JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 197.156.97.81

197.156.97.81 was found in our database!

This IP was reported 264 times. Confidence of Abuse is 100%: ?

100%

ISP	BAHIR DAR UNIVERSITY MAIN CAMPUS
Usage Type	Fixed Line ISP
ASN	AS24757
Domain Name	ethiotelecom.et
Country	🇪🇹 Ethiopia
City	Bahir Dar, Amhara

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 197.156.97.81

Whois 197.156.97.81

IP Abuse Reports for 197.156.97.81:

This IP address has been reported a total of 264 times from 192 distinct sources. 197.156.97.81 was first reported on May 5th 2024, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-29 11:27:10 (15 hours ago)	2026-06-29T07:17:16.694458-04:00 serytampa sshd[947717]: Invalid user dev from 197.156.97.81 port 44 ... show more 2026-06-29T07:17:16.694458-04:00 serytampa sshd[947717]: Invalid user dev from 197.156.97.81 port 44448 2026-06-29T07:25:09.810070-04:00 serytampa sshd[947740]: Invalid user oracle from 197.156.97.81 port 56149 2026-06-29T07:27:08.938501-04:00 serytampa sshd[947787]: Invalid user git from 197.156.97.81 port 62075 ... show less	Brute-Force SSH
🇺🇸 sh97	2026-06-29 11:25:43 (15 hours ago)	ip-208-84-101-77: SSH Brute Force from 197.156.97.81 at 2026-06-29 16:55:43 IST	Brute-Force SSH
🇮🇹 alph44	2026-06-29 11:25:23 (15 hours ago)	SSH brute force attack detected: 5 failed attempts	Brute-Force
🇬🇧 NarcTix	2026-06-29 11:19:57 (15 hours ago)	2026-06-29T11:19:57.474499+00:00 sshd[39382]: Invalid user dev from 197.156.97.81 port 45221 ...	Brute-Force SSH
Anonymous	2026-06-29 11:18:45 (15 hours ago)	2026-06-29T07:18:41.897196-04:00 bastadge.tele2win.net sshd-session[22549]: Invalid user dev from 19 ... show more 2026-06-29T07:18:41.897196-04:00 bastadge.tele2win.net sshd-session[22549]: Invalid user dev from 197.156.97.81 port 53424 ... show less	Brute-Force SSH
Anonymous	2026-06-29 11:17:05 (15 hours ago)	Jun 29 11:17:04 f2b auth.info sshd[994814]: Invalid user dev from 197.156.97.81 port 56903 Jun 29 11 ... show more Jun 29 11:17:04 f2b auth.info sshd[994814]: Invalid user dev from 197.156.97.81 port 56903 Jun 29 11:17:04 f2b auth.info sshd[994814]: Failed password for invalid user dev from 197.156.97.81 port 56903 ssh2 Jun 29 11:17:04 f2b auth.info sshd[994814]: Disconnected from invalid user dev 197.156.97.81 port 56903 [preauth] ... show less	Brute-Force SSH
🇺🇸 NeverBehave	2026-06-29 11:04:22 (15 hours ago)	[fail2ban] service sshd jail	Brute-Force SSH
🇩🇪 ghostwarriors	2026-06-29 10:50:37 (15 hours ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇩🇪 ipcop.net	2026-06-29 10:50:12 (15 hours ago)	2026-06-29T11:39:05.191514+01:00 git-host01.git.srvfarm.net sshd-session[426472]: Disconnected from ... show more 2026-06-29T11:39:05.191514+01:00 git-host01.git.srvfarm.net sshd-session[426472]: Disconnected from authenticating user root 197.156.97.81 port 59985 [preauth] 2026-06-29T11:45:03.343463+01:00 git-host01.git.srvfarm.net sshd-session[427191]: Disconnected from authenticating user root 197.156.97.81 port 65122 [preauth] 2026-06-29T11:46:41.125768+01:00 git-host01.git.srvfarm.net sshd-session[427374]: Disconnected from authenticating user root 197.156.97.81 port 63796 [preauth] 2026-06-29T11:48:24.890142+01:00 git-host01.git.srvfarm.net sshd-session[427587]: Disconnected from authenticating user root 197.156.97.81 port 18790 [preauth] 2026-06-29T11:50:12.037793+01:00 git-host01.git.srvfarm.net sshd-session[427830]: Disconnected from authenticating user root 197.156.97.81 port 44555 [preauth] show less	Brute-Force
🇺🇸 wallop.org	2026-06-29 10:49:05 (15 hours ago)	2026-06-29T05:47:17.095594-05:00 whangaparaoa.com sshd-session[1044376]: pam_unix(sshd:auth): authen ... show more 2026-06-29T05:47:17.095594-05:00 whangaparaoa.com sshd-session[1044376]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.156.97.81 user=root 2026-06-29T05:47:19.272708-05:00 whangaparaoa.com sshd-session[1044376]: Failed password for root from 197.156.97.81 port 34723 ssh2 2026-06-29T05:49:03.706417-05:00 whangaparaoa.com sshd-session[1044380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.156.97.81 user=root 2026-06-29T05:49:05.388353-05:00 whangaparaoa.com sshd-session[1044380]: Failed password for root from 197.156.97.81 port 33446 ssh2 ... show less	Brute-Force SSH
🇧🇷 helix	2026-06-29 10:47:19 (16 hours ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇺🇸 rellim.com	2026-06-29 10:46:49 (16 hours ago)	Jun 29 03:45:10 spidey sshd-session[2817193]: Failed password for root from 197.156.97.81 port 50540 ... show more Jun 29 03:45:10 spidey sshd-session[2817193]: Failed password for root from 197.156.97.81 port 50540 ssh2 Jun 29 03:46:46 spidey sshd-session[2817311]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.156.97.81 user=root Jun 29 03:46:48 spidey sshd-session[2817311]: Failed password for root from 197.156.97.81 port 61231 ssh2 ... show less	Brute-Force SSH
🇨🇿 lp	2026-06-29 10:15:08 (16 hours ago)	SSH Brute force: 11 attempts were recorded from 197.156.97.81 2026-06-29T11:54:13+02:00 Connection f ... show more SSH Brute force: 11 attempts were recorded from 197.156.97.81 2026-06-29T11:54:13+02:00 Connection from 197.156.97.81 port 50319 on <redacted> port 22 rdomain "" 2026-06-29T11:54:13+02:00 User root from 197.156.97.81 not allowed because not listed in AllowUsers 2026-06-29T11:54:15+02:00 Failed password for invalid user root from 197.156.97.81 port 50319 ssh2 2026-06-29T11:54:16+02:00 Disconnected from invalid user root 197.156.97.81 port 50319 [preauth] 2026-06-29T11:59:45+02:00 Connection from 197.156.97.81 port 28965 on <redacted> port 22 rdomain "" 2026-06-29T11:59:46+02:00 Invalid user administrator from 197.156.97.81 port 28965 2026-06-29T11:59:48+02:00 Failed password for invalid user administrator from 197.156.97.81 port 28965 ssh2 2026-06-29T12:06:35+02:00 Connection from 197.156.97.81 port 31965 on <redacted> port 22 rdomain "" 2026-06-29T12:06:35+02:00 Invalid user docker from show less	Brute-Force SSH
🇺🇸 Dominik Wozniak	2026-06-29 10:02:43 (16 hours ago)	2026-06-29T10:00:36.637249+00:00 ssh sshd[2295500]: pam_unix(sshd:auth): authentication failure; log ... show more 2026-06-29T10:00:36.637249+00:00 ssh sshd[2295500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.156.97.81 2026-06-29T10:00:38.631008+00:00 ssh sshd[2295500]: Failed password for invalid user administrator from 197.156.97.81 port 11374 ssh2 2026-06-29T10:02:40.683858+00:00 ssh sshd[2296264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.156.97.81 user=root 2026-06-29T10:02:42.702123+00:00 ssh sshd[2296264]: Failed password for root from 197.156.97.81 port 36418 ssh2 ... show less	Brute-Force SSH
🇺🇸 windowsforum	2026-06-29 06:11:46 (20 hours ago)	Spam bot registration: triggers=service_check, username=Solomon Melesse	Web Spam Bad Web Bot

Showing 1 to 15 of 264 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 198.50.239.95

🇮🇳 171.61.22.56

🇺🇸 147.185.132.103

🇨🇳 120.48.135.189

🇳🇱 91.92.40.6

🇳🇱 91.92.40.5

🇳🇱 91.92.40.4

🇩🇪 77.22.211.47

🇳🇱 45.156.128.62

🇺🇸 9.234.8.52

🇬🇧 194.50.235.144

🇳🇱 185.213.175.37

🇨🇳 183.146.70.174

🇵🇪 179.6.101.102

🇫🇮 135.181.223.190

🇧🇷 129.121.42.131

🇹🇼 111.241.55.236

🇳🇱 91.92.40.233

🇳🇱 91.92.40.12

🇳🇱 91.92.40.11