AbuseIPDB » 197.231.203.54
197.231.203.54
This IP was reported 8 times. Confidence of
Abuse
is 33% : ?
ISP
Somtel Puntland
Usage Type
Fixed Line ISP
ASN
AS37563
Domain Name
somtelnetwork.net
Country
🇸🇴
Somalia
City
Hargeysa, Woqooyi Galbeed
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 197.231.203.54 :
This IP address has been reported a total of
8
times from
8 distinct
sources.
197.231.203.54 was first reported on
May 21st 2026 , and the most recent report was
6 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-07-04 10:45:28
(6 days ago)
Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ...
show more
Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) | Attack Signature Blocked: /brands/unify/shopby/manufacturer-optoma-rcf-lsi-inspur-xyz-unify.html | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 | (Magento Site)
show less
Hacking
Bad Web Bot
🇺🇸
kosada.com
2026-06-29 09:24:04
(1 week ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇰🇷
zlhIcd
2026-06-23 01:37:29
(2 weeks ago)
197.231.203.54 - - [16/Jun/2026:08:02:33 +0900] "GET /pcwiki/index.php?days=14&from=20251117132259&h ...
show more
197.231.203.54 - - [16/Jun/2026:08:02:33 +0900] "GET /pcwiki/index.php?days=14&from=20251117132259&hideliu=1&hideminor=0&hidemyself=1&limit=250&title=%ED%8A%B9%EC%88%98%EA%B8%B0%EB%8A%A5:%EB%A7%81%ED%81%AC%EC%B5%9C%EA%B7%BC%EB%B0%94%EB%80%9C HTTP/1.1" 404 460 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:131.0) Gecko/20100101 Firefox/131.0"
...
show less
Web Spam
SQL Injection
Bad Web Bot
Web App Attack
🇮🇩
hermawan
2026-06-22 04:45:49
(2 weeks ago)
[Mon Jun 22 11:45:48.274746 2026] [security2:error] [pid 2542311:tid 140030572996288] [client 197.23 ...
show more
[Mon Jun 22 11:45:48.274746 2026] [security2:error] [pid 2542311:tid 140030572996288] [client 197.231.203.54:21700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bing.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bing.go.id found within REQUEST_HEADERS:Referer: https://www.bing.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story"] [unique_id "aji9_OvqHmX6Gcdxh_qVsgAFEgQ"], referer https://www.bing.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[2542316] [NKnlUBBWrqU] [aji9_OvqHmX6Gcdxh_qVsgAFEgQ] keep_alive=[1] [2026-06-22 11:45:48.274997] [R:aji9_OvqHmX6Gcdxh_qVsgAFEgQ] UA:'Mozilla/5.0 (iPhone; CPU iPhone OS 17_5
...
show less
Email Spam
Hacking
🇩🇪
pltcldvlpr
2026-06-03 06:21:29
(1 month ago)
Bogus Useragent: 197.231.203.54 - - [03/Jun/2026:08:21:28 +0200] "GET /protocol?id=rp_14_111¶gra ...
show more
Bogus Useragent: 197.231.203.54 - - [03/Jun/2026:08:21:28 +0200] "GET /protocol?id=rp_14_111¶graph=11081527&seq=521 HTTP/1.1" 403 5 "-" "Opera/9.91.(Windows 95; ce-RU) Presto/2.9.169 Version/10.00" asn=37563 org="SOMTEL INTERNATIONAL Ltd" country=SO
...
show less
Bad Web Bot
🇬🇧
Oakley
2026-05-29 17:29:18
(1 month ago)
(confirmed_bot_sig) Confirmed bot
Hacking
🇩🇪
SMARTNET
2026-05-27 06:03:53
(1 month ago)
Aisuru(Mirai variant) DDoS | Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d
DDoS Attack
🇫🇷
security.rdmc.fr
2026-05-21 09:00:48
(1 month ago)
Port Scan Attack proto:TCP src:32844 dst:23
Port Scan
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: