AbuseIPDB » 189.12.238.165
189.12.238.165 was found in our database!
This IP was reported 10 times. Confidence of Abuse is 58%: ?
| ISP | Cadence Willow |
|---|---|
| Usage Type | Data Center/Web Hosting/Transit |
| ASN | AS399114 |
| Domain Name | ipcontacts.net |
| Country | 🇺🇸 United States of America |
| City | Phoenix, Arizona |
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
IP Abuse Reports for 189.12.238.165:
This IP address has been reported a total of 10 times from 9 distinct sources. 189.12.238.165 was first reported on , and the most recent report was .
Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇳🇱 knock |
Knock-Knock honeypot brute-force: RDP (2 total hits)
|
Brute-Force | ||
| 🇦🇹 CTK |
RDP Brute-Force (Grieskirchen RZ2)
|
Brute-Force | ||
| 🇮🇪 RoboSOC |
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
|
Port Scan | ||
| 🇸🇪 www.remote24.se |
3389BruteforceStormFW22
|
Brute-Force | ||
| 🇩🇪 Mailguard-FRD |
1789974351 - 09/21/2026 09:05:51 Host: 189.12.238.165/189.12.238.165 Port: 3389 TCP Blocked
...
|
Port Scan | ||
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: RDP Connection (3389/tcp)
|
Port Scan Brute-Force | ||
| 🇸🇪 www.remote24.se |
3389BruteforceStormFW21
|
Brute-Force | ||
| 🇫🇮 6kilowatti |
|
Port Scan | ||
| 🇺🇸 micropedro |
|
Port Scan | ||
| 🇩🇪 wlt-blocker |
Illegal port scans
|
Port Scan |
Showing 1 to 10 of 10 reports
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩