212.70.96.126

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
73% Elevated
16 reports
15 reporters · latest 3 days ago
ISP
Vodafone Qatar Q.S.C.
Usage Type
Fixed Line ISP
ASN
AS48728
Domain Name
vodafone.qa
Country
🇶🇦 Qatar
City
Doha, Baladiyat ad Dawhah
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
16 from 15 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 4 🇫🇷 France 3 🇺🇸 United States of America 3
Most common categories Port Scan 14 Hacking 5
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Unauthorized access (445/tcp/microsoft-ds)
Port Scan
🇫🇷 sthoyer.de
Port Scan
🇦🇹 joe-abuse
Honeypot: 1 unsolicited connection attempt(s) to ports where no service is offered (445/tcp); first 2026-11-07 19:04:30 UTC, last 2026-11-07 19:04:30 UTC. Reported by ipdb-security/fitzgerald.eu
Port Scan
🇩🇪 HoneyPot-FrPri
1794065483 - 11/07/2026 16:31:23 Host: 212.70.96.126/212.70.96.126 Port: 445 TCP Blocked ...
Port Scan
🇭🇰 azminawwar
[212.70.96.126] triggered by honeypot on port [1433], Timestamp [2026-11-07T13:51:42Z] ) U
Port Scan Hacking
🇩🇪 Mailguard-FRD
1794036255 - 11/07/2026 08:24:15 Host: 212.70.96.126/212.70.96.126 Port: 1433 TCP Blocked ...
Port Scan
🇸🇬 drewf.ink
[18:41] Sent a legacy SMB1 negotiation (Type: SMB1, Dialect(s): NT LM 0.12) - no SMB2 support signaled
Hacking
🇫🇷 cereal57
Unsolicited connection to a honeypot (dionaea, port 445). Automated scan/probe.
Port Scan
🇫🇷 uthul
T-Pot honeypot: 1 hits on ports [1433] (automated)
Port Scan Hacking
🇩🇪 goodbytes
Suricata IDS, web server and web honeypot logs on our public servers, UTC. 2026-11-06 02:14:37 to 2026-11-06 02:14:37: 1 alerts. Evidence: 2026-11-06 02:14:37 IDS: ET SCAN Suspicious inbound to MSSQL port 1433 (TCP/1433)
Port Scan
🇺🇸 scharsey
Honeypot: 4 MSSQL events
Port Scan
🇪🇪 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 445/SMB | Proto: TCP(1) | Flags: all SYN | TTL: 240 | Len: 40B | Win: 1024(1) | F2B/ufw-honeypot@2026-11-05T19:13:55Z
Port Scan Hacking
🇺🇸 RAP
2026-11-05 06:14:08 UTC Unauthorized activity to TCP port 1433. SQL
Port Scan
🇳🇱 donarev419
Connection to port 445 with data transfer. Data preview:
Port Scan Hacking
🇺🇸 RAP
2026-11-05 03:00:33 UTC Unauthorized activity to TCP port 1433. SQL
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 222.191.243.91
🇫🇷 185.177.72.17
🇺🇸 148.153.56.174
🇮🇳 125.17.92.106
🇧🇬 79.124.59.78
🇺🇸 66.132.224.92
🇺🇸 172.236.112.131
🇷🇺 91.198.213.5
🇬🇧 87.236.176.161
🇳🇱 86.54.31.36
🇺🇸 66.132.224.236
🇧🇪 35.210.144.160
🇬🇧 31.14.254.89
🇨🇦 185.98.171.142
🇺🇸 154.16.115.99
🇨🇳 116.172.93.48
🇺🇸 82.21.185.113
🇺🇸 66.132.224.235
🇺🇸 57.141.0.73
🇸🇬 43.173.173.41
feedback