JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 197.211.52.72

197.211.52.72 was found in our database!

This IP was reported 155 times. Confidence of Abuse is 53%: ?

53%

ISP	ENTERPRISE-BENIN
Usage Type	Fixed Line ISP
ASN	AS37148
Domain Name	08vicenterprises.com
Country	🇳🇬 Nigeria
City	Lagos, Lagos

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 197.211.52.72

Whois 197.211.52.72

IP Abuse Reports for 197.211.52.72:

This IP address has been reported a total of 155 times from 79 distinct sources. 197.211.52.72 was first reported on August 12th 2022, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 guldkage	2026-06-03 17:09:23 (22 hours ago)	Unauthorized connection attempt detected from IP address 197.211.52.72 to port 445 (ger-02) [SMB]	Exploited Host
🇬🇧 PeravixGroup	2026-06-03 11:43:05 (1 day ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
Anonymous	2026-05-29 17:48:28 (5 days ago)	Unauthorized connection to SMB port 445	Port Scan
🇬🇧 PeravixGroup	2026-05-21 14:39:04 (2 weeks ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇫🇷 sthoyer.de	2026-05-19 13:22:33 (2 weeks ago)	May 19 15:22:31 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more May 19 15:22:31 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=197.211.52.72 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=22891 DF PROTO=TCP SPT=37287 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇬🇧 PeravixGroup	2026-05-18 14:03:52 (2 weeks ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇦🇺 MAGIC	2026-05-16 01:42:53 (2 weeks ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2026-05-15 04:53:01 (2 weeks ago)	Attack Signature Blocked: /wishlist/index/add/product/13310/form_key/e7byxbOOaiq0uWLR/ (Magento Site ... show more Attack Signature Blocked: /wishlist/index/add/product/13310/form_key/e7byxbOOaiq0uWLR/ (Magento Site) (Botnet activity attributed to: Angara Technologies Group / mikhail-smirnov-79830322) show less	Web App Attack Bad Web Bot
🇺🇸 bigscoots.com	2026-05-12 20:29:20 (3 weeks ago)	(smtpauth) Failed SMTP AUTH login from 197.211.52.72 (NG/Nigeria/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 197.211.52.72 (NG/Nigeria/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-05-12 16:28:53 dovecot_plain authenticator failed for H=([169.254.138.206]) [197.211.52.72]:5322: 535 Incorrect authentication data ([email protected]) 2026-05-12 16:28:59 dovecot_login authenticator failed for H=([169.254.138.206]) [197.211.52.72]:5322: 535 Incorrect authentication data ([email protected]) 2026-05-12 16:29:09 dovecot_plain authenticator failed for H=([169.254.138.206]) [197.211.52.72]:58029: 535 Incorrect authentication data ([email protected]) 2026-05-12 16:29:14 dovecot_plain authenticator failed for H=([169.254.138.206]) [197.211.52.72]:58030: 535 Incorrect authentication data ([email protected]) 2026-05-12 16:29:16 dovecot_plain authenticator failed for H=([169.254.138.206]) [197.211.52.72]:5323: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
Anonymous	2026-05-12 06:52:35 (3 weeks ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇨🇦 unullable	2026-05-11 07:06:04 (3 weeks ago)	Telnet scanner/bruter (port:2323)	Brute-Force
🇷🇺 genokrad	2026-05-07 01:25:48 (4 weeks ago)	Unauthorized connection try on TCP/23 (Telnet)	Port Scan
🇬🇧 PeravixGroup	2026-04-28 17:59:59 (1 month ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇫🇷 sthoyer.de	2026-04-28 13:00:59 (1 month ago)	Apr 28 15:00:58 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Apr 28 15:00:58 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=197.211.52.72 DST=173.212.223.67 LEN=48 TOS=0x00 PREC=0x00 TTL=115 ID=4226 DF PROTO=TCP SPT=43041 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 Little Iguana	2026-04-28 12:59:46 (1 month ago)	trying to access non-authorized port	Port Scan

Showing 1 to 15 of 155 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2602:fb54:1a00::93

🇧🇪 198.235.24.236

🇳🇱 195.178.110.26

🇬🇹 190.143.186.124

🇦🇫 149.54.40.222

🇺🇸 135.237.127.238

🇱🇹 81.30.98.144

🇺🇸 3.14.15.145

🇫🇮 147.185.133.69

🇨🇳 111.26.106.119

🇺🇸 74.7.227.184

🇺🇸 45.61.187.220

🇸🇬 43.98.191.232

🇳🇱 176.65.148.96

🇷🇺 31.173.247.254

🇱🇹 188.69.225.188

🇮🇳 182.95.224.102

🇲🇾 172.111.157.22

🇯🇵 168.138.213.115

🇨🇦 162.219.178.250