197.245.232.122
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Vox Telecom Ltd
- Usage Type
- Fixed Line ISP
- ASN
- AS11845
- Domain Name
- vox.co.za
- Country
- 🇿🇦 South Africa
- City
- Cape Town, Western Cape
Abuse Reports
Total reports
29 from
25 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇮🇩 Indobsd |
|
Port Scan Web App Attack SSH | |
| 🇫🇷 uthul |
T-Pot honeypot: 6 hits on ports [3389] (automated)
|
Port Scan Brute-Force | |
| 🇧🇷 radardatelecom |
Blocked by Radar da Telecom firewall — abuseipdb
|
Bad Web Bot Web App Attack | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 3389)
Source port: 64920
TTL: 107
Packet length: 52
TOS: 0x08
This report (for 197.245.232.122) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇧🇷 ICS Labs |
ICS Labs threat intelligence (ICS Feeds): Exploited Host. Last observed 2026-11-12 UTC.
|
Exploited Host | |
| 🇫🇷 Hiigara |
connection attempt : 197.245.232.122 on port : tcp/3389 (RDP)
|
Port Scan | |
| 🇫🇮 6kilowatti |
|
Port Scan | |
| 🇵🇱 genokrad |
Unauthorized connection attempt on TCP/3389 (RDP)
|
Port Scan | |
| Anonymous |
2026-11-11 10:50:16 warning[1094321]: host dsl-197-245-232-122.voxdsl.co.za[197.245.232.122]: unauthorized access attempted: tcp/3389
|
Port Scan Brute-Force | |
| 🇺🇸 MPL |
tcp/3389 (2 or more attempts)
|
Port Scan | |
| 🇫🇷 noi |
honeypot proto=TCP dpt=3389 flags=SYN hits=1 window=1h
|
Port Scan | |
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | |
| 🇺🇸 MPL |
tcp/3389
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 3389)
Source port: 55018
TTL: 107
Packet length: 52
TOS: 0x08
This report (for 197.245.232.122) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇧🇷 noconex |
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Behavioral Unusually fast Terminal Server Traffic Potential Scan or Infection (Inbound)) de 197.245.232.122 [TCP]
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown