JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.159.248.216

154.159.248.216 was found in our database!

This IP was reported 116 times. Confidence of Abuse is 48%: ?

48%

ISP	Airtel Networks Kenya Limited
Usage Type	Fixed Line ISP
ASN	AS36926
Hostname(s)	216-248-159-154.r.airtelkenya.com
Domain Name	airtel.in
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.159.248.216

Whois 154.159.248.216

IP Abuse Reports for 154.159.248.216:

This IP address has been reported a total of 116 times from 55 distinct sources. 154.159.248.216 was first reported on May 31st 2022, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Origon	2026-06-19 08:18:04 (19 hours ago)	NOQUEUE - IP: 154.159.248.216 - Jun 19 10:18:04 plesk postfix/smtpd[565393]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 154.159.248.216 - Jun 19 10:18:04 plesk postfix/smtpd[565393]: NOQUEUE: reject: RCPT from unknown[154.159.248.216]: 554 5.7.1 Service unavailable; Client host [154.159.248.216] blocked using dnsbl-1.uceprotect.net; IP 154.159.248.216 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=154.159.248.216; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<154.159.248.216> show less	Email Spam
🇷🇸 Smel	2026-06-14 06:04:43 (5 days ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇪🇸 librebit	2026-06-12 06:33:04 (1 week ago)	Listed IP in blacklist by postfix/dnsblog	Spoofing
🇫🇮 notelseit	2026-06-09 17:56:15 (1 week ago)	2026-06-09T19:56:05.495638+02:00 mail postfix/submission/smtpd[964803]: warning: unknown[154.159.248 ... show more 2026-06-09T19:56:05.495638+02:00 mail postfix/submission/smtpd[964803]: warning: unknown[154.159.248.216]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-06-09T19:56:05.880055+02:00 mail postfix/submission/smtpd[964803]: disconnect from unknown[154.159.248.216] ehlo=2 starttls=1 auth=0/1 commands=3/4 2026-06-09T19:56:15.137382+02:00 mail postfix/submission/smtpd[964803]: warning: unknown[154.159.248.216]: SASL LOGIN authentication failed: (reason unavailable), [email protected] ... show less	Brute-Force Email Spam
🇬🇧 PeravixGroup	2026-06-08 01:54:35 (1 week ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇨🇿 interconnect.cz	2026-06-07 18:56:32 (1 week ago)	[07/Jun/2026 20:56:32] IP address 154.159.248.216 found in DNS blacklist SpamHaus SBL-XBL, mail from ... show more [07/Jun/2026 20:56:32] IP address 154.159.248.216 found in DNS blacklist SpamHaus SBL-XBL, mail from <[email protected]> to <[email protected]> [07/Jun/2026 20:56:32] IP address 154.159.248.216 found in DNS blacklist SpamHaus SBL-XBL, mail from <[email protected]> to <[email protected]> [07/Jun/2026 20:56:32] Attempt to deliver to unknown recipient <[email protected]>, from <[email protected]>, IP address 154.159.248.216 ... show less	Brute-Force Email Spam
🇬🇧 PeravixGroup	2026-06-06 15:51:14 (1 week ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇨🇭 Origon	2026-05-30 18:50:05 (2 weeks ago)	NOQUEUE - IP: 154.159.248.216 - May 30 20:50:05 plesk postfix/smtpd[3082954]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 154.159.248.216 - May 30 20:50:05 plesk postfix/smtpd[3082954]: NOQUEUE: reject: RCPT from unknown[154.159.248.216]: 554 5.7.1 Service unavailable; Client host [154.159.248.216] blocked using dnsbl-1.uceprotect.net; IP 154.159.248.216 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=154.159.248.216; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<216-248-159-154.r.airtelkenya.com> show less	Email Spam
🇩🇪 filstal.org	2026-05-29 20:11:09 (3 weeks ago)	CrowdSec: crowdsecurity/postfix-helo-rejected	Email Spam
🇩🇪 Viveronese	2026-05-28 17:27:34 (3 weeks ago)	SASL LOGIN authentication failed	Brute-Force
🇨🇭 Origon	2026-05-27 18:11:26 (3 weeks ago)	NOQUEUE - IP: 154.159.248.216 - May 27 20:11:26 plesk postfix/smtpd[1443956]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 154.159.248.216 - May 27 20:11:26 plesk postfix/smtpd[1443956]: NOQUEUE: reject: RCPT from unknown[154.159.248.216]: 554 5.7.1 Service unavailable; Client host [154.159.248.216] blocked using dnsbl-1.uceprotect.net; IP 154.159.248.216 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=154.159.248.216; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<216-248-159-154.r.airtelkenya.com> show less	Email Spam
🇩🇪 filstal.org	2026-05-27 14:29:54 (3 weeks ago)	CrowdSec-Report: crowdsecurity/postfix-helo-rejected	Email Spam Brute-Force
Anonymous	2026-05-26 11:58:38 (3 weeks ago)	SpamAssassin score 20.0 exceeded block threshold 15.0	Email Spam
🇨🇭 Origon	2026-04-29 14:37:20 (1 month ago)	NOQUEUE - IP: 154.159.248.216 - Apr 29 16:37:20 plesk postfix/smtpd[2839867]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 154.159.248.216 - Apr 29 16:37:20 plesk postfix/smtpd[2839867]: NOQUEUE: reject: RCPT from unknown[154.159.248.216]: 554 5.7.1 Service unavailable; Client host [154.159.248.216] blocked using psbl.surriel.com; Listed in PSBL, see http://psbl.org/listing?ip=154.159.248.216; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<216-248-159-154.r.airtelkenya.com> show less	Email Spam
🇪🇸 librebit	2026-04-25 22:26:13 (1 month ago)	Listed IP in blacklist by postfix/dnsblog	Spoofing

Showing 1 to 15 of 116 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 188.240.59.5

🇺🇿 170.168.6.27

🇺🇸 147.185.132.117

🇺🇸 147.185.132.116

🇺🇸 2a03:2880:7ff:7::

🇩🇪 216.26.247.110

🇿🇦 197.95.26.60

🇨🇳 171.217.92.33

🇬🇧 158.220.90.106

🇧🇷 144.22.210.132

🇺🇸 129.121.85.48

🇨🇳 106.37.72.234

🇺🇸 64.62.197.119

🇳🇱 45.148.10.147

🇸🇬 43.156.83.102

🇨🇭 35.216.254.237

🇺🇸 3.83.245.221

🇺🇸 2a03:2880:7ff:72::

🇨🇳 223.107.146.186

🇳🇱 204.76.203.18