JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.117.43.28

196.117.43.28 was found in our database!

This IP was reported 4 times. Confidence of Abuse is 22%: ?

22%

ISP	2G/3G/4G Mobile Costumers
Usage Type	Mobile ISP
ASN	AS36925
Domain Name	orange.ma
Country	🇲🇦 Morocco
City	Casablanca, Casablanca-Settat

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.117.43.28

Whois 196.117.43.28

IP Abuse Reports for 196.117.43.28:

This IP address has been reported a total of 4 times from 4 distinct sources. 196.117.43.28 was first reported on October 20th 2025, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 DrLex0	2026-07-20 16:40:58 (9 hours ago)	BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap despite it clearly being ... show more BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap despite it clearly being a burning bag of dog poop. 196.117.43.28 443 - [20/Jul/2026:16:40:58 +0000] "GET [redacted] HTTP/1.1" 200 6775 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Bad Web Bot Exploited Host
🇩🇪 pltcldvlpr	2026-07-18 06:40:42 (2 days ago)	Bogus Useragent: 196.117.43.28 - - [18/Jul/2026:08:40:42 +0200] "GET /protocol?id=sn_6_87&paragraph= ... show more Bogus Useragent: 196.117.43.28 - - [18/Jul/2026:08:40:42 +0200] "GET /protocol?id=sn_6_87&paragraph=13941930&seq=176 HTTP/1.1" 444 0 "-" "Opera/8.42.(X11; Linux i686; be-BY) Presto/2.9.187 Version/11.00" asn=36925 org="MEDITELECOM" country=MA ... show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-08 16:55:04 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 196.117.43.28 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 196.117.43.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 12:54:56.714284 2026] [security2:error] [pid 26862:tid 26862] [client 196.117.43.28:60772] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.phantomkennels.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.phantomkennels.com"] [uri "/phantomkennels.com"] [unique_id "ak6A4Kq-My2NWzNK8DywmAAAAEc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 exxos	2025-10-20 15:03:01 (9 months ago)	Attacks with Bad user agents	Hacking

Showing 1 to 4 of 4 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.107.186.140

🇦🇺 212.70.17.223

🇺🇸 206.204.42.221

🇺🇸 206.204.40.134

🇪🇨 181.188.237.212

🇨🇦 165.22.225.218

🇫🇷 146.70.40.68

🇻🇳 117.5.153.55

🇳🇱 93.174.93.12

🇳🇱 77.239.124.243

🇩🇪 69.5.169.237

🇺🇸 64.23.166.37

🇷🇺 212.124.22.255

🇸🇬 188.68.3.52

🇪🇨 177.234.209.102

🇭🇰 156.225.1.113

🇮🇹 151.60.192.170

🇦🇺 91.124.88.93

🇮🇳 66.45.17.221

🇺🇸 52.202.233.37