JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 197.249.128.114

197.249.128.114 was found in our database!

This IP was reported 390 times. Confidence of Abuse is 40%: ?

40%

ISP	TVCABO Mozambique
Usage Type	Fixed Line ISP
ASN	AS25139
Hostname(s)	cust114-128-249-197.netcabo.co.mz
Domain Name	tvcabo.mz
Country	🇲🇿 Mozambique
City	Nampula, Nampula

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 197.249.128.114

Whois 197.249.128.114

IP Abuse Reports for 197.249.128.114:

This IP address has been reported a total of 390 times from 70 distinct sources. 197.249.128.114 was first reported on December 18th 2023, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 sthoyer.de	2026-07-25 10:52:41 (4 days ago)	Jul 25 12:52:40 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jul 25 12:52:40 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=197.249.128.114 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=116 ID=17201 DF PROTO=TCP SPT=62516 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 zulzeen	2026-07-15 15:04:35 (2 weeks ago)	[incypit-web] Blocked by SysWarden Firewall [BLOCK] (SMB/Possible Ransomware Attack)	Hacking Brute-Force
Anonymous	2026-07-15 09:07:06 (2 weeks ago)	Unauthorized connection to SMB port 445	Port Scan
🇫🇷 sthoyer.de	2026-07-10 13:49:27 (2 weeks ago)	Jul 10 15:49:26 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jul 10 15:49:26 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=197.249.128.114 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=116 ID=13317 DF PROTO=TCP SPT=64878 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-07-10 07:02:18 (2 weeks ago)	2026-07-10 07:02:18 warning[2830331]: host [197.249.128.114]: unauthorized access attempte ... show more 2026-07-10 07:02:18 warning[2830331]: host [197.249.128.114]: unauthorized access attempted: / show less	Port Scan Brute-Force
🇫🇷 vtchost.com	2026-07-09 07:11:13 (2 weeks ago)	Jul 9 09:11:12 vtchost kernel: [258491.089045] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:1 ... show more Jul 9 09:11:12 vtchost kernel: [258491.089045] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11:cd:47:2d:08:00 SRC=197.249.128.114 DST=161.97.181.152 LEN=52 TOS=0x00 PREC=0x00 TTL=116 ID=20324 DF PROTO=TCP SPT=29815 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 thecocasio	2026-07-08 12:18:12 (3 weeks ago)	PortSentry honeypot: unsolicited TCP connection to closed decoy port 445 (SMB) on a host running no ... show more PortSentry honeypot: unsolicited TCP connection to closed decoy port 445 (SMB) on a host running no such service. Automated port-scan detection at 2026-07-08T12:17:27Z. show less	Port Scan
🇺🇸 drewf.ink	2026-07-01 10:10:02 (4 weeks ago)	[10:10] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, ... show more [10:10] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12 show less	Hacking Exploited Host
🇫🇷 zulzeen	2026-06-23 14:06:26 (1 month ago)	[incypit-web] Blocked by SysWarden Firewall [BLOCK] (SMB/Possible Ransomware Attack)	Hacking Brute-Force
🇫🇷 geeek	2026-06-23 11:42:51 (1 month ago)	Port scanning: 445 TCP Blocked	Port Scan
🇫🇷 Coco Bongo	2026-06-19 14:13:17 (1 month ago)	1781878397 - 06/19/2026 16:13:17 Host: 197.249.128.114/197.249.128.114 Port: 445 TCP Blocked ...	Port Scan
🇫🇷 sthoyer.de	2026-06-11 07:04:25 (1 month ago)	Jun 11 09:04:24 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jun 11 09:04:24 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=197.249.128.114 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=116 ID=30338 DF PROTO=TCP SPT=43781 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 vtchost.com	2026-06-09 13:48:52 (1 month ago)	Jun 9 15:48:52 vtchost kernel: [109850.867440] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:1 ... show more Jun 9 15:48:52 vtchost kernel: [109850.867440] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11:cd:2a:b3:08:00 SRC=197.249.128.114 DST=161.97.181.152 LEN=52 TOS=0x00 PREC=0x00 TTL=116 ID=19533 DF PROTO=TCP SPT=38821 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 Mailguard-FRD	2026-06-08 13:04:39 (1 month ago)	1780923878 - 06/08/2026 15:04:38 Host: 197.249.128.114/197.249.128.114 Port: 445 TCP Blocked ...	Port Scan
🇫🇷 vtchost.com	2026-06-06 08:47:11 (1 month ago)	Jun 6 10:47:10 vtchost kernel: [91736.314763] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11 ... show more Jun 6 10:47:10 vtchost kernel: [91736.314763] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11:cd:2a:b3:08:00 SRC=197.249.128.114 DST=161.97.181.152 LEN=52 TOS=0x00 PREC=0x00 TTL=116 ID=26717 DF PROTO=TCP SPT=50677 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan

Showing 1 to 15 of 390 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:4:c25d:a001

🇺🇸 2604:a880:400:d1:0:4:c24e:e001

🇹🇼 198.235.24.40

🇮🇩 103.16.116.249

🇸🇮 102.220.160.129

🇺🇸 20.12.41.6

🇬🇧 2a06:4882:1000::1e

🇹🇼 198.235.24.73

🇸🇴 197.220.92.185

🇺🇸 167.99.11.93

🇲🇦 160.177.172.70

🇺🇸 140.235.169.243

🇳🇱 138.226.239.11

🇺🇸 136.83.57.208

🇿🇦 102.129.62.170

🇨🇳 58.210.182.18

🇳🇱 45.156.87.13

🇺🇸 18.232.121.80

🇩🇪 8.211.7.142

🇸🇬 2a09:bac5:55f8:101e::19b:19b