197.248.25.77

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse confidence score ?
100% Critical
29 reports
25 reporters ยท latest 9 hours ago
ISP Safaricom Limited
Usage Type Fixed Line ISP
ASN AS37061
Hostname(s) 197-248-25-77.safaricombusiness.co.ke
Domain Name safaricom.co.ke
Country ๐Ÿ‡ฐ๐Ÿ‡ช Kenya
City Kagio, Kirinyaga County

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Log in to view charts and search reports for this IP. Log In

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview
Account required for the enhanced features Log in Sign up

IP Abuse Reports for 197.248.25.77

This IP address has been reported a total of 29 times from 25 distinct sources. 197.248.25.77 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: United States of America with 6 reports; Germany with 4 reports; Canada with 2 reports. The most common categories in these recent reports were: Port Scan 20 times; Hacking 6 times; Brute-Force 5 times; Exploited Host 2 times; SSH 1 time.

Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ฉ๐Ÿ‡ช Tsumugi Kotobuki
Port Scan Hacking
๐Ÿ‡ซ๐Ÿ‡ท ipfyx
Port scanning
Port Scan
๐Ÿ‡ฌ๐Ÿ‡ง Vluxon, Inc.
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ MPL
tcp/1433
Port Scan
๐Ÿ‡ซ๐Ÿ‡ฎ 6kilowatti
Port Scan
๐Ÿ‡ต๐Ÿ‡ฑ bart@
Port Scan
๐Ÿ‡ฒ๐Ÿ‡ณ Public CSIRT/CC of Mongolia
Honeypot hit: MSSQL traffic (on 1433) without login credentials
Port Scan
๐Ÿ‡บ๐Ÿ‡ฆ TawnyBalfour
MSSQL honeypot. Target port: 1433. Window: 2026-09-25 16:10 to 2026-09-25 16:10 UTC.
Port Scan
Anonymous
IP & Port Scan.
SSH Port Scan Brute-Force
๐Ÿ‡จ๐Ÿ‡ฟ kronos
IDS: FlowIntel scan-like source | SID:9900001 | session_sigs:88 | alerts5m:88
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท Entalpi.net
Tried to hit sensible closed port commonly used in attacks
Port Scan Hacking
๐Ÿ‡บ๐Ÿ‡ธ drewf.ink
[09:50] Connected to MSSQL honeypot
Brute-Force Hacking
Anonymous
external scanner
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ drewf.ink
[03:57] Connected to MSSQL honeypot
Brute-Force Hacking
๐Ÿ‡บ๐Ÿ‡ธ donarev419
Port scan detected on port 1433 (connection without data transfer)
Port Scan

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown ๐Ÿšฉ

Recently Reported IPs:

๐Ÿ‡บ๐Ÿ‡ธ 185.223.152.194
๐Ÿ‡บ๐Ÿ‡ธ 172.172.180.124
๐Ÿ‡ณ๐Ÿ‡ต 124.41.242.31
๐Ÿ‡ฟ๐Ÿ‡ฆ 102.216.114.127
๐Ÿ‡ฟ๐Ÿ‡ฆ 102.215.153.229
๐Ÿ‡ฐ๐Ÿ‡ช 102.213.49.9
๐Ÿ‡ง๐Ÿ‡ซ 102.23.22.233
๐Ÿ‡ฆ๐Ÿ‡ฒ 46.70.207.20
๐Ÿ‡ณ๐Ÿ‡ฑ 45.148.10.151
๐Ÿ‡ณ๐Ÿ‡ฌ 41.73.0.47
๐Ÿ‡ง๐Ÿ‡ท 16.5.0.171
๐Ÿ‡บ๐Ÿ‡ธ 198.57.211.34
๐Ÿ‡ต๐Ÿ‡ฑ 194.180.49.77
๐Ÿ‡บ๐Ÿ‡ธ 185.223.152.199
๐Ÿ‡ฎ๐Ÿ‡น 151.59.152.120
๐Ÿ‡ฐ๐Ÿ‡ช 102.213.49.13
๐Ÿ‡จ๐Ÿ‡ฎ 102.209.223.117
๐Ÿ‡จ๐Ÿ‡ฎ 102.209.222.154
๐Ÿ‡ฟ๐Ÿ‡ฆ 102.182.68.207
๐Ÿ‡ฎ๐Ÿ‡น 93.51.116.48