JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.75.188.116

196.75.188.116 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 75%: ?

75%

ISP	ADSL_Maroc_telecom
Usage Type	Fixed Line ISP
ASN	AS36903
Domain Name	menara.ma
Country	🇲🇦 Morocco
City	Rabat, Rabat-Sale-Kenitra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.75.188.116

Whois 196.75.188.116

IP Abuse Reports for 196.75.188.116:

This IP address has been reported a total of 13 times from 13 distinct sources. 196.75.188.116 was first reported on July 27th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 YF	2026-07-28 14:00:20 (1 hour ago)	Distributed subnet attack — coordinated scanning from multiple IPs in the same /24	DDoS Attack Web App Attack
🇧🇪 Ivo Vynckier	2026-07-28 12:08:00 (3 hours ago)	196.75.188.116 - - [28/Jul/2026:02:47:17 +0200] "GET /wp-includes/ HTTP/1.1" 301 299 "-" "Mozilla/5. ... show more 196.75.188.116 - - [28/Jul/2026:02:47:17 +0200] "GET /wp-includes/ HTTP/1.1" 301 299 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0" 196.75.188.116 - - [28/Jul/2026:02:47:19 +0200] "GET /wp-content/uploads/ HTTP/1.1" 301 306 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0" 196.75.188.116 - - [28/Jul/2026:02:47:21 +0200] "GET /wp-admin/includes/ HTTP/1.1" 301 305 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" show less	Web App Attack
🇸🇪 SkyDancer	2026-07-28 11:21:23 (3 hours ago)	Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blo ... show more Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X). show less	Hacking Brute-Force
🇫🇷 conseilgouz	2026-07-28 10:54:40 (4 hours ago)	low-(visforms) : try to access forms...	Hacking
🇩🇪 hchristo	2026-07-28 09:39:07 (5 hours ago)	[Tue Jul 28 11:38:48.876691 2026] [access_compat:error] [pid 13124:tid 13206] [client 196.75.188.116 ... show more [Tue Jul 28 11:38:48.876691 2026] [access_compat:error] [pid 13124:tid 13206] [client 196.75.188.116:54616] AH01797: client denied by server configuration: /var/www/kd1121/htdocs/ms-concept/xmlrpc.php [Tue Jul 28 11:38:50.963083 2026] [access_compat:error] [pid 13124:tid 13222] [client 196.75.188.116:54753] AH01797: client denied by server configuration: /var/www/kd1121/htdocs/ms-concept/xmlrpc.php [Tue Jul 28 11:38:53.355095 2026] [access_compat:error] [pid 13124:tid 13183] [client 196.75.188.116:54874] AH01797: client denied by server configuration: /var/www/kd1121/htdocs/ms-concept/xmlrpc.php [Tue Jul 28 11:38:56.975458 2026] [access_compat:error] [pid 13124:tid 13193] [client 196.75.188.116:55109] AH01797: client denied by server configuration: /var/www/kd1121/htdocs/ms-concept/xmlrpc.php [Tue Jul 28 11:39:06.586513 2026] [access_compat:error] [pid 13124:tid 13184] [client 196.75.188.116:55525] AH01797: client denied by server configuration: /var/www/kd1121/htdocs/ms-concept/xmlrpc ... show less	Brute-Force
🇸🇪 KIDOS	2026-07-28 07:28:24 (7 hours ago)	CrowdSec detected malicious activity	DDoS Attack
Anonymous	2026-07-28 06:05:29 (9 hours ago)	Blocked: Reason='Suspicious traffic score=70 (review-based detection)'; Requests=26	Hacking
🇺🇸 Jason Howell	2026-07-28 06:00:39 (9 hours ago)	196.75.188.116 - - [28/Jul/2026:01:00:14 -0500] "GET //wp-login.php HTTP/1.1" 200 5551 "-" "Mozilla/ ... show more 196.75.188.116 - - [28/Jul/2026:01:00:14 -0500] "GET //wp-login.php HTTP/1.1" 200 5551 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 Edg/150.0.0.0" 196.75.188.116 - - [28/Jul/2026:01:00:15 -0500] "GET /wp-admin/load-styles.php?c=0&dir=ltr&load%5B%5D=dashicons,buttons,forms,l10n,login&ver=4.9.29 HTTP/1.1" 200 41334 "https://www.11thstreetprecinct.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 Edg/150.0.0.0" 196.75.188.116 - - [28/Jul/2026:01:00:15 -0500] "GET /favicon.ico HTTP/1.1" 200 224 "https://www.11thstreetprecinct.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 Edg/150.0.0.0" 196.75.188.116 - - [28/Jul/2026:01:00:38 -0500] "POST /wp-login.php HTTP/1.1" 200 5930 "https://www.11thstreetprecinct.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Wi ... show less	Web App Attack
🇳🇱 ipoac.nl	2026-07-27 23:00:43 (16 hours ago)	ipoac.nl:80 196.75.188.116 - - [28/Jul/2026:01:00:42 +0200] - "GET /wp-admin/includes/ HTTP/1.1" 302 ... show more ipoac.nl:80 196.75.188.116 - - [28/Jul/2026:01:00:42 +0200] - "GET /wp-admin/includes/ HTTP/1.1" 302 943 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" show less	Bad Web Bot
Anonymous	2026-07-27 22:58:04 (16 hours ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇩🇪 Admin-Gito	2026-07-27 22:38:51 (16 hours ago)	196.75.188.116 - - [28/Jul/2026:00:33:49 +0200] "GET /wp-includes/template-loader.php HTTP/1.1" 500 ... show more 196.75.188.116 - - [28/Jul/2026:00:33:49 +0200] "GET /wp-includes/template-loader.php HTTP/1.1" 500 373 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 196.75.188.116 - - [28/Jul/2026:00:33:50 +0200] "GET /wp-includes/class-http.php HTTP/1.1" 500 373 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0" 196.75.188.116 - - [28/Jul/2026:00:33:53 +0200] "GET /wp-includes/block-patterns.php HTTP/1.1" 500 373 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0" 196.75.188.116 - - [28/Jul/2026:00:33:54 +0200] "GET /wp-includes/class-wp-simplepie-file.php HTTP/1.1" 500 373 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 196.75.188.116 - - [28/Jul/2026:00:33:58 +0200] "GET /wp-includes/class-walker-page.php HTTP/1.1" 500 373 "-" "Mozilla/5.0 (X11; ... show less	Web App Attack
🇲🇾 Rizzy	2026-07-27 21:23:40 (17 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇬🇧 consul.to	2026-07-27 21:16:23 (18 hours ago)	Web attack/malicious scanning detected	Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 221.160.80.33

🇹🇷 212.174.53.144

🇧🇷 177.116.253.187

🇺🇸 162.216.150.34

🇺🇸 162.216.149.63

🇩🇪 157.230.110.183

🇺🇸 152.232.7.195

🇮🇳 103.230.179.58

🇫🇷 92.205.184.118

🇩🇪 45.151.161.41

🇺🇸 2a09:bac5:9447:3af::5e:6c

🇩🇪 167.94.145.18

🇺🇸 162.216.149.189

🇮🇳 103.181.109.62

🇬🇧 89.37.172.132

🇬🇧 54.38.147.230

🇮🇳 49.43.130.168

🇸🇬 47.128.122.194

🇬🇧 45.133.173.241

🇳🇱 2a00:1450:4013:c01::129