JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.205.239.254

102.205.239.254 was found in our database!

This IP was reported 73 times. Confidence of Abuse is 97%: ?

97%

ISP	SuperLite Fiber
Usage Type	Fixed Line ISP
ASN	AS329535
Domain Name	superlite.co.ke
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.205.239.254

Whois 102.205.239.254

IP Abuse Reports for 102.205.239.254:

This IP address has been reported a total of 73 times from 36 distinct sources. 102.205.239.254 was first reported on September 22nd 2025, and the most recent report was 52 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 notelseit	2026-09-23 08:25:33 (52 minutes ago)	2026-09-23T10:25:26.456106+02:00 mail postfix/smtps/smtpd[3062389]: warning: unknown[102.205.239.254 ... show more 2026-09-23T10:25:26.456106+02:00 mail postfix/smtps/smtpd[3062389]: warning: unknown[102.205.239.254]: SASL PLAIN authentication failed: (reason unavailable), [email protected] 2026-09-23T10:25:32.300167+02:00 mail postfix/smtps/smtpd[3062389]: warning: unknown[102.205.239.254]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-09-23T10:25:32.474228+02:00 mail postfix/smtps/smtpd[3062389]: disconnect from unknown[102.205.239.254] ehlo=1 auth=0/2 quit=1 commands=2/4 ... show less	Brute-Force Email Spam
🇵🇱 bmino.pl	2026-09-23 05:39:44 (3 hours ago)	Autoban IP(2): 102.205.239.254 - Hostname: VOS AFRICA - City: Nairobi - Country: Kenya - Organizatio ... show more Autoban IP(2): 102.205.239.254 - Hostname: VOS AFRICA - City: Nairobi - Country: Kenya - Organization: AS329535 ONSITE AFRICA LIMITED - Reason: GET /?f=yij107d13513xdyrvu HTTP/1.1 show less	Web App Attack
Anonymous	2026-09-22 13:21:49 (19 hours ago)	Authentication failure	Brute-Force
🇫🇮 notelseit	2026-09-21 23:27:41 (1 day ago)	2026-09-22T01:27:35.258194+02:00 mail postfix/smtps/smtpd[2822239]: warning: unknown[102.205.239.254 ... show more 2026-09-22T01:27:35.258194+02:00 mail postfix/smtps/smtpd[2822239]: warning: unknown[102.205.239.254]: SASL PLAIN authentication failed: (reason unavailable), [email protected] 2026-09-22T01:27:41.104470+02:00 mail postfix/smtps/smtpd[2822239]: warning: unknown[102.205.239.254]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-09-22T01:27:41.276052+02:00 mail postfix/smtps/smtpd[2822239]: disconnect from unknown[102.205.239.254] ehlo=1 auth=0/2 quit=1 commands=2/4 ... show less	Brute-Force Email Spam
🇮🇩 xveil	2026-09-21 15:23:31 (1 day ago)	2026-09-21T22:23:28.850582 mail-honeypot postfix/submission/smtpd[8610]: warning: unknown[102.205.23 ... show more 2026-09-21T22:23:28.850582 mail-honeypot postfix/submission/smtpd[8610]: warning: unknown[102.205.239.254]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
🇺🇸 kosada.com	2026-09-19 21:48:16 (3 days ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B1%5 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B1%5D=46&topics%5B2%5D=44&topics%5B3%5D=69&topics%5B4%5D=49 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:147.0) Gecko/20100101 Firefox/147.0") show less	DDoS Attack Bad Web Bot
🇵🇱 bmino.pl	2026-09-19 21:00:42 (3 days ago)	Autoban IP(2): 102.205.239.254 - Hostname: VOS AFRICA - City: Nairobi - Country: Kenya - Organizatio ... show more Autoban IP(2): 102.205.239.254 - Hostname: VOS AFRICA - City: Nairobi - Country: Kenya - Organization: AS329535 ONSITE AFRICA LIMITED - Reason: GET /?f=yij107d13513xdyrvu HTTP/1.1 show less	Web App Attack
🇨🇿 unhfree.net	2026-09-19 17:23:47 (3 days ago)	Sep 19 11:41:38 canopus postfix/smtpd[1649823]: NOQUEUE: reject: RCPT from unknown[102.205.239.254]: ... show more Sep 19 11:41:38 canopus postfix/smtpd[1649823]: NOQUEUE: reject: RCPT from unknown[102.205.239.254]: 554 5.7.1 Service unavailable; Client host [102.205.239.254] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/102.205.239.254 / Listed by PBL, see https://check.spamhaus.org/query/ip/102.205.239.254 / Listed by XBL, see https://check.spamhaus.org/query/ip/102.205.239.254; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[192.168.100.20]> Sep 19 11:41:38 canopus postfix/smtpd[1652222]: NOQUEUE: reject: RCPT from unknown[102.205.239.254]: 554 5.7.1 Service unavailable; Client host [102.205.239.254] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/102.205.239.254 / Listed by PBL, see https://check.spamhaus.org/query/ip/102.205.239.254 / Listed by XBL, see https://check.spamhaus.org/query/ip/102.205.239.254; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[192.168.100.20]> Se ... show less	Brute-Force Exploited Host
🇩🇪 LRob	2026-09-18 17:09:18 (4 days ago)	Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ... show more Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for \| method: GET \| path: /commander-2 \| 2026-09-18 17:09 UTC show less	Bad Web Bot
🇮🇩 xveil	2026-09-17 11:18:52 (5 days ago)	2026-09-17T18:18:50.735709 mail-honeypot postfix/submission/smtpd[32147]: warning: unknown[102.205.2 ... show more 2026-09-17T18:18:50.735709 mail-honeypot postfix/submission/smtpd[32147]: warning: unknown[102.205.239.254]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
🇳🇱 WeCloudit-Anti-Abuse	2026-09-17 10:51:25 (5 days ago)	(smtpauth) Failed SMTP AUTH login from 102.205.239.254 (KE/Kenya/-): 15 in the last 200 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 102.205.239.254 (KE/Kenya/-): 15 in the last 200 secs; Ports: *; Direction: 0; Trigger: LF_SMTPAUTH - alp show less	Brute-Force SSH
🇨🇿 lp	2026-09-17 00:20:01 (6 days ago)	Email account brute force: 6 attempts were recorded from 102.205.239.254 2026-09-17T01:40:27+02:00 w ... show more Email account brute force: 6 attempts were recorded from 102.205.239.254 2026-09-17T01:40:27+02:00 warning: unknown[102.205.239.254]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-09-17T01:40:27+02:00 warning: unknown[102.205.239.254]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-09-17T01:40:28+02:00 warning: unknown[102.205.239.254]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-09-17T01:40:29+02:00 warning: unknown[102.205.239.254]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-09-17T01:40:30+02:00 warning: unknown[102.205.239.254]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-09-17T01:40:30+02:00 warning: unknown[102.205.239.254]: SASL LOGIN authentication faile show less	Brute-Force
🇺🇸 mnogoweb	2026-09-16 13:04:53 (6 days ago)	(smtpauth) Failed SMTP AUTH login from 102.205.239.254 (KE/Kenya/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 102.205.239.254 (KE/Kenya/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-16 07:04:44 plain authenticator failed for ([192.168.100.81]) [102.205.239.254]: 535 Incorrect authentication data ([email protected]) 2026-09-16 07:04:44 login authenticator failed for ([192.168.100.81]) [102.205.239.254]: 535 Incorrect authentication data ([email protected]) 2026-09-16 07:04:46 plain authenticator failed for ([192.168.100.81]) [102.205.239.254]: 535 Incorrect authentication data ([email protected]) 2026-09-16 07:04:47 login authenticator failed for ([192.168.100.81]) [102.205.239.254]: 535 Incorrect authentication data ([email protected]) 2026-09-16 07:04:49 plain authenticator failed for ([192.168.100.81]) [102.205.239.254]: 535 Incorrect authentication data ([email protected]) show less	Port Scan
🇮🇩 xveil	2026-09-16 10:19:38 (6 days ago)	2026-09-16T17:19:35.623503 mail-honeypot postfix/submission/smtpd[9888]: warning: unknown[102.205.23 ... show more 2026-09-16T17:19:35.623503 mail-honeypot postfix/submission/smtpd[9888]: warning: unknown[102.205.239.254]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
🇫🇮 notelseit	2026-09-16 01:19:12 (1 week ago)	2026-09-16T03:19:06.304453+02:00 mail postfix/smtps/smtpd[1602881]: warning: unknown[102.205.239.254 ... show more 2026-09-16T03:19:06.304453+02:00 mail postfix/smtps/smtpd[1602881]: warning: unknown[102.205.239.254]: SASL PLAIN authentication failed: (reason unavailable), [email protected] 2026-09-16T03:19:12.123899+02:00 mail postfix/smtps/smtpd[1602881]: warning: unknown[102.205.239.254]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-09-16T03:19:12.282117+02:00 mail postfix/smtps/smtpd[1602881]: disconnect from unknown[102.205.239.254] ehlo=1 auth=0/2 quit=1 commands=2/4 ... show less	Brute-Force Email Spam

Showing 1 to 15 of 73 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 192.227.237.44

🇨🇳 180.76.171.14

🇸🇰 178.40.115.187

🇫🇮 147.185.133.217

🇮🇩 27.123.7.187

🇻🇳 14.225.218.99

🇰🇷 14.206.0.20

🇰🇪 2c0f:69c0:5c6:4600:1117:2f81:9583:1357

🇪🇹 196.189.123.55

🇬🇧 172.69.224.27

🇩🇪 165.245.253.78

🇵🇪 161.132.54.212

🇮🇳 152.52.240.162

🇺🇸 104.28.204.176

🇭🇰 69.172.79.198

🇺🇸 64.202.191.109

🇱🇹 62.60.130.201

🇺🇸 54.146.213.164

🇩🇪 45.139.104.152

🇿🇦 41.56.163.232