JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 197.211.52.237

197.211.52.237 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 16%: ?

16%

ISP	ENTERPRISE-BENIN
Usage Type	Mobile ISP
ASN	AS37148
Domain Name	08vicenterprises.com
Country	🇳🇬 Nigeria
City	Lagos, Lagos

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 197.211.52.237

Whois 197.211.52.237

IP Abuse Reports for 197.211.52.237:

This IP address has been reported a total of 16 times from 15 distinct sources. 197.211.52.237 was first reported on March 3rd 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Steve	2026-08-07 01:06:42 (2 weeks ago)	SQL Injection Attempts	Brute-Force SQL Injection
🇩🇪 Inamin	2026-07-28 03:21:59 (3 weeks ago)	197.211.52.237 - - [28/Jul/2026:05:17:28 +0800] "GET /index.php?days=14&from=20260508052324&hidebots ... show more 197.211.52.237 - - [28/Jul/2026:05:17:28 +0800] "GET /index.php?days=14&from=20260508052324&hidebots=0&hidemyself=1&limit=500&target=%E5%9C%92%E7%94%B0%E6%B5%B7%E6%9C%AA%2F%E9%A1%98%E3%81%84%E4%BA%8B%E3%81%AF%EF%BC%9F&title=%E7%89%B9%E6%AE%8A%3A%E5%B7%B2%E9%80%A3%E7%B5%90%E7%9A%84%E6%9C%80%E8%BF%91%E8%AE%8A%E6%9B%B4 HTTP/2.0" 403 153 "-" "Mozilla/5.0 (Windows NT 4.0; it-IT; rv:1.9.1.20) Gecko/6114-12-15 19:19:29.500305 Firefox/3.8" ... show less	Brute-Force
🇺🇸 kosada.com	2026-07-27 00:27:47 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-06-29 11:41:49 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 HoneyPot-FrPri	2026-06-17 19:51:46 (2 months ago)	1781725905 - 06/17/2026 21:51:45 Host: 197.211.52.237/197.211.52.237 Port: 139 TCP Blocked ...	Port Scan
🇳🇱 Mangelot Hosting	2026-06-12 14:50:51 (2 months ago)	(imapd) Failed IMAP login from 197.211.52.237 (NG/Nigeria/-): 10 in the last 3600 secs; Ports: ; Di ... show more (imapd) Failed IMAP login from 197.211.52.237 (NG/Nigeria/-): 10 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_IMAPD; Logs: Jun 12 16:27:10 dovecot[695]: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=[USERNAME] method=PLAIN, rip=197.211.52.237, lip=0.0.0.x, session=<CriERQ9UkM7F0zTt> Jun 12 16:27:20 dovecot[695]: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 7 secs) (auth_failed): user=[USERNAME] method=PLAIN, rip=197.211.52.237, lip=0.0.0.x, session=<wC/URQ9Ukc7F0zTt> Jun 12 16:27:25 dovecot[695]: imap-login: Login aborted: Connection show less	Brute-Force
🇮🇹 VHosting	2026-03-12 21:27:19 (5 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
Anonymous	2025-11-15 23:37:41 (9 months ago)	scanning http requests from known botnet	Web App Attack
🇫🇷 sthoyer.de	2025-10-07 12:14:32 (10 months ago)	Oct 7 14:14:31 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Oct 7 14:14:31 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=197.211.52.237 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=11859 DF PROTO=TCP SPT=2556 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2025-09-10 08:14:13 (11 months ago)	2025-09-10 08:14:13 warning[3219973]: host unknown[197.211.52.237]: unauthorized smb acces ... show more 2025-09-10 08:14:13 warning[3219973]: host unknown[197.211.52.237]: unauthorized smb access attempted: tcp/445 show less	Port Scan Brute-Force
🇳🇱 exxos	2025-08-01 09:55:42 (1 year ago)	HTTP1.x attacks	DDoS Attack
🇩🇪 kalof	2025-07-19 12:37:33 (1 year ago)	ports, 445/24H:1/7D:1	Port Scan
🇵🇱 nfsec.pl	2025-06-26 11:41:58 (1 year ago)	Detected: TCP scan on port: 445 with flags: SYN	Port Scan
🇺🇸 Hobby Bob	2025-04-19 15:04:36 (1 year ago)	Apr 19 16:04:36 server dovecot: pop3-login: Disconnected (no auth attempts in 1 secs): user=, rip=19 ... show more Apr 19 16:04:36 server dovecot: pop3-login: Disconnected (no auth attempts in 1 secs): user=, rip=197.211.52.237, lip=X.X.X.X session= show less	Port Scan Hacking
Anonymous	2025-03-16 20:45:52 (1 year ago)	197.211.52.237 - - [16/Mar/2025:21:41:02 +0100] "GET /en/study/studying-at-the-cva/faculty/classical ... show more 197.211.52.237 - - [16/Mar/2025:21:41:02 +0100] "GET /en/study/studying-at-the-cva/faculty/classical-music/arjan-tien/ HTTP/1.1" 403 7942 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.96 Safari/537.36 Googlebot/2.1" 197.211.52.237 - - [16/Mar/2025:21:41:06 +0100] "GET /en/study/studying-at-the-cva/faculty/classical-music/arjan-tien/ HTTP/1.1" 403 684 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Version/15.4 Safari/537.36" 197.211.52.237 - - [16/Mar/2025:21:41:13 +0100] "GET /en/study/studying-at-the-cva/faculty/classical-music/arjan-tien/ HTTP/1.1" 403 684 "https://search.yahoo.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.96 Safari/537.36 Bingbot/2.0" 197.211.52.237 - - [16/Mar/2025:21:41:13 +0100] "GET /en/study/studying-at-the-cva/faculty/classical-music/arjan-tien/ HTTP/1.1" 403 684 "https://search.yahoo.com" "Mozilla/5. ... show less	DDoS Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 198.11.178.139

🇷🇴 92.118.39.50

🇺🇸 47.85.102.169

🇬🇪 45.9.46.174

🇬🇧 35.203.211.101

🇮🇷 217.60.255.130

🇺🇿 213.230.86.108

🇳🇱 193.29.139.171

🇺🇸 172.212.194.58

🇵🇰 153.117.13.45

🇺🇸 107.150.98.86

🇲🇷 102.214.131.55

🇺🇿 94.232.25.201

🇺🇿 94.158.58.6

🇲🇩 85.122.114.146

🇧🇬 79.124.62.230

🇸🇪 78.68.69.14

🇱🇹 77.90.185.78

🇺🇸 66.132.186.227

🇺🇸 64.62.197.28