JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

102.68.78.243

Recent Activity

Abuse confidence score ?

74% Elevated

73 reports

44 reporters · latest 3 hours ago

ISP	Unwired Communications Ltd
Usage Type	Fixed Line ISP
ASN	AS328490
Domain Name	unwired.co.ke
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 102.68.78.243

Export CSV

This IP address has been reported a total of 73 times from 44 distinct sources. 102.68.78.243 was first reported on October 19th 2025, and the most recent report was 3 hours ago. In the last 60 days, the top reporter locations were: United States of America with 12 reports; France with 5 reports; Indonesia with 4 reports. The most common categories in these recent reports were: Brute-Force 17 times; Bad Web Bot 14 times; Web App Attack 6 times; DDoS Attack 4 times; Exploited Host 4 times; Other 3 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 xveil	2026-10-09 19:40:02 (3 hours ago)	2026-10-10T02:40:00.668667 mail-honeypot postfix/submission/smtpd[3512]: warning: unknown[102.68.78. ... show more 2026-10-10T02:40:00.668667 mail-honeypot postfix/submission/smtpd[3512]: warning: unknown[102.68.78.243]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
🇨🇿 unhfree.net	2026-10-08 21:43:52 (1 day ago)	Oct 8 17:48:31 canopus postfix/smtpd[3856829]: NOQUEUE: reject: RCPT from unknown[102.68.78.243]: 5 ... show more Oct 8 17:48:31 canopus postfix/smtpd[3856829]: NOQUEUE: reject: RCPT from unknown[102.68.78.243]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[192.168.0.105]> Oct 8 18:22:48 canopus postfix/smtpd[3854082]: NOQUEUE: reject: RCPT from unknown[102.68.78.243]: 554 5.7.1 Service unavailable; Client host [102.68.78.243] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/102.68.78.243 / Listed by PBL, see https://check.spamhaus.org/query/ip/102.68.78.243 / Listed by XBL, see https://check.spamhaus.org/query/ip/102.68.78.243; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[192.168.0.105]> Oct 8 22:07:53 canopus postfix/smtpd[3873912]: NOQUEUE: reject: RCPT from unknown[102.68.78.243]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP he ... show less	Brute-Force Exploited Host
🇩🇰 powerhostingdk	2026-10-08 16:00:08 (1 day ago)	[mailserver] CrowdSec detected mailscanner/global-spam-aggregate (31 events). Automated abuse report ... show more [mailserver] CrowdSec detected mailscanner/global-spam-aggregate (31 events). Automated abuse report. show less	Brute-Force
Anonymous	2026-10-07 10:48:15 (2 days ago)	Detected by CrowdSec: crowdsecurity/http-crawl-non_statics	Web App Attack
🇮🇩 xveil	2026-10-06 19:28:07 (3 days ago)	2026-10-07T02:28:05.473607 mail-honeypot postfix/submission/smtpd[30507]: warning: unknown[102.68.78 ... show more 2026-10-07T02:28:05.473607 mail-honeypot postfix/submission/smtpd[30507]: warning: unknown[102.68.78.243]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
🇮🇩 xveil	2026-10-06 08:05:08 (3 days ago)	2026-10-06T15:05:06.165411 mail-honeypot postfix/submission/smtpd[29137]: warning: unknown[102.68.78 ... show more 2026-10-06T15:05:06.165411 mail-honeypot postfix/submission/smtpd[29137]: warning: unknown[102.68.78.243]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
🇩🇪 LRob	2026-10-02 12:54:11 (1 week ago)	Web page flood (L7) \| path: /contact, /en/legal-notices-and-general-terms-and-conditions-of-use, /en ... show more Web page flood (L7) \| path: /contact, /en/legal-notices-and-general-terms-and-conditions-of-use, /en/legal-notices-and-general-terms-and-conditions-of-use/ (+17 more) show less	DDoS Attack Web App Attack
🇫🇷 UM3	2026-10-01 14:08:25 (1 week ago)	Exim Auth Failed	Brute-Force
🇺🇸 TPI-Abuse	2026-09-30 05:55:44 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 102.68.78.243 (102.68.78.243.unwired.co.ke): 1 ... show more (mod_security) mod_security (id:210350) triggered by 102.68.78.243 (102.68.78.243.unwired.co.ke): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 01:55:38.089084 2026] [security2:error] [pid 2975:tid 2975] [client 102.68.78.243:40856] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|majersigns.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "majersigns.com"] [uri "/"] [unique_id "arykWm0oNwZKXaOS9y0NcQAAAAE"], referer: https://backlinkbuildingservices.shop/dir/seo-outreach-backlinks-128858 show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 unhfree.net	2026-09-27 19:55:15 (1 week ago)	Sep 27 15:46:39 canopus postfix/smtpd[2509398]: NOQUEUE: reject: RCPT from unknown[102.68.78.243]: 5 ... show more Sep 27 15:46:39 canopus postfix/smtpd[2509398]: NOQUEUE: reject: RCPT from unknown[102.68.78.243]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[192.168.0.101]> Sep 27 16:05:50 canopus postfix/smtpd[2508416]: NOQUEUE: reject: RCPT from unknown[102.68.78.243]: 554 5.7.1 Service unavailable; Client host [102.68.78.243] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/102.68.78.243 / Listed by PBL, see https://check.spamhaus.org/query/ip/102.68.78.243 / Listed by XBL, see https://check.spamhaus.org/query/ip/102.68.78.243; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[192.168.0.101]> Sep 27 20:07:40 canopus postfix/smtpd[2529348]: NOQUEUE: reject: RCPT from unknown[102.68.78.243]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP he ... show less	Brute-Force Exploited Host
Anonymous	2026-09-26 12:54:11 (1 week ago)	2026-09-26T15:54:08.650840+03:00 shell.l3.fi postfix/submission/smtpd[1909055]: lost connection afte ... show more 2026-09-26T15:54:08.650840+03:00 shell.l3.fi postfix/submission/smtpd[1909055]: lost connection after CONNECT from unknown[102.68.78.243] 2026-09-26T15:54:11.230257+03:00 shell.l3.fi postfix/submission/smtpd[1909058]: warning: unknown[102.68.78.243]: SASL PLAIN authentication failed: (reason unavailable), sasl_username=kivi11 ... show less	Email Spam Brute-Force
🇫🇮 notelseit	2026-09-25 23:48:57 (1 week ago)	2026-09-26T01:48:48.473470+02:00 mail postfix/submission/smtpd[3504229]: lost connection after CONNE ... show more 2026-09-26T01:48:48.473470+02:00 mail postfix/submission/smtpd[3504229]: lost connection after CONNECT from unknown[102.68.78.243] 2026-09-26T01:48:51.056157+02:00 mail postfix/submission/smtpd[3504233]: warning: unknown[102.68.78.243]: SASL PLAIN authentication failed: (reason unavailable), [email protected] 2026-09-26T01:48:57.261938+02:00 mail postfix/submission/smtpd[3504233]: warning: unknown[102.68.78.243]: SASL LOGIN authentication failed: (reason unavailable), [email protected] ... show less	Brute-Force Email Spam
🇦🇹 AustrianSimon	2026-09-24 10:15:02 (2 weeks ago)	24 Sep 2026 10:15:02UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) includin ... show more 24 Sep 2026 10:15:02UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 102.68.78.243 show less	Brute-Force
Anonymous	2026-09-24 04:31:05 (2 weeks ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
Anonymous	2026-09-23 04:30:29 (2 weeks ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force

Showing 1 to 15 of 73 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 165.154.29.144

🇭🇰 152.32.189.59

🇳🇱 45.148.10.141

🇰🇷 35.216.83.165

🇬🇧 200.138.46.72

🇳🇿 180.149.231.71

🇩🇪 162.19.251.210

🇺🇸 129.121.114.113

🇨🇳 124.174.7.42

🇮🇳 122.168.123.73

🇬🇧 64.205.72.69

🇳🇱 45.115.26.61

🇳🇵 27.34.64.194

🇵🇱 217.182.77.22

🇬🇧 195.96.139.153

🇳🇱 193.47.62.69

🇻🇳 180.93.35.148

🇺🇾 167.63.197.197

🇺🇸 147.185.132.81

🇳🇱 129.121.109.249