JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.165.168.50

165.165.168.50 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 38%: ?

38%

ISP	Telkom SA Limited
Usage Type	Fixed Line ISP
ASN	AS5713
Domain Name	telkom.co.za
Country	🇿🇦 South Africa
City	Johannesburg, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.165.168.50

Whois 165.165.168.50

IP Abuse Reports for 165.165.168.50:

This IP address has been reported a total of 38 times from 26 distinct sources. 165.165.168.50 was first reported on October 19th 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 SeczarSecureOps	2026-08-01 03:14:32 (2 hours ago)	Auto-blocked by Seczar SecureOps — Database Service Brute Force (18 events in 5min) at 2026-08-01 03 ... show more Auto-blocked by Seczar SecureOps — Database Service Brute Force (18 events in 5min) at 2026-08-01 03:14 show less	Web App Attack
🇵🇱 bmino.pl	2026-07-31 12:36:18 (16 hours ago)	Autoban IP(2): 165.165.168.50 - Hostname: Telkom SA Ltd. - City: Potchefstroom - Region: North West ... show more Autoban IP(2): 165.165.168.50 - Hostname: Telkom SA Ltd. - City: Potchefstroom - Region: North West - Country: South Africa - Location: - Organization: Telkom SA Limited - failed attempts. show less	Web App Attack
🇮🇹 A000Z	2026-07-28 23:37:33 (3 days ago)	Fail2Ban: 165.165.168.50 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ... show more Fail2Ban: 165.165.168.50 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (X11; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36 show less	Bad Web Bot
🇺🇸 xmission.com	2026-07-15 07:09:39 (2 weeks ago)	Blocked by UFW (TCP on 52155) Source port: 37785 TTL: 44 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 52155) Source port: 37785 TTL: 44 Packet length: 60 TOS: 0x08 This report (for 165.165.168.50) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-07-07 15:51:25 (3 weeks ago)	Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (E ... show more Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Aggressive search filter manipulation / web scraper probe on port 443 \| URI: Excessive filters used: /catalogsearch/result/?cat=49&mode=grid&product_vc_mcu=106&product_vc_type=100&q=ex+90 \| UA: Mozilla/5.0 (compatible; MSIE 9.0; Windows 98; Win 9x 4.90; Trident/4.1) \| (Magento Site) show less	Hacking Bad Web Bot
🇺🇸 kosada.com	2026-06-29 13:20:17 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇹🇷 Threat.live	2026-06-18 09:15:10 (1 month ago)	Suspicious Connection Attempts	Brute-Force
🇧🇷 ICS Labs	2026-06-08 13:27:23 (1 month ago)	ICS Labs identified 165.165.168.50 as a malicious indicator from threat intelligence.	DDoS Attack Hacking Brute-Force Exploited Host
🇩🇪 SMARTNET	2026-05-27 06:03:53 (2 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: e316b406-db2c-400a-bc37-dfbfcc0acc61	DDoS Attack
🇦🇺 MAGIC	2026-05-26 01:55:19 (2 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-17 14:14:51 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 165.165.168.50 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 165.165.168.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 17 10:14:42.229696 2026] [security2:error] [pid 20324:tid 20324] [client 165.165.168.50:44288] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|phantomquailkennel.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "phantomquailkennel.com"] [uri "/paypal.com"] [unique_id "agnNUknhErpkRZrnFPQCUQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 milcraft.nl	2026-05-17 03:21:26 (2 months ago)	Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi ... show more Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi patterns: filter_, add-to-cart=, orderby=, product_count=. Activity is consistent with high-volume request abuse. show less	DDoS Attack Web App Attack
🇩🇪 iNetWorker	2026-05-01 13:10:50 (2 months ago)	firewall-block, port(s): 2638/udp	Port Scan
Anonymous	2026-04-28 16:36:20 (3 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 MPL	2026-04-28 12:44:56 (3 months ago)	tcp/21 (4 or more attempts)	Port Scan

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 120.224.15.67

🇭🇰 118.193.47.223

🇬🇧 51.7.22.37

🇲🇦 41.248.47.41

🇬🇧 216.226.76.30

🇧🇷 168.232.83.165

🇨🇳 112.86.225.90

🇧🇩 103.112.54.86

🇷🇴 80.94.92.234

🇷🇺 79.104.0.82

🇬🇧 35.203.211.75

🇹🇷 31.210.42.250

🇨🇳 220.161.52.149

🇰🇷 211.185.14.237

🇧🇷 205.210.31.172

🇺🇸 205.210.31.38

🇧🇷 186.209.52.199

🇧🇾 93.84.97.4

🇮🇩 70.153.145.230

🇫🇷 62.210.131.41