JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.119.37.76

196.119.37.76 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 88%: ?

88%

ISP	2G/3G/4G Mobile Costumers
Usage Type	Fixed Line ISP
ASN	AS36925
Domain Name	orange.ma
Country	🇲🇦 Morocco
City	Sale, Rabat-Sale-Kenitra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.119.37.76

Whois 196.119.37.76

IP Abuse Reports for 196.119.37.76:

This IP address has been reported a total of 17 times from 17 distinct sources. 196.119.37.76 was first reported on July 19th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-19 22:40:42 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 196.119.37.76 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 196.119.37.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 18:40:34.921935 2026] [security2:error] [pid 2102347:tid 2102347] [client 196.119.37.76:56340] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "comsew.com.au"] [uri "/.git/config"] [unique_id "al1SYlkKK3GVRInnSctwTgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-19 22:23:22 (2 days ago)	Fail2ban jail=webexploits banned IP=196.119.37.76 after 1 hits. Reason=web probing.	Brute-Force Web App Attack
Anonymous	2026-07-19 14:35:22 (2 days ago)	196.119.37.76 - - [19/Jul/2026:14:35:22 +0000] "GET /.git/config HTTP/1.1" 404 2978 "-" "Python/3.13 ... show more 196.119.37.76 - - [19/Jul/2026:14:35:22 +0000] "GET /.git/config HTTP/1.1" 404 2978 "-" "Python/3.13 aiohttp/3.13.3" ... show less	Bad Web Bot Web App Attack
🇦🇺 FireGuard Server	2026-07-19 14:20:08 (2 days ago)	Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=443	Port Scan Hacking
🇦🇺 2000cn.com.au	2026-07-19 13:35:50 (2 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇫🇮 000rosiu	2026-07-19 10:16:15 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from MA. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoi ... show more Triggered Cloudflare WAF (firewallCustom) from MA. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: /.git/config \| UA: Python/3.13 aiohttp/3.13.3 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇵🇱 mscode.pl	2026-07-19 09:13:47 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from MA. Action taken: BLOCK ASN: 36925 (MEDITELECOM) Prot ... show more Triggered Cloudflare WAF (firewallCustom) from MA. Action taken: BLOCK ASN: 36925 (MEDITELECOM) Protocol: HTTP/1.1 (GET method) Zone: mscode.pl Endpoint: /.git/config UA: Python/3.13 aiohttp/3.13.3 show less	Bad Web Bot
🇩🇪 Roper123	2026-07-19 08:45:52 (2 days ago)	Web exploits	Web App Attack
🇩🇪 ketovoila.pl	2026-07-19 08:07:45 (2 days ago)	ketovoila.pl web app secret/repository scan: hits=1; unique_paths=1; sample_paths=/.git/config; UA=" ... show more ketovoila.pl web app secret/repository scan: hits=1; unique_paths=1; sample_paths=/.git/config; UA="Python/3.13 aiohttp/3.13.3"; window=2026-07-19T08:07:45Z..2026-07-19T08:07:45Z show less	Bad Web Bot Web App Attack
🇩🇪 Ba-Yu	2026-07-19 05:49:33 (2 days ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇮🇹 Inartis	2026-07-19 05:06:43 (2 days ago)	196.119.37.76 - - [19/Jul/2026:06:52:28 +0200] "GET /.git/config HTTP/1.1" 301 5760 "-" "Python/3.13 ... show more 196.119.37.76 - - [19/Jul/2026:06:52:28 +0200] "GET /.git/config HTTP/1.1" 301 5760 "-" "Python/3.13 aiohttp/3.13.3" 196.119.37.76 - - [19/Jul/2026:07:06:42 +0200] "GET /.git/config HTTP/1.1" 403 5570 "-" "Python/3.13 aiohttp/3.13.3" 196.119.37.76 - - [19/Jul/2026:07:06:42 +0200] "GET /.git/config HTTP/1.1" 302 459 "-" "Python/3.13 aiohttp/3.13.3" ... show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 CoreTech srl	2026-07-19 05:03:56 (2 days ago)	cloudlinux2 fail2ban: 2026-07-19 06:59:05,527 fail2ban.filter [1918]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-07-19 06:59:05,527 fail2ban.filter [1918]: INFO [plesk-modsecurity] Found 196.119.37.76 - 2026-07-19 06:59:05cloudlinux2 fail2ban: 2026-07-19 06:59:13,802 fail2ban.filter [1918]: INFO [plesk-wordpress] Found 136.144.35.78 - 2026-07-19 06:59:13cloudlinux2 fail2ban: 2026-07-19 06:59:19,958 fail2ban.filter [1918]: INFO [plesk-modsecurity] Found 196.119.37.76 - 2026-07-19 06:59:19cloudlinux2 fail2ban: 2026-07-19 06:59:35,569 fail2ban.actions [1918]: NOTICE [plesk-modsecurity] Ban 34.59.45.11cloudlinux2 fail2ban: 2026-07-19 06:59:35,484 fail2ban.filter [1918]: INFO [plesk-modsecurity] Found 34.59.45.11 - 2026-07-19 06:59:35cloudlinux2 fail2ban: 2026-07-19 06:59:35,502 fail2ban.filter [1918]: INFO [plesk-modsecurity] Found 34.59.45.11 - 2026-07-19 06:59:35cloudlinux2 fail2ban: 2026-07-19 06:59:35,575 fail2ban.filter [1918]: INFO [recidive] Found 34.59.45.11 - 2026-07-19 06:59:35cloudlinux2 fail2ban: 2026-07-19 06:59 show less	Web App Attack
🇦🇺 afleventoffice.com.au	2026-07-19 04:18:50 (3 days ago)	GET /.git/config HTTP/1.1	Web App Attack
🇬🇧 consul.to	2026-07-19 03:40:07 (3 days ago)	Web attack/malicious scanning detected	Web App Attack
🇧🇪 voormedia	2026-07-19 02:45:16 (3 days ago)	Accessed trap at '/.git/config'	Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a03:2880:24ff:54::

🇨🇳 117.83.83.235

🇩🇪 104.207.52.113

🇮🇳 103.182.132.154

🇩🇪 85.90.246.159

🇺🇸 65.49.20.84

🇷🇺 62.173.148.119

🇹🇭 49.231.182.3

🇺🇸 45.79.211.185

🇩🇪 209.50.180.133

🇧🇷 205.210.31.239

🇬🇧 194.50.235.147

🇳🇱 193.176.31.247

🇳🇱 185.223.235.34

🇺🇸 165.154.172.111

🇹🇭 159.192.133.140

🇻🇳 157.66.224.129

🇻🇳 152.32.255.94

🇸🇬 145.223.134.175

🇨🇦 143.110.219.30