AbuseIPDB » 196.249.93.1
196.249.93.1
This IP was reported 6 times. Confidence of
Abuse
is 32% : ?
ISP
FW
Usage Type
Fixed Line ISP
ASN
AS327885
Domain Name
halotel.co.tz
Country
🇹🇿
Tanzania, the United Republic of
City
Dar es Salaam, Dar es Salaam Region
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 196.249.93.1 :
This IP address has been reported a total of
6
times from
6 distinct
sources.
196.249.93.1 was first reported on
February 9th 2024 , and the most recent report was
1 week ago
Old Reports:
The most recent abuse report for this IP address is from
1 week ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
4server
2026-06-29 04:37:26
(1 week ago)
[MonJun2906:37:21.5982172026][security2:error][pid2506211:tid2506334][client196.249.93.1:0]ModSecuri ...
show more
[MonJun2906:37:21.5982172026][security2:error][pid2506211:tid2506334][client196.249.93.1:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"immobiliaretrentino.it\"][uri\"/xmlrpc.php\"][unique_id\"akH2gX8N_M_Zq_pAtQJZ0QAAAQ4\"]
show less
Port Scan
Brute-Force
Web App Attack
2026-06-28 14:24:54
(1 week ago)
[redacted] 196.249.93.1 - - [28/Jun/2026:16:23:44 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mo ...
show more
[redacted] 196.249.93.1 - - [28/Jun/2026:16:23:44 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/96.0.0.0 Safari/537.36"
sportimpark-dueren.de 196.249.93.1 - - [28/Jun/2026:16:23:46 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 10.0; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36"
[redacted] 196.249.93.1 - - [28/Jun/2026:16:24:04 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/79.0.0.0 Safari/537.36"
sportimpark-dueren.de 196.249.93.1 - - [28/Jun/2026:16:24:05 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 10.0; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.0.0 Safari/537.36"
[redacted] 196.249.93.1 - - [28/Jun/2026:16:24:17 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0
...
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-28 09:52:48
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 196.249.93.1 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 196.249.93.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 05:52:43.294484 2026] [security2:error] [pid 19751:tid 19751] [client 196.249.93.1:2085] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mobileonlinecasinos.co|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mobileonlinecasinos.co"] [uri "/wp-json/wp/v2/users"] [unique_id "akDu6yBhoPTg91tsLUs1lAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
bigwavedave
2026-06-28 09:39:53
(1 week ago)
Wordpress Attack
Web App Attack
🇩🇪
big-cloud.nl
2026-06-28 07:32:21
(1 week ago)
Try to access /xmlrpc.php
Web App Attack
🇫🇷
JPPO
2024-02-09 08:30:38
(2 years ago)
Multiport scan 2 ports : 1033(x2) 23462
Port Scan
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: