196.127.7.104
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- 2G/3G/4G Mobile Costumers
- Usage Type
- Mobile ISP
- ASN
- AS36925
- Domain Name
- orange.ma
- Country
- 🇲🇦 Morocco
- City
- Casablanca, Casablanca-Settat
Abuse Reports
Total reports
29 from
28 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 Tman111 |
Unsolicited connection attempt to web ports (80/443). No service is offered to direct-to-IP traffic; connection dropped. Scanner/bot behavior.
|
Port Scan | |
| 🇩🇪 todix |
"GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
|
Web App Attack | |
| 🇺🇸 mixcat |
Exploit attempt blocked by ModSecurity (rule id:1000002). Reported automatically by Mixcat.
|
Web App Attack Hacking | |
| 🇩🇪 london2038.com |
|
Hacking Web App Attack | |
| 🇩🇪 David Ferneding |
Blocked by UFW (TCP on 80)
Source port: 58679
TTL: 118
Packet length: 52
TOS: 0x00
This report (for 196.127.7.104) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Web App Attack | |
| 🇩🇪 D3vNu11 |
Level: (LOW): Service Abuse via CitrixHoneypot IOC Country: Morocco 3x -> Target Country: Germany HTTPS
|
Hacking Web App Attack | |
| 🇩🇪 IVski.com |
IVski WAF | Sensitive file probe - looking for exposed .env
|
Hacking Brute-Force Web App Attack | |
| 🇨🇭 Elysium Security |
Mass port scanning on a whole network
|
Port Scan | |
| 🇮🇩 securejdprop |
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET INFO Request to Hidden Environment File - Inbound).
|
Hacking Web App Attack | |
| 🇬🇧 [email protected] |
Automated report [Server: quest1]: IP caught scanning and attacking Aison Active Defense Honeypot traps.
|
Port Scan Hacking Brute-Force | |
| Anonymous |
|
Brute-Force Web App Attack | |
| 🇫🇷 security.rdmc.fr |
Web scan: request for a sensitive file (.env, .git, wp-config...)
|
Web App Attack Bad Web Bot | |
| 🇮🇩 soc-yk |
Type: suspicious_network_activity
Risk: 95
Events: 37
Evidence:
- Persistent suspicious network activity detected
- Repeated hostile operational behavior observed
- Threat escalation behavior observed
|
Port Scan Hacking | |
| 🇦🇺 2000cn.com.au |
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
|
Web App Attack Hacking | |
| 🇸🇪 Juha Jurvanen |
Blocked by Scantide Guard on iis-rdweb-protection. Rule: Immediate HTTP block: high-confidence web attack pattern matched '*/.env*'..
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown