JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

196.216.85.49

Recent Activity

Abuse confidence score ?

45% Elevated

18 reports

12 reporters · latest 4 hours ago

ISP	Liquid Telecommunications Operations Limited
Usage Type	Fixed Line ISP
ASN	AS30844
Domain Name	liquidtelecom.mu
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 196.216.85.49

Export CSV

This IP address has been reported a total of 18 times from 12 distinct sources. 196.216.85.49 was first reported on June 23rd 2022, and the most recent report was 4 hours ago. In the last 60 days, the top reporter locations were: Belarus with 6 reports; United States of America with 2 reports; Germany with 1 report. The most common categories in these recent reports were: Port Scan 10 times; Hacking 3 times; Brute-Force 2 times; SSH 2 times; Exploited Host 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-20 04:08:48 (4 hours ago)	MikroTik Enterprise Honeypot	Port Scan
Anonymous	2026-10-14 12:16:48 (5 days ago)	Hit honeypot r.	Port Scan Hacking Exploited Host
🇺🇸 NetGuard	2026-10-14 11:16:52 (5 days ago)	#honeypot #netguard247 #cowrie #ssh_telnet_probe Captured by NetGuard 24/7 T-Pot honeypot (netguard2 ... show more #honeypot #netguard247 #cowrie #ssh_telnet_probe Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com). Timestamp: 2026-10-14T11:13:20.09+00:00 Attacker IP: 196.216.85.49 \| Port: 23 \| Country: Mauritius Honeypot: cowrie \| Attack: ssh_telnet_probe Activity: 2 hits on port 23 between 2026-10-14T11:13:20.09+00:00 and 2026-10-14T11:13:33.978+00:00 (6h window 2026-10-14T06:00:00.000Z) Source: NetGuard 24/7 (netguard24-7.com) \| PhantomGrid Defense show less	Brute-Force SSH
🇧🇾 stroytrest	2026-10-14 11:12:07 (5 days ago)	2026-10-14T14:12:06.127625+03:00 gate kernel: [1038616.017274] nftables: JAIL-TELNET IN=wan OUT= MAC ... show more 2026-10-14T14:12:06.127625+03:00 gate kernel: [1038616.017274] nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=196.216.85.49 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=51056 DF PROTO=TCP SPT=38205 DPT=23 WINDOW=29040 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇧🇾 stroytrest	2026-10-13 14:15:54 (6 days ago)	2026-10-13T17:15:54.083615+03:00 gate kernel: [963243.973275] nftables: JAIL-TELNET IN=wan OUT= MAC= ... show more 2026-10-13T17:15:54.083615+03:00 gate kernel: [963243.973275] nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=196.216.85.49 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=25746 DF PROTO=TCP SPT=56660 DPT=23 WINDOW=29040 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 NetGuard	2026-10-13 11:36:12 (6 days ago)	#honeypot #netguard247 #cowrie #ssh_telnet_probe Captured by NetGuard 24/7 T-Pot honeypot (netguard2 ... show more #honeypot #netguard247 #cowrie #ssh_telnet_probe Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com). Timestamp: 2026-10-13T11:31:30.879+00:00 Attacker IP: 196.216.85.49 \| Port: 23 \| Country: Mauritius Honeypot: cowrie \| Attack: ssh_telnet_probe Activity: 2 hits on port 23 between 2026-10-13T11:31:30.879+00:00 and 2026-10-13T11:31:43.91+00:00 (6h window 2026-10-13T06:00:00.000Z) Source: NetGuard 24/7 (netguard24-7.com) \| PhantomGrid Defense show less	Brute-Force SSH
🇸🇪 Tsumugi Kotobuki	2026-10-13 03:43:35 (1 week ago)	Port Scan on Honeypot \| Ports: 23/Telnet \| Proto: TCP(1) \| Flags: all SYN \| TTL: 40 \| Len: 60B \| Win ... show more Port Scan on Honeypot \| Ports: 23/Telnet \| Proto: TCP(1) \| Flags: all SYN \| TTL: 40 \| Len: 60B \| Win: 29040(1) \| F2B/ufw-honeypot@2026-10-13T03:43:35Z show less	Port Scan Hacking
Anonymous	2026-10-13 02:39:25 (1 week ago)	denied traffic to a honeypot network. destination port 23.	Port Scan Hacking
🇧🇾 stroytrest	2026-10-12 19:53:30 (1 week ago)	2026-10-12T22:53:29.939639+03:00 gate kernel: [897099.829294] nftables: JAIL-TELNET IN=wan OUT= MAC= ... show more 2026-10-12T22:53:29.939639+03:00 gate kernel: [897099.829294] nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=196.216.85.49 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=27881 DF PROTO=TCP SPT=49305 DPT=23 WINDOW=29040 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇧🇾 sashan	2026-10-12 18:50:25 (1 week ago)	2026-10-12T21:50:25.147921+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=196.216.85. ... show more 2026-10-12T21:50:25.147921+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=196.216.85.49 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=45697 DF PROTO=TCP SPT=55729 DPT=23 WINDOW=29040 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇧🇾 stroytrest	2026-10-12 12:53:17 (1 week ago)	2026-10-12T15:53:16.801666+03:00 gate kernel: [871886.689877] nftables: JAIL-TELNET IN=wan OUT= MAC= ... show more 2026-10-12T15:53:16.801666+03:00 gate kernel: [871886.689877] nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=196.216.85.49 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=60981 DF PROTO=TCP SPT=42741 DPT=23 WINDOW=29040 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇧🇾 sashan	2026-10-12 01:19:05 (1 week ago)	2026-10-12T04:19:04.908328+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=196.216.85. ... show more 2026-10-12T04:19:04.908328+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=196.216.85.49 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=10775 DF PROTO=TCP SPT=49408 DPT=23 WINDOW=29040 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 security.rdmc.fr	2026-05-31 21:52:46 (4 months ago)	Port Scan Attack proto:TCP src:32923 dst:23	Port Scan
🇺🇸 MPL	2026-05-31 21:33:49 (4 months ago)	tcp/23 (2 or more attempts)	Port Scan
🇺🇸 RAP	2026-05-31 15:47:42 (4 months ago)	2026-05-31 15:47:42 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇦 178.73.92.181

🇨🇳 175.178.180.27

🇺🇸 137.131.24.170

🇺🇸 136.144.43.110

🇰🇷 122.199.225.53

🇳🇱 93.88.156.27

🇳🇱 77.91.71.36

🇺🇸 64.62.156.202

🇨🇦 45.198.224.125

🇨🇦 45.194.92.15

🇩🇪 8.209.89.108

🇷🇺 2a02:6b8::4:120

🇷🇴 193.32.162.69

🇺🇸 192.34.61.207

🇭🇰 154.92.2.59

🇮🇳 152.57.102.17

🇨🇳 112.96.210.195

🇮🇳 106.51.21.248

🇳🇬 105.112.211.164

🇮🇩 103.173.140.185