JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

196.115.252.204

Neutral Activity

Abuse Confidence Score

0% Low Risk

128 reports

77 reporters · latest 1 year ago

ISP: 2G/3G/4G Mobile Costumers
Usage Type: Fixed Line ISP
ASN: AS36925
Domain Name: orange.ma
Country: 🇲🇦 Morocco
City: Casablanca, Casablanca-Settat

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

196.115.252.204 has been reported 128 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

128 from 77 distinct reporters

First reported

September 27th 2025

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 sh97	2025-10-07 05:57:41 UTC · (1 year ago)	VPN-CONTROL-MASTER.vpn: SSH Brute Force from 196.115.252.204 at 2025-10-07 11:27:41 IST	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-09-30 20:09:06 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇦 Psycho Solutions LLC	2025-09-30 06:06:47 UTC · (1 year ago)	SSH Bruteforce detected - Timestamp: 9/30/2025 6:06 am (UTC-6)	Brute-Force SSH
🇨🇳 ThreatBook.io	2025-09-30 00:08:34 UTC · (1 year ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/196.115.252.204	SSH
🇹🇷 rtbh.com.tr	2025-09-29 20:09:04 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2025-09-29 08:32:56 UTC · (1 year ago)	Sep 29 08:32:53 scw-6657dc sshd[20097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.115.252.204 Sep 29 08:32:53 scw-6657dc sshd[20097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more Sep 29 08:32:53 scw-6657dc sshd[20097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.115.252.204 Sep 29 08:32:53 scw-6657dc sshd[20097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.115.252.204 Sep 29 08:32:55 scw-6657dc sshd[20097]: Failed password for invalid user a from 196.115.252.204 port 47606 ssh2 ... show less	Brute-Force SSH
🇫🇷 bgg	2025-09-29 08:23:36 UTC · (1 year ago)	Sep 29 10:23:36 nanopirate sshd[583478]: refused connect from 196.115.252.204 (196.115.252.204) ...	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-09-29 08:09:03 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/22	Brute-Force
🇺🇸 bigscoots.com	2025-09-29 07:13:31 UTC · (1 year ago)	(sshd) Failed SSH login from 196.115.252.204 (MA/Morocco/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Sep 29 07:12:39 22498 sshd[4211]: Did not receive identification string from 196.115.252.204 port 39696 Sep 29 07:12 ... show more (sshd) Failed SSH login from 196.115.252.204 (MA/Morocco/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Sep 29 07:12:39 22498 sshd[4211]: Did not receive identification string from 196.115.252.204 port 39696 Sep 29 07:12:47 22498 sshd[4215]: Invalid user a from 196.115.252.204 port 44416 Sep 29 07:12:50 22498 sshd[4215]: Failed password for invalid user a from 196.115.252.204 port 44416 ssh2 Sep 29 07:13:13 22498 sshd[4218]: Invalid user nil from 196.115.252.204 port 51214 Sep 29 07:13:19 22498 sshd[4287]: Invalid user admin from 196.115.252.204 port 58484 show less	Brute-Force SSH
🇫🇷 Lat31320	2025-09-29 07:05:36 UTC · (1 year ago)	gate - SSH brute force ...	Brute-Force SSH
🇺🇸 bigscoots.com	2025-09-29 06:20:26 UTC · (1 year ago)	(sshd) Failed SSH login from 196.115.252.204 (MA/Morocco/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Sep 29 01:19:04 13148 sshd[3177]: Did not receive identification string from 196.115.252.204 port 38814 Sep 29 01:19 ... show more (sshd) Failed SSH login from 196.115.252.204 (MA/Morocco/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Sep 29 01:19:04 13148 sshd[3177]: Did not receive identification string from 196.115.252.204 port 38814 Sep 29 01:19:13 13148 sshd[3183]: Invalid user a from 196.115.252.204 port 43252 Sep 29 01:19:15 13148 sshd[3183]: Failed password for invalid user a from 196.115.252.204 port 43252 ssh2 Sep 29 01:19:37 13148 sshd[3185]: Invalid user nil from 196.115.252.204 port 37334 Sep 29 01:20:05 13148 sshd[3192]: Invalid user admin from 196.115.252.204 port 41400 show less	Brute-Force SSH
🇩🇪 Grizzlytools	2025-09-29 05:19:53 UTC · (1 year ago)	Kingcopy(AI-IDS)RouterOS: Portscanner detected.	Port Scan
🇺🇸 xmission.com	2025-09-29 05:03:44 UTC · (1 year ago)	Blocked by UFW (TCP on 2222) Source port: 35214 TTL: 48 Packet length: 60 TOS: 0x08 This report (for 196.115.252.204) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇬🇧 Deveroonie	2025-09-29 05:02:38 UTC · (1 year ago)	2025-09-29T05:02:38.145880+00:00 instance-20241019-1127 sshd[74501]: Connection reset by 196.115.252.204 port 38174 [preauth] ...	Hacking Brute-Force SSH
🇵🇱 Niko's Stuff	2025-09-29 04:44:17 UTC · (1 year ago)	[1x] F2B \| Suspicious activity blocked on: ufw \| BanTime: 604800s \| Suspicious TCP packet from 196.115.252.204:42990 → port 2222 \| TTL: 53, LEN: 60, TOS: 0x08, PREC: 0x20, Interface: eth0	Port Scan

Showing 1 to 15 of 128 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 193.223.69.42

🇦🇷 190.184.229.241

🇺🇸 162.216.150.56

🇰🇷 106.244.120.37

🇫🇷 91.196.152.80

🇩🇪 69.5.169.38

🇵🇱 45.141.233.71

🇺🇸 43.166.242.149

🇬🇧 18.135.247.138

🇨🇳 223.83.131.241

🇧🇪 198.235.24.203

🇧🇧 196.3.218.104

🇺🇸 195.184.76.138

🇬🇧 193.163.125.175

🇧🇯 154.127.34.197

🇨🇳 117.88.144.152

🇵🇹 109.51.163.12

🇩🇪 91.247.163.244

🇯🇵 85.28.46.197

🇩🇪 69.5.169.228