JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.98.99.200

102.98.99.200 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 81%: ?

81%

ISP	2G/3G/4G Mobile Costumers
Usage Type	Fixed Line ISP
ASN	AS36925
Domain Name	orange.ma
Country	🇲🇦 Morocco
City	Casablanca, Casablanca-Settat

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.98.99.200

Whois 102.98.99.200

IP Abuse Reports for 102.98.99.200:

This IP address has been reported a total of 21 times from 15 distinct sources. 102.98.99.200 was first reported on September 12th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-09-14 21:59:07 (1 day ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-13. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-09-13 12:24:03 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 102.98.99.200 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 102.98.99.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 08:23:55.484918 2026] [security2:error] [pid 21673:tid 21673] [client 102.98.99.200:52412] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "angove.biz"] [uri "/.env"] [unique_id "aqaV250DW8mED7Qn3IuVlwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-13 11:27:54 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 102.98.99.200 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 102.98.99.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 07:27:47.079033 2026] [security2:error] [pid 14707:tid 14721] [client 102.98.99.200:62982] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "killasgarage.bike"] [uri "/.env"] [unique_id "aqaIs9cdyJ5P5mzQ5qvjTwAAAIs"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-09-13 10:12:15 (3 days ago)	[SunSep1312:12:11.4115822026][security2:error][pid3729921:tid3730010][client102.98.99.200:0]ModSecur ... show more [SunSep1312:12:11.4115822026][security2:error][pid3729921:tid3730010][client102.98.99.200:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"4host.biz\"][uri\"/.env\"][unique_id\"aqZ2-468omT8VVyQUR5OJgAAAko\"] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-13 09:32:06 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 102.98.99.200 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 102.98.99.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 05:31:59.624989 2026] [security2:error] [pid 28206:tid 28206] [client 102.98.99.200:60452] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "beyond.best"] [uri "/.env"] [unique_id "aqZtj9RM9vtBlrFODUsfnQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-13 07:38:07 (3 days ago)	102.98.99.200 - - [13/Sep/2026:07:38:06 +0000] "GET /.env HTTP/1.1" 302 477 "-" "Mozilla/5.0 (Macint ... show more 102.98.99.200 - - [13/Sep/2026:07:38:06 +0000] "GET /.env HTTP/1.1" 302 477 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" ... show less	Bad Web Bot Web App Attack
🇳🇱 ConsulHosting	2026-09-13 07:02:35 (3 days ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇧🇪 voormedia	2026-09-13 05:34:51 (3 days ago)	Accessed trap at '/.env'	Web App Attack
🇳🇱 Alt255	2026-09-13 05:06:13 (3 days ago)	[ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 102.98.99.200 - - [13/Sep/2026:07:06:12 +0200] "GET /.env HTTP/1.1" 301 491 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-09-13 03:11:06 (3 days ago)	102.98.99.200 - - [13/Sep/2026:03:11:05 +0000] "GET /.env HTTP/1.1" 302 491 "-" "Mozilla/5.0 (Macint ... show more 102.98.99.200 - - [13/Sep/2026:03:11:05 +0000] "GET /.env HTTP/1.1" 302 491 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" ... show less	Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-09-13 02:59:11 (3 days ago)	5.168 requests to many distinct domains in 1 hour (1w4d11h)	Brute-Force Bad Web Bot
🇫🇷 Alt255	2026-09-13 02:39:34 (3 days ago)	[cb-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [cb-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 102.98.99.200 - - [13/Sep/2026:04:39:33 +0200] "GET /.env HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" ... show less	Bad Web Bot Web App Attack
🇺🇸 Lee Daniel	2026-09-13 02:34:59 (3 days ago)	102.98.99.200 - - [12/Sep/2026:22:34:59 -0400] "GET /.env HTTP/1.1" 403 6332 "-" "Mozilla/5.0 (Macin ... show more 102.98.99.200 - - [12/Sep/2026:22:34:59 -0400] "GET /.env HTTP/1.1" 403 6332 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-09-13 00:18:55 (3 days ago)	[ti-26al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-26al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 102.98.99.200 - - [13/Sep/2026:02:18:55 +0200] "GET /.env HTTP/1.1" 301 705 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" ... show less	Bad Web Bot Web App Attack
🇫🇮 YF	2026-09-13 00:00:31 (3 days ago)	Environment file probe	Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇹 188.208.143.7

🇸🇰 178.41.233.156

🇫🇷 91.196.152.6

🇭🇺 77.234.82.27

🇺🇸 66.132.186.132

🇺🇸 47.253.105.218

🇸🇬 43.134.96.20

🇺🇸 34.48.152.234

🇰🇷 211.62.96.42

🇧🇴 190.129.122.185

🇸🇾 178.253.95.167

🇳🇱 178.16.53.150

🇧🇩 165.99.34.191

🇺🇸 147.185.132.234

🇵🇭 136.158.88.2

🇧🇩 103.204.210.212

🇮🇩 103.139.126.5

🇳🇱 45.148.10.151

🇨🇱 2803:c600:d101:a889:b647:f5ff:fe3c:b42c

🇭🇺 212.51.89.164