JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.234.249.213

196.234.249.213 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 78%: ?

78%

ISP	SMARTPHONE
Usage Type	Fixed Line ISP
ASN	AS37492
Domain Name	orangetunisie.tn
Country	🇹🇳 Tunisia
City	Tunis, Tunis Governorate

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.234.249.213

Whois 196.234.249.213

IP Abuse Reports for 196.234.249.213:

This IP address has been reported a total of 23 times from 21 distinct sources. 196.234.249.213 was first reported on July 11th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-07-13 22:29:05 (1 week ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-07-12 22:28:50 (1 week ago)		Brute-Force Web App Attack
🇫🇮 diego021	2026-07-12 04:46:33 (1 week ago)	196.234.249.213 135.181.251.148 - [11/Jul/2026:23:46:28 -0500] "GET /.env HTTP/1.1" 404 158 "-" "Moz ... show more 196.234.249.213 135.181.251.148 - [11/Jul/2026:23:46:28 -0500] "GET /.env HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 196.234.249.213 135.181.251.148 - [11/Jul/2026:23:46:30 -0500] "GET /.env.backup HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 196.234.249.213 135.181.251.148 - [11/Jul/2026:23:46:30 -0500] "GET /.env.local HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 196.234.249.213 135.181.251.148 - [11/Jul/2026:23:46:33 -0500] "GET /.env.production HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web App Attack
Anonymous	2026-07-12 04:31:30 (1 week ago)	[server.dsamoodle.de] httpd-suspicious-path: sites=global,server.dsamoodle.de; logs=/var/log/nginx/a ... show more [server.dsamoodle.de] httpd-suspicious-path: sites=global,server.dsamoodle.de; logs=/var/log/nginx/access.log,/var/log/nginx/bigbluebutton.access.log; samples=/.env \| /.env.backup \| /.env.local show less	Hacking Web App Attack
🇩🇪 Mr-Money	2026-07-12 01:55:35 (1 week ago)	196.234.249.213 - - [12/Jul/2026:03:55:34 +0200] "GET /.env HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Wind ... show more 196.234.249.213 - - [12/Jul/2026:03:55:34 +0200] "GET /.env HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇩🇪 Teufel100	2026-07-12 01:31:23 (1 week ago)	ModSecurity rejected a query	Brute-Force Hacking Web App Attack
🇫🇮 SamJUK	2026-07-12 01:02:27 (1 week ago)	Multiple WAF Violations ...	Bad Web Bot Web App Attack
🇭🇺 HoneyPotEu	2026-07-12 00:18:13 (1 week ago)	196.234.249.213 - - [12/Jul/2026:02:18:11 +0200] "GET /.env HTTP/1.1" 404 118 "-" "Mozilla/5.0 (Wind ... show more 196.234.249.213 - - [12/Jul/2026:02:18:11 +0200] "GET /.env HTTP/1.1" 404 118 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 196.234.249.213 - - [12/Jul/2026:02:18:11 +0200] "GET /.env.backup HTTP/1.1" 404 118 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-07-12 00:05:06 (1 week ago)	WAF repeated trigger detected by Fail2Ban	Web App Attack
🇺🇸 zwebvigil	2026-07-11 23:12:16 (1 week ago)	196.234.249.213 [11/Jul/2026:16:11:56 -0700] "GET /.env HTTP/1.1" 404 2673 "-" port=51568 "Mozilla/ ... show more 196.234.249.213 [11/Jul/2026:16:11:56 -0700] "GET /.env HTTP/1.1" 404 2673 "-" port=51568 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" "-" "<ipaddr>" 1058 196.234.249.213 [11/Jul/2026:16:11:59 -0700] "GET /.env.backup HTTP/1.1" 404 2687 "-" port=52403 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" "-" "<ipaddr>" 1162 196.234.249.213 [11/Jul/2026:16:12:03 -0700] "GET /.env.local HTTP/1.1" 404 2685 "-" port=4414 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" "-" "<ipaddr>" 1141 196.234.249.213 [11/Jul/2026:16:12:07 -0700] "GET /.env.production HTTP/1.1" 404 2695 "-" port=5192 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" "-" "<ipaddr>" 1021 196.234.249.213 [11/Jul/2026:16:12:12 -0700] "GET /.env.staging HTTP/1.1" 404 2689 "-" port=6155 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" "-" "<ipaddr>" 1100 196.234.249.213 [11/Jul/2026:16:12 show less	Web App Attack
🇩🇪 langenkamp-media	2026-07-11 23:05:08 (1 week ago)	Fail2Ban: Banned from jail nginx-nohome on 3dausdu.de	Web App Attack
🇨🇦 Not Fake	2026-07-11 22:36:53 (1 week ago)	$f2bV_matches	Web App Attack
🇨🇦 Blinker73	2026-07-11 22:30:11 (1 week ago)	196.234.249.213 - - [11/Jul/2026:18:29:49 -0400] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Wind ... show more 196.234.249.213 - - [11/Jul/2026:18:29:49 -0400] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" show less	Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-07-11 22:28:23 (1 week ago)		Brute-Force Web App Attack
🇩🇪 macrob	2026-07-11 22:12:41 (1 week ago)	2026/07/11 22:12:27 [error] 2882676#2882676: 368687217 access forbidden by rule, client: 196.234.24 ... show more 2026/07/11 22:12:27 [error] 2882676#2882676: 368687217 access forbidden by rule, client: 196.234.249.213, server: fn.binixo.es, request: "GET /.env HTTP/1.1", host: "172.104.245.160" 2026/07/11 22:12:33 [error] 2882678#2882678: 368687363 access forbidden by rule, client: 196.234.249.213, server: fn.binixo.es, request: "GET /.env.backup HTTP/1.1", host: "172.104.245.160" 2026/07/11 22:12:38 [error] 2882680#2882680: 368687443 access forbidden by rule, client: 196.234.249.213, server: fn.binixo.es, request: "GET /.env.local HTTP/1.1", host: "172.104.245.160" ... show less	Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.124

🇺🇸 173.252.69.8

🇺🇸 135.237.125.237

🇨🇳 47.110.47.124

🇬🇧 193.46.0.243

🇨🇦 192.53.123.118

🇸🇪 192.36.22.47

🇺🇸 172.93.106.174

🇮🇩 163.7.9.55

🇨🇳 116.181.16.154

🇺🇸 66.132.195.126

🇨🇦 65.111.21.136

🇩🇪 45.3.54.93

🇫🇮 2a00:1450:4010:c20::12d

🇹🇱 103.143.164.100

🇮🇳 103.83.128.64

🇺🇸 66.132.172.222

🇵🇱 51.83.186.207

🇶🇦 37.186.35.11

🇳🇱 20.160.86.7