JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.117.4.236

196.117.4.236 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 60%: ?

60%

ISP	2G/3G/4G Mobile Costumers
Usage Type	Mobile ISP
ASN	AS36925
Domain Name	orange.ma
Country	🇲🇦 Morocco
City	Casablanca, Casablanca-Settat

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.117.4.236

Whois 196.117.4.236

IP Abuse Reports for 196.117.4.236:

This IP address has been reported a total of 17 times from 11 distinct sources. 196.117.4.236 was first reported on June 11th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 sid3windr	2026-06-12 18:29:30 (2 days ago)	GET /.env (Tarpitted for 1d15h8m29s, wasted 8.06MB)	Web App Attack
🇳🇿 FaB Property Group	2026-06-11 18:31:16 (3 days ago)	Requested file: .env	Web App Attack
🇳🇿 FaB Property Group	2026-06-11 18:31:16 (3 days ago)	Requested file: .env	Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 08:46:10 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 196.117.4.236 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 196.117.4.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 04:46:05.371719 2026] [security2:error] [pid 11228:tid 11228] [client 196.117.4.236:58502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "janeeyrecollection.com"] [uri "/.env"] [unique_id "aip1zb3UbfDn6V5e0ujK4QAAABE"], referer: https://duckduckgo.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Matthew Ping	2026-06-11 08:30:01 (4 days ago)	ModSecurity rule 949110 triggered on server. Web application attack blocked by CSF/LFD.	Web App Attack Hacking
🇫🇷 COMAITE	2026-06-11 04:41:04 (4 days ago)	Suspicious URL access.	Web App Attack
🇳🇴 jad-abuse	2026-06-11 03:59:12 (4 days ago)	ThreatFeed automated detection: malicious HTTP scanning / exploit attempts. Signatures: env_probe. O ... show more ThreatFeed automated detection: malicious HTTP scanning / exploit attempts. Signatures: env_probe. Observed by 1 sensor(s); 240 hits. show less	Web App Attack
🇺🇸 mnsf	2026-06-11 02:05:23 (4 days ago)	Abuse Detected (40)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 02:01:18 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 196.117.4.236 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 196.117.4.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 22:01:10.633424 2026] [security2:error] [pid 15232:tid 15232] [client 196.117.4.236:60060] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "shofarmusic.com"] [uri "/.env"] [unique_id "aioW5pXGTkQkwUkCSBXRrgAAAAA"], referer: https://www.yahoo.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 kumiko	2026-06-11 01:47:26 (4 days ago)	[2026-06-11 04:47:25] Probing for dotfiles "GET /.env HTTP/1.1" 403	Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-06-11 01:35:35 (4 days ago)	2.799 requests with url.path .env 103 requests with url.path .docker/*	Brute-Force Bad Web Bot
🇫🇷 ✨	2026-06-11 01:32:07 (4 days ago)	Domain : barzaghini.com Rule : env 2026-06-11 01:30:34 *hidden-privacy* GET /public/.env - 80 - ... show more Domain : barzaghini.com Rule : env 2026-06-11 01:30:34 *hidden-privacy* GET /public/.env - 80 - 196.117.4.236 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0 - barzaghini.com 301 0 0 388 337 93 - - show less	Hacking SQL Injection
Anonymous	2026-06-11 01:00:06 (4 days ago)	\| [Dangerous/Morocco] Aggressive IP 196.117.4.236 (~30 hits). Type: DoS Defender- Web server 400 err ... show more \| [Dangerous/Morocco] Aggressive IP 196.117.4.236 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇺🇸 Matthew Ping	2026-06-11 01:00:01 (4 days ago)	ModSecurity rule 949110 triggered on dedicated. Web application attack blocked by CSF/LFD.	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-06-11 00:40:46 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 196.117.4.236 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 196.117.4.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 20:40:42.216772 2026] [security2:error] [pid 32098:tid 32098] [client 196.117.4.236:49245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bennoyes.com"] [uri "/.env"] [unique_id "aioECuSPtynfQXxd-9lzTgAAAAM"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 202.82.20.241

🇨🇳 180.76.236.214

🇮🇹 151.68.112.77

🇧🇷 129.121.37.21

🇭🇰 114.111.52.109

🇻🇳 103.179.172.233

🇺🇸 47.189.194.174

🇱🇹 45.227.254.170

🇺🇸 34.125.134.220

🇭🇰 123.58.213.128

🇳🇴 104.239.53.119

🇺🇸 65.49.20.104

🇺🇸 31.57.87.120

🇧🇷 191.240.36.254

🇺🇸 172.237.156.206

🇰🇷 112.219.151.50

🇧🇩 103.171.69.92

🇧🇩 103.148.115.57

🇬🇷 79.131.58.42

🇩🇪 69.5.169.247