AbuseIPDB » 102.98.123.28
102.98.123.28
This IP was reported 6 times. Confidence of
Abuse
is 5% : ?
ISP
2G/3G/4G Mobile Costumers
Usage Type
Fixed Line ISP
ASN
AS36925
Domain Name
orange.ma
Country
🇲🇦
Morocco
City
Casablanca, Casablanca-Settat
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 102.98.123.28 :
This IP address has been reported a total of
6
times from
1 distinct
source.
102.98.123.28 was first reported on
July 10th 2026 , and the most recent report was
19 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-07-11 15:54:17
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 102.98.123.28 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 102.98.123.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 11:54:12.139870 2026] [security2:error] [pid 18774:tid 18774] [client 102.98.123.28:63998] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "templehistorical.org"] [uri "/.env"] [unique_id "alJnJDK7FUvGlg7Vxj2EmwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-10 22:04:54
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 102.98.123.28 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 102.98.123.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 18:04:48.937076 2026] [security2:error] [pid 4224:tid 4224] [client 102.98.123.28:62744] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "splashstation.org"] [uri "/.env"] [unique_id "alFsgDTVwyfs_Rq9HNZhjAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-10 20:04:36
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 102.98.123.28 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 102.98.123.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 16:04:30.134501 2026] [security2:error] [pid 23994:tid 24004] [client 102.98.123.28:54617] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vanguardforthearts.org"] [uri "/.env"] [unique_id "alFQTiH4pDEX7Ll-ZTEwLQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-10 19:30:23
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 102.98.123.28 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 102.98.123.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 15:30:17.793686 2026] [security2:error] [pid 2791:tid 2791] [client 102.98.123.28:58502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vandermeerlab.org"] [uri "/.env"] [unique_id "alFISYU14QKzWayRt9hL6gAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-10 18:45:36
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 102.98.123.28 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 102.98.123.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 14:45:29.189719 2026] [security2:error] [pid 29724:tid 29724] [client 102.98.123.28:50266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "unclemaomao.org"] [uri "/.env"] [unique_id "alE9yWWGymRHeDuVBF8EngAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-10 18:14:48
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 102.98.123.28 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 102.98.123.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 14:14:41.768662 2026] [security2:error] [pid 32665:tid 32665] [client 102.98.123.28:51436] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "swcbsa.org"] [uri "/.env"] [unique_id "alE2kYW9EyFZuZjY6zBtCgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: