JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

197.254.108.114

Recent Activity

Abuse Confidence Score

37% Elevated

67 reports

30 reporters · latest 12 hours ago

ISP: SRUNO ICT SOLUTIONS
Usage Type: Fixed Line ISP
ASN: AS15808
Hostname(s): 197.254.108.114.acesskenya.net
Domain Name: nttdata.com
Country: 🇰🇪 Kenya
City: Nairobi, Nairobi County

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

67 from 30 distinct reporters

First reported

December 21st 2025

Most recent report

12 hours ago

Last 60 days

Top reporter locations 🇳🇱 Netherlands 4 🇵🇱 Poland 3 🇨🇭 Switzerland 2

Most common categories Email Spam 7 Brute-Force 5 Spoofing 1 Bad Web Bot 1 Web App Attack 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Kolobrzeg	2026-11-07 02:05:38 UTC · (12 hours ago)	Failed login attempts against MikroTik RouterOS router, blocked after repeated failures. Offense count: 3. Last seen 2026-11-07 02:05 UTC, first seen 2026-06-12 UTC. Automated detection. Follow-up: attacks continued after our previous reports (2 earl ... show more Failed login attempts against MikroTik RouterOS router, blocked after repeated failures. Offense count: 3. Last seen 2026-11-07 02:05 UTC, first seen 2026-06-12 UTC. Automated detection. Follow-up: attacks continued after our previous reports (2 earlier, latest 2026-11-06 01:11 UTC). AS15808 IDDQD-AS. show less	Brute-Force
🇳🇱 soverin	2026-11-06 01:57:07 UTC · (1 day ago)	spam	Email Spam
🇵🇱 Kolobrzeg	2026-11-06 01:09:24 UTC · (1 day ago)	Failed login attempts against MikroTik RouterOS router, blocked after repeated failures. Offense count: 2. Last seen 2026-11-06 01:09 UTC, first seen 2026-06-12 UTC. Automated detection. Follow-up: attacks continued after our previous report (1 earli ... show more Failed login attempts against MikroTik RouterOS router, blocked after repeated failures. Offense count: 2. Last seen 2026-11-06 01:09 UTC, first seen 2026-06-12 UTC. Automated detection. Follow-up: attacks continued after our previous report (1 earlier, latest 2026-10-30 04:44 UTC). AS15808 IDDQD-AS. show less	Brute-Force
🇨🇭 Origon	2026-11-05 01:48:55 UTC · (2 days ago)	NOQUEUE - IP: 197.254.108.114 - Nov 5 02:48:55 plesk postfix/smtpd[3039326]: NOQUEUE: reject: RCPT from unknown[197.254.108.114]: 554 5.7.1 Service unavailable; Client host [197.254.108.114] blocked using all.s5h.net; See https://[site]/rbl; from=<R ... show more NOQUEUE - IP: 197.254.108.114 - Nov 5 02:48:55 plesk postfix/smtpd[3039326]: NOQUEUE: reject: RCPT from unknown[197.254.108.114]: 554 5.7.1 Service unavailable; Client host [197.254.108.114] blocked using all.s5h.net; See https://[site]/rbl; from=<REDACTED@REDACTED> to=<[customer]> proto=ESMTP helo=<197.254.108.114.acesskenya.net> show less	Email Spam
🇳🇱 soverin	2026-11-04 23:07:11 UTC · (2 days ago)	spam	Email Spam
🇵🇱 Kolobrzeg	2026-10-30 04:40:41 UTC · (1 week ago)	MikroTik RouterOS: single unauthorized login attempt (user 'test') at 2026-10-30 04:40 UTC. Part of a distributed credential-stuffing campaign: 42 distinct source IPs attempted the same username against our infrastructure within the same hour. Automa ... show more MikroTik RouterOS: single unauthorized login attempt (user 'test') at 2026-10-30 04:40 UTC. Part of a distributed credential-stuffing campaign: 42 distinct source IPs attempted the same username against our infrastructure within the same hour. Automated detection. AS15808 IDDQD-AS. show less	Brute-Force
🇩🇪 NewGastroline	2026-10-16 22:31:23 UTC · (3 weeks ago)	Malicious request blocked by CrowdSec on gastro-prod1.boreus.de	Bad Web Bot Web App Attack
🇨🇭 Origon	2026-10-16 11:53:09 UTC · (3 weeks ago)	NOQUEUE - IP: 197.254.108.114 - Oct 16 13:53:08 plesk postfix/smtpd[3350621]: NOQUEUE: reject: RCPT from unknown[197.254.108.114]: 554 5.7.1 Service unavailable; Client host [197.254.108.114] blocked using dnsbl-1.uceprotect.net; IP 197.254.108.114 ... show more NOQUEUE - IP: 197.254.108.114 - Oct 16 13:53:08 plesk postfix/smtpd[3350621]: NOQUEUE: reject: RCPT from unknown[197.254.108.114]: 554 5.7.1 Service unavailable; Client host [197.254.108.114] blocked using dnsbl-1.uceprotect.net; IP 197.254.108.114 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=197.254.108.114; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<197.254.108.114.acesskenya.net> show less	Email Spam
🇩🇪 Viveronese	2026-10-16 04:16:18 UTC · (3 weeks ago)	Postscreen SASL LOGIN authentication failed	Brute-Force
🇵🇹 rnl	2026-10-09 19:59:18 UTC · (4 weeks ago)	postfix (unknown user, SPF fail or relay access denied)	Brute-Force
🇦🇹 AustrianSimon	2026-09-24 18:04:22 UTC · (1 month ago)	24 Sep 2026 18:04:21UTC:spam e-mail originating from IP address 197.254.108.114 abusing our domain by pretending to originate from our domain (sender posing as/spoofing our domains)	Email Spam Spoofing
🇳🇱 soverin	2026-09-24 15:54:03 UTC · (1 month ago)	spam	Email Spam
🇪🇸 librebit	2026-09-23 15:43:54 UTC · (1 month ago)	Postfix: IP Address black-listed by anti-spam (blocked)	Email Spam
🇳🇱 soverin	2026-09-08 18:55:04 UTC · (1 month ago)	spam	Email Spam
Anonymous	2026-09-07 21:01:04 UTC · (1 month ago)	SPAM EMAIL 197.254.108.114 (RBL_TRIGGER)	Email Spam

Showing 1 to 15 of 67 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 195.140.214.24

🇺🇸 150.107.36.236

🇻🇳 116.97.185.11

🇳🇱 45.148.10.141

🇧🇪 34.62.11.175

🇬🇧 2a01:4020:1:1:103::403

🇺🇸 199.165.159.196

🇲🇽 187.190.185.3

🇧🇷 168.228.170.221

🇺🇸 137.184.138.38

🇺🇸 136.118.191.42

🇺🇸 134.122.125.153

🇨🇳 118.145.114.113

🇨🇳 113.231.9.224

🇩🇪 69.5.169.19

🇮🇳 52.172.92.182

🇹🇭 43.152.248.170

🇬🇧 2a01:4020:1:1:103::3bc

🇨🇱 200.28.86.19

🇳🇱 195.178.110.26