JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.238.219.130

196.238.219.130 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 82%: ?

82%

ISP	SMARTPHONE
Usage Type	Fixed Line ISP
ASN	AS37492
Domain Name	orangetunisie.tn
Country	🇹🇳 Tunisia
City	Tunis, Tunis Governorate

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.238.219.130

Whois 196.238.219.130

IP Abuse Reports for 196.238.219.130:

This IP address has been reported a total of 15 times from 14 distinct sources. 196.238.219.130 was first reported on July 6th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 DRI	2026-07-09 04:35:34 (2 days ago)	Unsolicited TCP traffic on Honeypot, srcport=46576 dstport=1433	Port Scan Hacking
🇵🇱 mkey	2026-07-08 23:10:03 (2 days ago)	Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS ... show more Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS=445 \| HITS=2 \| IPSET=ADD \| FIRST=2026-07-09 01:06:17 \| LAST=2026-07-09 01:06:17. Last seen 2026-07-09 01:06:17. show less	Port Scan
🇷🇸 Smel	2026-07-08 15:08:09 (3 days ago)	SQL/MH Probe, Scan, Hack -	Port Scan Hacking SQL Injection
🇦🇷 Bruno	2026-07-08 14:48:24 (3 days ago)	Port Scanner: 196.238.219.130	Port Scan
🇳🇱 ByeByte API	2026-07-07 22:25:36 (3 days ago)	byebyte.space auth: TCP packet to port 1433 (MSSQL) at 2026-07-07T22:25:36Z. Source port 56572. TCP ... show more byebyte.space auth: TCP packet to port 1433 (MSSQL) at 2026-07-07T22:25:36Z. Source port 56572. TCP flags: SYN. Packet: 40B, TTL 242, window 1024, IP id 62925. Single packet, dropped at firewall. p0f: 13 hops. show less	Port Scan
🇺🇸 cybsecaoccol	2026-07-07 20:42:18 (3 days ago)	unauthorized connection or malicious port scan attempted on tcp port - corp	Port Scan Hacking
🇺🇸 MPL	2026-07-07 18:08:48 (4 days ago)	tcp/445 (4 or more attempts)	Port Scan
🇫🇷 Hiigara	2026-07-07 16:30:47 (4 days ago)	connection attempt : 196.238.219.130 on port : tcp/1433 (MSSQL)	Port Scan
🇬🇧 Andrew	2026-07-07 08:30:04 (4 days ago)	Blocked by UFW (TCP on port 1433). Source port: 46571 TTL: 241 Packet length: 40 TOS: 0x00 This rep ... show more Blocked by UFW (TCP on port 1433). Source port: 46571 TTL: 241 Packet length: 40 TOS: 0x00 This report (for 196.238.219.130) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇹🇷 Domainhizmetleri.com	2026-07-07 02:47:54 (4 days ago)	[honeypot] - MS-SQL	Port Scan SQL Injection Brute-Force
🇫🇷 ✨	2026-07-07 00:05:15 (4 days ago)	Rule : MSSQLSERVER Rule: MSSQLSERVER Event: MSSQLSERVER UserAccount: sa sa Reason: Password did ... show more Rule : MSSQLSERVER Rule: MSSQLSERVER Event: MSSQLSERVER UserAccount: sa sa Reason: Password did not match that for the login provided. [CLIENT: 196.238.219.130] show less	Port Scan Brute-Force
Anonymous	2026-07-06 22:38:02 (4 days ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
Anonymous	2026-07-06 19:49:57 (5 days ago)	Jul 6 15:49:57 localhost kernel: [111712645.676795] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Jul 6 15:49:57 localhost kernel: [111712645.676795] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=196.238.219.130 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=60123 PROTO=TCP SPT=46571 DPT=1433 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 6 15:49:57 localhost kernel: [111712645.676820] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=196.238.219.130 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=60123 PROTO=TCP SPT=46571 DPT=1433 SEQ=3947728700 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 6 15:49:57 localhost kernel: [111712645.683962] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=196.238.219.130 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=60123 PROTO=TCP SPT=46571 DPT=1433 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 6 15:49:57 localhost kernel: [111712645.683967] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=196.238.219.130 DST=[mungedIP2] LEN= show less	Port Scan
🇺🇸 xmission.com	2026-07-06 18:13:13 (5 days ago)	Blocked by UFW (TCP on 1433) Source port: 56745 TTL: 240 Packet length: 40 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 1433) Source port: 56745 TTL: 240 Packet length: 40 TOS: 0x00 This report (for 196.238.219.130) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-06 13:32:08 (5 days ago)	Blocked by UFW (TCP on 1433) Source port: 56745 TTL: 240 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 1433) Source port: 56745 TTL: 240 Packet length: 40 TOS: 0x08 This report (for 196.238.219.130) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 156.225.1.87

🇩🇪 64.226.86.7

🇺🇸 2607:f8b0:4004:c1f::12e

🇩🇪 212.30.36.89

🇩🇪 212.30.36.88

🇻🇪 201.249.205.94

🇬🇧 154.16.44.152

🇺🇸 47.251.25.158

🇨🇳 223.107.243.187

🇩🇪 212.30.36.87

🇩🇪 212.30.36.86

🇳🇱 195.178.110.137

🇨🇴 185.56.111.11

🇺🇦 91.244.16.201

🇺🇸 69.87.221.194

🇩🇪 45.3.45.180

🇩🇪 212.30.36.85

🇩🇪 212.30.36.84

🇲🇽 189.244.53.155

🇺🇸 162.216.149.129