JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 191.101.157.196

191.101.157.196 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 21%: ?

21%

ISP	Internet Utilities Europe and Asia Limited
Usage Type	Fixed Line ISP
ASN	AS174
Domain Name	netutils.io
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 191.101.157.196

Whois 191.101.157.196

IP Abuse Reports for 191.101.157.196:

This IP address has been reported a total of 32 times from 26 distinct sources. 191.101.157.196 was first reported on May 3rd 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇷 MarianoJM35	2026-06-09 04:12:21 (1 week ago)	Suricata IDS: Lista de amenazas de alta confianza. Regla: ET DROP Spamhaus DROP Listed Traffic Inbou ... show more Suricata IDS: Lista de amenazas de alta confianza. Regla: ET DROP Spamhaus DROP Listed Traffic Inbound group 40. Score AbuseIPDB: 22/100. Puerto: 25565 show less	Port Scan
🇫🇷 lechat	2026-06-09 04:12:20 (1 week ago)	2026-06-09T04:12:20.530622+0000 inbound port scan detected by Suricata. src=191.101.157.196:40836 ds ... show more 2026-06-09T04:12:20.530622+0000 inbound port scan detected by Suricata. src=191.101.157.196:40836 dst=51.255.207.147:25565 proto=TCP. signature="ET DROP Spamhaus DROP Listed Traffic Inbound group 40" category="Misc Attack" sid=2400039 reason=blocklist_inbound. show less	Port Scan
🇺🇸 bigscoots.com	2026-05-30 03:59:43 (2 weeks ago)	(smtpauth) Failed SMTP AUTH login from 191.101.157.196 (DE/Germany/-): 5 in the last 3600 secs; Port ... show more (smtpauth) Failed SMTP AUTH login from 191.101.157.196 (DE/Germany/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-05-29 23:58:33 dovecot_login authenticator failed for H=(JcC2doh6C) [191.101.157.196]:51255: 535 Incorrect authentication data ([email protected]) 2026-05-29 23:58:44 dovecot_login authenticator failed for H=(yyhJaZX0qB) [191.101.157.196]:2780: 535 Incorrect authentication data ([email protected]) 2026-05-29 23:58:58 dovecot_login authenticator failed for H=(VtLy580) [191.101.157.196]:42807: 535 Incorrect authentication data ([email protected]) 2026-05-29 23:59:19 dovecot_login authenticator failed for H=(8k27tNuU5) [191.101.157.196]:2143: 535 Incorrect authentication data ([email protected]) 2026-05-29 23:59:40 dovecot_login authenticator failed for H=(w26pZPDWQ) [191.101.157.196]:41059: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇬🇧 consul.to	2026-05-13 19:01:44 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 2and.de	2026-04-17 19:33:51 (2 months ago)	Apr 17 21:33:43 virtcc postfix/smtpd\[2275357\]: warning: unknown\[191.101.157.196\]: SASL PLAIN aut ... show more Apr 17 21:33:43 virtcc postfix/smtpd\[2275357\]: warning: unknown\[191.101.157.196\]: SASL PLAIN authentication failed: authentication failure Apr 17 21:33:45 virtcc postfix/smtpd\[2275357\]: warning: unknown\[191.101.157.196\]: SASL LOGIN authentication failed: authentication failure Apr 17 21:33:49 virtcc postfix/smtpd\[2275358\]: warning: unknown\[191.101.157.196\]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force Exploited Host
🇬🇧 consul.to	2026-03-13 09:56:41 (3 months ago)	Web attack/malicious scanning detected	Web App Attack
🇵🇱 b4un0	2026-02-18 12:05:29 (3 months ago)	Auto-report from pfSense: Detected suspicious activity.	Brute-Force SSH
🇺🇸 xmission.com	2025-09-27 19:17:15 (8 months ago)	Blocked by UFW (TCP on 123) Source port: 61292 TTL: 45 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 123) Source port: 61292 TTL: 45 Packet length: 60 TOS: 0x08 This report (for 191.101.157.196) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 Thaliruth	2025-06-14 23:25:19 (1 year ago)	191.101.157.196 - - [15/Jun/2025:01:25:18 +0200] "GET / HTTP/1.0" 200 581 "-" "WanScannerBot/1.0" .. ... show more 191.101.157.196 - - [15/Jun/2025:01:25:18 +0200] "GET / HTTP/1.0" 200 581 "-" "WanScannerBot/1.0" ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 rayxis.com	2025-01-25 12:50:09 (1 year ago)	[Sat Jan 25 12:50:08.117891 2025] [proxy_fcgi:error] [pid 692959:tid 692998] [client 191.101.157.196 ... show more [Sat Jan 25 12:50:08.117891 2025] [proxy_fcgi:error] [pid 692959:tid 692998] [client 191.101.157.196:40256] AH01071: Got error 'Primary script unknown' ... show less	Bad Web Bot Web App Attack
🇨🇭 zynex	2025-01-25 11:29:57 (1 year ago)	URL Probing: /admin.php	Web App Attack
🇩🇪 Bedios GmbH	2025-01-25 11:13:53 (1 year ago)	Wordpress hacking attempt	Web App Attack
🇺🇸 Major Hostility	2025-01-25 03:33:50 (1 year ago)	"GET /1.php HTTP/1.1" 404 "GET /test.php HTTP/1.1" 404 "GET /wp-admin/js/index.php HTTP/1.1" 404 "GE ... show more "GET /1.php HTTP/1.1" 404 "GET /test.php HTTP/1.1" 404 "GET /wp-admin/js/index.php HTTP/1.1" 404 "GET /baxa1.php HTTP/1.1" 404 "GET /wp-admin/maint/index.php HTTP/1.1" 404 "GET /update/upload.php HTTP/1.1" 404 "GET /.well-known/acme-challenge/index.php HTTP/1.1" 404 "GET /dropdown.php HTTP/1.1" 404 "GET /cgi-bin/about.php HTTP/1.1" 404 "GET /admin.php HTTP/1.1" 404 show less	Web App Attack
🇦🇺 2000cn.com.au	2025-01-24 12:00:32 (1 year ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Hacking Web App Attack
🇺🇸 mnsf	2025-01-23 21:11:41 (1 year ago)	Too many Status 50X (137) Request Overload (139)	Brute-Force Web App Attack

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 159.89.113.99

🇵🇰 153.117.32.130

🇳🇱 45.148.10.151

🇭🇰 199.45.154.183

🇳🇱 176.65.139.105

🇷🇴 80.94.92.187

🇨🇳 60.217.22.185

🇬🇧 35.203.211.89

🇨🇳 220.192.159.238

🇳🇱 185.242.226.104

🇺🇸 173.255.229.18

🇫🇮 147.185.133.106

🇸🇬 128.199.231.249

🇫🇷 91.196.152.221

🇸🇬 52.237.80.79

🇧🇿 45.227.254.152

🇸🇬 8.219.112.24

🇨🇳 220.189.196.134

🇰🇷 211.178.247.182

🇧🇪 198.235.24.223