JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.117.10.215

196.117.10.215 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 100%: ?

100%

ISP	2G/3G/4G Mobile Costumers
Usage Type	Mobile ISP
ASN	AS36925
Domain Name	orange.ma
Country	🇲🇦 Morocco
City	Casablanca, Casablanca-Settat

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.117.10.215

Whois 196.117.10.215

IP Abuse Reports for 196.117.10.215:

This IP address has been reported a total of 22 times from 19 distinct sources. 196.117.10.215 was first reported on July 22nd 2026, and the most recent report was 12 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 dominioz	2026-07-23 21:21:55 (12 minutes ago)	2026-07-23 21:20:49 GET /.env - - 196.117.10.215 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+ ... show more 2026-07-23 21:20:49 GET /.env - - 196.117.10.215 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/108.0.0.0+Safari/537.36 - 301 461 2026-07-23 21:20:51 GET /.env - - 196.117.10.215 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/108.0.0.0+Safari/537.36 - 301 467 ... show less	Web App Attack
Anonymous	2026-07-23 16:31:41 (5 hours ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇮🇪 AutosOnShow	2026-07-23 14:22:06 (7 hours ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-07-23 14:21:14.973 \|	Web App Attack
🇨🇭 SOC [GOLINE SA]	2026-07-23 12:03:45 (9 hours ago)	FortiGate detected IPS attack from IPv4 address 196.117.10.215	Hacking
🇧🇷 dominioz	2026-07-23 09:24:54 (12 hours ago)	2026-07-23 09:24:24 GET /.env - - 196.117.10.215 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+ ... show more 2026-07-23 09:24:24 GET /.env - - 196.117.10.215 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/108.0.0.0+Safari/537.36 - 301 463 2026-07-23 09:24:26 GET /.env - - 196.117.10.215 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/108.0.0.0+Safari/537.36 - 301 576 2026-07-23 09:24:27 GET /err/ 404;https://amiguinhofeliz.com.br:443/.env - 196.117.10.215 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/108.0.0.0+Safari/537.36 - 200 1572 2026-07-23 09:24:28 GET /.env - - 196.117.10.215 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/108.0.0.0+Safari/537.36 - 301 576 ... show less	Web App Attack
🇬🇧 Mendip_Defender	2026-07-23 07:24:42 (14 hours ago)	[23/Jul/2026:08:24:43.110441 +0100] amHBu9D6dIBMxLWGOmUCngAAAAA 196.117.10.215 46138 188.246.206.60 ... show more [23/Jul/2026:08:24:43.110441 +0100] amHBu9D6dIBMxLWGOmUCngAAAAA 196.117.10.215 46138 188.246.206.60 7081 [23/Jul/2026:08:24:43.310766 +0100] amHBu9D6dIBMxLWGOmUCnwAAABQ 196.117.10.215 46154 188.246.206.60 7081 ... show less	Brute-Force
🇬🇧 openstrike.co.uk	2026-07-23 05:15:29 (16 hours ago)	77 attacks on Wordpress URLs, env grabbing URLs, PHP URLs: GET //sito/wp-includes/wlwmanifest.xml HT ... show more 77 attacks on Wordpress URLs, env grabbing URLs, PHP URLs: GET //sito/wp-includes/wlwmanifest.xml HTTP/1.1 GET /prod/.env HTTP/1.1 GET //xmlrpc.php?rsd HTTP/1.1 show less	Web App Attack Hacking
🇩🇪 macrob	2026-07-23 05:09:04 (16 hours ago)	2026/07/23 05:09:02 [error] 3922300#3922300: 401710907 access forbidden by rule, client: 196.117.10 ... show more 2026/07/23 05:09:02 [error] 3922300#3922300: 401710907 access forbidden by rule, client: 196.117.10.215, server: binixo.ro, request: "GET /.env HTTP/2.0", host: "binixo.ro" 2026/07/23 05:09:02 [error] 3922297#3922297: 401707598 access forbidden by rule, client: 196.117.10.215, server: binixo.ro, request: "GET /.env.save HTTP/2.0", host: "binixo.ro" 2026/07/23 05:09:02 [error] 3922300#3922300: 401710907 access forbidden by rule, client: 196.117.10.215, server: binixo.ro, request: "GET /.env.php HTTP/2.0", host: "binixo.ro" ... show less	Web App Attack
Anonymous	2026-07-23 05:05:22 (16 hours ago)	Blocked: Reason='Suspicious traffic score=80 (review-based detection)'; Requests=18	Hacking
🇺🇸 TPI-Abuse	2026-07-23 02:53:10 (18 hours ago)	(mod_security) mod_security (id:210492) triggered by 196.117.10.215 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 196.117.10.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 22:53:02.382915 2026] [security2:error] [pid 1662632:tid 1662632] [client 196.117.10.215:52309] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alphatar.io"] [uri "/.env"] [unique_id "amGCDnIkWKqjXRyLuq6dBAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 cleverest.eu	2026-07-23 02:30:34 (19 hours ago)	MimirWAF has 10 incidents from 1 distinct domain => {"bad_request_uri / env_probe","blacklisted_acce ... show more MimirWAF has 10 incidents from 1 distinct domain => {"bad_request_uri / env_probe","blacklisted_access / definite_repeat_offender"} show less	Brute-Force Web App Attack
🇬🇧 consul.to	2026-07-23 02:30:24 (19 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 4server	2026-07-23 02:16:37 (19 hours ago)	[ThuJul2304:16:32.8867662026][security2:error][pid1190959:tid1191070][client196.117.10.215:0]ModSecu ... show more [ThuJul2304:16:32.8867662026][security2:error][pid1190959:tid1191070][client196.117.10.215:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"acquaallaspina.ch\"][uri\"/.env.php\"][unique_id\"amF5gIfQoT83XdHobWHp9gAAAIw\"] show less	Port Scan Brute-Force Web App Attack
🇧🇷 dominioz	2026-07-23 01:55:52 (19 hours ago)	2026-07-23 01:55:11 GET /.env - - 196.117.10.215 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+ ... show more 2026-07-23 01:55:11 GET /.env - - 196.117.10.215 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/108.0.0.0+Safari/537.36 - 301 445 2026-07-23 01:55:12 GET /.env - - 196.117.10.215 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/108.0.0.0+Safari/537.36 - 301 540 2026-07-23 01:55:12 GET /err/ 404;https://acrpp.com.br:443/.env - 196.117.10.215 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/108.0.0.0+Safari/537.36 - 200 1574 2026-07-23 01:55:13 GET /.env - - 196.117.10.215 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/108.0.0.0+Safari/537.36 - 301 540 ... show less	Web App Attack
🇬🇧 Apache	2026-07-23 01:49:34 (19 hours ago)	(mod_security) mod_security (id:210492) triggered by 196.117.10.215 (MA/Morocco/-): 5 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 196.117.10.215 (MA/Morocco/-): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.85

🇫🇷 91.231.89.114

🇳🇱 77.74.123.244

🇫🇷 207.180.212.102

🇧🇪 198.235.24.171

🇧🇷 177.130.234.74

🇺🇸 165.154.163.20

🇸🇬 165.22.52.108

🇩🇿 154.252.136.202

🇺🇸 98.39.220.210

🇺🇸 81.30.98.193

🇳🇱 77.239.124.242

🇺🇸 216.180.246.79

🇨🇳 202.111.183.254

🇨🇴 186.154.136.32

🇬🇧 185.216.145.189

🇮🇶 149.255.250.142

🇺🇸 142.251.121.102

🇷🇸 109.106.239.77

🇹🇷 94.154.43.146