197.86.210.120

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
32 reports
24 reporters ยท latest 4 hours ago
ISP
Dimension Data
Usage Type
Fixed Line ISP
ASN
AS20011
Domain Name
global.ntt
Country
๐Ÿ‡ฟ๐Ÿ‡ฆ South Africa
City
Johannesburg, Gauteng
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
32 from 24 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡บ๐Ÿ‡ธ United States of America 13 ๐Ÿ‡ฉ๐Ÿ‡ช Germany 4 ๐Ÿ‡ซ๐Ÿ‡ท France 3
Most common categories Port Scan 16 SSH 14 Brute-Force 12 Hacking 9 Web App Attack 5
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ฆ๐Ÿ‡น urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ HJ5Ss4Ju
Wordfence firewall block
Web App Attack
๐Ÿ‡ฒ๐Ÿ‡น Malta
197.86.210.120 - - [28/Oct/2026:04:58:28 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" Brute-force password attempt
Hacking Web App Attack Brute-Force
๐Ÿ‡ฉ๐Ÿ‡ช KPS
PortscanT
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-10-27 21:21:08 UTC Unauthorized activity to TCP port 22. SSH
SSH
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-10-27 11:30:29 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
๐Ÿ‡ฎ๐Ÿ‡น CoreTech srl
Web App Attack
๐Ÿ‡บ๐Ÿ‡ธ NetVexor
Attack source identified and submitted via NetVexor BGP Blackhole Network
Port Scan Hacking Brute-Force
๐Ÿ‡ณ๐Ÿ‡ฑ EGP Abuse Dept
Unauthorized connection to Telnet port 23
Port Scan Hacking
๐Ÿ‡บ๐Ÿ‡ธ genjikai666
Automated honeypot & gateway log: Coordinated port scan and brute-force targeting both SSH (22) and Honeypot sensors. Detected on honeypot/firewall sensors.
Port Scan Brute-Force SSH
๐Ÿ‡ท๐Ÿ‡บ basil s
Unauthorized access attempt: automated Telnet / IoT credential brute-force probe on TCP/23; dropped and source blocked. Observed 2026-10-27 00:12:55 UTC; blocked for 24h.
Brute-Force IoT Targeted
๐Ÿ‡ฆ๐Ÿ‡น urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-10-26 06:36:11 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ xmission.com
Blocked by UFW (TCP on 23) Source port: 52222 TTL: 46 Packet length: 60 TOS: 0x00 This report (for 197.86.210.120) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan Hacking Brute-Force
๐Ÿ‡ฉ๐Ÿ‡ช LRob
Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡บ๐Ÿ‡ธ 184.105.247.216
๐Ÿ‡บ๐Ÿ‡ธ 104.255.173.142
๐Ÿ‡ณ๐Ÿ‡ฑ 86.38.187.102
๐Ÿ‡บ๐Ÿ‡ธ 65.49.1.55
๐Ÿ‡ง๐Ÿ‡ท 45.171.172.82
๐Ÿ‡บ๐Ÿ‡ธ 205.210.31.64
๐Ÿ‡ฌ๐Ÿ‡ง 195.96.139.116
๐Ÿ‡ฒ๐Ÿ‡ฝ 187.251.246.254
๐Ÿ‡ฒ๐Ÿ‡ฉ 185.103.167.86
๐Ÿ‡บ๐Ÿ‡ธ 162.216.150.125
๐Ÿ‡บ๐Ÿ‡ธ 152.32.183.236
๐Ÿ‡จ๐Ÿ‡ณ 125.70.18.225
๐Ÿ‡ป๐Ÿ‡ณ 103.252.123.105
๐Ÿ‡จ๐Ÿ‡ฟ 78.44.238.178
๐Ÿ‡ฉ๐Ÿ‡ช 69.5.169.26
๐Ÿ‡บ๐Ÿ‡ธ 66.132.172.247
๐Ÿ‡จ๐Ÿ‡ฆ 54.39.136.76
๐Ÿ‡ซ๐Ÿ‡ท 51.255.47.232
๐Ÿ‡ฒ๐Ÿ‡ฒ 45.125.4.137
๐Ÿ‡บ๐Ÿ‡ธ 45.63.4.69