" 196.188.113.85 - - [29/Aug/2026:10:32:17 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5660 "-" "WordPress.com; https://wordpress.com" 196.188.113.85 - - [29/Aug/2026:10:32:27 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5660 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.4)" 196.188.113.85 - - [29/Aug/2026:10:32:37 +0200] "POST /xmlrpc.php HTTP/1.1" ... show less	Web App Attack
🇫🇷 dynamix	2026-08-28 13:51:02 (3 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇩🇪 konseptit	2026-08-28 11:09:19 (3 days ago)	(wordpress) Failed wordpress login from 196.188.113.85 (ET/Ethiopia/-)	Brute-Force
Anonymous	2026-08-28 10:41:15 (3 days ago)	POST /xmlrpc.php HTTP/1.1 ...	Brute-Force
🇺🇸 gui-ying233	2026-08-24 09:16:20 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇬🇧 Apache	2026-08-17 06:56:32 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 196.188.113.85 (ET/Ethiopia/-): 5 in the last 3 ... show more (mod_security) mod_security (id:240335) triggered by 196.188.113.85 (ET/Ethiopia/-): 5 in the last 300 secs show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 06:56:18 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 196.188.113.85 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 196.188.113.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 02:56:11.393414 2026] [security2:error] [pid 25241:tid 25241] [client 196.188.113.85:28776] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 196.188.113.85 (+1 hits since last alert)\|wwfstudio.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "wwfstudio.com"] [uri "/xmlrpc.php"] [unique_id "aoKwi3GWp05o80SR5mGhHQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 06:25:45 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 196.188.113.85 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 196.188.113.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 02:25:40.898273 2026] [security2:error] [pid 30390:tid 30407] [client 196.188.113.85:29425] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 196.188.113.85 (+1 hits since last alert)\|worldecom.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "worldecom.org"] [uri "/xmlrpc.php"] [unique_id "aoKpZKCXuqGc67PNZZtEAwAAAE4"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-08-17 05:33:47 (2 weeks ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS (fault code)	Web App Attack
🇩🇪 SMARTNET	2026-05-27 06:03:53 (3 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: f33ea243-b344-42fe-b994-8adedb9f85ca	DDoS Attack
Anonymous	2026-03-03 13:06:34 (5 months ago)	Blocked: Reason='Possible SQL injection activity (24/60 min)'; Requests=24	SQL Injection
Anonymous	2026-01-09 09:32:59 (7 months ago)	Unauthorized connection attempt on Port 2323	Port Scan Hacking Exploited Host
🇳🇱 exxos	2025-08-03 23:22:06 (1 year ago)	HTTP1.x attacks	DDoS Attack
🇳🇱 exxos	2025-08-03 11:10:01 (1 year ago)	HTTP1.x attacks	DDoS Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 177.227.48.15

🇳🇱 34.13.148.18

🇺🇸 24.175.66.26

🇧🇷 187.9.247.58

🇮🇳 186.244.181.102

🇦🇷 181.209.58.58

🇦🇷 181.46.68.38

🇧🇷 177.129.205.107

🇺🇸 147.185.132.125

🇺🇸 136.29.52.7

🇧🇭 109.161.168.197

🇩🇪 91.22.231.204

🇮🇳 66.116.251.167

🇸🇬 47.84.138.116

🇸🇬 43.133.61.254

🇺🇸 20.65.146.225

🇺🇸 20.65.146.85

🇷🇴 2.57.122.53

🇰🇷 1.237.155.150

🇩🇪 213.209.159.25