JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 96.231.180.100

96.231.180.100 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 83%: ?

83%

ISP	Verizon Business
Usage Type	Fixed Line ISP
ASN	AS701
Hostname(s)	pool-96-231-180-100.washdc.fios.verizon.net
Domain Name	verizon.com
Country	🇺🇸 United States of America
City	Germantown, Maryland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 96.231.180.100

Whois 96.231.180.100

IP Abuse Reports for 96.231.180.100:

This IP address has been reported a total of 25 times from 17 distinct sources. 96.231.180.100 was first reported on August 12th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-22 23:57:34 (5 hours ago)	(mod_security) mod_security (id:225170) triggered by 96.231.180.100 (pool-96-231-180-100.washdc.fios ... show more (mod_security) mod_security (id:225170) triggered by 96.231.180.100 (pool-96-231-180-100.washdc.fios.verizon.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 19:57:28.314752 2026] [security2:error] [pid 25696:tid 25703] [client 96.231.180.100:55406] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|rawhabitat.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rawhabitat.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aoo3aH6wgJ8CcTxOnsCFGwAAAMQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 konseptit	2026-08-22 23:24:47 (6 hours ago)	(wordpress) Failed wordpress login from 96.231.180.100 (US/United States/pool-96-231-180-100.washdc. ... show more (wordpress) Failed wordpress login from 96.231.180.100 (US/United States/pool-96-231-180-100.washdc.fios.verizon.net) show less	Brute-Force
🇺🇸 TPI-Abuse	2026-08-22 21:14:09 (8 hours ago)	(mod_security) mod_security (id:240335) triggered by 96.231.180.100 (pool-96-231-180-100.washdc.fios ... show more (mod_security) mod_security (id:240335) triggered by 96.231.180.100 (pool-96-231-180-100.washdc.fios.verizon.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 17:14:03.258088 2026] [security2:error] [pid 10579:tid 10579] [client 96.231.180.100:61667] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 96.231.180.100 (+1 hits since last alert)\|gegkal.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "gegkal.com"] [uri "/xmlrpc.php"] [unique_id "aooRG-8XhyWH4EGQr_z7XAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-08-14 18:25:29 (1 week ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇮🇹 Progetto1	2026-08-14 13:00:05 (1 week ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇫🇷 dynamix	2026-08-13 21:28:05 (1 week ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇩🇪 grassau.com	2026-08-13 19:56:48 (1 week ago)	(wordpress) Failed wordpress login from 96.231.180.100 (US/United States/Maryland/Germantown/pool-96 ... show more (wordpress) Failed wordpress login from 96.231.180.100 (US/United States/Maryland/Germantown/pool-96-231-180-100.washdc.fios.verizon.net) show less	Brute-Force
🇫🇷 applemooz	2026-08-13 19:56:13 (1 week ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-13 19:26:02 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 96.231.180.100 (pool-96-231-180-100.washdc.fios ... show more (mod_security) mod_security (id:240335) triggered by 96.231.180.100 (pool-96-231-180-100.washdc.fios.verizon.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 13 15:25:55.535623 2026] [security2:error] [pid 9023:tid 9023] [client 96.231.180.100:52890] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 96.231.180.100 (+1 hits since last alert)\|thehealthyplaceclayton.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thehealthyplaceclayton.com"] [uri "/xmlrpc.php"] [unique_id "an4aQ6b3mvHWb0UNC5T0EAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-08-13 17:53:01 (1 week ago)	Blocked by CSF 13 firewall - Rule: XMLRPC US/United States/pool-96-231-180-100.washdc.fios.verizon.n ... show more Blocked by CSF 13 firewall - Rule: XMLRPC US/United States/pool-96-231-180-100.washdc.fios.verizon.net show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-13 17:23:46 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 96.231.180.100 (pool-96-231-180-100.washdc.fios ... show more (mod_security) mod_security (id:240335) triggered by 96.231.180.100 (pool-96-231-180-100.washdc.fios.verizon.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 13 13:23:38.981406 2026] [security2:error] [pid 401883:tid 401883] [client 96.231.180.100:57050] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 96.231.180.100 (+1 hits since last alert)\|jmichaelpope.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "jmichaelpope.com"] [uri "/xmlrpc.php"] [unique_id "an39mlJ3wgvW_H5FuZwuTAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 QT	2026-08-13 16:50:55 (1 week ago)	Unauthorised WordPress admin login attempted at 2026-08-14 02:50:54 +1000	Web App Attack
🇫🇷 Kenshin869	2026-08-13 16:21:27 (1 week ago)	Wordpress unauthorized access attempt	Brute-Force
🇧🇪 madeit	2026-08-13 16:10:52 (1 week ago)		Web App Attack
🇳🇱 debestelapp	2026-08-13 15:45:07 (1 week ago)		Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.154.184

🇹🇼 198.235.24.124

🇫🇷 176.31.21.38

🇺🇸 147.185.132.154

🇨🇳 123.15.133.166

🇨🇳 106.75.63.139

🇫🇷 90.93.3.187

🇫🇷 51.159.110.167

🇨🇦 15.235.27.24

🇯🇵 8.216.17.181

🇦🇺 209.38.17.158

🇭🇰 199.45.154.116

🇵🇱 194.180.48.39

🇮🇳 172.253.226.51

🇫🇮 147.185.133.191

🇺🇸 147.185.132.48

🇺🇸 147.185.132.44

🇹🇼 111.246.178.100

🇹🇳 102.110.7.34

🇩🇪 87.106.149.251