2.36.216.65

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
98 reports
74 reporters · latest 1 day ago
ISP
Vodafone Italia S.p.A.
Usage Type
Fixed Line ISP
ASN
AS30722
Domain Name
vodafone.it
Country
🇮🇹 Italy
City
Milan, Lombardy
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
98 from 74 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 34 🇺🇸 United States of America 17 🇩🇪 Germany 15
Most common categories Port Scan 80 Hacking 24 Brute-Force 18 Web App Attack 14 SSH 8
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇵🇱 bart@
Automated scan detection against redacted protected targets. Hits=2; port 21 proto 6 detection honeypot_tcp
Port Scan
🇺🇸 MPL
tcp/21
Port Scan
🇩🇪 reznekcs
Blocked by UFW firewall
Brute-Force
🇮🇹 CoreTech srl
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_unsafe_protocol
Hacking
🇫🇷 uthul
T-Pot honeypot: 10 hits on ports [21, 22] (automated)
Port Scan Hacking Brute-Force SSH
🇫🇷 uthul
T-Pot honeypot: 4 hits on ports [22] (automated)
Port Scan Brute-Force SSH
🇫🇮 xb
IP in active AbuseIPDB blacklist attempted connection to host (/var/log/syslog:1 /var/log/kern.log:1 blocked packets logged). Automatically reported by threat shield.
Port Scan Brute-Force SSH
🇩🇪 EinfxchFinn
Unauthorized connection attempt to port 21 from 2.36.216.65
Port Scan
Anonymous
Port Scan Brute-Force
Anonymous
1794622570 - 11/14/2026 03:16:10 Host: 2.36.216.65/2.36.216.65 Port: 21 TCP Blocked ...
Port Scan
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
🇫🇷 sthoyer.de
Nov 14 03:03:56 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=2.36.216.65 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=54 ID=11624 PROTO=TCP SPT=58089 DPT=21 WINDOW=65535 RES=0x00 SYN URGP=0 ...
Port Scan
🇬🇧 andypiper
CrowdSec ban for AbuseIPDB Top List
Brute-Force Web App Attack
🇫🇮 anycast_ac
Blocked by UFW on legacypanel [21/tcp] | SPT: 34798 | TTL: 51 | LEN: 52 | TOS: 0x00 • Reported by: FemboyHolding LTD
Port Scan FTP Brute-Force
🇫🇷 EvoX
🛡️ Honeypot [bsts-tpot-sensor]: Unauthorized ftpd/tcp traffic (dst port 21, src port 55742) against a passive decoy service with no legitimate function, consistent with automated scanning.
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇪 102.210.148.41
🇺🇸 64.227.94.56
🇵🇱 31.77.75.123
🇰🇷 14.55.148.34
🇧🇷 191.53.9.130
🇳🇱 160.119.76.157
🇧🇭 88.201.22.95
🇺🇸 66.135.11.147
🇳🇱 64.205.72.58
🇫🇷 13.140.214.59
🇰🇷 221.158.100.113
🇦🇷 191.85.53.23
🇩🇪 172.70.248.166
🇸🇪 171.25.193.132
🇨🇱 170.150.156.134
🇰🇷 121.155.120.13
🇷🇺 80.234.72.187
🇺🇸 74.82.47.38
🇺🇸 51.8.102.170
feedback