196.191.65.11

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
66% Elevated
28 reports
21 reporters ยท latest 2 weeks ago
ISP
Ethio Telecom
Usage Type
Fixed Line ISP
ASN
AS24757
Domain Name
ethiotelecom.et
Country
๐Ÿ‡ช๐Ÿ‡น Ethiopia
City
Jijiga, Somali
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
28 from 21 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡บ๐Ÿ‡ธ United States of America 8 ๐Ÿ‡ซ๐Ÿ‡ท France 5 ๐Ÿ‡ฉ๐Ÿ‡ช Germany 4
Most common categories Port Scan 25 Brute-Force 10 Hacking 7 IoT Targeted 4 Exploited Host 2
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ฆ๐Ÿ‡น hxsain
Blocked by UFW on fr2 [23/tcp] | SPT: 46522 | TTL: 48 | LEN: 60 | TOS: 0x00 โ€ข Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan IoT Targeted
๐Ÿ‡ฒ๐Ÿ‡ณ Public CSIRT/CC of Mongolia
Honeypot hit: Unauthorized connection attempt detected on 23/TELNET
Hacking IoT Targeted Port Scan
๐Ÿ‡ฎ๐Ÿ‡ช wiredalter
Blocked by UFW on vhVPS [23/tcp] Source Port: 47663 TTL: 48 Packet Length: 60 TOS: 0x08 Analyzed by https://ip.wiredalter.com
Port Scan Brute-Force
Anonymous
Port Scan Brute-Force
๐Ÿ‡ท๐Ÿ‡ด abuse_IP_reporter
Oct 27 13:35:32 server UFW BLOCK SRC=196.191.65.11 DF PROTO=TCP SPT=40656
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท security.rdmc.fr
Port Scan Attack proto:TCP src:50138 dst:23
Port Scan
๐Ÿ‡ณ๐Ÿ‡ฑ EGP Abuse Dept
Unauthorized connection to Telnet port 23
Port Scan Hacking
๐Ÿ‡บ๐Ÿ‡ธ ShadowWhisperer
botnet node - mirai (Mirai-family shell-verification handshake) [handshake, mirai, worm]
Brute-Force IoT Targeted
๐Ÿ‡ธ๐Ÿ‡ช venix
Unauthorized connection attempt detected from IP address 196.191.65.11 to port 23 (compute01.malmo)
Brute-Force Exploited Host
๐Ÿ‡ฉ๐Ÿ‡ช XYCoderXY
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-10-25 20:06:05 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ sumnone
Port probing on unauthorized port 23
Port Scan Hacking Exploited Host
๐Ÿ‡น๐Ÿ‡ท Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: Telnet Login Attempt (23/tcp)
Port Scan SSH
Anonymous
IP & Port Scan.
SSH Port Scan Brute-Force
๐Ÿ‡ซ๐Ÿ‡ท security.rdmc.fr
Port Scan Attack proto:TCP src:59185 dst:23
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ณ๐Ÿ‡ฑ 64.205.72.154
๐Ÿ‡ฎ๐Ÿ‡ณ 202.88.209.51
๐Ÿ‡บ๐Ÿ‡ธ 172.236.112.138
๐Ÿ‡ฏ๐Ÿ‡ต 158.101.136.233
๐Ÿ‡ธ๐Ÿ‡ฌ 150.109.16.200
๐Ÿ‡ง๐Ÿ‡ช 142.250.32.67
๐Ÿ‡บ๐Ÿ‡ธ 142.4.5.181
๐Ÿ‡บ๐Ÿ‡ธ 54.89.190.152
๐Ÿ‡ธ๐Ÿ‡ฌ 47.84.143.193
๐Ÿ‡ญ๐Ÿ‡ฐ 35.220.232.219
๐Ÿ‡บ๐Ÿ‡ธ 20.121.211.17
๐Ÿ‡บ๐Ÿ‡ธ 3.89.140.75
๐Ÿ‡จ๐Ÿ‡ณ 139.170.73.168
๐Ÿ‡บ๐Ÿ‡ธ 66.132.159.37
๐Ÿ‡ช๐Ÿ‡ฌ 41.237.248.209
๐Ÿ‡ฎ๐Ÿ‡ฉ 38.50.166.191
๐Ÿ‡บ๐Ÿ‡ธ 135.237.120.224
๐Ÿ‡ฉ๐Ÿ‡ช 93.152.221.228
๐Ÿ‡บ๐Ÿ‡ธ 43.153.12.58
๐Ÿ‡บ๐Ÿ‡ธ 35.253.179.116
feedback