197.254.104.62

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
3% Caution
103 reports
57 reporters · latest 1 week ago
ISP
ICG MALTAURO
Usage Type
Fixed Line ISP
ASN
AS15808
Hostname(s)
mail.bowip.co.ke
Domain Name
nttdata.com
Country
🇰🇪 Kenya
City
Nairobi, Nairobi County
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
103 from 57 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇷🇺 Russian Federation 1
Most common categories Hacking 1 Bad Web Bot 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Hacking Bad Web Bot
🇵🇹 rnl
postfix (unknown user, SPF fail or relay access denied)
Brute-Force
🇳🇱 soverin
spam
Email Spam
🇫🇮 23p02732
Mailserver and mailaccount attacks
Brute-Force Bad Web Bot Exploited Host Web App Attack
🇩🇪 Viveronese
SASL LOGIN authentication failed
Brute-Force
🇩🇪 kkeyser
warning: unknown[197.254.104.62]: SASL LOGIN authentication failed: authentication failure
Brute-Force
🇵🇱 Kolobrzeg
MikroTik RouterOS brute-force: 3 failed login attempts (service). Last seen 2026-08-05 17:13 UTC, first seen 2026-06-25 UTC. Automated detection. AS15808 IDDQD-AS.
Brute-Force Port Scan
🇬🇧 Joe-Mark
Rejected on IP Reputation - Mcafee Exchange Plug-in (126)
Email Spam
🇷🇸 Smel
Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -
Email Spam Hacking Brute-Force
🇪🇸 librebit
Postfix: IP Address black-listed by anti-spam (blocked)
Email Spam
Anonymous
Phishing attempt
Email Spam Phishing
🇸🇰 EVISION
Automatic report from EV firewall log. https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Reporting ID: AManXt5oZtcMmPVMmM0IPtjFJS46cJUV
Port Scan Hacking Brute-Force
🇵🇹 rnl
postfix
Brute-Force Email Spam
🇵🇹 rnl
postfix (unknown user, SPF fail or relay access denied)
Brute-Force
🇩🇪 filstal.org
CrowdSec: crowdsecurity/postfix-helo-rejected
Email Spam

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇩 202.158.36.50
🇺🇸 173.239.240.243
🇧🇩 103.41.245.90
🇲🇷 102.216.219.24
🇺🇸 68.35.231.156
🇧🇪 34.76.90.66
🇰🇷 14.32.244.233
🇬🇧 5.252.83.90
🇬🇧 2.57.17.236
🇺🇸 205.210.31.59
🇳🇱 200.138.46.115
🇰🇷 121.128.162.194
🇨🇦 85.217.149.14
🇫🇷 82.102.18.220
🇺🇸 52.167.144.142
🇩🇪 23.132.164.185
🇺🇸 23.92.27.206
🇳🇱 213.209.159.228
🇻🇪 190.97.249.113
🇨🇳 157.18.71.21
feedback