217.165.56.68

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
137 reports
80 reporters · latest 10 hours ago
ISP
Emirates Telecommunications Corporation
Usage Type
Fixed Line ISP
ASN
AS5384
Domain Name
etisalat.ae
Country
🇦🇪 United Arab Emirates
City
Abu Dhabi, Abu Dhabi
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
137 from 80 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 52 🇩🇪 Germany 20 🇫🇷 France 14
Most common categories Port Scan 111 Hacking 42 Brute-Force 28 Exploited Host 6 Web App Attack 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇵🇱 sefinek.net
Honeypot hit: MSSQL traffic (on 1433) with username sa and empty password Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
Brute-Force
🇺🇸 RAP
2026-11-14 23:55:44 UTC Unauthorized activity to TCP port 445. SMB
Port Scan
🇩🇪 IP Analyzer
Unauthorized connection attempt from IP address 217.165.56.68 on Port 445(SMB)
Port Scan
🇺🇸 RAP
2026-11-14 20:40:12 UTC Unauthorized activity to TCP port 445. SMB
Port Scan
🇳🇱 i-turnradio.nl
2026-11-14 11:27:16 +01:00 - Unsolicited TCP connection to a honeypot port; probing port 445.
Port Scan
🇫🇷 Kejult
Honeypot Finding: SMB activity on TCP/445; 2 Dionaea events.
Port Scan
Anonymous
Drop from IP address 217.165.56.68 to tcp-port 1433
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 1433) Source port: 62058 TTL: 234 Packet length: 40 TOS: 0x00 This report (for 217.165.56.68) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸 MPL
tcp/1433 (2 or more attempts)
Port Scan
🇺🇸 HamSammich
Automated sensor: 1 MSSQL connection/probe attempts over the last 24h (latest 2026-11-13T20:28Z).
Port Scan Hacking
🇫🇷 JohnAtlas
Honeypot: connection attempt to unused port(s) 1433/tcp on a server where these services do not exist. Automated firewall trap.
Port Scan Hacking
🇳🇱 knock
Knock-Knock honeypot brute-force: SMB (3 total hits)
Brute-Force
🇪🇸 jiossal
IP_Trapped_MikroTik_Firewall_HoneyPot
Brute-Force
🇹🇷 Detmach
Security attack detected. Multiple failed attempts from 217.165.56.68. IP banned for 1440 minutes at 13.11.2026 13:25:40. Failed attempts: 3
Brute-Force
🇩🇪 HoneyPot-FrPri
1794550707 - 11/13/2026 07:18:27 Host: 217.165.56.68/217.165.56.68 Port: 445 TCP Blocked ...
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇴 193.200.221.85
🇳🇱 89.21.67.160
🇳🇱 77.239.124.67
🇺🇸 68.183.107.254
🇳🇱 45.148.10.151
🇺🇸 45.132.115.129
🇰🇷 1.212.225.99
🇺🇦 178.150.68.5
🇺🇸 172.98.33.83
🇺🇸 170.168.99.125
🇭🇰 152.32.172.108
🇫🇮 65.108.125.120
🇺🇸 34.74.216.27
🇺🇸 20.9.36.57
🇳🇱 195.178.110.30
🇨🇳 182.92.140.123
🇨🇳 121.229.191.90
🇺🇸 98.127.90.121
🇳🇱 77.239.124.71
feedback