JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

165.16.167.202

Neutral Activity

Abuse Confidence Score

0% Low Risk

19 reports

14 reporters · latest 1 month ago

ISP: SADV (Pty) Ltd
Usage Type: Fixed Line ISP
ASN: AS37049
Domain Name: sadv.co.za
Country: 🇿🇦 South Africa
City: Johannesburg, Gauteng

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

19 from 14 distinct reporters

First reported

December 23rd 2025

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 6

Most common categories Bad Web Bot 6

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 鬼影233	2026-10-01 20:14:00 UTC · (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36	Bad Web Bot
🇺🇸 鬼影233	2026-10-01 14:36:10 UTC · (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36	Bad Web Bot
🇺🇸 鬼影233	2026-10-01 12:09:29 UTC · (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36	Bad Web Bot
🇺🇸 鬼影233	2026-09-25 02:44:27 UTC · (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36	Bad Web Bot
🇺🇸 鬼影233	2026-09-21 06:33:23 UTC · (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0	Bad Web Bot
🇺🇸 鬼影233	2026-09-20 03:37:11 UTC · (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0	Bad Web Bot
🇺🇸 MPL	2026-08-25 01:10:26 UTC · (2 months ago)	tcp ports: 22,23 (12 or more attempts)	Port Scan
🇧🇷 noconex	2026-08-24 08:41:16 UTC · (2 months ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 165.16.167.202	Port Scan Brute-Force SSH
🇫🇷 Hiigara	2026-08-23 15:31:20 UTC · (2 months ago)	connection attempt : 165.16.167.202 on port : tcp/22 (SSH)	Port Scan
Anonymous	2026-08-20 02:09:01 UTC · (2 months ago)	denied SSH access attempt. destination port 22.	Port Scan Brute-Force SSH
🇫🇷 Zkillu	2026-08-19 22:32:39 UTC · (2 months ago)	UDP flood (DDoS) vs AS215599: 36631 pkts / 52.38 MB to UDP 80/8443 across 405 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised ... show more UDP flood (DDoS) vs AS215599: 36631 pkts / 52.38 MB to UDP 80/8443 across 405 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 HaloAgencySAS	2026-08-19 22:32:39 UTC · (2 months ago)	UDP flood (DDoS) vs AS215599: 36631 pkts / 52.38 MB to UDP 80/8443 across 405 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised ... show more UDP flood (DDoS) vs AS215599: 36631 pkts / 52.38 MB to UDP 80/8443 across 405 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇩🇪 bescared	2026-08-15 21:48:01 UTC · (2 months ago)	F2B - Malicious activity detected. Unauthorized connection attempt: SSH. -1ce9a8a2-	Port Scan SSH
🇺🇸 HamSammich	2026-08-09 12:22:57 UTC · (2 months ago)	Automated sensor: 1 SSH connection/probe attempts over the last 24h (latest 2026-08-09T12:22Z).	Brute-Force SSH
Anonymous	2026-07-08 18:30:46 UTC · (3 months ago)	Large-scale coordinated botnet (250+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Attack Signature Blocked: /wishlist/index ... show more Large-scale coordinated botnet (250+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Attack Signature Blocked: /wishlist/index/add/product/10956/form_key/pROsCOo73im1dJf1/ \| UA: Mozilla/5.0 (iPod; U; CPU iPhone OS 4_1 like Mac OS X; ky-KG) AppleWebKit/531.40.2 (KHTML, like Gecko) Version/4.0.5 Mobile/8B114 Safari/6531.40.2 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇭🇰 43.154.88.182

🇺🇸 2604:a880:400:d1:0:5:5fc3:8001

🇺🇸 2604:a880:400:d1:0:5:5f7a:3001

🇺🇸 128.92.194.90

🇮🇳 103.147.248.23

🇺🇸 40.114.36.50

🇬🇧 35.203.211.137

🇧🇪 34.38.19.77

🇺🇸 20.115.91.172

🇩🇪 20.52.137.255

🇳🇱 193.47.62.69

🇫🇮 185.89.42.11

🇻🇳 103.68.69.15

🇲🇩 89.34.65.167

🇰🇼 78.89.154.59

🇺🇸 75.142.18.106

🇺🇸 52.179.208.167

🇦🇷 200.225.116.240

🇩🇪 130.61.73.28

🇫🇮 130.49.77.253