JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.0.30.170

102.0.30.170 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 56%: ?

56%

ISP	Allocated to Airtel Kenya Mobile Broadband and Fixed internet
Usage Type	Fixed Line ISP
ASN	AS36926
Hostname(s)	170-30-0-102.r.airtelkenya.com
Domain Name	airtel.in
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.0.30.170

Whois 102.0.30.170

IP Abuse Reports for 102.0.30.170:

This IP address has been reported a total of 36 times from 29 distinct sources. 102.0.30.170 was first reported on March 6th 2026, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 bmino.pl	2026-08-22 13:04:33 (13 hours ago)	Autoban IP(2): 102.0.30.170 - Hostname: Airtel KE Mobile \u0026 Fixed Internet - City: Nairobi - Reg ... show more Autoban IP(2): 102.0.30.170 - Hostname: Airtel KE Mobile \u0026 Fixed Internet - City: Nairobi - Region: Nairobi County - Country: Kenya - Location: - Organization: AS36926 Airtel Networks Kenya Limited - failed attempts. show less	Web App Attack
🇦🇺 MAGIC	2026-08-22 03:01:13 (23 hours ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-08-20 16:12:44 (2 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-18 06:53:07 (4 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇱🇺 tdefise	2026-08-16 15:22:00 (6 days ago)	This IP is a top DDoS source, generating unwanted HTTPS requests on port 443 (8.54 requests/min over ... show more This IP is a top DDoS source, generating unwanted HTTPS requests on port 443 (8.54 requests/min over a 829-minute timeframe) show less	DDoS Attack
🇩🇪 Vegascosmetics	2026-08-13 21:25:24 (1 week ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nest ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nesting / CPU-drain risk). Evidence: DEEP ATTACK: Recursive currentUrl nesting detected show less	Hacking Exploited Host Web App Attack
🇩🇪 pltcldvlpr	2026-08-13 13:48:46 (1 week ago)	Bogus Useragent: 102.0.30.170 - - [13/Aug/2026:15:48:45 +0200] "GET /protocol?id=th_7_137&offset=105 ... show more Bogus Useragent: 102.0.30.170 - - [13/Aug/2026:15:48:45 +0200] "GET /protocol?id=th_7_137&offset=1050&seq=1079 HTTP/1.1" 444 0 "-" "Opera/8.30.(X11; Linux x86_64; szl-PL) Presto/2.9.178 Version/11.00" asn=36926 org="Airtel Networks Kenya Limited" country=KE ... show less	Bad Web Bot
🇮🇹 A000Z	2026-08-01 08:05:24 (3 weeks ago)	Fail2Ban: 102.0.30.170 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 ... show more Fail2Ban: 102.0.30.170 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-07-31 07:08:09 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-30 11:32:46 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 102.0.30.170 (170-30-0-102.r.airtelkenya.com): ... show more (mod_security) mod_security (id:210730) triggered by 102.0.30.170 (170-30-0-102.r.airtelkenya.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 07:32:39.487564 2026] [security2:error] [pid 1690871:tid 1690871] [client 102.0.30.170:41758] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|pswebsite.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pswebsite.com"] [uri "/answer.com"] [unique_id "ams2V7TQJNu_1_ig9VdXoQAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 05:48:22 (4 weeks ago)	(mod_security) mod_security (id:210740) triggered by 102.0.30.170 (170-30-0-102.r.airtelkenya.com): ... show more (mod_security) mod_security (id:210740) triggered by 102.0.30.170 (170-30-0-102.r.airtelkenya.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 01:48:13.653108 2026] [security2:error] [pid 2242017:tid 2242017] [client 102.0.30.170:55908] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|acme-aviation.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "acme-aviation.com"] [uri "/contact-us"] [unique_id "amGrHbkxBfJb8FB7rKvi2gAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-13 04:45:17 (1 month ago)	Large-scale coordinated botnet (530+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ... show more Large-scale coordinated botnet (530+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Attack Signature Blocked: /wishlist/index/add/product/11178/form_key/zMxiGoD6FssLrCvh/ \| UA: Mozilla/5.0 (iPod; U; CPU iPhone OS 4_2 like Mac OS X; lo-LA) AppleWebKit/534.39.2 (KHTML, like Gecko) Version/3.0.5 Mobile/8B118 Safari/6534.39.2 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 05:56:21 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 102.0.30.170 (170-30-0-102.r.airtelkenya.com): ... show more (mod_security) mod_security (id:210730) triggered by 102.0.30.170 (170-30-0-102.r.airtelkenya.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 01:56:18.123004 2026] [security2:error] [pid 15518:tid 15518] [client 102.0.30.170:33484] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.bahamascruisersguide.com\|F\|2"] [data ". capesantamaria.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.bahamascruisersguide.com"] [uri "/Cruising-Info/Cruising Info/www. capesantamaria.com"] [unique_id "akdPAkqeJw_uz4FmGe6oJwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 polycoda	2026-06-29 12:18:48 (1 month ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
🇺🇸 kosada.com	2026-06-29 09:59:44 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 8.213.135.73

🇫🇮 2a01:4f9:2a:45e::2

🇭🇰 220.246.42.227

🇨🇦 216.232.226.40

🇧🇪 207.175.205.217

🇫🇮 147.185.133.177

🇺🇸 146.190.164.28

🇺🇸 109.105.210.90

🇺🇸 84.37.242.146

🇮🇶 65.20.165.78

🇮🇳 59.99.142.109

🇨🇳 58.50.45.178

🇷🇺 46.39.249.132

🇬🇧 35.203.210.140

🇺🇸 205.210.31.13

🇺🇸 162.216.149.199

🇻🇳 157.10.45.192

🇨🇦 135.23.190.48

🇧🇷 118.26.105.52

🇨🇳 110.252.175.104