AbuseIPDB » 196.117.168.68

196.117.168.68 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 52%: ?

52%

ISP	2G/3G/4G Mobile Costumers
Usage Type	Fixed Line ISP
Domain Name	orange.ma
Country	Morocco
City	Casablanca, Casablanca-Settat

Report 196.117.168.68

Whois 196.117.168.68

IP Abuse Reports for 196.117.168.68:

This IP address has been reported a total of 22 times from 10 distinct sources. 196.117.168.68 was first reported on December 21st 2021, and the most recent report was 19 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
YIP	2024-12-08 07:32:27 (2 hours ago)	196.117.168.68 - - [08/Dec/2024:14:32:25 +0700] "GET /.env HTTP/2.0" 302 - "-" "Mozilla/5.0 (X11; Li ... show more196.117.168.68 - - [08/Dec/2024:14:32:25 +0700] "GET /.env HTTP/2.0" 302 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Web App Attack
Hydra-Shield.fr	2024-12-08 05:54:16 (3 hours ago)	Directory Traversal on: /.env	Web App Attack
YIP	2024-12-07 17:20:52 (16 hours ago)	196.117.168.68 - - [08/Dec/2024:00:20:49 +0700] "GET /.env HTTP/2.0" 302 - "-" "Mozilla/5.0 (X11; Li ... show more196.117.168.68 - - [08/Dec/2024:00:20:49 +0700] "GET /.env HTTP/2.0" 302 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Web App Attack
london2038.com	2024-12-07 14:45:09 (18 hours ago)	Probing for exploits 196.117.168.68 - - [07/Dec/2024:14:34:32 +0100] "GET /.env HTTP/1.1" 422 ... show moreProbing for exploits 196.117.168.68 - - [07/Dec/2024:14:34:32 +0100] "GET /.env HTTP/1.1" 422 0 "-" "python-requests/2.32.3" 196.117.168.68 - - [07/Dec/2024:15:45:08 +0100] "GET /.env HTTP/1.1" 422 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" show less	Hacking Web App Attack
YIP	2024-12-07 14:37:37 (18 hours ago)	196.117.168.68 - - [07/Dec/2024:21:37:33 +0700] "GET /.env HTTP/2.0" 302 - "-" "python-requests/2.32 ... show more196.117.168.68 - - [07/Dec/2024:21:37:33 +0700] "GET /.env HTTP/2.0" 302 - "-" "python-requests/2.32.3" ... show less	Web App Attack
london2038.com	2024-12-06 22:38:36 (1 day ago)	Probing for exploits 196.117.168.68 - - [06/Dec/2024:23:08:29 +0100] "GET /.env HTTP/1.1" 422 ... show moreProbing for exploits 196.117.168.68 - - [06/Dec/2024:23:08:29 +0100] "GET /.env HTTP/1.1" 422 0 "-" "python-requests/2.32.3" 196.117.168.68 - - [06/Dec/2024:23:38:35 +0100] "GET /.env HTTP/1.1" 422 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" show less	Hacking Web App Attack
Burayot	2024-12-06 22:25:56 (1 day ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 196.117.168.68 (MA/Morocco/-): 2 in ... show moreLF_MODSEC: (mod_security) mod_security (id:949110) triggered by 196.117.168.68 (MA/Morocco/-): 2 in the last 3600 secs show less	Web App Attack
Hydra-Shield.fr	2024-12-06 22:20:16 (1 day ago)	Directory Traversal on: /.env	Web App Attack
Burayot	2024-12-06 22:06:37 (1 day ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 196.117.168.68 (MA/Morocco/-): 1 in ... show moreLF_MODSEC: (mod_security) mod_security (id:949110) triggered by 196.117.168.68 (MA/Morocco/-): 1 in the last 3600 secs show less	Web App Attack
YIP	2024-12-06 21:35:02 (1 day ago)	196.117.168.68 - - [07/Dec/2024:04:35:00 +0700] "GET /.env HTTP/2.0" 302 - "-" "python-requests/2.32 ... show more196.117.168.68 - - [07/Dec/2024:04:35:00 +0700] "GET /.env HTTP/2.0" 302 - "-" "python-requests/2.32.3" ... show less	Web App Attack
penjaga BRIN	2024-12-06 21:12:51 (1 day ago)	nginx-alfa-240	Web App Attack
london2038.com	2024-12-03 12:50:44 (4 days ago)	Malformed or malicious web request 196.117.168.68 - - [03/Dec/2024:13:50:43 +0100] "POST /owa/ ... show moreMalformed or malicious web request 196.117.168.68 - - [03/Dec/2024:13:50:43 +0100] "POST /owa/auth.owa HTTP/1.1" 404 4187 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" show less	Hacking Web App Attack
IP Analyzer	2024-12-02 18:15:50 (5 days ago)	Unauthorized connection attempt from IP address 196.117.168.68 on Port 80(HTTP)	Brute-Force
london2038.com	2024-12-02 06:57:15 (6 days ago)	Malformed or malicious web request 196.117.168.68 - - [02/Dec/2024:07:57:14 +0100] "POST /owa/ ... show moreMalformed or malicious web request 196.117.168.68 - - [02/Dec/2024:07:57:14 +0100] "POST /owa/auth.owa HTTP/1.1" 404 4187 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" show less	Hacking Web App Attack
polycoda	2024-12-01 19:18:08 (6 days ago)	📄 Probes for tons of inexistent files and PHP scripts	Hacking Web App Attack