196.119.22.221
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- 2G/3G/4G Mobile Costumers
- Usage Type
- Fixed Line ISP
- ASN
- AS36925
- Domain Name
- orange.ma
- Country
- 🇲🇦 Morocco
- City
- Sale, Rabat-Sale-Kenitra
Abuse Reports
Total reports
33 from
26 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇧🇷 Sipo Chutão |
/.env
|
Hacking | |
| 🇳🇱 Alt255 |
|
Bad Web Bot Web App Attack | |
| 🇳🇱 BlueWire Hosting |
High-confidence malicious configuration/VCS probe
|
Web App Attack | |
| 🇫🇷 Baking333 |
|
Bad Web Bot Web App Attack | |
| 🇩🇪 hidemail.app |
Automated scan for exposed config/secret files and known web exploits (e.g. /.env, RCE probes); auto-banned by fail2ban.
|
Web App Attack Hacking | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36
|
Bad Web Bot | |
| Anonymous |
196.119.22.221 - - [09/Sep/2026:01:00:34 +0000] "GET /.env HTTP/1.1" 404 8834 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
...
|
Brute-Force Web App Attack | |
| 🇩🇰 powerhostingdk |
[mailserver] CrowdSec detected mailscanner/global-spam-aggregate (31 events). Automated abuse report.
|
Brute-Force | |
| 🇬🇧 thetomtaylor.co.uk |
Fail2Ban - [WAF]ModSecurity rule violation on modsecurity ... [wa01]
|
Hacking SQL Injection Web App Attack | |
| 🇧🇪 cmbplf |
346 requests with url.path //xmlrpc.php
|
Brute-Force Bad Web Bot | |
| 🇫🇷 smtp.com.es |
Brute force attempt.
|
Brute-Force Email Spam | |
| Anonymous |
Authentication failure
|
Brute-Force | |
| Anonymous |
Failed login attempt detected by Fail2Ban in plesk-postfix jail
|
Brute-Force | |
| 🇩🇪 conseilgouz |
avw-(visforms) : try to access forms...
|
Hacking | |
| 🇮🇩 xveil |
2026-08-28T09:15:35.242280 mail-honeypot postfix/submission/smtpd[31814]: warning: unknown[196.119.22.221]: SASL PLAIN authentication failed: authentication failure
...
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown