JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 197.232.162.203

197.232.162.203 was found in our database!

This IP was reported 155 times. Confidence of Abuse is 100%: ?

100%

ISP	Jamii Telecommunications Limited
Usage Type	Fixed Line ISP
ASN	AS36866
Domain Name	jtl.co.ke
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 197.232.162.203

Whois 197.232.162.203

IP Abuse Reports for 197.232.162.203:

This IP address has been reported a total of 155 times from 52 distinct sources. 197.232.162.203 was first reported on November 22nd 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 vtchost.com	2026-07-15 01:45:07 (3 hours ago)	Jul 15 03:45:06 vtchost kernel: [152424.367636] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:1 ... show more Jul 15 03:45:06 vtchost kernel: [152424.367636] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11:cd:47:2d:08:00 SRC=197.232.162.203 DST=161.97.181.152 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=58869 DF PROTO=TCP SPT=59167 DPT=23 WINDOW=29040 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 security.rdmc.fr	2026-07-14 13:18:27 (16 hours ago)	Port Scan Attack proto:TCP src:57515 dst:23	Port Scan
🇺🇸 pcprincipal8752	2026-07-14 07:55:22 (21 hours ago)	NULLPOT TELNET HONEYPOT · SESSION REPORT: 1) enable \| 2) system \| 3) shell \| 4) sh \| 5) linuxshell \| ... show more NULLPOT TELNET HONEYPOT · SESSION REPORT: 1) enable \| 2) system \| 3) shell \| 4) sh \| 5) linuxshell \| 6) ping ;sh \| 7) /bin/busybox \| 8) iptables -F \| 9) /bin/busybox echo > /tmp/.fxcat && sh /tmp/.fxcat && cd /tmp/ \| 10) /bin/busybox echo > /var/.fxcat && sh /var/.fxcat && cd /var/ \| 11) /bin/busybox echo > /var/run/.fxcat && sh /var/run/.fxcat && cd /var/run/ \| 12) /bin/busybox echo > /var/tmp/.fxcat && sh /var/tmp/.fxcat && cd /var/tmp/ \| 13) /bin/busybox echo > /dev/.fxcat && sh /dev/.fxcat && cd /dev/ \| 14) /bin/busybox echo > /dev/shm/.fxcat && sh /dev/shm/.fxcat && cd /dev/shm/ \| 15) /bin/busybox echo > /etc/.fxcat && sh /etc/.fxcat && cd /etc/ \| 16) /bin/busybox echo > /mnt/.fxcat && sh /mnt/.fxcat && cd /mnt/ \| 17) /bin/busybox echo > /usr/.fxcat && sh /usr/.fxcat && cd /usr/ \| 18) /bin/busybox echo > /boot/.fxcat && sh /boot/.fxcat && cd /boot/ \| 19) /bin/busybox echo > /home/.fxcat && sh /home/.fxcat && cd /home/ \| 20) for pid in /proc/[0-9]; do pid_num="${pid##/}"; if [ -r "$pid/maps" ]; then sus show less	Brute-Force
🇺🇸 MPL	2026-07-14 05:27:44 (1 day ago)	tcp/23 (4 or more attempts)	Port Scan
🇦🇹 urnilxfgbez	2026-07-13 22:45:00 (1 day ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇮🇹 CoreTech srl	2026-07-13 22:05:05 (1 day ago)	ntopng alert: blacklisted_client_contact,ndpi_unsafe_protocol,ndpi_tcp_issues,ndpi_probing_attempt	Hacking
🇩🇪 guldkage	2026-07-13 21:01:30 (1 day ago)	Unauthorized connection attempt detected from IP address 197.232.162.203 to port 23 (ger-02) [TELNET ... show more Unauthorized connection attempt detected from IP address 197.232.162.203 to port 23 (ger-02) [TELNET] show less	Exploited Host
🇳🇱 Tsumugi Kotobuki	2026-07-13 08:00:35 (1 day ago)	Port Scan on Honeypot \| Ports: 23/Telnet \| Proto: TCP(1) \| Flags: all SYN \| TTL: 53 \| Len: 60B \| Win ... show more Port Scan on Honeypot \| Ports: 23/Telnet \| Proto: TCP(1) \| Flags: all SYN \| TTL: 53 \| Len: 60B \| Win: 29040(1) \| F2B/ufw-honeypot@2026-07-13T08:00:35Z show less	Port Scan Hacking
🇺🇸 xmission.com	2026-07-13 02:10:43 (2 days ago)	Blocked by UFW (TCP on 23) Source port: 41866 TTL: 55 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 41866 TTL: 55 Packet length: 60 TOS: 0x00 This report (for 197.232.162.203) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇫🇷 security.rdmc.fr	2026-07-13 01:35:02 (2 days ago)	Port Scan Attack proto:TCP src:35825 dst:23	Port Scan
🇩🇪 zupan	2026-07-12 19:24:08 (2 days ago)	Blocked by UFW on vps [2323/tcp] \| SPT: 57622 \| TTL: 53 \| LEN: 60 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on vps [2323/tcp] \| SPT: 57622 \| TTL: 53 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted
🇺🇸 SuperCores Hosting	2026-07-12 18:20:50 (2 days ago)	[2026-07-12 18:20:50.598048] TELNET/23 Unautorized connection, Suspicious Mirai Botnet.	IoT Targeted Brute-Force Hacking Port Scan DDoS Attack
🇺🇸 RAP	2026-07-12 17:39:39 (2 days ago)	2026-07-12 17:39:39 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇧🇪 sauron-le-noir	2026-07-12 17:36:30 (2 days ago)	scan port : 23 from Kenya at Sun Jul 12 19:40:36 2026	Port Scan
Anonymous	2026-07-12 16:52:03 (2 days ago)	Blocked by firewall on hugin [23/tcp] \| Rule: UFW \| SPT: 37552 \| TTL: 55 \| LEN: 60 \| TOS: 0x00 • Rep ... show more Blocked by firewall on hugin [23/tcp] \| Rule: UFW \| SPT: 37552 \| TTL: 55 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted

Showing 1 to 15 of 155 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.253.0.19

🇺🇸 65.24.160.163

🇺🇸 35.169.206.177

🇨🇳 223.73.18.151

🇧🇷 191.9.124.218

🇻🇳 180.93.172.213

🇵🇰 123.253.93.238

🇨🇳 119.255.245.44

🇮🇩 109.176.17.174

🇳🇱 91.92.40.50

🇶🇦 78.101.153.131

🇧🇷 45.163.86.133

🇧🇷 205.210.31.248

🇨🇦 85.217.149.73

🇷🇺 77.66.192.139

🇲🇾 47.254.238.61

🇨🇱 45.166.147.237

🇬🇧 35.203.210.67

🇰🇷 20.200.222.106

🇺🇸 20.98.164.209