JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.56.9.114

165.56.9.114 was found in our database!

This IP was reported 97 times. Confidence of Abuse is 55%: ?

55%

ISP	Zambia Telecommunications Company Ltd aka ZAMTEL
Usage Type	Fixed Line ISP
ASN	AS37154
Domain Name	zamtel.co.zm
Country	🇿🇲 Zambia
City	Lusaka, Lusaka Province

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.56.9.114

Whois 165.56.9.114

IP Abuse Reports for 165.56.9.114:

This IP address has been reported a total of 97 times from 47 distinct sources. 165.56.9.114 was first reported on December 24th 2021, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-10 14:02:39 (11 hours ago)	Blocked by UFW (TCP on 389) Source port: 42715 TTL: 231 Packet length: 44 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 389) Source port: 42715 TTL: 231 Packet length: 44 TOS: 0x08 This report (for 165.56.9.114) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-06-06 22:36:42 (4 days ago)	tcp/389 (8 or more attempts)	Port Scan
🇩🇪 Admins@FBN	2026-06-06 19:32:50 (4 days ago)	FW-PortScan: Traffic Blocked srcport=56931 dstport=389	Port Scan
🇧🇾 StatsMe	2026-06-04 21:17:43 (6 days ago)	2026-06-04T01:13:13.332969+0300 ET SCAN NMAP -sS window 1024	Port Scan
🇺🇸 TPI-Abuse	2026-05-29 11:28:19 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 165.56.9.114 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 165.56.9.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 07:28:12.237855 2026] [security2:error] [pid 21218:tid 21218] [client 165.56.9.114:58179] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jacquelineperriam.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jacquelineperriam.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahl4TJps5wNg530KErD0kAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 centurion	2026-05-28 07:23:19 (1 week ago)	Blocked by UFW on dc00 [389/tcp] Source port: 55510 TTL: 235 Packet length: 44 TOS: 0x00 This repor ... show more Blocked by UFW on dc00 [389/tcp] Source port: 55510 TTL: 235 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-26 15:52:00 (2 weeks ago)	Blocked by UFW (TCP on 389) Source port: 53237 TTL: 231 Packet length: 44 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 389) Source port: 53237 TTL: 231 Packet length: 44 TOS: 0x08 This report (for 165.56.9.114) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 centurion	2026-05-23 03:17:41 (2 weeks ago)	Blocked by UFW on ns02 [389/tcp] Source port: 48781 TTL: 238 Packet length: 44 TOS: 0x00 This repor ... show more Blocked by UFW on ns02 [389/tcp] Source port: 48781 TTL: 238 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-05-22 01:34:25 (2 weeks ago)	tcp/389 (4 or more attempts)	Port Scan
🇺🇸 xmission.com	2026-05-21 15:11:52 (2 weeks ago)	Blocked by UFW (TCP on 389) Source port: 58837 TTL: 231 Packet length: 44 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 389) Source port: 58837 TTL: 231 Packet length: 44 TOS: 0x08 This report (for 165.56.9.114) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-05-21 03:14:19 (2 weeks ago)	tcp/389 (2 or more attempts)	Port Scan
🇫🇷 security.rdmc.fr	2026-05-20 15:32:35 (3 weeks ago)	Port Scan Attack proto:TCP src:51196 dst:389	Port Scan
🇫🇷 vtchost.com	2026-05-09 13:38:57 (1 month ago)	May 9 15:38:56 vtchost kernel: [109206.264686] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:1 ... show more May 9 15:38:56 vtchost kernel: [109206.264686] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11:cd:2a:b3:08:00 SRC=165.56.9.114 DST=161.97.181.152 LEN=44 TOS=0x00 PREC=0x00 TTL=235 ID=25151 PROTO=TCP SPT=56476 DPT=389 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 MPL	2026-05-03 15:34:20 (1 month ago)	tcp/389 (2 or more attempts)	Port Scan
🇬🇧 Andrew	2026-04-28 10:49:17 (1 month ago)	Blocked by UFW (TCP on port 389). Source port: 55852 TTL: 239 Packet length: 44 TOS: 0x00 This repo ... show more Blocked by UFW (TCP on port 389). Source port: 55852 TTL: 239 Packet length: 44 TOS: 0x00 This report (for 165.56.9.114) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 97 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 194.187.176.124

🇧🇿 190.197.31.207

🇺🇸 185.180.141.5

🇦🇷 179.60.228.74

🇺🇸 147.185.132.190

🇳🇱 142.93.238.7

🇨🇳 125.43.105.79

🇸🇬 104.43.56.65

🇬🇧 81.19.219.253

🇩🇪 68.183.212.68

🇺🇸 34.50.165.84

🇷🇺 195.239.56.64

🇧🇷 189.6.19.195

🇧🇷 187.8.120.90

🇺🇸 185.180.141.2

🇳🇱 159.223.218.194

🇧🇷 152.32.200.243

🇨🇳 106.12.157.104

🇫🇷 91.196.152.102

🇺🇸 74.209.100.246