196.216.134.149

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
74 reports
56 reporters ยท latest 59 minutes ago
ISP
HERO TELECOMS (PTY) LTD
Usage Type
Fixed Line ISP
ASN
AS328471
Domain Name
herotel.com
Country
๐Ÿ‡ฟ๐Ÿ‡ฆ South Africa
City
Lichtenburg, North West
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
74 from 56 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡ฉ๐Ÿ‡ช Germany 9 ๐Ÿ‡ซ๐Ÿ‡ท France 5 ๐Ÿ‡ฌ๐Ÿ‡ง United Kingdom of Great Britain and Northern Ireland 5
Most common categories Port Scan 24 Brute-Force 3 SSH 1 Web App Attack 1 Exploited Host 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ฌ๐Ÿ‡ง andypiper
CrowdSec ban for AbuseIPDB Top List
Brute-Force Web App Attack
Anonymous
Blocked by firewall on hugin [18000/tcp] | Rule: UFW | SPT: 34238 | TTL: 52 | LEN: 60 | TOS: 0x00 โ€ข Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช bescared
F2B - Malicious activity detected. Excessive port scans. -151302cd-
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช kingjan1999
Blocked by UFW [18000/tcp] | SPT: 7040 | TTL: 52 | LEN: 60 | TOS: 0x00 โ€ข Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
๐Ÿ‡ญ๐Ÿ‡ฐ ้น้น
monitor: on ser162528253480 | port: 18000 | ttl: 127 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
๐Ÿ‡ง๐Ÿ‡ท ICS Labs
ICS Labs threat intelligence (ICS Feeds): Exploited Host. Last observed 2026-11-04 UTC.
Exploited Host
๐Ÿ‡บ๐Ÿ‡ธ xmission.com
Blocked by UFW (TCP on 18000) Source port: 35376 TTL: 47 Packet length: 60 TOS: 0x00 This report (for 196.216.134.149) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ donarev419
Port scan detected on port 18000 (connection without data transfer)
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท EvoX
๐Ÿ›ก๏ธ Honeypot [bsts-tpot-sensor]: Empty payload (likely service probe); 18000 [2] TCP
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท uthul
T-Pot honeypot: 7 hits on ports [18000] (automated)
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท uthul
T-Pot honeypot: 13 hits on ports [18000] (automated)
Port Scan
Anonymous
Blocked by UFW [18000/tcp] | SPT: 17763 | TTL: 51 | LEN: 60 | TOS: 0x00 โ€ข Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท Little Iguana
trying to access non-authorized port
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ micropedro
4 incidents: port scanning. First: 2026-10-25 05:47, Last: 2026-10-29 08:21 UTC. Triggers: non-public-port,firewall-tcp,unknown.
Port Scan
๐Ÿ‡ฎ๐Ÿ‡ช RoboSOC
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ต๐Ÿ‡ฐ 203.215.167.180
๐Ÿ‡บ๐Ÿ‡ฆ 178.151.245.162
๐Ÿ‡ธ๐Ÿ‡ฌ 109.123.234.206
๐Ÿ‡ป๐Ÿ‡ณ 103.163.118.174
๐Ÿ‡ง๐Ÿ‡ฉ 103.117.108.18
๐Ÿ‡ต๐Ÿ‡น 81.193.216.17
๐Ÿ‡ฉ๐Ÿ‡ช 69.5.169.149
๐Ÿ‡ณ๐Ÿ‡ฑ 64.205.72.149
๐Ÿ‡ฌ๐Ÿ‡ง 5.252.83.134
๐Ÿ‡บ๐Ÿ‡ธ 3.131.24.55
๐Ÿ‡บ๐Ÿ‡ธ 192.101.66.203
๐Ÿ‡ซ๐Ÿ‡ฎ 147.185.133.148
๐Ÿ‡บ๐Ÿ‡ธ 147.185.132.23
๐Ÿ‡ซ๐Ÿ‡ท 129.151.238.160
๐Ÿ‡ฐ๐Ÿ‡ท 118.37.214.187
๐Ÿ‡ณ๐Ÿ‡ฑ 82.27.201.115
๐Ÿ‡ณ๐Ÿ‡ฑ 64.205.72.122
๐Ÿ‡ณ๐Ÿ‡ฑ 64.205.72.12
๐Ÿ‡บ๐Ÿ‡ธ 64.62.197.26
๐Ÿ‡บ๐Ÿ‡ฆ 45.94.158.49
feedback