JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 197.211.52.70

197.211.52.70 was found in our database!

This IP was reported 125 times. Confidence of Abuse is 40%: ?

40%

ISP	ENTERPRISE-BENIN
Usage Type	Fixed Line ISP
ASN	AS37148
Domain Name	08vicenterprises.com
Country	🇳🇬 Nigeria
City	Benin City, Edo State

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 197.211.52.70

Whois 197.211.52.70

IP Abuse Reports for 197.211.52.70:

This IP address has been reported a total of 125 times from 64 distinct sources. 197.211.52.70 was first reported on August 12th 2022, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 sthoyer.de	2026-06-14 12:09:41 (4 days ago)	Jun 14 14:09:40 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jun 14 14:09:40 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=197.211.52.70 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=1071 DF PROTO=TCP SPT=8768 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇮🇩 xveil	2026-06-10 14:36:09 (1 week ago)	2026-06-10T21:36:07.186085 mail-honeypot postfix/submission/smtpd[24945]: warning: unknown[197.211.5 ... show more 2026-06-10T21:36:07.186085 mail-honeypot postfix/submission/smtpd[24945]: warning: unknown[197.211.52.70]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇬🇧 PeravixGroup	2026-06-07 18:01:39 (1 week ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-30 11:14:00 (2 weeks ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-27 13:31:45 (3 weeks ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇩🇪 SMARTNET	2026-05-27 06:03:53 (3 weeks ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 991a3054-d12a-4e5e-ac87-2c17a3082180	DDoS Attack
🇬🇧 Birdo	2026-05-17 15:11:59 (1 month ago)	[Birdo SMB Honeypot] SMB unauthorized attempt	Exploited Host Brute-Force Port Scan Hacking
🇨🇦 polycoda	2026-05-14 11:37:23 (1 month ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
🇫🇷 Little Iguana	2026-05-13 11:04:01 (1 month ago)	trying to access non-authorized port	Port Scan
🇫🇷 sthoyer.de	2026-05-13 10:29:32 (1 month ago)	May 13 12:29:31 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more May 13 12:29:31 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=197.211.52.70 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=7279 DF PROTO=TCP SPT=41464 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 cybsecaoccol	2026-05-11 09:27:14 (1 month ago)	unauthorized connection or malicious port scan attempted on tcp port 445 - dr	Port Scan Hacking
🇦🇹 centurion	2026-05-10 00:25:39 (1 month ago)	Unauthorized attempt on coresecret [23/tcp] Source port: 64462 TTL: 49 Packet length: 60 TOS: 0x00 h ... show more Unauthorized attempt on coresecret [23/tcp] Source port: 64462 TTL: 49 Packet length: 60 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted Brute-Force
🇬🇧 PeravixGroup	2026-05-09 07:36:49 (1 month ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-06 18:25:56 (1 month ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 TPI-Abuse	2026-04-30 01:41:39 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 197.211.52.70 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 197.211.52.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 21:41:34.031062 2026] [security2:error] [pid 24441:tid 24441] [client 197.211.52.70:34716] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.urlpick.com\|F\|2"] [data ".adoptsearch.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.urlpick.com"] [uri "/http:/www.adoptsearch.com"] [unique_id "afKzTs4w7ztYwlWapZ4TyQAAAAo"], referer: https://www.urlpick.com/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 125 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.102

🇺🇸 172.253.221.158

🇸🇬 152.42.219.80

🇨🇳 123.178.210.158

🇺🇸 20.169.105.85

🇿🇦 20.164.200.10

🇩🇪 213.209.159.227

🇧🇴 190.129.122.185

🇳🇮 186.77.204.227

🇺🇸 178.128.1.119

🇨🇳 117.72.157.214

🇪🇸 67.218.249.211

🇨🇳 47.101.11.110

🇨🇦 20.151.179.130

🇺🇸 20.127.163.226

🇺🇸 216.25.89.65

🇨🇳 183.199.181.198

🇺🇸 162.216.149.176

🇨🇳 101.96.192.45

🇺🇸 20.12.213.50