JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.0.35.128

102.0.35.128 was found in our database!

This IP was reported 80 times. Confidence of Abuse is 100%: ?

100%

ISP	Allocated to Airtel Kenya Mobile Broadband and Fixed internet
Usage Type	Fixed Line ISP
ASN	AS36926
Hostname(s)	128-35-0-102.r.airtelkenya.com
Domain Name	airtel.in
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.0.35.128

Whois 102.0.35.128

IP Abuse Reports for 102.0.35.128:

This IP address has been reported a total of 80 times from 44 distinct sources. 102.0.35.128 was first reported on August 1st 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 noconex	2026-09-21 01:09:24 (6 hours ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.0.35.1 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.0.35.128 show less	Port Scan Brute-Force SSH
🇺🇸 gui-ying233	2026-09-20 00:09:29 (1 day ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇮🇹 CoreTech srl	2026-09-19 23:59:35 (1 day ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_unsafe_protocol	Hacking
🇧🇷 noconex	2026-09-18 11:41:09 (2 days ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.0.35.1 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.0.35.128 show less	Port Scan Brute-Force SSH
Anonymous	2026-09-18 08:01:25 (3 days ago)	[Firewall] SSH Brute-Force \| Proto: TCP (NEW) \| Src port: 28160 \| Dst port: 22 (SSH) \| Pkt len: 60 \| ... show more [Firewall] SSH Brute-Force \| Proto: TCP (NEW) \| Src port: 28160 \| Dst port: 22 (SSH) \| Pkt len: 60 \| Attempts logged: 2 \| ISP: Airtel KE Mobile & Fixed Internet \| Origin: Nairobi, Kenya \| Prior AbuseIPDB score: 100% (75 reports) \| Detected: 2026-09-18 02:55 CST \| Promoted to blacklist after repeated attempts \| Banned: 6d23h55m10s show less	Brute-Force
🇵🇱 mkey	2026-09-18 03:55:02 (3 days ago)	Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_MULTIPORT \| PORTS= ... show more Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_MULTIPORT \| PORTS=22,23 \| HITS=2 \| IPSET=ADD \| FIRST=2026-09-18 05:49:13 \| LAST=2026-09-18 05:49:13. Last seen 2026-09-18 05:49:13. show less	Port Scan
🇺🇸 MPL	2026-09-17 22:13:14 (3 days ago)	tcp ports: 23,22 (24 or more attempts)	Port Scan
🇩🇪 london2038.com	2026-09-16 00:17:39 (5 days ago)	Connection atttempts against closed TCP ports Sep 16 02:13:07 BLOCK SRC=102.0.35.128 LEN=60 TOS=0x00 ... show more Connection atttempts against closed TCP ports Sep 16 02:13:07 BLOCK SRC=102.0.35.128 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=58857 DF PROTO=TCP SPT=20270 DPT=23 WINDOW=65535 RES=0x00 SYN Sep 16 02:17:38 BLOCK SRC=102.0.35.128 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=51173 DF PROTO=TCP SPT=51053 DPT=23 WINDOW=65535 RES=0x00 SYN Sep 16 02:17:38 BLOCK SRC=102.0.35.128 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=57980 DF PROTO=TCP SPT=15967 DPT=22 WINDOW=65535 RES=0x00 SYN show less	Port Scan
🇧🇷 noconex	2026-09-15 22:04:06 (5 days ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.0.35.1 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.0.35.128 show less	Port Scan Brute-Force SSH
🇩🇪 d$JZ	2026-09-15 19:43:11 (5 days ago)	Potential SSH Scan	SSH
🇫🇮 6kilowatti	2026-09-13 21:59:02 (1 week ago)	2026-09-14T00:59:01.475891+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:f ... show more 2026-09-14T00:59:01.475891+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:fd:74:70:71:9e:08:00 SRC=102.0.35.128 DST=10.0.0.30 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=22702 DF PROTO=TCP SPT=20746 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇵🇱 pshost.pl	2026-09-13 01:42:01 (1 week ago)	2026-09-13T01:42:01.384Z, an unauthorized SSH access attempt was detected from source IP address 102 ... show more 2026-09-13T01:42:01.384Z, an unauthorized SSH access attempt was detected from source IP address 102.0.35.128 by our NetFlow-based intrusion detection. show less	Port Scan Brute-Force SSH
🇺🇸 RAP	2026-09-12 21:45:14 (1 week ago)	2026-09-12 21:45:14 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇫🇷 security.rdmc.fr	2026-09-12 16:44:09 (1 week ago)	Port Scan Attack proto:TCP src:41464 dst:23	Port Scan
🇺🇸 donarev419	2026-09-12 12:40:12 (1 week ago)	Port scan detected on port 23 (connection without data transfer)	Port Scan

Showing 1 to 15 of 80 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 152.32.215.226

🇫🇷 85.217.140.30

🇷🇴 185.19.40.202

🇺🇸 174.68.43.123

🇺🇸 136.70.241.114

🇺🇸 136.66.190.236

🇹🇼 130.211.255.225

🇵🇭 130.105.244.67

🇺🇸 104.9.129.101

🇺🇸 34.138.141.243

🇸🇬 34.126.155.199

🇺🇸 34.46.10.192

🇮🇳 34.14.216.183

🇺🇸 8.234.220.37

🇵🇰 223.123.73.83

🇺🇸 212.102.40.218

🇩🇪 194.187.176.152

🇩🇪 194.88.98.119

🇩🇪 193.124.20.253

🇩🇪 146.70.117.81