JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.74.169.239

196.74.169.239 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 0%: ?

ISP	ADSL_Maroc_telecom
Usage Type	Fixed Line ISP
ASN	AS36903
Domain Name	menara.ma
Country	🇲🇦 Morocco
City	Kenitra, Rabat-Sale-Kenitra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.74.169.239

Whois 196.74.169.239

IP Abuse Reports for 196.74.169.239:

This IP address has been reported a total of 28 times from 12 distinct sources. 196.74.169.239 was first reported on November 1st 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2024-11-03 20:53:33 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2024-11-02 20:53:34 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 OceanTreasure	2024-11-02 06:53:00 (1 year ago)	TCP/443: Probing on HTTPS for unsecured dotfiles "GET /.env"	Hacking Brute-Force
🇳🇱 BlueWire Hosting	2024-11-02 05:10:19 (1 year ago)	Detected as a bad bot	Bad Web Bot
🇺🇸 TPI-Abuse	2024-11-02 01:18:00 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 196.74.169.239 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 196.74.169.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 01 21:17:55.186182 2024] [security2:error] [pid 22673:tid 22673] [client 196.74.169.239:42028] [client 196.74.169.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "themotelwest.com"] [uri "/.env"] [unique_id "ZyV9wxtvQIg6BO47-DhTmwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-11-02 00:03:05 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2024-11-01 23:47:01 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 196.74.169.239 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 196.74.169.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 01 19:46:53.505758 2024] [security2:error] [pid 1013:tid 1013] [client 196.74.169.239:49682] [client 196.74.169.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "solcargomiami.com"] [uri "/.env"] [unique_id "ZyVobRDcbY1nBTvDuFBIjgAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 Tripwire	2024-11-01 19:02:05 (1 year ago)	Scanning for exploits - /.env	Web App Attack
🇺🇸 TPI-Abuse	2024-11-01 18:19:52 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 196.74.169.239 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 196.74.169.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 01 14:19:47.403840 2024] [security2:error] [pid 23861:tid 23861] [client 196.74.169.239:48916] [client 196.74.169.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "teenybikinigirls.com"] [uri "/.env"] [unique_id "ZyUbwwN997Rk8vCQFJzWPgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-01 18:00:25 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 196.74.169.239 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 196.74.169.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 01 14:00:20.042006 2024] [security2:error] [pid 7821:tid 7821] [client 196.74.169.239:33466] [client 196.74.169.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "loriatrading.com"] [uri "/.env"] [unique_id "ZyUXNFPKcUvdkbPZZIrI2QAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2024-11-01 17:30:21 (1 year ago)	172 requests to *.env	Brute-Force Bad Web Bot
🇩🇪 ghostwarriors	2024-11-01 17:20:17 (1 year ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-01 17:11:01 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 196.74.169.239 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 196.74.169.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 01 13:10:55.690846 2024] [security2:error] [pid 24328:tid 24328] [client 196.74.169.239:59398] [client 196.74.169.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "capehartmusictreasury.com"] [uri "/.env"] [unique_id "ZyULn4ffqQGi3gR3ySXuZAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ksol-hostmaster	2024-11-01 17:00:52 (1 year ago)	2024/11/01 18:00:51 [error] 63250#101309: 476490 access forbidden by rule, client: 196.74.169.239, ... show more 2024/11/01 18:00:51 [error] 63250#101309: 476490 access forbidden by rule, client: 196.74.169.239, server: karolyimusic.com, request: "GET /.env HTTP/1.1", host: "karolyimusic.com" ... show less	Web Spam
🇫🇷 ✨	2024-11-01 16:38:03 (1 year ago)	Domain : todoparatuboda.com Rule : env 2024-11-01 16:36:35 152.53.103.155 GET /.env - 443 - 172.70.1 ... show more Domain : todoparatuboda.com Rule : env 2024-11-01 16:36:35 152.53.103.155 GET /.env - 443 - 172.70.108.23 HTTP/2 python-requests/2.31.0 - todoparatuboda.com 200 0 0 5784 337 53 - 196.74.169.239 show less	Hacking SQL Injection

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 154.193.15.93

🇵🇰 118.107.139.224

🇺🇸 107.220.96.26

🇨🇳 106.59.139.147

🇺🇸 40.124.169.46

🇰🇷 211.63.225.145

🇺🇸 207.174.0.166

🇧🇷 190.115.84.25

🇨🇭 179.43.153.18

🇭🇰 156.238.62.244

🇺🇸 129.121.139.106

🇨🇳 125.47.216.106

🇰🇷 121.184.128.107

🇮🇳 103.178.158.51

🇺🇸 100.19.71.7

🇫🇷 84.233.158.161

🇨🇳 60.217.65.254

🇵🇰 39.35.233.110

🇺🇸 20.118.227.241

🇨🇳 202.103.157.115