JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

103.97.201.4

Neutral Activity

Abuse confidence score ?

0% Low Risk

29 reports

22 reporters · latest 7 months ago

ISP	NEWRUI LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS205548
Domain Name	newruiidc.com
Country	🇭🇰 Hong Kong
City	Kwai Chung, Kwai Tsing District

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

103.97.201.4 has been reported 29 times. The most recent report is from 7 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 103.97.201.4

Export CSV

This IP address has been reported a total of 29 times from 22 distinct sources. 103.97.201.4 was first reported on August 19th 2021, and the most recent report was 7 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-02-25 23:03:57 (7 months ago)	Blocked by UFW (TCP on 80) Source port: 47702 TTL: 106 Packet length: 64 TOS: 0x14 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 47702 TTL: 106 Packet length: 64 TOS: 0x14 This report (for 103.97.201.4) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
Anonymous	2022-04-11 02:05:52 (4 years ago)	Web Form Spam: 'Julia's Garland' (fr. Guirlande de Julie)	Web Spam
🇿🇦 Birdflew	2022-04-10 23:24:04 (4 years ago)	Wordpress attack	Web App Attack
🇬🇧 Epimetheus	2022-04-10 22:47:00 (4 years ago)	Unauthorized access attempts: From: 103.97.201.4 Method: HTTPS GET URI Path: /error_log UA: ... show more Unauthorized access attempts: From: 103.97.201.4 Method: HTTPS GET URI Path: /error_log UA: "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:50.0) Gecko/20100101 Firefox/50.0" show less	Web App Attack
Anonymous	2021-12-20 00:47:12 (4 years ago)	$f2bV_matches	Brute-Force SSH
Anonymous	2021-12-16 18:29:58 (4 years ago)	(sshd) Failed SSH login from 103.97.201.4 (HK/Hong Kong/-): 5 in the last 3600 secs; Ports: ; Direc ... show more (sshd) Failed SSH login from 103.97.201.4 (HK/Hong Kong/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Dec 16 18:29:47 server5 sshd[22102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.97.201.4 user=root Dec 16 18:29:49 server5 sshd[22102]: Failed password for root from 103.97.201.4 port 41206 ssh2 Dec 16 18:29:51 server5 sshd[22109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.97.201.4 user=root Dec 16 18:29:52 server5 sshd[22109]: Failed password for root from 103.97.201.4 port 41210 ssh2 Dec 16 18:29:54 server5 sshd[22112]: Invalid user ubnt from 103.97.201.4 show less	Brute-Force
Anonymous	2021-12-15 14:38:02 (4 years ago)		Port Scan
🇳🇱 EGP Abuse Dept	2021-12-14 08:29:37 (4 years ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
🇿🇦 IrisFlower	2021-12-13 19:26:31 (4 years ago)	Unauthorized connection attempt detected from IP address 103.97.201.4 to port 22 [J]	Port Scan Hacking
🇩🇪 formality	2021-12-13 13:47:19 (4 years ago)	Invalid user ubnt from 103.97.201.4 port 8752	Brute-Force SSH
🇿🇦 IrisFlower	2021-12-13 04:16:08 (4 years ago)	Unauthorized connection attempt detected from IP address 103.97.201.4 to port 22 [J]	Port Scan Hacking
🇿🇦 IrisFlower	2021-12-12 19:01:02 (4 years ago)	Unauthorized connection attempt detected from IP address 103.97.201.4 to port 22 [J]	Port Scan Hacking
🇬🇧 spufidoo	2021-12-12 04:47:47 (4 years ago)	Failed password attempt for user ubnt port 60768 at 2021-12-12T04:47:47+0000	Brute-Force SSH
🇬🇧 spufidoo	2021-12-12 04:47:47 (4 years ago)	Invalid user ubnt at 2021-12-12T04:47:47+00:00	Brute-Force SSH
🇬🇧 spufidoo	2021-12-11 23:47:45 (4 years ago)	Dec 12 04:47:35 thor sshd[561175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more Dec 12 04:47:35 thor sshd[561175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.97.201.4 user=root Dec 12 04:47:37 thor sshd[561175]: Failed password for root from 103.97.201.4 port 60760 ssh2 Dec 12 04:47:35 thor sshd[561175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.97.201.4 user=root Dec 12 04:47:37 thor sshd[561175]: Failed password for root from 103.97.201.4 port 60760 ssh2 Dec 12 04:47:40 thor sshd[561177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.97.201.4 user=root Dec 12 04:47:40 thor sshd[561177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.97.201.4 user=root Dec 12 04:47:42 thor sshd[561177]: Failed password for root from 103.97.201.4 port 60764 ssh2 Dec 12 04:47:45 thor sshd[561180]: Invalid user ubnt from 103.97.201.4 port 60768 show less	Brute-Force SSH

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 156.146.45.203

🇺🇸 149.40.50.205

🇮🇳 122.160.165.158

🇧🇪 104.199.107.54

🇹🇳 102.159.87.72

🇬🇷 79.103.2.0

🇬🇧 5.252.83.155

🇬🇧 5.252.83.116

🇦🇺 209.38.83.42

🇧🇷 205.210.31.196

🇬🇧 193.163.125.228

🇳🇱 193.47.62.69

🇨🇴 186.155.91.9

🇦🇷 186.130.159.102

🇸🇪 185.246.128.152

🇵🇹 185.92.210.138

🇺🇸 147.136.20.81

🇦🇪 141.145.159.132

🇵🇰 139.135.41.175

🇨🇳 120.48.171.196