JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.30.65.18

196.30.65.18 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 52%: ?

52%

ISP	MTN SA
Usage Type	Mobile ISP
ASN	AS16637
Domain Name	mtn.com
Country	🇿🇦 South Africa
City	Durban, KwaZulu-Natal

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.30.65.18

Whois 196.30.65.18

IP Abuse Reports for 196.30.65.18:

This IP address has been reported a total of 15 times from 10 distinct sources. 196.30.65.18 was first reported on June 9th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 knock	2026-08-28 13:55:12 (4 days ago)	Knock-Knock honeypot brute-force: SIP (5 total hits)	Hacking Brute-Force
🇺🇸 ShadowWhisperer	2026-08-28 13:37:15 (4 days ago)	SIP credential attempt. (INVITE loop=1 ua=VOIP)	Fraud VoIP Brute-Force
🇺🇸 Neosmith20	2026-08-28 13:05:55 (4 days ago)	Knock-Knock honeypot brute-force: SIP (6 total hits)	Hacking Brute-Force
🇦🇺 dyln	2026-08-28 13:05:19 (4 days ago)	Dyls honeypot brute-force: SIP (17 total hits)	Hacking Brute-Force
🇪🇸 raiolanetworks.com	2026-08-28 12:00:00 (4 days ago)	Honeypot detection: SIP/VoIP fraud. 3 events observed. Reported automatically from a honeypot sensor ... show more Honeypot detection: SIP/VoIP fraud. 3 events observed. Reported automatically from a honeypot sensor. show less	Fraud VoIP Brute-Force
🇫🇮 sgofferj	2026-08-28 07:53:17 (4 days ago)	Attack attempt on SIP server	Fraud VoIP Hacking Brute-Force
🇮🇹 Francesco Ippoliti	2026-08-28 04:21:21 (4 days ago)	[Aug 28 06:21:20] NOTICE[322925] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:8001@172 ... show more [Aug 28 06:21:20] NOTICE[322925] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:[email protected]>' failed for '196.30.65.18:56661' (callid: [email protected]) - No matching endpoint found [Aug 28 06:21:20] NOTICE[322680] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:[email protected]>' failed for '196.30.65.18:56661' (callid: [email protected]) - No matching endpoint found ... show less	Brute-Force Port Scan
🇺🇸 Neosmith20	2026-08-28 01:46:08 (4 days ago)	Knock-Knock honeypot brute-force: SIP (3 total hits)	Hacking Brute-Force
🇦🇺 dyln	2026-08-28 01:45:43 (4 days ago)	Dyls honeypot brute-force: SIP (10 total hits)	Hacking Brute-Force
🇳🇱 knock	2026-08-28 00:27:36 (4 days ago)	Knock-Knock honeypot brute-force: SIP (2 total hits)	Hacking Brute-Force
🇮🇹 Francesco Ippoliti	2026-08-27 22:59:52 (4 days ago)	[Aug 28 00:59:52] NOTICE[322810] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:8001@172 ... show more [Aug 28 00:59:52] NOTICE[322810] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:[email protected]>' failed for '196.30.65.18:56661' (callid: [email protected]) - No matching endpoint found ... show less	Brute-Force Port Scan
🇺🇸 IndigoRidge	2026-08-27 19:15:41 (4 days ago)	Knock-Knock SIP honeypot activity; time=2026-08-27 19:11:33; sip_method=INVITE; sip_dial_number=+390 ... show more Knock-Knock SIP honeypot activity; time=2026-08-27 19:11:33; sip_method=INVITE; sip_dial_number=+390242101096 show less	Fraud VoIP Brute-Force
🇮🇹 Francesco Ippoliti	2026-08-27 19:04:19 (4 days ago)	[Aug 27 21:04:18] NOTICE[322680] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:8001@172 ... show more [Aug 27 21:04:18] NOTICE[322680] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:[email protected]>' failed for '196.30.65.18:56661' (callid: [email protected]) - No matching endpoint found [Aug 27 21:04:18] NOTICE[322925] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:[email protected]>' failed for '196.30.65.18:56661' (callid: [email protected]) - No matching endpoint found ... show less	Brute-Force Port Scan
🇺🇸 mc4bbs	2026-08-27 18:45:02 (4 days ago)	ChazTelPlex Asterisk: Unauthorized AccountID probe. Log: [2026-08-27 14:43:59] SECURITY[2940] res_se ... show more ChazTelPlex Asterisk: Unauthorized AccountID probe. Log: [2026-08-27 14:43:59] SECURITY[2940] res_security_log.c: SecurityEvent="ChallengeSent",EventTV="2026-08-27T14:43:59.175-0400",Severity="Informational",Service="SIP",EventVersion="1",AccountID="sip:[email protected]:56668",SessionID="0x7fcdb805d990",LocalAddress="IPV4/UDP/108.54.115.236/5060",RemoteAddress="IPV4/UDP/196.30.65.18/56668",Challenge="0eb1ed0b" show less	Fraud VoIP Brute-Force
🇺🇸 TPI-Abuse	2026-06-09 04:18:31 (2 months ago)	(mod_security) mod_security (id:217210) triggered by 196.30.65.18 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:217210) triggered by 196.30.65.18 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 00:18:26.400647 2026] [security2:error] [pid 2502:tid 2502] [client 196.30.65.18:37158] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|beegcom.click\|F\|4"] [data "GET http://beegcom.click HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "beegcom.click"] [uri "/"] [unique_id "aieUEjBpeveSOar6gN2cFwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 116.230.249.225

🇳🇱 80.82.77.75

🇧🇬 79.124.62.134

🇨🇴 64.76.8.21

🇫🇷 51.68.111.203

🇧🇷 31.56.44.105

🇮🇩 202.145.0.18

🇳🇱 195.178.110.232

🇬🇧 185.200.118.46

🇺🇸 172.82.65.247

🇨🇳 117.188.208.80

🇵🇭 112.199.119.35

🇨🇦 70.49.18.142

🇱🇻 62.60.130.242

🇺🇸 51.57.81.164

🇸🇬 47.84.113.216

🇩🇪 31.25.236.108

🇺🇸 5.83.138.189

🇺🇸 136.114.198.146

🇧🇩 103.172.216.162