196.115.182.182

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
83% Critical
16 reports
15 reporters · latest 16 hours ago
ISP
2G/3G/4G Mobile Costumers
Usage Type
Mobile ISP
ASN
AS36925
Domain Name
orange.ma
Country
🇲🇦 Morocco
City
Casablanca, Casablanca-Settat
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
16 from 15 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 4 🇩🇪 Germany 3 🇦🇹 Austria 2
Most common categories Port Scan 14 Brute-Force 5 SSH 4 Hacking 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇭🇰 mutebot.net
SRC=196.115.182.182, PROTO=TCP, SPT=45640, DPT=23
Port Scan
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇫🇷 Entalpi.net
Tried to hit sensible closed port commonly used in attacks
Port Scan Hacking
🇫🇷 gianluca.demartino75
2026-11-07T06:42:51.142613+01:00 vps-49934a4d endlessh[111913]: 2026-11-07T05:42:51.142Z ACCEPT host=::ffff:196.115.182.182 port=39940 fd=4 n=1/4096 ...
Brute-Force SSH
🇩🇪 KPS
PortscanT
Port Scan
🇰🇷 ian ian
Unsolicited TCP SYN to closed port(s) 23 (1 attempt(s)) on a host that serves no such service; first seen 2026-11-06T16:41:26Z UTC, blocked by firewall.
Brute-Force Port Scan
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇧🇾 stroytrest
Port Scan
🇵🇱 nfsec.pl
Detected: TCP scan on port: 23 with flags: SYN
Port Scan
Anonymous
denied SSH access attempt. destination port 22.
Port Scan Brute-Force SSH
🇺🇸 MPL
tcp ports: 23,22 (8 or more attempts)
Port Scan
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:44842 dst:23
Port Scan
🇩🇪 bancix
Heimdallr NIDS: Automatic ban triggered. Reason: TRAP_PORT_HIT (porta 23)
Port Scan
🇺🇸 Phil Schuyler
Repeated probing against public honeypot services: 4 observed events targeting SSH/TELNET/2223.
Port Scan
🇯🇵 S.O.B.A. Dev.
Repeated SSH login failures
SSH Port Scan Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 205.210.31.95
🇺🇸 147.185.132.166
🇺🇸 147.90.234.14
🇫🇷 141.101.68.245
🇹🇳 102.110.11.36
🇬🇧 77.68.25.30
🇺🇸 70.115.130.187
🇺🇸 68.227.77.49
🇮🇶 65.20.251.41
🇺🇸 45.33.12.231
🇺🇸 38.86.222.20
🇪🇹 196.191.145.38
🇧🇩 157.119.50.89
🇨🇦 85.217.149.60
🇺🇸 69.4.73.244
🇺🇸 66.27.132.114
🇳🇱 64.205.72.232
🇺🇸 20.127.191.143
🇺🇸 192.177.101.228
🇦🇫 149.54.40.182
feedback