AbuseIPDB » 189.254.197.164
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
No reports in the last 60 days
189.254.197.164 has been reported 621 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
IP Abuse Reports for 189.254.197.164:
This IP address has been reported a total of 621 times from 114 distinct sources. 189.254.197.164 was first reported on , and the most recent report was .
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇮🇳 Varun Ramsisaria |
IPFire IPS Alert (2026-03-30): ET SCAN Suspicious inbound to MSSQL port 1433. Observed events: 1
|
Port Scan SSH | ||
| 🇮🇳 Varun Ramsisaria |
IPFire IPS Alert (2026-03-29): ET SCAN Suspicious inbound to MSSQL port 1433. Observed events: 1
|
Port Scan SSH | ||
| 🇮🇳 Varun Ramsisaria |
IPFire IPS Alert (2026-03-28): ET SCAN Suspicious inbound to MSSQL port 1433. Observed events: 1
|
Port Scan SSH | ||
| 🇮🇳 Varun Ramsisaria |
IPFire IPS Alert (2026-03-27): ET SCAN Suspicious inbound to MSSQL port 1433. Observed events: 1
|
Port Scan SSH | ||
| 🇮🇳 Varun Ramsisaria |
IPFire IPS Alert (2026-03-26): ET SCAN Suspicious inbound to MSSQL port 1433. Observed events: 1
|
Port Scan SSH | ||
| 🇮🇳 Varun Ramsisaria |
IPFire IPS Alert (2026-03-25): ET SCAN Suspicious inbound to MSSQL port 1433. Observed events: 1
|
Port Scan SSH | ||
| 🇮🇳 Varun Ramsisaria |
IPFire IPS Alert (2026-03-24): ET SCAN Suspicious inbound to MSSQL port 1433. Observed events: 1
|
Port Scan SSH | ||
| 🇮🇳 Varun Ramsisaria |
IPFire IPS Alert (2026-03-23): ET SCAN Suspicious inbound to MSSQL port 1433. Observed events: 1
|
Port Scan SSH | ||
| 🇮🇳 Varun Ramsisaria |
IPFire IPS Alert (2026-03-22): ET SCAN Suspicious inbound to MSSQL port 1433. Observed events: 1
|
Port Scan SSH | ||
| 🇨🇭 MLC |
Honeypot hit: MSSQL traffic (on 1433) with username sa and empty password
|
Brute-Force | ||
| 🇹🇷 rtbh.com.tr |
list.rtbh.com.tr report: tcp/1433
|
Brute-Force | ||
| 🇺🇸 drewf.ink |
[06:16] Port scanning. Port(s) scanned: TCP/1433
|
Port Scan | ||
| 🇺🇸 MPL |
tcp/1433 (2 or more attempts)
|
Port Scan | ||
| 🇺🇸 MPL |
tcp/1433
|
Port Scan | ||
| 🇧🇾 StatsMe |
2026-02-18T15:23:39.317617+0300
ET SCAN NMAP -sS window 1024
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩