JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

197.237.137.20

Neutral Activity

Abuse confidence score ?

0% Low Risk

69 reports

37 reporters · latest 4 years ago

ISP	Wananchi Group Kenya
Usage Type	Fixed Line ISP
ASN	AS15399
Domain Name	wananchi.com
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

197.237.137.20 has been reported 69 times. The most recent report is from 4 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 197.237.137.20

Export CSV

This IP address has been reported a total of 69 times from 37 distinct sources. 197.237.137.20 was first reported on November 25th 2020, and the most recent report was 4 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 aorth	2021-12-10 11:03:40 (4 years ago)	Dec 10 06:03:40 host sshd[18663]: Invalid user user from 197.237.137.20 port 48995	Brute-Force SSH
🇬🇧 D3monite	2021-06-26 13:04:17 (5 years ago)	Attempted Brute Force (dovecot)	Brute-Force
🇨🇭 unifr	2021-06-24 00:42:21 (5 years ago)	Unauthorized IMAP connection attempt	Brute-Force
Anonymous	2021-06-18 13:24:28 (5 years ago)	197.237.137.20 (KE/Kenya/-), 7 distributed sshd attacks on account [admin] in the last 3600 secs; Po ... show more 197.237.137.20 (KE/Kenya/-), 7 distributed sshd attacks on account [admin] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Jun 18 17:22:20 server2 sshd[29324]: Invalid user admin from 197.237.137.20 port 33077 Jun 18 17:22:23 server2 sshd[29324]: Failed password for invalid user admin from 197.237.137.20 port 33077 ssh2 Jun 18 17:22:27 server2 sshd[29333]: Invalid user admin from 45.237.103.190 port 44386 Jun 18 17:21:47 server2 sshd[29185]: Invalid user admin from 106.52.152.168 port 40140 Jun 18 17:21:09 server2 sshd[29076]: Invalid user admin from 121.174.175.223 port 37997 Jun 18 17:21:12 server2 sshd[29076]: Failed password for invalid user admin from 121.174.175.223 port 37997 ssh2 Jun 18 17:21:50 server2 sshd[29185]: Failed password for invalid user admin from 106.52.152.168 port 40140 ssh2 IP Addresses Blocked: show less	Brute-Force
Anonymous	2021-06-18 07:24:15 (5 years ago)	197.237.137.20 (KE/Kenya/-), 7 distributed sshd attacks on account [admin] in the last 3600 secs; Po ... show more 197.237.137.20 (KE/Kenya/-), 7 distributed sshd attacks on account [admin] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Jun 18 11:22:12 server2 sshd[28051]: Invalid user admin from 186.188.226.55 port 48861 Jun 18 11:19:27 server2 sshd[27529]: Invalid user admin from 197.237.137.20 port 46321 Jun 18 11:21:58 server2 sshd[27915]: Failed password for invalid user admin from 14.162.128.63 port 41293 ssh2 Jun 18 11:21:55 server2 sshd[27915]: Invalid user admin from 14.162.128.63 port 41293 Jun 18 11:22:06 server2 sshd[28041]: Invalid user admin from 113.190.216.51 port 49651 Jun 18 11:22:10 server2 sshd[28041]: Failed password for invalid user admin from 113.190.216.51 port 49651 ssh2 Jun 18 11:19:31 server2 sshd[27529]: Failed password for invalid user admin from 197.237.137.20 port 46321 ssh2 IP Addresses Blocked: 186.188.226.55 (PA/Panama/-) show less	Brute-Force
🇪🇪 reigo	2021-06-12 16:10:44 (5 years ago)	SSH invalid-user multiple login try	Brute-Force SSH
🇦🇺 ozisp.com.au	2021-06-07 13:32:48 (5 years ago)	KE_WOL-MNT_<177>1623087166 [119:24:1] http_inspect: MULTIPLE HOST HEADERS DETECTED [Classification: ... show more KE_WOL-MNT_<177>1623087166 [119:24:1] http_inspect: MULTIPLE HOST HEADERS DETECTED [Classification: Unknown Traffic] [Priority: 3]: <seconione-ens192-1> {TCP} 197.237.137.20:35614 show less	Hacking
🇬🇧 Rammsteinium	2021-06-05 06:10:25 (5 years ago)	197.237.137.20 197.237.137.20 art2.art art2.art - /sites/all/libraries/fckeditor/editor/filemanager/ ... show more 197.237.137.20 197.237.137.20 art2.art art2.art - /sites/all/libraries/fckeditor/editor/filemanager/connectors/test.html GET /sites/all/libraries/fckeditor/editor/filemanager/connectors/test.html HTTP/1.1 - 293 0 - HTTP/1.1 GET 80 - 301 [05/Jun/2021:10:38:38 +0100] 0 450 656 1106 show less	Web App Attack
🇮🇹 www.tana.it	2021-05-28 07:46:55 (5 years ago)	dictionary attack	Brute-Force
🇪🇪 reigo	2021-05-26 05:10:43 (5 years ago)	SSH invalid-user multiple login try	Brute-Force SSH
🇬🇧 Paul Smith	2021-05-13 01:38:08 (5 years ago)	Email Auth Brute force attack 2/1 in last day	Brute-Force
🇪🇸 bullhost.es	2021-05-01 08:17:09 (5 years ago)	Excessive Number of Failed Login Attempts from 197.237.137.20	Brute-Force
Anonymous	2021-04-24 10:31:56 (5 years ago)	2021-04-24T17:31:54.101459ollin.zadara.org sshd[1144296]: pam_unix(sshd:auth): authentication failur ... show more 2021-04-24T17:31:54.101459ollin.zadara.org sshd[1144296]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.237.137.20 2021-04-24T17:31:55.963647ollin.zadara.org sshd[1144296]: Failed password for invalid user backing from 197.237.137.20 port 42244 ssh2 ... show less	Brute-Force SSH
🇬🇧 Paul Smith	2021-04-23 15:29:46 (5 years ago)	Email Auth Brute force attack 6/2 in last day	Brute-Force
Anonymous	2021-04-14 13:24:31 (5 years ago)	$f2bV_matches	Brute-Force

Showing 1 to 15 of 69 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 202.51.90.1

🇩🇪 167.94.146.42

🇲🇺 102.113.25.117

🇨🇦 85.217.149.4

🇧🇪 34.77.82.215

🇺🇸 202.81.212.120

🇹🇳 197.5.145.150

🇸🇬 195.40.67.132

🇳🇱 185.184.222.73

🇵🇾 162.158.147.158

🇵🇱 162.158.102.75

🇭🇰 152.32.212.149

🇪🇸 141.98.38.255

🇨🇳 101.126.4.240

🇸🇪 95.111.205.20

🇺🇸 72.240.167.187

🇬🇧 35.203.211.93

🇺🇸 23.230.227.229

🇬🇧 5.226.140.124

🇧🇷 200.53.201.235