JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

197.254.52.78

Neutral Activity

Abuse Confidence Score

0% Low Risk

20 reports

14 reporters · latest 5 months ago

ISP: Aspire Mumias
Usage Type: Fixed Line ISP
ASN: AS15808
Hostname(s): 197.254.52.78.acesskenya.net
Domain Name: nttdata.com
Country: 🇰🇪 Kenya
City: Lolgorien, Narok County

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

197.254.52.78 has been reported 20 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

20 from 14 distinct reporters

First reported

December 21st 2025

Most recent report

5 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Viveronese	2026-06-01 13:48:57 UTC · (5 months ago)	SASL LOGIN authentication failed	Brute-Force
🇩🇪 vereinshosting	2026-05-31 16:49:49 UTC · (5 months ago)	SPAM email (score: 25.6)	Email Spam
🇨🇭 Origon	2026-05-31 07:26:46 UTC · (5 months ago)	NOQUEUE - IP: 197.254.52.78 - May 31 09:26:46 plesk postfix/smtpd[597155]: NOQUEUE: reject: RCPT from unknown[197.254.52.78]: 554 5.7.1 Service unavailable; Client host [197.254.52.78] blocked using dnsbl-1.uceprotect.net; IP 197.254.52.78 is UCEPRO ... show more NOQUEUE - IP: 197.254.52.78 - May 31 09:26:46 plesk postfix/smtpd[597155]: NOQUEUE: reject: RCPT from unknown[197.254.52.78]: 554 5.7.1 Service unavailable; Client host [197.254.52.78] blocked using dnsbl-1.uceprotect.net; IP 197.254.52.78 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=197.254.52.78; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<197.254.52.78.acesskenya.net> show less	Email Spam
🇩🇪 Viveronese	2026-05-31 06:50:54 UTC · (5 months ago)	SASL LOGIN authentication failed	Brute-Force
🇩🇪 Viveronese	2026-05-28 18:46:27 UTC · (5 months ago)	SASL LOGIN authentication failed	Brute-Force
🇯🇵 gobou-51	2026-05-27 02:51:37 UTC · (5 months ago)	Spoofing detected via DMARC report. Total attempts: 1.	Web Spam Email Spam Bad Web Bot
🇨🇭 Origon	2026-05-26 13:56:52 UTC · (5 months ago)	NOQUEUE - IP: 197.254.52.78 - May 26 15:56:50 plesk postfix/smtpd[3171510]: NOQUEUE: reject: RCPT from unknown[197.254.52.78]: 554 5.7.1 Service unavailable; Client host [197.254.52.78] blocked using dnsbl-1.uceprotect.net; IP 197.254.52.78 is UCEPR ... show more NOQUEUE - IP: 197.254.52.78 - May 26 15:56:50 plesk postfix/smtpd[3171510]: NOQUEUE: reject: RCPT from unknown[197.254.52.78]: 554 5.7.1 Service unavailable; Client host [197.254.52.78] blocked using dnsbl-1.uceprotect.net; IP 197.254.52.78 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=197.254.52.78; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<197.254.52.78.acesskenya.net> show less	Email Spam
🇬🇧 Joe-Mark	2026-05-05 21:12:59 UTC · (6 months ago)	Spam Timestamp : 05-May-26 21:30 BlockList Provider truncate.gbudb.net (225)	Email Spam
🇨🇭 Origon	2026-04-30 10:09:20 UTC · (6 months ago)	NOQUEUE - IP: 197.254.52.78 - Apr 30 12:09:19 plesk postfix/smtpd[240154]: NOQUEUE: reject: RCPT from unknown[197.254.52.78]: 554 5.7.1 Service unavailable; Client host [197.254.52.78] blocked using dnsbl-3.uceprotect.net; Your ISP ACCESSKENYA-KE AC ... show more NOQUEUE - IP: 197.254.52.78 - Apr 30 12:09:19 plesk postfix/smtpd[240154]: NOQUEUE: reject: RCPT from unknown[197.254.52.78]: 554 5.7.1 Service unavailable; Client host [197.254.52.78] blocked using dnsbl-3.uceprotect.net; Your ISP ACCESSKENYA-KE ACCESSKENYA GROUP LTD is an ISP serving, KE/AS15808 is UCEPROTECT-Level3 listed because of a spamscore of 196.5. See: http://www.uceprotect.net/rblcheck.php?ipr=197.254.52.78; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<197.254.52.78.acesskenya.net> show less	Email Spam
🇫🇷 Dampen59	2026-04-22 12:02:36 UTC · (6 months ago)	(smtpauth) Failed SMTP AUTH login from 197.254.52.78 (KE/Kenya/197.254.52.78.acesskenya.net): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-04-22 07:01:20 dovecot_login authenticator failed for H=(Y3xNJYI) [197 ... show more (smtpauth) Failed SMTP AUTH login from 197.254.52.78 (KE/Kenya/197.254.52.78.acesskenya.net): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-04-22 07:01:20 dovecot_login authenticator failed for H=(Y3xNJYI) [197.254.52.78]:34873: 535 Incorrect authentication data ([email protected]) 2026-04-22 07:01:35 dovecot_login authenticator failed for H=(daiAH4f) [197.254.52.78]:34899: 535 Incorrect authentication data ([email protected]) 2026-04-22 07:01:49 dovecot_login authenticator failed for H=(j9LpleJFD) [197.254.52.78]:34922: 535 Incorrect authentication data ([email protected]) 2026-04-22 07:02:10 dovecot_login authenticator failed for H=(jUmATQj4ly) [197.254.52.78]:34946: 535 Incorrect authentication data ([email protected]) 2026-04-22 07:02:31 dovecot_login authenticator failed for H=(wKE3McDR) [197.254.52.78]:34988: 535 Incorrect authentication data ([email protected]) show less	Port Scan
🇧🇬 geddo.in	2026-04-21 07:45:29 UTC · (6 months ago)	2026-04-21 01:44:54 login_server authenticator failed for (sz8bH3rVcC) [197.254.52.78]: 535 Incorrect authentication data ([email protected]) 2026-04-21 01:45:03 login_server authenticator failed for (SXLr8iCwjg) [197.254.52.78]: 535 Incor ... show more 2026-04-21 01:44:54 login_server authenticator failed for (sz8bH3rVcC) [197.254.52.78]: 535 Incorrect authentication data ([email protected]) 2026-04-21 01:45:03 login_server authenticator failed for (SXLr8iCwjg) [197.254.52.78]: 535 Incorrect authentication data ([email protected]) 2026-04-21 01:45:13 login_server authenticator failed for (oCi4RLC) [197.254.52.78]: 535 Incorrect authentication data ([email protected]) 2026-04-21 01:45:21 login_server authenticator failed for (caV02imJ) [197.254.52.78]: 535 Incorrect authentication data ([email protected]) 2026-04-21 01:45:27 login_server authenticator failed for (ySmYjSjGPc) [197.254.52.78]: 535 Incorrect authentication data ([email protected]) ... show less	Brute-Force
🇸🇰 KZP	2026-03-24 19:00:40 UTC · (7 months ago)	Automatic report from KZP firewall log.	Port Scan Hacking Brute-Force
🇪🇸 www.pk25.com	2026-03-08 20:59:00 UTC · (8 months ago)	2026-03-08 21:58:59 H=(197.254.52.78.acesskenya.net) [197.254.52.78] sender verify fail for <[email protected]>: Unrouteable address 2026-03-08 21:58:59 H=(197.254.52.78.acesskenya.net) [197.254.52.78] F=<[email protected]> rejected ... show more 2026-03-08 21:58:59 H=(197.254.52.78.acesskenya.net) [197.254.52.78] sender verify fail for <[email protected]>: Unrouteable address 2026-03-08 21:58:59 H=(197.254.52.78.acesskenya.net) [197.254.52.78] F=<[email protected]> rejected RCPT <[email protected]>: Sender verify failed ... show less	Brute-Force
🇪🇸 www.pk25.com	2026-03-06 19:18:02 UTC · (8 months ago)	2026-03-06 20:00:15 H=(197.254.52.78.acesskenya.net) [197.254.52.78] sender verify fail for <[email protected]>: Unrouteable address 2026-03-06 20:00:15 H=(197.254.52.78.acesskenya.net) [197.254.52.78] F=<bfb11608192ce0ed2@adycoaduan ... show more 2026-03-06 20:00:15 H=(197.254.52.78.acesskenya.net) [197.254.52.78] sender verify fail for <[email protected]>: Unrouteable address 2026-03-06 20:00:15 H=(197.254.52.78.acesskenya.net) [197.254.52.78] F=<[email protected]> rejected RCPT <[email protected]>: Sender verify failed 2026-03-06 20:18:02 H=(197.254.52.78.acesskenya.net) [197.254.52.78] sender verify fail for <[email protected]>: Unrouteable address ... show less	Brute-Force
🇬🇧 jwp	2026-03-05 11:52:00 UTC · (8 months ago)	Dovecot Fake Login	Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 216.73.161.120

🇩🇪 194.88.98.83

🇧🇷 190.115.84.25

🇫🇮 104.245.241.11

🇬🇧 35.203.210.18

🇺🇸 178.171.84.95

🇻🇳 171.250.162.220

🇺🇸 158.46.201.77

🇺🇸 147.185.132.28

🇮🇳 125.20.60.69

🇰🇷 123.212.9.122

🇨🇳 111.113.89.174

🇫🇮 104.28.165.121

🇧🇪 34.140.65.171

🇵🇱 162.158.172.62

🇭🇰 154.92.2.59

🇷🇺 109.94.187.153

🇬🇧 92.27.101.99

🇺🇸 66.132.195.212

🇩🇪 51.116.186.197