197.232.152.78
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Jamii Telecommunications Limited
- Usage Type
- Fixed Line ISP
- ASN
- AS36866
- Domain Name
- jtl.co.ke
- Country
- 🇰🇪 Kenya
- City
- Nairobi, Nairobi County
Abuse Reports
Total reports
149 from
50 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇮🇳 evicky2002 |
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
|
Hacking Brute-Force SSH | |
| 🇵🇱 Kitki30.com |
Entered Telnet Tarpit (endlessh).
Log: 2026-08-09T15:04:18.053Z ACCEPT host=::ffff:197.232.152.78 port=49358 fd=43 n=41/4096
|
IoT Targeted Port Scan Brute-Force | |
| 🇺🇸 MPL |
tcp/23 (2 or more attempts)
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:53046 dst:23
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:52318 dst:23
|
Port Scan | |
| 🇺🇸 MPL |
tcp/23 (4 or more attempts)
|
Port Scan | |
| 🇺🇸 RAP |
2026-07-27 16:01:58 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇺🇸 MPL |
tcp/23 (2 or more attempts)
|
Port Scan | |
| 🇨🇿 Countryman |
repeated unauthorized connection attempts, host sweep, port 23
|
Hacking Brute-Force | |
| 🇰🇷 2048 |
Telnet credential brute-force observed by honeypot.
Source IP: 197.232.152.78
Targeted device: DVR
First seen: 21 Jul 2026 12:16:17 UTC
Last seen: 21 Jul 2026 12:16:17 UTC
Attempts: 1
Sample credentials: root:jvbzd
|
Brute-Force IoT Targeted | |
| 🇭🇰 mutebot.net |
SRC=197.232.152.78, PROTO=TCP, SPT=48846, DPT=23
|
Port Scan | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=60930 dstport=23
|
Port Scan | |
| 🇦🇹 centurion |
Blocked by UFW on ns03 [23/tcp] Source port: 44896 TTL: 53 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇮🇹 CoreTech srl |
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_unsafe_protocol
|
Hacking | |
| 🇨🇭 cybsecaoccol |
unauthorized connection or malicious port scan attempted on tcp port 23 - sch
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown