AbuseIPDB » 196.70.252.213

196.70.252.213 was found in our database!

This IP was reported 73 times. Confidence of Abuse is 49%: ?

49%

ISP	Maroc Telecom
Usage Type	Unknown
Domain Name	iam.ma
Country	Morocco
City	Skhirat, Fes- Meknes

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 196.70.252.213

Whois 196.70.252.213

IP Abuse Reports for 196.70.252.213:

This IP address has been reported a total of 73 times from 46 distinct sources. 196.70.252.213 was first reported on May 10th 2023, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
ISPLtd	2023-07-31 18:04:26 (1 year ago)	196.70.252.213 - - [31/Jul/2023:15:04:25 -0300] "GET /wp-login.php ...	Hacking Web App Attack
mnsf	2023-07-31 16:05:37 (1 year ago)	Scanning/Probing (31)	Brute-Force Web App Attack
nyclee.net	2023-07-31 16:05:01 (1 year ago)	WebServer Vunerability Probe ...	Hacking Web App Attack
Unwasted	2023-07-31 15:09:26 (1 year ago)	Checking for non existing WP login	Hacking Web App Attack
KitsuneTech	2023-07-31 15:01:02 (1 year ago)	196.70.252.213 - - [31/Jul/2023:10:01:01 -0500] "GET /wp-login.php HTTP/1.1" 301 244 "-" "Mozilla/5. ... show more196.70.252.213 - - [31/Jul/2023:10:01:01 -0500] "GET /wp-login.php HTTP/1.1" 301 244 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:94.0) Gecko/20100101 Firefox/95.0" ... show less	Web App Attack
hyperdefined	2023-07-31 11:54:11 (1 year ago)	[fail2ban Auto Report] 196.70.252.213 - - [31/Jul/2023:07:54:10 -0400] "POST /xmlrpc.php HTTP/2.0" 4 ... show more[fail2ban Auto Report] 196.70.252.213 - - [31/Jul/2023:07:54:10 -0400] "POST /xmlrpc.php HTTP/2.0" 403 146 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:94.0) Gecko/20100101 Firefox/95.0" ... show less	Brute-Force Web App Attack
wnbhosting.dk	2023-07-31 11:27:09 (1 year ago)	WP xmlrpc [2023-07-31T13:27:09+02:00]	Hacking Web App Attack
rsiddall	2023-07-31 10:52:07 (1 year ago)	196.70.252.213 - - [31/Jul/2023:06:42:06 -0400] "POST /xmlrpc.php HTTP/1.1" 403 1809 "-" "Mozilla/5. ... show more196.70.252.213 - - [31/Jul/2023:06:42:06 -0400] "POST /xmlrpc.php HTTP/1.1" 403 1809 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:94.0) Gecko/20100101 Firefox/95.0" 196.70.252.213 - - [31/Jul/2023:06:52:06 -0400] "POST /xmlrpc.php HTTP/1.1" 403 1809 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:94.0) Gecko/20100101 Firefox/95.0" ... show less	Brute-Force
taivas.nl	2023-07-31 10:32:13 (1 year ago)	Wordpress_xmlrpc_attack	Bad Web Bot
Anonymous	2023-07-31 10:02:28 (1 year ago)	(mod_security) mod_security (id:972687) triggered by 196.70.252.213 (MA/Morocco/-): 2 in the last 36 ... show more(mod_security) mod_security (id:972687) triggered by 196.70.252.213 (MA/Morocco/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Mon Jul 31 06:53:04.406027 2023] [security2:error] [pid 1202494] [client 196.70.252.213:63124] [client 196.70.252.213] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "7"] [id "972687"] [msg "xmlrpc request blocked, no referrer"] [hostname "hidrotubo.com.br"] [uri "/xmlrpc.php"] [unique_id "ZMeEgOfHOJOzHVUlhZqOiQAAABA"] [Mon Jul 31 07:02:22.795548 2023] [security2:error] [pid 1208491] [client 196.70.252.213:64809] [client 196.70.252.213] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "7"] [id "972687"] [msg "xmlrpc request blocked, no referrer"] [hostname "hidrotubo.com.br"] [uri "/xmlrpc.php"] [unique_id "ZMeGrkWlpehsG2_u1YolrAAAAAU"] show less	Port Scan
Malta	2023-07-31 09:01:03 (1 year ago)	196.70.252.213 - - [31/Jul/2023:11:01:02 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (X11; Fedor ... show more196.70.252.213 - - [31/Jul/2023:11:01:02 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:94.0) Gecko/20100101 Firefox/95.0" Brute-force password attempt show less	Hacking Brute-Force Web App Attack
wnbhosting.dk	2023-07-31 08:53:52 (1 year ago)	WP xmlrpc [2023-07-31T10:53:52+02:00]	Hacking Web App Attack
KPS	2023-05-10 09:43:55 (1 year ago)	PortscanM	Port Scan