This IP address has been reported a total of
10
times from
9 distinct
sources.
197.248.128.13 was first reported on
November 20th 2022 , and the most recent report was
1 month ago Switzerland
with 1
report;
United Kingdom of Great Britain and Northern Ireland
with 1
report.
The most common categories in these recent reports were:
Email Spam
1
time;
Phishing
1
time.
Old Reports
The most recent abuse report for this IP address is from
1 month ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇨🇭
Origon
2026-09-02 10:02:18
(1 month ago)
NOQUEUE - IP: 197.248.128.13 - Sep 2 12:02:18 plesk postfix/smtpd[2828196]: NOQUEUE: reject: RCPT f ...
show more
NOQUEUE - IP: 197.248.128.13 - Sep 2 12:02:18 plesk postfix/smtpd[2828196]: NOQUEUE: reject: RCPT from athi-tes-mailout02.safaricombusiness.co.ke[197.248.128.13]: 554 5.7.1 Service unavailable; Client host [197.248.128.13] blocked using dnsbl-1.uceprotect.net; IP 197.248.128.13 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=197.248.128.13; from=<[email protected] > to=<REDACTED@REDACTED> proto=ESMTP helo=<athi-tes-mailout02.safaricombusiness.co.ke>
show less
Email Spam
🇬🇧
Dayve
2026-08-26 20:45:00
(1 month ago)
Fake password expiration message, failed SPF
Phishing
🇹🇷
ferique
2026-08-07 07:32:20
(2 months ago)
Real-time Intercept: Email Spam. Reference: Tagged as Spam by SpamAssassin. Score 45/10
Email Spam
🇵🇱
TheWojtek
2026-06-01 16:12:27
(4 months ago)
Jun 1 18:12:26 hq postfix/smtpd[2099376]: NOQUEUE: reject: RCPT from athi-tes-mailout02.safaricombu ...
show more
Jun 1 18:12:26 hq postfix/smtpd[2099376]: NOQUEUE: reject: RCPT from athi-tes-mailout02.safaricombusiness.co.ke[197.248.128.13]: 554 5.7.1 Service unavailable; Client host [197.248.128.13] blocked using Guardian Mail; https://lookup.abusix.com/search?q=197.248.128.13; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<athi-tes-mailout02.safaricombusiness.co.ke>
...
show less
Email Spam
🇸🇰
wirecontrol
2026-05-10 03:50:08
(5 months ago)
SpamScore above: 10.0
Email Spam
🇨🇭
Origon
2026-04-23 19:59:18
(5 months ago)
NOQUEUE - IP: 197.248.128.13 - Apr 23 21:59:18 plesk postfix/smtpd[593433]: NOQUEUE: reject: RCPT f ...
show more
NOQUEUE - IP: 197.248.128.13 - Apr 23 21:59:18 plesk postfix/smtpd[593433]: NOQUEUE: reject: RCPT from athi-tes-mailout02.safaricombusiness.co.ke[197.248.128.13]: 554 5.7.1 Service unavailable; Client host [197.248.128.13] blocked using dnsbl-1.uceprotect.net; IP 197.248.128.13 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=197.248.128.13; from=<[email protected] > to=<REDACTED@REDACTED> proto=ESMTP helo=<athi-tes-mailout02.safaricombusiness.co.ke>
show less
Email Spam
🇹🇭
thaizone.com
2026-02-27 17:49:47
(7 months ago)
High probability of spam (Score: 37.00)
Email Spam
🇸🇪
triplecode
2025-12-08 14:03:17
(10 months ago)
Reported from hMailServer
Email Spam
🇩🇪
H. Hampel
2025-09-25 12:10:53
(1 year ago)
SMTP hacking.
Email Spam
Hacking
Spoofing
2022-11-20 02:59:08
(3 years ago)
File name: INVOICE#102291089839939.XLSX.SHTML
File sha256 hash: 84f1b6c7454dd820d9f955f36b1ec0586b0 ...
show more
File name: INVOICE#102291089839939.XLSX.SHTML
File sha256 hash: 84f1b6c7454dd820d9f955f36b1ec0586b0501dc5cd66aed9659d7b0697eeabd
Virus Signature: JS/Kryptik.AMG!tr
Sender: [email protected]
show less
Fraud Orders
Email Spam
Spoofing
Showing 1 to
10
of 10 reports
