JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 197.155.76.194

197.155.76.194 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 71%: ?

71%

ISP	Liquid Telecommunications Operations Limited
Usage Type	Fixed Line ISP
ASN	AS30844
Hostname(s)	197.155.76.194.liquidtelecom.net
Domain Name	liquidtelecom.mu
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 197.155.76.194

Whois 197.155.76.194

IP Abuse Reports for 197.155.76.194:

This IP address has been reported a total of 33 times from 23 distinct sources. 197.155.76.194 was first reported on March 17th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 librebit	2026-07-19 12:20:51 (1 day ago)	Postfix: IP Address black-listed by anti-spam (blocked)	Email Spam
🇵🇹 rnl	2026-07-19 05:20:08 (1 day ago)	postfix (unknown user, SPF fail or relay access denied)	Brute-Force
🇫🇷 smtp.com.es	2026-07-18 04:38:09 (2 days ago)	Brute force attempt.	Brute-Force Email Spam
🇪🇸 www.pk25.com	2026-07-15 07:47:47 (5 days ago)	2026-07-15 00:39:28 H=(197.155.76.194.liquidtelecom.net) [197.155.76.194] sender verify fail for <sq ... show more 2026-07-15 00:39:28 H=(197.155.76.194.liquidtelecom.net) [197.155.76.194] sender verify fail for <[email protected]>: Unrouteable address 2026-07-15 00:39:28 H=(197.155.76.194.liquidtelecom.net) [197.155.76.194] F=<[email protected]> rejected RCPT <[email protected]>: Sender verify failed 2026-07-15 09:47:46 H=(197.155.76.194.liquidtelecom.net) [197.155.76.194] sender verify fail for <[email protected]>: Unrouteable address ... show less	Brute-Force
🇨🇭 Origon	2026-07-09 04:04:42 (1 week ago)	NOQUEUE - IP: 197.155.76.194 - Jul 9 06:04:42 plesk postfix/smtpd[2687151]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 197.155.76.194 - Jul 9 06:04:42 plesk postfix/smtpd[2687151]: NOQUEUE: reject: RCPT from unknown[197.155.76.194]: 554 5.7.1 Service unavailable; Client host [197.155.76.194] blocked using dnsbl-1.uceprotect.net; IP 197.155.76.194 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=197.155.76.194; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<197.155.76.194.liquidtelecom.net> show less	Email Spam
Anonymous	2026-07-08 21:24:36 (1 week ago)	2026-07-08T23:24:35.562667+02:00 gollum postfix/smtpd[2351526]: NOQUEUE: reject: RCPT from unknown[1 ... show more 2026-07-08T23:24:35.562667+02:00 gollum postfix/smtpd[2351526]: NOQUEUE: reject: RCPT from unknown[197.155.76.194]: 554 5.7.1 Service unavailable; Client host [197.155.76.194] blocked using zen.spamhaus.org; Listed by XBL, see https://check.spamhaus.org/query/ip/197.155.76.194 / Listed by CSS, see https://check.spamhaus.org/query/ip/197.155.76.194; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<197.155.76.194.liquidtelecom.net> ... show less	Email Spam
Anonymous	2026-07-08 21:00:08 (1 week ago)	SpamAssassin score 18.9 exceeded block threshold 15.0	Email Spam
Anonymous	2026-07-07 09:58:54 (1 week ago)	SPAM EMAIL 197.155.76.194 (RBL_TRIGGER)	Email Spam
🇳🇱 wlt-blocker	2026-07-06 21:33:08 (1 week ago)	Spam with a high level and/or caught by honeypot detected	Email Spam
🇩🇪 Viveronese	2026-07-06 15:21:37 (2 weeks ago)	SASL LOGIN authentication failed	Brute-Force
🇨🇭 Origon	2026-07-06 02:12:00 (2 weeks ago)	NOQUEUE - IP: 197.155.76.194 - Jul 6 04:12:00 plesk postfix/smtpd[4038067]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 197.155.76.194 - Jul 6 04:12:00 plesk postfix/smtpd[4038067]: NOQUEUE: reject: RCPT from unknown[197.155.76.194]: 554 5.7.1 Service unavailable; Client host [197.155.76.194] blocked using dnsbl-1.uceprotect.net; IP 197.155.76.194 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=197.155.76.194; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<197.155.76.194> show less	Email Spam
🇫🇷 masterguru	2026-07-01 05:01:08 (2 weeks ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇺🇸 TPI-Abuse	2026-06-26 14:45:40 (3 weeks ago)	(mod_security) mod_security (id:240335) triggered by 197.155.76.194 (197.155.76.194.liquidtelecom.ne ... show more (mod_security) mod_security (id:240335) triggered by 197.155.76.194 (197.155.76.194.liquidtelecom.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 10:45:31.198702 2026] [security2:error] [pid 5276:tid 5276] [client 197.155.76.194:58144] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 197.155.76.194 (+1 hits since last alert)\|roguetechink.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "roguetechink.com"] [uri "/xmlrpc.php"] [unique_id "aj6Qi0imZyVQ66AQzG1p_wAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-26 11:52:20 (3 weeks ago)	(mod_security) mod_security (id:240335) triggered by 197.155.76.194 (197.155.76.194.liquidtelecom.ne ... show more (mod_security) mod_security (id:240335) triggered by 197.155.76.194 (197.155.76.194.liquidtelecom.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 07:52:11.930416 2026] [security2:error] [pid 30551:tid 30551] [client 197.155.76.194:56033] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 197.155.76.194 (+1 hits since last alert)\|reyadecostarica.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "reyadecostarica.com"] [uri "/xmlrpc.php"] [unique_id "aj5n6yQosVK-g-TsFCVF9gAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 OolutionTech	2026-06-25 10:53:22 (3 weeks ago)		Email Spam

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 181.224.223.139

🇻🇳 103.95.159.50

🇵🇱 57.128.218.186

🇧🇪 35.195.202.32

🇧🇪 34.14.19.199

🇧🇷 201.15.149.254

🇳🇴 185.12.59.118

🇵🇾 143.255.141.223

🇳🇬 103.97.91.18

🇪🇸 90.68.171.70

🇵🇹 85.240.193.104

🇰🇷 222.239.251.12

🇹🇼 198.235.24.14

🇧🇷 177.215.134.250

🇻🇳 103.90.224.131

🇳🇱 77.239.124.244

🇵🇰 2407:d000:506:1fdc:7065:94eb:973a:232a

🇹🇼 198.235.24.101

🇺🇸 162.214.159.200

🇷🇴 92.118.39.50