JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.97.113.173

185.97.113.173 was found in our database!

This IP was reported 86 times. Confidence of Abuse is 24%: ?

24%

ISP	NLS Networks IPoE
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200590
Domain Name	nls.kz
Country	🇰🇿 Kazakhstan
City	Almaty, Almaty

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.97.113.173

Whois 185.97.113.173

IP Abuse Reports for 185.97.113.173:

This IP address has been reported a total of 86 times from 35 distinct sources. 185.97.113.173 was first reported on March 30th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 mist x	2026-09-09 10:04:48 (1 week ago)	Honeypot SMB Probe: Port 445 SMB scan and exploit handshake probe.	Port Scan Hacking
🇺🇸 drewf.ink	2026-08-20 05:10:21 (3 weeks ago)	[05:10] Triggered SMB honeypot. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1. ... show more [05:10] Triggered SMB honeypot. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12 show less	Hacking Exploited Host
Anonymous	2026-08-15 06:10:24 (1 month ago)	Unauthorized access (445/tcp/microsoft-ds)	Port Scan
🇫🇷 zulzeen	2026-07-30 09:50:25 (1 month ago)	[incypit-web] Blocked by SysWarden Firewall [BLOCK] (SMB/Possible Ransomware Attack)	Hacking Brute-Force
🇫🇷 sthoyer.de	2026-07-24 12:55:22 (1 month ago)	Jul 24 14:55:21 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jul 24 14:55:21 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=185.97.113.173 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x20 TTL=116 ID=4914 DF PROTO=TCP SPT=49185 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 HamSammich	2026-07-24 10:47:10 (1 month ago)	Automated sensor: 9 SMB connection/probe attempts over the last 24h (latest 2026-07-24T10:47Z).	Hacking Brute-Force
🇫🇷 sthoyer.de	2026-07-24 07:40:31 (1 month ago)	Jul 24 09:40:30 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jul 24 09:40:30 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=185.97.113.173 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x20 TTL=116 ID=31050 DF PROTO=TCP SPT=63181 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 Little Iguana	2026-07-24 07:39:22 (1 month ago)	trying to access non-authorized port	Port Scan
🇫🇷 sthoyer.de	2026-07-24 06:57:08 (1 month ago)	Jul 24 08:57:07 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jul 24 08:57:07 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=185.97.113.173 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x20 TTL=116 ID=14932 DF PROTO=TCP SPT=53569 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 thecocasio	2026-07-18 09:09:06 (1 month ago)	PortSentry honeypot: unsolicited TCP connection to closed decoy port 445 (SMB) on a host running no ... show more PortSentry honeypot: unsolicited TCP connection to closed decoy port 445 (SMB) on a host running no such service. Automated port-scan detection at 2026-07-18T09:09:06Z. show less	Port Scan
Anonymous	2026-06-14 06:54:42 (3 months ago)	1781420082 - 06/14/2026 08:54:42 Host: 185.97.113.173/185.97.113.173 Port: 445 TCP Blocked ...	Port Scan
🇩🇪 Nerdscave Hosting	2026-06-02 13:56:30 (3 months ago)	[SMB Honeypot Report] Timestamp: 2026-06-02 13:56:00 UTC Port: 51800 No credentials captured Attack ... show more [SMB Honeypot Report] Timestamp: 2026-06-02 13:56:00 UTC Port: 51800 No credentials captured Attack Type: Unauthorized SMB connection attempt show less	Brute-Force Port Scan Hacking
🇫🇷 vtchost.com	2026-05-30 09:30:54 (3 months ago)	May 30 11:30:54 vtchost kernel: [94399.202439] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11 ... show more May 30 11:30:54 vtchost kernel: [94399.202439] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11:cd:2a:b3:08:00 SRC=185.97.113.173 DST=161.97.181.152 LEN=52 TOS=0x00 PREC=0x20 TTL=111 ID=23856 DF PROTO=TCP SPT=49344 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 sthoyer.de	2026-05-19 10:59:19 (3 months ago)	May 19 12:59:17 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more May 19 12:59:17 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=185.97.113.173 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=17654 DF PROTO=TCP SPT=62113 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇱🇹 NotACaptcha	2026-05-02 05:34:59 (4 months ago)	Unauthorised access (May 2 08:34) SRC=185.97.113.173 LEN=52 TTL=111 ID=9998 DF TCP DPT=445 WINDOW=8 ... show more Unauthorised access (May 2 08:34) SRC=185.97.113.173 LEN=52 TTL=111 ID=9998 DF TCP DPT=445 WINDOW=8192 SYN show less	Port Scan

Showing 1 to 15 of 86 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 40.124.186.184

🇮🇩 2404:c0:ab01:774e:25cd:ec30:628:d588

🇿🇦 203.123.86.68

🇨🇳 175.8.117.73

🇺🇸 119.12.185.188

🇨🇳 111.229.220.166

🇺🇸 107.173.197.68

🇸🇦 34.166.217.178

🇧🇪 34.156.211.39

🇮🇹 34.154.142.114

🇬🇧 5.226.140.109

🇮🇪 3.253.39.113

🇨🇴 200.31.13.30

🇩🇪 194.88.98.87

🇩🇪 194.61.112.25

🇳🇱 185.29.166.30

🇺🇸 184.105.139.123

🇨🇦 137.186.225.106

🇮🇩 125.165.175.81

🇧🇬 109.160.32.26