JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.217.22.158

196.217.22.158 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 0%: ?

ISP	Office National des Postes et Telecommunications ONPT (Maroc Telecom) / IAM
Usage Type	Fixed Line ISP
ASN	AS36903
Hostname(s)	adsl196-158-22-217-196.adsl196-9.iam.net.ma
Domain Name	iam.ma
Country	🇲🇦 Morocco
City	Rabat, Rabat-Sale-Kenitra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.217.22.158

Whois 196.217.22.158

IP Abuse Reports for 196.217.22.158:

This IP address has been reported a total of 9 times from 4 distinct sources. 196.217.22.158 was first reported on April 14th 2026, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-04-15 05:01:02 (4 months ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
🇺🇸 TPI-Abuse	2026-04-15 00:10:11 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 196.217.22.158 (adsl196-158-22-217-196.adsl196- ... show more (mod_security) mod_security (id:210492) triggered by 196.217.22.158 (adsl196-158-22-217-196.adsl196-9.iam.net.ma): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 14 20:10:07.388968 2026] [security2:error] [pid 2709692:tid 2709692] [client 196.217.22.158:50405] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adventiststoday.com"] [uri "/.env"] [unique_id "ad7XX4PK2RQ7ip2ygZuHkQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-14 22:02:42 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 196.217.22.158 (adsl196-158-22-217-196.adsl196- ... show more (mod_security) mod_security (id:210492) triggered by 196.217.22.158 (adsl196-158-22-217-196.adsl196-9.iam.net.ma): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 14 18:02:37.990541 2026] [security2:error] [pid 1527778:tid 1527778] [client 196.217.22.158:60371] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "legalnexuslawfirm.com"] [uri "/.env"] [unique_id "ad65fbLcm8OhUEK4gMd9owAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 lnklnx	2026-04-14 21:14:06 (4 months ago)	www.lnklnx.com:80 196.217.22.158 - - [14/Apr/2026:16:14:04 -0500] "GET /.env HTTP/1.1" 301 615 "-" " ... show more www.lnklnx.com:80 196.217.22.158 - - [14/Apr/2026:16:14:04 -0500] "GET /.env HTTP/1.1" 301 615 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-04-14 20:53:12 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 196.217.22.158 (adsl196-158-22-217-196.adsl196- ... show more (mod_security) mod_security (id:210492) triggered by 196.217.22.158 (adsl196-158-22-217-196.adsl196-9.iam.net.ma): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 14 16:53:05.972346 2026] [security2:error] [pid 4185029:tid 4185029] [client 196.217.22.158:51279] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "daisydoesoap.com"] [uri "/.env"] [unique_id "ad6pMQqaBh-BTupK2yKY_wAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-04-14 10:28:10 (4 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇺🇸 TPI-Abuse	2026-04-14 10:02:12 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 196.217.22.158 (adsl196-158-22-217-196.adsl196- ... show more (mod_security) mod_security (id:210492) triggered by 196.217.22.158 (adsl196-158-22-217-196.adsl196-9.iam.net.ma): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 14 06:02:09.551790 2026] [security2:error] [pid 2014389:tid 2014389] [client 196.217.22.158:65502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iainrealtor.com"] [uri "/.env"] [unique_id "ad4QocgzaHgUIXDTWqZceQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-14 09:41:07 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 196.217.22.158 (adsl196-158-22-217-196.adsl196- ... show more (mod_security) mod_security (id:210492) triggered by 196.217.22.158 (adsl196-158-22-217-196.adsl196-9.iam.net.ma): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 14 05:41:02.079331 2026] [security2:error] [pid 2184027:tid 2184027] [client 196.217.22.158:64519] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "basicdevicesonline.com"] [uri "/.env"] [unique_id "ad4LrqZZUuwjnsaugDxznwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-14 08:18:20 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 196.217.22.158 (adsl196-158-22-217-196.adsl196- ... show more (mod_security) mod_security (id:210492) triggered by 196.217.22.158 (adsl196-158-22-217-196.adsl196-9.iam.net.ma): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 14 04:18:14.486764 2026] [security2:error] [pid 2017275:tid 2017275] [client 196.217.22.158:65504] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "azultigre.com"] [uri "/.env"] [unique_id "ad34RjXSQr1OeVj6XBwA-wAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.70.206.76

🇺🇸 165.154.172.39

🇸🇬 165.154.29.144

🇷🇺 80.254.124.216

🇸🇬 47.82.11.245

🇺🇸 40.76.100.1

🇨🇦 20.63.81.20

🇷🇺 212.233.113.194

🇩🇪 159.69.179.27

🇩🇪 157.230.18.133

🇮🇹 151.60.69.177

🇵🇰 125.209.97.230

🇷🇺 94.243.12.95

🇸🇬 84.75.150.29

🇲🇦 81.192.46.32

🇺🇸 66.132.172.238

🇺🇸 66.132.172.180

🇺🇸 66.132.172.130

🇺🇸 43.153.119.185

🇨🇦 20.104.18.15