JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.88.166.3

102.88.166.3 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 77%: ?

77%

ISP	MTN Nigeria
Usage Type	Fixed Line ISP
ASN	AS29465
Domain Name	mtnnigeria.net
Country	🇳🇬 Nigeria
City	Lagos, Lagos

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.88.166.3

Whois 102.88.166.3

IP Abuse Reports for 102.88.166.3:

This IP address has been reported a total of 21 times from 19 distinct sources. 102.88.166.3 was first reported on August 3rd 2026, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Mailguard-FRD	2026-10-26 20:22:21 (20 hours ago)	102.88.166.3 [26/Oct/2026:21:22:05 +0100] [redacted] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 ( ... show more 102.88.166.3 [26/Oct/2026:21:22:05 +0100] [redacted] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" - ... show less	Bad Web Bot Web App Attack
🇳🇱 knock	2026-10-26 12:46:30 (1 day ago)	Knock-Knock honeypot brute-force: HTTP (2 total hits)	Web App Attack
🇫🇷 Coco Bongo	2026-10-26 08:18:46 (1 day ago)	102.88.166.3 [redacted] (29465-MTN NIGERIA Communication limited Nigeria Lagos) - - [26/Oct/2026:09: ... show more 102.88.166.3 [redacted] (29465-MTN NIGERIA Communication limited Nigeria Lagos) - - [26/Oct/2026:09:18:31 +0100] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.3 ... show less	Bad Web Bot Web App Attack
🇯🇵 pixelboost.kr	2026-10-25 23:34:29 (1 day ago)	102.88.166.3 - - [26/Oct/2026:08:34:28 +0900] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linu ... show more 102.88.166.3 - - [26/Oct/2026:08:34:28 +0900] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇫🇷 j-tap	2026-10-25 12:30:26 (2 days ago)	WordPress honeypot: automated scanner (xmlrpc / installer / .env / direct login POST)	Web App Attack
🇫🇷 Stara	2026-10-25 09:24:04 (2 days ago)	ModSecurity detected web attack - .env/config probing or SQLi/Code injection (Rule 949110)	Brute-Force Hacking Web App Attack
🇫🇷 0d0a	2026-10-25 07:28:34 (2 days ago)	Automated brute-force report from Fail2Ban	Web App Attack
🇫🇷 Little Iguana	2026-10-25 07:18:06 (2 days ago)	Attempt to hack Wordpress Login, XMLRPC or other login	Hacking
🇳🇱 debestelapp	2026-10-25 01:16:38 (2 days ago)		Web App Attack
🇺🇸 Phil Schuyler	2026-10-25 00:00:00 (2 days ago)	Repeated probing against public honeypot services: 4 observed events targeting TCP/80 across Contabo ... show more Repeated probing against public honeypot services: 4 observed events targeting TCP/80 across Contabo Windows, T-Pot EU. show less	Port Scan
🇩🇪 Starburst SysOp Team	2026-10-24 21:52:27 (2 days ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-nue6-2)	Hacking Bad Web Bot
🇩🇪 4server	2026-10-23 12:33:37 (4 days ago)	[FriOct2314:33:30.1498472026][security2:error][pid2583756:tid2583864][client102.88.166.3:0]ModSecuri ... show more [FriOct2314:33:30.1498472026][security2:error][pid2583756:tid2583864][client102.88.166.3:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"modularss.com\"][uri\"/xmlrpc.php\"][unique_id\"attUGml6tGoKy2kyDe-mDQAAAU4\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 SX Communications	2026-10-19 04:16:02 (1 week ago)	HTTP application-layer DoS / botnet traffic from 102.88.166.3: repeated high-cost dynamic page and f ... show more HTTP application-layer DoS / botnet traffic from 102.88.166.3: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇩🇪 LRob	2026-10-15 00:02:19 (1 week ago)	Calendar filter flood (L7 DDoS) \| host: www.escrimeaura.fr \| path: /calendrier-2/action~agenda/time_ ... show more Calendar filter flood (L7 DDoS) \| host: www.escrimeaura.fr \| path: /calendrier-2/action~agenda/time_limit~1761951600/cat_ids~121/tag_ids~558,338,759,452,234,550,485,582,636/request_format~json/ \| src_port: 17493 show less	DDoS Attack Web App Attack
🇺🇸 鬼影233	2026-09-21 10:30:19 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 181.86.57.225

🇺🇸 162.216.150.120

🇮🇳 103.216.145.2

🇨🇳 101.126.11.137

🇹🇷 88.234.228.22

🇳🇱 45.148.10.121

🇭🇰 45.120.216.232

🇻🇳 2405:4802:a7fc:1920:41d5:92db:b46:b181

🇧🇷 200.98.168.20

🇺🇸 193.202.81.126

🇺🇸 165.154.172.108

🇮🇳 128.185.33.227

🇨🇳 117.50.51.119

🇮🇳 103.89.136.111

🇫🇷 80.241.212.197

🇺🇸 66.57.151.235

🇺🇸 47.251.88.213

🇨🇳 1.83.125.3

🇮🇷 194.180.11.186

🇵🇦 194.165.16.122