196.119.140.54
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- 2G/3G/4G Mobile Costumers
- Usage Type
- Fixed Line ISP
- ASN
- AS36925
- Domain Name
- orange.ma
- Country
- 🇲🇦 Morocco
- City
- Sale, Rabat-Sale-Kenitra
Abuse Reports
Total reports
34 from
25 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇳🇱 EGP Abuse Dept |
Unauthorized connection to Telnet port 23
|
Port Scan Hacking | |
| 🇺🇸 RAP |
2026-11-11 02:07:44 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | |
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | |
| 🇩🇪 D3vNu11 |
Level: (LOW): Reputation Unknown via Cowrie IOC Country: Morocco 2x -> Target Country: Germany SSH
|
Brute-Force SSH | |
| Anonymous |
fail2ban:piguard2:14,18
|
Port Scan Brute-Force | |
| Anonymous |
SSH tarpit (endlessh) connection from 196.119.140.54
|
Brute-Force SSH | |
| 🇺🇸 NetVexor |
Attack source identified and submitted via NetVexor BGP Blackhole Network
|
Port Scan Hacking Brute-Force | |
| 🇸🇪 basil s |
Unauthorized access attempt: SSH brute-force probe. Automated TCP connection attempts to SSH port (TCP/22); dropped and blocked by firewall. Target: TCP/22 (SSH). First seen: 2026-11-06 14:53:54 UTC. Source: host firewall/sshd log.
|
Brute-Force SSH | |
| 🇺🇸 RAP |
2026-11-06 05:35:08 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇨🇿 0x44 |
196.119.140.54 [ 05/Nov/2026 Connection attempt blocked ]
|
Port Scan | |
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: repeated TCP service probing on TCP/23 (Telnet); 2 application-level events across 2 source port(s). Sensor(s): Cowrie.
|
Port Scan | |
| 🇭🇰 PingMeMaybe |
Blocked by UFW on hk [23/tcp]
Source port: 44188
TTL: 46
Packet length: 60
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan IoT Targeted | |
| 🇳🇱 EGP Abuse Dept |
Unauthorized connection to Telnet port 23
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown