JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

196.117.83.49

Activity Trending Down

Abuse Confidence Score

37% Elevated

13 reports

11 reporters · latest 3 weeks ago

ISP: 2G/3G/4G Mobile Costumers
Usage Type: Mobile ISP
ASN: AS36925
Domain Name: orange.ma
Country: 🇲🇦 Morocco
City: Casablanca, Casablanca-Settat

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

13 from 11 distinct reporters

First reported

October 11th 2026

Most recent report

3 weeks ago

Last 60 days

Top reporter locations 🇨🇿 Czechia 5 🇫🇷 France 3 🇩🇪 Germany 2

Most common categories Web App Attack 11 Hacking 5 Brute-Force 4 Bad Web Bot 1 SQL Injection 1

Old reports The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-10-12 22:17:23 UTC · (3 weeks ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-10-11 22:16:54 UTC · (4 weeks ago)		Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-10-11 06:54:53 UTC · (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 196.117.83.49 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 02:54:47.422859 2026] [security2:error] [pid 3145:tid 3145] [client 196.117.83.49:61413] Mod ... show more (mod_security) mod_security (id:210492) triggered by 196.117.83.49 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 02:54:47.422859 2026] [security2:error] [pid 3145:tid 3145] [client 196.117.83.49:61413] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alphatar.io"] [uri "/.env"] [unique_id "assytwCxSOTBPJ930DxhVgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mc4bbs	2026-10-11 06:38:27 UTC · (4 weeks ago)	Automated Apache detection on Windows host. 5 suspicious HTTP requests within 300 seconds. Examples: GET /.env -> 404 UA=""; GET /.env -> 404 UA=""; GET /.env.save -> 404 UA=""; GET /.env.save -> 404 UA=""; GET /.env.php -> 404 UA=""	Web App Attack Hacking
🇫🇷 thilo	2026-10-11 06:24:16 UTC · (4 weeks ago)	Probe for vulnerabilities. Path attempted: /.env.save	Web App Attack
🇩🇪 macrob	2026-10-11 05:38:30 UTC · (4 weeks ago)	2026/10/11 05:38:28 [error] 2248586#2248586: 39123806 access forbidden by rule, client: 196.117.83.49, server: binixo.pe, request: "GET /.env HTTP/2.0", host: "binixo.pe" 2026/10/11 05:38:28 [error] 2248585#2248585: 39128961 access forbidden by rul ... show more 2026/10/11 05:38:28 [error] 2248586#2248586: 39123806 access forbidden by rule, client: 196.117.83.49, server: binixo.pe, request: "GET /.env HTTP/2.0", host: "binixo.pe" 2026/10/11 05:38:28 [error] 2248585#2248585: 39128961 access forbidden by rule, client: 196.117.83.49, server: binixo.pe, request: "GET /.env HTTP/2.0", host: "binixo.pe" 2026/10/11 05:38:29 [error] 2248587#2248587: *39126987 access forbidden by rule, client: 196.117.83.49, server: binixo.pe, request: "GET /.env.save HTTP/2.0", host: "binixo.pe" ... show less	Web App Attack
Anonymous	2026-10-11 05:11:24 UTC · (4 weeks ago)	196.117.83.49 - - [11/Oct/2026:07:11:22 +0200] "GET /.env HTTP/1.1" 402 861 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" ...	Web App Attack
🇨🇿 Countryman	2026-10-11 04:57:53 UTC · (4 weeks ago)	IPS detection: AndroxGh0st.Malware	Hacking
🇨🇿 Countryman	2026-10-11 04:57:53 UTC · (4 weeks ago)	IPS detection: AndroxGh0st.Malware	Hacking
🇬🇧 consul.to	2026-10-11 02:38:34 UTC · (4 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇨🇿 SystemAdmin	2026-10-11 01:55:37 UTC · (4 weeks ago)	Doing bad things...	Web App Attack
Anonymous	2026-10-11 01:52:51 UTC · (4 weeks ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
Anonymous	2026-10-11 01:50:04 UTC · (4 weeks ago)	\| [Dangerous/Morocco] Aggressive IP 196.117.83.49 (~30 hits). Type: DoS Defender- Web server 400 error code	Web App Attack Hacking SQL Injection

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇴 186.85.240.37

🇷🇺 178.141.224.224

🇬🇧 162.158.216.130

🇺🇸 143.198.76.34

🇯🇵 136.110.91.162

🇧🇩 103.244.49.26

🇮🇩 103.173.139.118

🇻🇳 103.98.152.152

🇮🇩 103.59.161.216

🇵🇰 101.53.233.0

100.100.246.25

🇺🇸 98.84.105.252

🇫🇷 81.250.159.174

🇬🇧 46.101.85.69

🇧🇪 35.210.220.9

🇧🇪 35.210.164.173

🇧🇪 35.210.87.26

🇹🇼 35.185.165.150

🇪🇸 31.14.103.133

🇲🇾 14.192.215.76