JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 197.157.194.120

197.157.194.120 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 44%: ?

44%

ISP	SPIDERNET SPRL BURUNDI
Usage Type	Fixed Line ISP
ASN	AS37429
Domain Name	spidernet-bi.com
Country	🇧🇮 Burundi
City	Bujumbura, Bujumbura Mairie

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 197.157.194.120

Whois 197.157.194.120

IP Abuse Reports for 197.157.194.120:

This IP address has been reported a total of 16 times from 11 distinct sources. 197.157.194.120 was first reported on May 8th 2026, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-29 02:40:19 (19 hours ago)		Brute-Force Email Spam
🇩🇪 Kreisausschuss des Odenwaldkreises	2026-06-25 14:17:15 (4 days ago)	HAProxy NOSRV or BADREQ	Web App Attack
🇳🇱 soverin	2026-06-24 02:05:03 (5 days ago)	spam	Email Spam
🇺🇸 DiodeDave	2026-06-22 06:27:09 (1 week ago)	Attempted access after blacklisting	Email Spam
🇨🇭 Origon	2026-06-11 15:47:03 (2 weeks ago)	NOQUEUE - IP: 197.157.194.120 - Jun 11 17:47:02 plesk postfix/smtpd[3804323]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 197.157.194.120 - Jun 11 17:47:02 plesk postfix/smtpd[3804323]: NOQUEUE: reject: RCPT from unknown[197.157.194.120]: 554 5.7.1 Service unavailable; Client host [197.157.194.120] blocked using dnsbl-1.uceprotect.net; IP 197.157.194.120 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=197.157.194.120; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[197.157.194.120]> show less	Email Spam
🇨🇭 Origon	2026-06-08 14:36:44 (3 weeks ago)	NOQUEUE - IP: 197.157.194.120 - Jun 8 16:36:44 plesk postfix/smtpd[2400250]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 197.157.194.120 - Jun 8 16:36:44 plesk postfix/smtpd[2400250]: NOQUEUE: reject: RCPT from unknown[197.157.194.120]: 554 5.7.1 Service unavailable; Client host [197.157.194.120] blocked using dnsbl-1.uceprotect.net; IP 197.157.194.120 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=197.157.194.120; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<197.157.194.120> show less	Email Spam
🇩🇪 Viveronese	2026-05-31 11:16:26 (4 weeks ago)	SASL LOGIN authentication failed	Brute-Force
🇨🇭 Origon	2026-05-29 14:54:43 (1 month ago)	NOQUEUE - IP: 197.157.194.120 - May 29 16:54:43 plesk postfix/smtpd[1069464]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 197.157.194.120 - May 29 16:54:43 plesk postfix/smtpd[1069464]: NOQUEUE: reject: RCPT from unknown[197.157.194.120]: 554 5.7.1 Service unavailable; Client host [197.157.194.120] blocked using dnsbl-1.uceprotect.net; IP 197.157.194.120 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=197.157.194.120; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<197.157.194.120> show less	Email Spam
🇩🇪 Viveronese	2026-05-29 14:32:14 (1 month ago)	SASL LOGIN authentication failed	Brute-Force
🇩🇪 filstal.org	2026-05-26 22:36:51 (1 month ago)	CrowdSec-Report: crowdsecurity/postfix-helo-rejected	Email Spam Brute-Force
🇩🇪 JF Berne	2026-05-26 20:15:00 (1 month ago)	ERPRESSUNG	Email Spam
🇨🇭 Origon	2026-05-26 13:59:10 (1 month ago)	NOQUEUE - IP: 197.157.194.120 - May 26 15:58:19 plesk postfix/smtpd[3134105]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 197.157.194.120 - May 26 15:58:19 plesk postfix/smtpd[3134105]: NOQUEUE: reject: RCPT from unknown[197.157.194.120]: 554 5.7.1 Service unavailable; Client host [197.157.194.120] blocked using dnsbl-1.uceprotect.net; IP 197.157.194.120 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=197.157.194.120; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<197.157.194.120> show less	Email Spam
Anonymous	2026-05-26 13:59:05 (1 month ago)	2026-05-26T15:59:04.611097+02:00 gollum postfix/smtpd[493278]: NOQUEUE: reject: RCPT from unknown[19 ... show more 2026-05-26T15:59:04.611097+02:00 gollum postfix/smtpd[493278]: NOQUEUE: reject: RCPT from unknown[197.157.194.120]: 554 5.7.1 Service unavailable; Client host [197.157.194.120] blocked using zen.spamhaus.org; Listed by XBL, see https://check.spamhaus.org/query/ip/197.157.194.120 / Listed by PBL, see https://check.spamhaus.org/query/ip/197.157.194.120 / Listed by CSS, see https://check.spamhaus.org/query/ip/197.157.194.120; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<197.157.194.120> ... show less	Email Spam
🇩🇪 dispaisyenterprises	2026-05-13 00:45:40 (1 month ago)	Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 8728 [3] TCP Reported by DisPaisy ... show more Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 8728 [3] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇯🇵 gobou-51	2026-05-12 00:42:07 (1 month ago)	Spoofing detected via DMARC report. Total attempts: 1.	Web Spam Email Spam Bad Web Bot

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 216.58.201.238

🇧🇷 200.115.100.247

🇳🇱 193.176.31.234

🇧🇷 191.249.156.187

🇧🇷 187.183.58.43

🇰🇷 115.178.75.242

🇺🇸 2604:a880:2:d1:0:1:51e1:2001

🇧🇷 200.115.100.241

🇧🇷 200.115.100.22

🇧🇷 191.184.214.169

🇧🇷 191.180.36.183

🇧🇷 187.183.202.251

🇧🇷 187.183.10.244

🇫🇷 157.173.121.149

🇭🇰 152.32.188.174

🇦🇹 150.251.225.150

🇮🇹 82.180.56.17

🇳🇱 62.164.177.222

🇫🇷 51.91.78.238

🇺🇸 50.188.204.213