165.90.205.71
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Izwi
- Usage Type
- Fixed Line ISP
- ASN
- AS327950
- Domain Name
- izwi.co.za
- Country
- 🇿🇦 South Africa
- City
- Cape Town, Western Cape
Abuse Reports
Total reports
56 from
44 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇵🇱 li sek |
Skanowanie (HoneyTrap)
|
Port Scan | |
| 🇺🇸 Andreas76 |
Port scan: connection attempt to an unused trap port. Reported by bantower.
|
Port Scan | |
| 🇵🇱 mkey |
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_MULTIPORT | PORTS=22,23 | HITS=2 | IPSET=ADD | FIRST=2026-11-06 20:16:54 | LAST=2026-11-06 20:16:54. Last seen 2026-11-06 20:16:54.
|
Port Scan | |
| 🇧🇷 DanielSCaldeira |
mib: tentativas repetidas de conexao descartadas pelo firewall geografico; deteccao pelo fail2ban.
|
Port Scan Brute-Force | |
| 🇺🇸 MPL |
tcp ports: 23,22 (12 or more attempts)
|
Port Scan | |
| 🇧🇷 noconex |
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) de 165.90.205.71 [TCP]
|
Port Scan | |
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Activity from blacklisted IP
|
Hacking | |
| 🇨🇿 lp |
Unauthorized VPN login attempts: 1 attempts were recorded from 165.90.205.71
2026-11-05T06:52:03+0100 vpn Access-Reject station: 165.90.205.71
|
Brute-Force Web App Attack | |
| Anonymous |
POST /xmlrpc.php HTTP/1.1
...
|
Brute-Force | |
| 🇨🇿 Countryman |
repeated unauthorized VPN login attempt, user sweep
|
VPN IP Hacking Brute-Force | |
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: verified TCP multi-port scan/probing; 3 application-level events across 2 target ports and 3 source port(s). Ports: 22/SSH, 23/Telnet. Sensors: Cowrie.
|
Port Scan | |
| 🇨🇦 dpinse |
Honeypot [honeypot-ca-sensor1]: Unauthorized connection attempt detected on 23/TELNET
|
Hacking Port Scan | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:44878 dst:23
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown