JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

102.204.91.170

Recent Activity

Abuse confidence score ?

67% Elevated

19 reports

16 reporters · latest 44 minutes ago

ISP	VENNET SOLUTIONS LIMITED
Usage Type	Fixed Line ISP
ASN	AS329437
Domain Name	veenet.africa
Country	🇰🇪 Kenya
City	Mombasa, Mombasa County

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 102.204.91.170

This IP address has been reported a total of 19 times from 16 distinct sources. 102.204.91.170 was first reported on March 29th 2026, and the most recent report was 44 minutes ago. In the last 60 days, the top reporter locations were: United States of America with 4 reports; Austria with 3 reports; Italy with 2 reports. The most common categories in these recent reports were: Brute-Force 11 times; Bad Web Bot 4 times; Email Spam 1 time; Exploited Host 1 time; Web App Attack 1 time; Other 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 joe-abuse	2026-09-25 01:31:55 (44 minutes ago)	Automated report from fail2ban on mail.fitzgerald.eu. Jail: dovecot. First seen: 2026-09-23 18:00:24 ... show more Automated report from fail2ban on mail.fitzgerald.eu. Jail: dovecot. First seen: 2026-09-23 18:00:24. Events: 1. Reported by ipdb-security/fitzgerald.eu show less	Brute-Force
🇦🇹 joe-abuse	2026-09-24 01:31:37 (1 day ago)	Automated report from fail2ban on mail.fitzgerald.eu. Jail: dovecot. First seen: 2026-09-23 18:00:24 ... show more Automated report from fail2ban on mail.fitzgerald.eu. Jail: dovecot. First seen: 2026-09-23 18:00:24. Events: 1. Reported by ipdb-security/fitzgerald.eu show less	Brute-Force
🇦🇹 joe-abuse	2026-09-23 17:42:08 (1 day ago)	2026-09-23T19:42:07.671742+02:00 ucs1 dovecot: auth: pam([email protected],102.204.91.17 ... show more 2026-09-23T19:42:07.671742+02:00 ucs1 dovecot: auth: pam([email protected],102.204.91.170): unknown user (given password: w35QkUPwSnqN.MJ) ... show less	Brute-Force
🇺🇸 TPI-Abuse	2026-09-22 03:56:47 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 102.204.91.170 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 102.204.91.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 23:56:40.459831 2026] [security2:error] [pid 27106:tid 27106] [client 102.204.91.170:42030] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|kentweakley.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kentweakley.com"] [uri "/blog"] [unique_id "arH8eI5_XZ-wULcFi4bNHAAAAAk"], referer: https://galerie46.blogspot.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 pixelmemory.us	2026-09-20 07:04:45 (4 days ago)	2026-09-20T07:03:33 102.204.91.170 GET /Photos/Friends/2023-12-27%20Bonnie%20and%20Al/raw/DSC06509.A ... show more 2026-09-20T07:03:33 102.204.91.170 GET /Photos/Friends/2023-12-27%20Bonnie%20and%20Al/raw/DSC06509.ARW Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 ... show less	Bad Web Bot
🇺🇸 gui-ying233	2026-09-19 08:30:24 (5 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-09-15 15:22:58 (1 week ago)	2026-09-15T18:22:58.070405+03:00 shell.l3.fi postfix/smtps/smtpd[1853154]: warning: unknown[102.204. ... show more 2026-09-15T18:22:58.070405+03:00 shell.l3.fi postfix/smtps/smtpd[1853154]: warning: unknown[102.204.91.170]: SASL PLAIN authentication failed: (reason unavailable), sasl_username=stone34 2026-09-15T18:22:58.494053+03:00 shell.l3.fi postfix/smtps/smtpd[1853154]: disconnect from unknown[102.204.91.170] ehlo=1 auth=0/1 commands=1/2 ... show less	Email Spam Brute-Force
🇳🇱 maxxsense	2026-09-14 00:00:56 (1 week ago)	(postfix-unknown) Failed postfix unknown login with username [redacted] from 102.204.91.170 (KE/Keny ... show more (postfix-unknown) Failed postfix unknown login with username [redacted] from 102.204.91.170 (KE/Kenya/-) show less	Hacking
🇮🇹 CoreTech srl	2026-09-13 23:32:34 (1 week ago)	"SMTP Login failed": count(IP)=30.0Smartermail 01:28:20.478 [164.132.40.203] SMTP Login failed: User ... show more "SMTP Login failed": count(IP)=30.0Smartermail 01:28:20.478 [164.132.40.203] SMTP Login failed: Username or password is incorrect.Smartermail 01:28:20.478 [164.132.40.203] SMTP Login failed: Domain [biesseass.it] not foundSmartermail 01:28:25.096 [58.115.14.78] SMTP Login failed: Incorrect email address [biesse]Smartermail 01:28:25.096 [58.115.14.78] SMTP Login failed: Username or password is incorrect.MAIL4-new 01:28:59.541 [2.228.150.60] SMTP Login failed: Incorrect password for user [[email protected]]MAIL4-new 01:28:59.541 [2.228.150.60] SMTP Login failed: Username or password is incorrect.Smartermail 01:29:29.518 [102.204.91.170] SMTP Login failed: Username or password is incorrect.Smartermail 01:29:29.518 [102.204.91.170] SMTP Login failed: User [alessandro.m] not foundMX1-DC2 01:29:36.397 [70.167.235.134] SMTP Login failed: Domain [tessituravartex.it] not found show less	Brute-Force
🇫🇷 adlp.org	2026-09-13 23:08:28 (1 week ago)	Sep 13 23:08:19 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;102.204.91.170;[UNAVAI ... show more Sep 13 23:08:19 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;102.204.91.170;[UNAVAILABLE];[email protected];smtp;plain;1;@adlp.org$;KILL;2;Licence to kill Sep 13 23:08:22 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;102.204.91.170;[UNAVAILABLE];[email protected];smtp;plain;1;@adlp.org$;KILL;2;Licence to kill Sep 13 23:08:25 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;102.204.91.170;[UNAVAILABLE];[email protected];smtp;plain;1;@adlp.org$;KILL;2;Licence to kill ... show less	Brute-Force
Anonymous	2026-09-13 22:26:26 (1 week ago)	SMTP brute force - auth failed	Brute-Force Exploited Host
🇪🇸 el-brujo	2026-09-13 03:22:31 (1 week ago)	DDoS Attack Layer 7	DDoS Attack
🇺🇸 gui-ying233	2026-09-11 21:08:18 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇿🇦 maximonline.co.za	2026-09-09 22:38:08 (2 weeks ago)	Brute Force SMTP AUTH Attack	Brute-Force
🇮🇹 VHosting	2026-09-07 19:10:03 (2 weeks ago)	Detected mail brute force attack from different servers	Brute-Force

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 202.46.62.118

🇬🇧 198.244.226.176

🇺🇿 195.158.14.232

🇳🇱 192.253.248.229

🇸🇦 130.94.57.102

🇰🇷 130.94.30.148

🇨🇳 117.159.93.197

🇭🇰 103.146.158.85

🇮🇪 98.71.8.129

🇳🇱 91.92.241.151

🇮🇷 85.198.19.100

🇧🇷 45.174.238.98

🇰🇷 211.178.247.182

🇪🇨 191.99.75.184

🇺🇸 172.214.5.176

🇩🇪 130.61.152.179

🇩🇪 130.61.34.145

🇩🇪 130.61.24.69

🇧🇩 103.114.22.160

🇬🇧 51.89.129.186