AbuseIPDB » 197.97.154.1

197.97.154.1 was found in our database!

This IP was reported 509 times. Confidence of Abuse is 53%: ?

53%
ISP Dimension Data
Usage Type Data Center/Web Hosting/Transit
ASN AS3741
Domain Name global.ntt
Country ๐Ÿ‡ฟ๐Ÿ‡ฆ South Africa
City Johannesburg, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

IP Abuse Reports for 197.97.154.1:

This IP address has been reported a total of 509 times from 76 distinct sources. 197.97.154.1 was first reported on , and the most recent report was .

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ฒ๐Ÿ‡ณ Public CSIRT/CC of Mongolia
Honeypot hit: SMB traffic on port 445
IoT Targeted
๐Ÿ‡ฑ๐Ÿ‡น NotACaptcha
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช IP Analyzer
Unauthorized connection attempt from IP address 197.97.154.1 on Port 445(SMB)
Port Scan
๐Ÿ‡ต๐Ÿ‡ฑ nfsec.pl
Detected: TCP scan on port: 445 with flags: SYN
Port Scan
๐Ÿ‡ณ๐Ÿ‡ฑ knock
Knock-Knock honeypot brute-force: SMB (12 total hits)
Brute-Force
๐Ÿ‡ซ๐Ÿ‡ท Duggy_Tuxy๐Ÿงฑ
[DS-BLKS-PROD01] Blocked by SysWarden Firewall (SMB/Possible Ransomware Attack)
Brute-Force Port Scan Hacking
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host
๐Ÿ‡ฉ๐Ÿ‡ช IP Analyzer
Unauthorized connection attempt from IP address 197.97.154.1 on Port 445(SMB)
Port Scan
๐Ÿ‡ฆ๐Ÿ‡น urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
๐Ÿ‡ฆ๐Ÿ‡บ dyln
Dyls honeypot brute-force: SMB (8 total hits)
Brute-Force
๐Ÿ‡ฉ๐Ÿ‡ช IP Analyzer
Unauthorized connection attempt from IP address 197.97.154.1 on Port 445(SMB)
Port Scan
Anonymous
Unauthorized access (tcp/445/smb)
Port Scan
๐Ÿ‡ฆ๐Ÿ‡บ dyln
Dyls honeypot brute-force: SMB (4 total hits)
Brute-Force
๐Ÿ‡ฌ๐Ÿ‡ง PeravixGroup
Hacking Exploited Host
Anonymous
Port Scan Brute-Force

Showing 1 to 15 of 509 reports


Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown ๐Ÿšฉ

Recently Reported IPs:

๐Ÿ‡บ๐Ÿ‡ธ 204.8.96.175
๐Ÿ‡ฉ๐Ÿ‡ช 43.228.157.8
๐Ÿ‡ฐ๐Ÿ‡ท 43.202.111.159
๐Ÿ‡บ๐Ÿ‡ธ 20.84.23.222
๐Ÿ‡บ๐Ÿ‡ธ 172.170.254.20
๐Ÿ‡บ๐Ÿ‡ธ 172.71.194.250
๐Ÿ‡น๐Ÿ‡ญ 118.193.57.121
๐Ÿ‡บ๐Ÿ‡ธ 104.168.60.41
๐Ÿ‡ต๐Ÿ‡ญ 103.72.59.3
๐Ÿ‡จ๐Ÿ‡ณ 27.18.58.202
๐Ÿ‡บ๐Ÿ‡ธ 2602:80d:1007::b3
๐Ÿ‡ฎ๐Ÿ‡ณ 203.145.143.163
๐Ÿ‡บ๐Ÿ‡ธ 162.243.173.120
๐Ÿ‡บ๐Ÿ‡ธ 142.147.252.145
๐Ÿ‡ณ๐Ÿ‡ฑ 77.239.124.247
๐Ÿ‡บ๐Ÿ‡ธ 45.56.72.85
๐Ÿ‡ฌ๐Ÿ‡ง 35.203.211.147
๐Ÿ‡ง๐Ÿ‡ฉ 103.177.150.147
๐Ÿ‡บ๐Ÿ‡ธ 52.34.113.139
๐Ÿ‡ฑ๐Ÿ‡น 45.227.254.170