JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.213.179.25

102.213.179.25 was found in our database!

This IP was reported 112 times. Confidence of Abuse is 46%: ?

46%

ISP	PTP
Usage Type	Fixed Line ISP
ASN	AS329261
Domain Name	ptp.com
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.213.179.25

Whois 102.213.179.25

IP Abuse Reports for 102.213.179.25:

This IP address has been reported a total of 112 times from 65 distinct sources. 102.213.179.25 was first reported on April 9th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-19 08:57:28 (1 day ago)	(mod_security) mod_security (id:217210) triggered by 102.213.179.25 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:217210) triggered by 102.213.179.25 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 04:57:21.630934 2026] [security2:error] [pid 32330:tid 32330] [client 102.213.179.25:35442] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|zee61ats.top\|F\|4"] [data "GET http://zee61ats.top HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "zee61ats.top"] [uri "/"] [unique_id "ajUEcQhbggGd4SW_yfldzgAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇯🇵 VXG-NET	2026-06-03 10:32:27 (2 weeks ago)	port=80, indicator_type=code-execution	Hacking
🇩🇪 big-cloud.nl	2026-06-02 08:55:54 (2 weeks ago)	Try to access /xmlrpc.php	Web App Attack
🇱🇻 garmtech.com	2026-06-01 18:58:08 (2 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 21-58.102.213.179.25.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 21-58.102.213.179.25.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇩🇪 Vegascosmetics	2026-06-01 08:47:49 (2 weeks ago)	Kingcopy(AI-IDS) Report: IP 102.213.179.25 wurde nach 3 Angriffsversuchen automatisch geblockt. Patt ... show more Kingcopy(AI-IDS) Report: IP 102.213.179.25 wurde nach 3 Angriffsversuchen automatisch geblockt. Pattern: High Priority: ChangeCountry - Vegas Cosmetics Security System show less	DDoS Attack Hacking Bad Web Bot
🇮🇩 hermawan	2026-05-31 10:03:59 (2 weeks ago)	05/31/2026-17:03:58.381557 [Drop] [] [1:9200020:0] Suricata match JA3 string Microsoft oai-search ... show more 05/31/2026-17:03:58.381557 [Drop] [] [1:9200020:0] Suricata match JA3 string Microsoft oai-searchbot openai.com 74-7-241-181 [**] [Classification: (null)] [Priority: 3] {TCP} 102.213.179.25:33670 -> 103.166.156.58:443 ... show less	Email Spam Hacking
🇫🇷 security.rdmc.fr	2026-05-27 08:19:04 (3 weeks ago)	Port Scan Attack proto:TCP src:6568 dst:23	Port Scan
🇩🇪 SMARTNET	2026-05-27 06:03:53 (3 weeks ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d	DDoS Attack
🇨🇭 ALPHANET	2026-05-26 02:30:03 (3 weeks ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇺🇸 RAP	2026-05-03 13:27:10 (1 month ago)	2026-05-03 13:27:10 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇩🇪 ghostwarriors	2026-04-27 17:50:34 (1 month ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ksol-hostmaster	2026-04-27 17:34:39 (1 month ago)	2026/04/27 19:34:38 [error] 84413#136531: 1161535 access forbidden by rule, client: 102.213.179.25, ... show more 2026/04/27 19:34:38 [error] 84413#136531: 1161535 access forbidden by rule, client: 102.213.179.25, server: new.hondaforum.hu, request: "GET /topic/adas-vetel-kerdesei-es-valaszai/990273/ HTTP/1.1", host: "new.hondaforum.hu" ... show less	Web Spam
🇩🇪 jasperedv.de	2026-04-07 00:51:17 (2 months ago)	Failed IMAP Login - Brutforcing	Email Spam Brute-Force
🇺🇸 kosada.com	2026-04-01 18:10:30 (2 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 quilla	2026-03-30 20:13:00 (2 months ago)	Botnet infected device observed in honeypot (Vector: TCP HANDSHAKE ATTACK)	DDoS Attack

Showing 1 to 15 of 112 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 45.205.1.67

🇵🇪 38.187.19.175

🇨🇦 216.58.100.170

🇩🇴 186.7.183.168

🇩🇪 185.242.3.226

🇨🇳 183.66.149.42

🇭🇰 152.32.212.224

🇯🇵 131.112.81.246

🇧🇩 113.11.34.221

🇳🇱 93.123.109.123

🇺🇸 69.165.69.15

🇹🇭 47.87.71.203

🇺🇸 35.252.134.170

🇫🇷 176.163.168.210

🇳🇱 176.65.132.22

🇲🇲 103.186.122.24

🇫🇷 92.103.134.183

🇩🇰 87.56.56.71

🇫🇷 82.65.140.218

🇺🇸 66.132.195.50