JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.0.25.70

102.0.25.70 was found in our database!

This IP was reported 105 times. Confidence of Abuse is 100%: ?

100%

ISP	Allocated to Airtel Kenya Mobile Broadband and Fixed internet
Usage Type	Fixed Line ISP
ASN	AS36926
Hostname(s)	70-25-0-102.r.airtelkenya.com
Domain Name	airtel.in
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.0.25.70

Whois 102.0.25.70

IP Abuse Reports for 102.0.25.70:

This IP address has been reported a total of 105 times from 69 distinct sources. 102.0.25.70 was first reported on October 3rd 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 EGP Abuse Dept	2026-06-04 10:14:09 (1 day ago)	Scraping webshop URLs (creall.com), likely botnet drone	Bad Web Bot Exploited Host
🇧🇷 LM Security	2026-06-01 09:15:03 (4 days ago)	2026-06-01 06:14:54 dovecot_login authenticator failed for H=(zWEMA2vZ5) [102.0.25.70]:12449: 535 In ... show more 2026-06-01 06:14:54 dovecot_login authenticator failed for H=(zWEMA2vZ5) [102.0.25.70]:12449: 535 Incorrect authentication data (set_id=contato) 2026-06-01 06:14:32 dovecot_login authenticator failed for H=(ns0CL5q) [102.0.25.70]:10279: 535 Incorrect authentication data (set_id=contato) show less	Brute-Force
🇩🇪 Vegascosmetics	2026-05-31 17:32:12 (5 days ago)	Kingcopy(AI-IDS) Report: IP 102.0.25.70 wurde nach 3 Angriffsversuchen automatisch geblockt. Pattern ... show more Kingcopy(AI-IDS) Report: IP 102.0.25.70 wurde nach 3 Angriffsversuchen automatisch geblockt. Pattern: High Priority: ChangeCountry - Vegas Cosmetics Security System show less	DDoS Attack Hacking Bad Web Bot
Anonymous	2026-05-31 16:30:49 (5 days ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇧🇷 SvrAdmin	2026-05-31 01:00:24 (6 days ago)	[315] (smtpauth) Failed SMTP AUTH login from 102.0.25.70 (KE/Kenya/70-25-0-102.r.airtelkenya.com): 5 ... show more [315] (smtpauth) Failed SMTP AUTH login from 102.0.25.70 (KE/Kenya/70-25-0-102.r.airtelkenya.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: May 30 21:59:38 cwp01 postfix/smtpd[1145]: warning: unknown[102.0.25.70]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 30 21:59:48 cwp01 postfix/smtpd[1145]: warning: unknown[102.0.25.70]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 30 22:00:02 cwp01 postfix/smtpd[1145]: warning: unknown[102.0.25.70]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 30 22:00:15 cwp01 postfix/smtpd[1145]: warning: unknown[102.0.25.70]: SASL LOGIN authentication failed: Connection lost to authentication server May 30 22:00:22 cwp01 postfix/smtpd[1145]: warning: unknown[102.0.25.70]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Port Scan Hacking Brute-Force Exploited Host
🇹🇭 thaizone.com	2026-05-30 02:02:39 (1 week ago)	Mail credential brute-force attack (SM5) #1	Email Spam Brute-Force
Anonymous	2026-05-30 01:29:01 (1 week ago)	...	Brute-Force
Anonymous	2026-05-30 00:34:06 (1 week ago)	Authentication failure	Brute-Force
🇩🇪 XICTRON	2026-05-29 21:35:01 (1 week ago)	SMTP brute-force attempt detected by Fail2Ban in Postfix jail	Brute-Force
🇫🇷 [email protected]	2026-05-29 20:54:30 (1 week ago)	May 29 22:53:39 mail6 postfix/submission/smtpd[3552612]: warning: unknown[102.0.25.70]: SASL LOGIN a ... show more May 29 22:53:39 mail6 postfix/submission/smtpd[3552612]: warning: unknown[102.0.25.70]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=laboreo May 29 22:53:49 mail6 postfix/submission/smtpd[3552381]: warning: unknown[102.0.25.70]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=laboreo May 29 22:54:01 mail6 postfix/submission/smtpd[3552612]: warning: unknown[102.0.25.70]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=laboreo May 29 22:54:21 mail6 postfix/submission/smtpd[3552612]: warning: unknown[102.0.25.70]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=laboreo May 29 22:54:30 mail6 postfix/submission/smtpd[3552381]: warning: unknown[102.0.25.70]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=laboreo ... show less	Brute-Force
🇩🇪 yogi70	2026-05-29 02:25:33 (1 week ago)	Multiple failed SMTP logins	Email Spam Brute-Force
Anonymous	2026-05-28 16:31:12 (1 week ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇺🇸 hostmach	2026-05-28 09:43:25 (1 week ago)	(smtpauth) Failed SMTP AUTH login from 102.0.25.70 (KE/Kenya/70-25-0-102.r.airtelkenya.com): 5 in th ... show more (smtpauth) Failed SMTP AUTH login from 102.0.25.70 (KE/Kenya/70-25-0-102.r.airtelkenya.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-05-28 05:42:20 dovecot_login authenticator failed for H=(TTSYnt) [102.0.25.70]:64114: 535 Incorrect authentication data (set_id=registro) 2026-05-28 05:42:29 dovecot_login authenticator failed for H=(a7iYZJTXHA) [102.0.25.70]:36379: 535 Incorrect authentication data (set_id=registro) 2026-05-28 05:42:42 dovecot_login authenticator failed for H=(GQBhsIJ) [102.0.25.70]:52782: 535 Incorrect authentication data (set_id=registro) 2026-05-28 05:43:02 dovecot_login authenticator failed for H=(1N8soeyy) [102.0.25.70]:38787: 535 Incorrect authentication data (set_id=registro) 2026-05-28 05:43:22 dovecot_login authenticator failed for H=(nsMurm3) [102.0.25.70]:50665: 535 Incorrect authentication data (set_id=registro) show less	Brute-Force SSH
🇭🇺 DumaNet	2026-05-27 08:32:00 (1 week ago)	Multiple SASL authentication failures. Date: 2026 May 27. 05:09:52 -- Source IP: 102.0.25.70 Por ... show more Multiple SASL authentication failures. Date: 2026 May 27. 05:09:52 -- Source IP: 102.0.25.70 Portion of the log(s): May 27 05:09:50 michael postfix/smtpd[3824910]: warning: unknown[102.0.25.70]: SASL LOGIN authentication failed: Connection lost to authentication server, sasl_username=(unavailable) May 27 05:09:50 michael postfix/smtpd[3824910]: warning: unknown[102.0.25.70]: SASL LOGIN authentication failed: Connection lost to authentication server, sasl_username=(unavailable) May 27 05:09:39 michael postfix/smtpd[3824910]: warning: unknown[102.0.25.70]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=[removed] May 27 05:09:39 michael postfix/smtpd[3824910]: warning: unknown[102.0.25.70]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=[removed] May 27 05:09:27 michael postfix/smtpd[3824910]: warning: unknown[102.0.25.70]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=[removed] May 27 05:09:27 michael postfix/smtpd[3824910]: warning show less	Brute-Force
🇫🇮 notelseit	2026-05-27 07:41:44 (1 week ago)	2026-05-27T09:41:36.017614+02:00 mail postfix/submission/smtpd[2833404]: warning: unknown[102.0.25.7 ... show more 2026-05-27T09:41:36.017614+02:00 mail postfix/submission/smtpd[2833404]: warning: unknown[102.0.25.70]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=info 2026-05-27T09:41:36.227300+02:00 mail postfix/submission/smtpd[2833404]: disconnect from unknown[102.0.25.70] ehlo=2 starttls=1 auth=0/1 commands=3/4 2026-05-27T09:41:44.069679+02:00 mail postfix/submission/smtpd[2833404]: warning: unknown[102.0.25.70]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=info ... show less	Brute-Force Email Spam

Showing 1 to 15 of 105 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 175.201.203.220

🇺🇸 2607:f8b0:4001:c19::123

🇺🇸 2602:80d:1008::7a

🇳🇱 165.22.200.233

🇺🇸 162.243.167.73

🇨🇳 115.190.197.74

🇨🇳 115.190.69.18

🇻🇳 115.77.111.2

🇨🇳 112.31.93.229

🇧🇪 104.155.115.14

🇺🇸 96.56.228.149

🇮🇹 93.92.79.167

🇳🇱 51.158.160.54

🇮🇳 49.15.125.22

🇳🇱 45.148.10.141

🇧🇷 170.231.252.149

🇰🇷 152.69.232.121

🇧🇷 129.121.33.174

🇨🇳 115.191.73.24

🇰🇷 106.243.155.71