AbuseIPDB » 102.97.197.16

102.97.197.16 was found in our database!

This IP was reported 5 times. Confidence of Abuse is 20%: ?

20%

ISP	2G/3G/4G Mobile Costumers
Usage Type	Fixed Line ISP
ASN	AS36925
Domain Name	orange.ma
Country	Morocco
City	Tangier, Tanger-Tetouan-Al Hoceima

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 102.97.197.16

Whois 102.97.197.16

IP Abuse Reports for 102.97.197.16:

This IP address has been reported a total of 5 times from 5 distinct sources. 102.97.197.16 was first reported on June 15th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
zynex	2025-06-16 03:54:00 (1 month ago)	URL Probing: /phpinfo.php	Web App Attack
cybertailor	2025-06-15 21:06:04 (1 month ago)	102.97.197.16 - - [16/Jun/2025:02:06:00 +0500] "GET /.env HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Window ... show more102.97.197.16 - - [16/Jun/2025:02:06:00 +0500] "GET /.env HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 102.97.197.16 - - [16/Jun/2025:02:06:00 +0500] "GET /.env HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 102.97.197.16 - - [16/Jun/2025:02:06:01 +0500] "GET /.env.save HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 102.97.197.16 - - [16/Jun/2025:02:06:01 +0500] "GET /.env.php HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 102.97.197.16 - - [16/Jun/2025:02:06:02 +0500] "GET /beta/.env HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" ... show less	Web App Attack
uhlhosting	2025-06-15 06:22:02 (1 month ago)	darkbot.in 102.97.197.16 - - [15/Jun/2025:08:22:00.772757 +0200] "GET /.env HTTP/1.1" 403 199 "-" "- ... show moredarkbot.in 102.97.197.16 - - [15/Jun/2025:08:22:00.772757 +0200] "GET /.env HTTP/1.1" 403 199 "-" "-" aE5miA5svFQC_R0LOOyMFgAAAQw "-" /apache/20250615/20250615-0822/20250615-082200-aE5miA5svFQC_R0LOOyMFgAAAQw 0 1138 md5:880c29090350f5acf42b2facfcbe30c5 darkbot.in 102.97.197.16 - - [15/Jun/2025:08:22:01.000475 +0200] "GET /.env HTTP/1.1" 403 199 "-" "-" aE5miCaG-jGv5JVwolrrjQAAAIM "-" /apache/20250615/20250615-0822/20250615-082201-aE5miCaG-jGv5JVwolrrjQAAAIM 0 1139 md5:002c3070cbf0428bcdb889103cf44f3e darkbot.in 102.97.197.16 - - [15/Jun/2025:08:22:01.173597 +0200] "GET /.env.save HTTP/1.1" 403 199 "-" "-" aE5miQ5svFQC_R0LOOyMFwAAAQ8 "-" /apache/20250615/20250615-0822/20250615-082201-aE5miQ5svFQC_R0LOOyMFwAAAQ8 0 1148 md5:0dc4a215c7a006205dfdf88dd2630f03 darkbot.in 102.97.197.16 - - [15/Jun/2025:08:22:01.334850 +0200] "GET /.env.save HTTP/1.1" 403 199 "-" "-" aE5miQzn31MowgGxFVcKrwAAAFM "-" /apache/20250615/20250615-0822/20250615-082201-aE5miQzn31MowgGxFVcKrwAAAFM 0 1149 md5:3b58fe86 ... show less	DDoS Attack Brute-Force
Apache	2025-06-15 05:02:24 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 102.97.197.16 (MA/Morocco/-): 5 in the last 300 ... show more(mod_security) mod_security (id:210492) triggered by 102.97.197.16 (MA/Morocco/-): 5 in the last 300 secs show less	Brute-Force Web App Attack
WebNiraj	2025-06-15 04:43:17 (1 month ago)	(mod_security) mod_security (id:949110) triggered by 102.97.197.16 (MA/Morocco/-): 5 in the last 360 ... show more(mod_security) mod_security (id:949110) triggered by 102.97.197.16 (MA/Morocco/-): 5 in the last 3600 secs [ZETA] show less	Brute-Force

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩