170.254.97.12
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- ARNET- Serviços de Conexão à Internet Ltda.-ME
- Usage Type
- Fixed Line ISP
- ASN
- AS265102
- Hostname(s)
- cgnat-b-12.arnetms.com.br
- Domain Name
- arnetms.com.br
- Country
- 🇧🇷 Brazil
- City
- Dourados, Mato Grosso do Sul
Abuse Reports
Total reports
27 from
17 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 vtchost.com |
requested HTTP honeypot page - ignored robots.txt - bad crawler
...
|
Bad Web Bot Exploited Host | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=56723 dstport=20836
|
Port Scan | |
| 🇺🇸 Cyber Crusader |
Failed persistent attempts to brute-force login to non-existent administrator user
|
Port Scan Hacking Brute-Force | |
| Anonymous |
unsolicited UDP packet to port 6457 (588 bytes)
|
Hacking | |
| 🇷🇴 abuse_IP_reporter |
Aug 31 01:24:32 server UFW BLOCK SRC=170.254.97.12
|
Port Scan | |
| 🇧🇷 diego |
[rede-44-49] 08/30/2026-04:48:11.625504, 170.254.97.12, Protocol: 17, ET CINS Active Threat Intelligence Poor Reputation IP group 224
|
Hacking | |
| 🇧🇷 diego |
[rede-164-29] 08/30/2026-04:17:42.733937, 170.254.97.12, Protocol: 17, ET CINS Active Threat Intelligence Poor Reputation IP group 224
|
Hacking | |
| 🇺🇸 etu brutus |
170.254.97.12 Blocked by [Attack Vector List]
...
|
Hacking Brute-Force Exploited Host | |
| 🇺🇸 Cyber Crusader |
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
|
Port Scan Hacking Brute-Force | |
| Anonymous |
51785/udp (1 or more attempts)
|
Port Scan | |
| 🇮🇳 Mr.Singh |
NFT blocked 170.254.97.12 on 29-Aug-2026..
|
Port Scan Brute-Force | |
| Anonymous |
6233/udp (1 or more attempts)
|
Port Scan | |
| 🇺🇸 KelvaTLS |
|
DDoS Attack | |
| 🇺🇸 kosada.com |
Web bot: denial-of-service flood
|
DDoS Attack Bad Web Bot | |
| 🇨🇦 DRI |
Unsolicited UDP traffic on Honeypot, srcport=56451 dstport=40659
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown