102.0.28.126

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
32% Elevated
19 reports
14 reporters · latest 1 month ago
ISP
Allocated to Airtel Kenya Mobile Broadband and Fixed internet
Usage Type
Fixed Line ISP
ASN
AS36926
Domain Name
airtel.in
Country
🇰🇪 Kenya
City
Nairobi, Nairobi County
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
19 from 14 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 4 🇳🇱 Netherlands 2 🇨🇿 Czechia 1
Most common categories Brute-Force 7 Bad Web Bot 4 Spoofing 1 Web App Attack 1 Hacking 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
Bad Web Bot
🇳🇱 Mangelot Hosting
(exim_invalid_user) srv102 Exim auth on non-existent account 102.0.28.126 (KE/Kenya/126-28-0-102.r.airtelkenya.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇬🇧 killian7603
Logon Policy Violation
Email Spam Spoofing Brute-Force
🇩🇪 LRob
Not following 301 redirects — wasted requests | method: GET | path: / | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36
Bad Web Bot
Anonymous
Failed login attempt detected by Fail2Ban in plesk-postfix jail
Brute-Force
🇨🇿 lp
Email account brute force: 1 attempts were recorded from 102.0.28.126 2026-10-08T22:01:02+02:00 warning: unknown[102.0.28.126]: SASL PLAIN authentication failed: authentication failure, [email protected]
Brute-Force
Anonymous
2026-10-08T21:58:31.932730+02:00 soli-gate postfix/submission/smtpd[3182097]: warning: unknown[102.0.28.126]: SASL PLAIN authentication failed: authentication failure, [email protected] ...
Brute-Force
🇭🇺 Lacika555
RdpGuard detected brute-force attempt on SMTP
Brute-Force
🇳🇱 maxxsense
(postfix-unknown) Failed postfix unknown login with username [redacted] from 102.0.28.126 (KE/Kenya/126-28-0-102.r.airtelkenya.com)
Hacking
Anonymous
SMTP brute force - auth failed
Brute-Force Exploited Host
🇮🇹 VHosting
Detected mail brute force attack from different servers
Brute-Force
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36
Bad Web Bot
🇮🇹 A000Z
Fail2Ban: 102.0.28.126 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36
Bad Web Bot
🇮🇹 A000Z
Fail2Ban: 102.0.28.126 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36
Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 218.23.95.14
🇲🇽 149.19.169.149
🇳🇱 109.160.32.149
🇺🇸 104.154.116.23
🇧🇷 54.207.105.3
🇬🇧 35.203.210.237
🇧🇪 207.175.85.46
🇧🇷 201.32.76.218
🇳🇱 193.47.62.111
🇧🇷 186.238.178.6
🇬🇧 185.230.216.5
🇨🇳 171.37.165.98
🇺🇸 162.216.149.84
🇳🇬 152.32.140.22
🇵🇰 119.73.1.80
🇳🇱 109.160.32.145
🇬🇧 87.236.176.71
🇳🇱 45.227.255.157
🇺🇸 31.134.4.222
🇷🇴 2.57.121.25
feedback