JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 197.157.194.12

197.157.194.12 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 46%: ?

46%

ISP	SPIDERNET SPRL BURUNDI
Usage Type	Fixed Line ISP
ASN	AS37429
Domain Name	spidernet-bi.com
Country	🇧🇮 Burundi
City	Bujumbura, Bujumbura Mairie

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 197.157.194.12

Whois 197.157.194.12

IP Abuse Reports for 197.157.194.12:

This IP address has been reported a total of 26 times from 16 distinct sources. 197.157.194.12 was first reported on May 8th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇹 rnl	2026-07-22 00:27:28 (2 days ago)	postfix	Brute-Force Email Spam
🇵🇹 rnl	2026-07-21 05:50:07 (3 days ago)	postfix (unknown user, SPF fail or relay access denied)	Brute-Force
🇪🇸 www.pk25.com	2026-07-14 22:09:36 (1 week ago)	2026-07-14 23:43:15 H=(197.157.194.12) [197.157.194.12] sender verify fail for <ada9363@adycoaduanas ... show more 2026-07-14 23:43:15 H=(197.157.194.12) [197.157.194.12] sender verify fail for <[email protected]>: Unrouteable address 2026-07-14 23:43:15 H=(197.157.194.12) [197.157.194.12] F=<[email protected]> rejected RCPT <[email protected]>: Sender verify failed 2026-07-15 00:09:35 H=(197.157.194.12) [197.157.194.12] sender verify fail for <[email protected]>: Unrouteable address ... show less	Brute-Force
🇨🇭 Origon	2026-07-08 23:04:58 (2 weeks ago)	NOQUEUE - IP: 197.157.194.12 - Jul 9 01:04:58 plesk postfix/smtpd[2410312]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 197.157.194.12 - Jul 9 01:04:58 plesk postfix/smtpd[2410312]: NOQUEUE: reject: RCPT from unknown[197.157.194.12]: 554 5.7.1 Service unavailable; Client host [197.157.194.12] blocked using dnsbl-1.uceprotect.net; IP 197.157.194.12 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=197.157.194.12; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<197.157.194.12> show less	Email Spam
Anonymous	2026-07-07 16:41:37 (2 weeks ago)	SpamAssassin score 17.3 exceeded block threshold 15.0	Email Spam
🇩🇪 Viveronese	2026-07-06 21:03:10 (2 weeks ago)	SASL LOGIN authentication failed	Brute-Force
🇩🇪 filstal.org	2026-07-05 19:31:06 (2 weeks ago)	CrowdSec: crowdsecurity/postfix-helo-rejected	Email Spam
🇨🇭 Origon	2026-07-05 17:15:00 (2 weeks ago)	NOQUEUE - IP: 197.157.194.12 - Jul 5 19:14:58 plesk postfix/smtpd[3270149]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 197.157.194.12 - Jul 5 19:14:58 plesk postfix/smtpd[3270149]: NOQUEUE: reject: RCPT from unknown[197.157.194.12]: 554 5.7.1 Service unavailable; Client host [197.157.194.12] blocked using dnsbl-1.uceprotect.net; IP 197.157.194.12 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=197.157.194.12; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<197.157.194.12> show less	Email Spam
🇸🇮 bolasic	2026-06-29 03:26:22 (3 weeks ago)	Sent mail with a forged sender address for our own domain (SPF hard fail: From address claims mojint ... show more Sent mail with a forged sender address for our own domain (SPF hard fail: From address claims mojinter.net/kmalu.com but the sending IP is not authorized to send for that domain). Service: SMTP-IN, Time: 2026-06-29%2005:25:50. Blocked by axiban on mail.kmalu.com / mojinter.net. show less	Brute-Force
🇬🇧 PeravixGroup	2026-06-25 02:44:24 (4 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇷🇸 Smel	2026-06-19 01:49:12 (1 month ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇨🇭 Origon	2026-06-10 22:52:19 (1 month ago)	NOQUEUE - IP: 197.157.194.12 - Jun 11 00:52:19 plesk postfix/smtpd[2421964]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 197.157.194.12 - Jun 11 00:52:19 plesk postfix/smtpd[2421964]: NOQUEUE: reject: RCPT from unknown[197.157.194.12]: 554 5.7.1 Service unavailable; Client host [197.157.194.12] blocked using dnsbl-1.uceprotect.net; IP 197.157.194.12 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=197.157.194.12; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<197.157.194.12> show less	Email Spam
🇨🇿 interconnect.cz	2026-06-07 18:33:22 (1 month ago)	[07/Jun/2026 20:33:21] IP address 197.157.194.12 found in DNS blacklist SpamHaus SBL-XBL, mail from ... show more [07/Jun/2026 20:33:21] IP address 197.157.194.12 found in DNS blacklist SpamHaus SBL-XBL, mail from <[email protected]> to <[email protected]> [07/Jun/2026 20:33:21] IP address 197.157.194.12 found in DNS blacklist SpamHaus SBL-XBL, mail from <[email protected]> to <[email protected]> [07/Jun/2026 20:33:21] Attempt to deliver to unknown recipient <[email protected]>, from <[email protected]>, IP address 197.157.194.12 ... show less	Brute-Force Email Spam
🇬🇧 PeravixGroup	2026-06-06 16:29:02 (1 month ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇩🇪 NewGastroline	2026-06-01 15:49:53 (1 month ago)	Malicious request blocked by CrowdSec on gastro-prod1.boreus.de	Bad Web Bot Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 128.185.33.227

🇷🇴 92.118.39.49

🇹🇭 182.53.67.60

🇨🇳 106.75.227.248

🇳🇬 105.113.57.65

🇱🇹 62.60.130.219

🇬🇧 45.133.173.169

🇫🇮 34.88.29.206

🇺🇸 91.230.168.208

🇦🇺 52.64.68.192

🇨🇳 43.138.5.244

🇲🇽 38.22.170.10

🇨🇦 4.239.240.98

🇮🇪 3.252.197.182

🇳🇱 176.65.148.29

🇭🇰 150.5.169.176

🇸🇬 119.13.106.88

🇵🇱 57.128.239.181

🇮🇱 2.55.122.202

🇺🇸 217.145.224.230