JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.88.54.144

102.88.54.144 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 48%: ?

48%

ISP	MTN Nigeria
Usage Type	Fixed Line ISP
ASN	AS29465
Domain Name	mtnnigeria.net
Country	🇳🇬 Nigeria
City	Lagos, Lagos

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.88.54.144

Whois 102.88.54.144

IP Abuse Reports for 102.88.54.144:

This IP address has been reported a total of 18 times from 11 distinct sources. 102.88.54.144 was first reported on February 10th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-11 13:23:54 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 102.88.54.144 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 102.88.54.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 09:23:48.310652 2026] [security2:error] [pid 3951:tid 3951] [client 102.88.54.144:4873] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 102.88.54.144 (+1 hits since last alert)\|dennisangellismusic.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "dennisangellismusic.com"] [uri "/xmlrpc.php"] [unique_id "alJD5MDrUg4KdxKJxBYz7AAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-07-10 22:21:05 (2 days ago)	trying wp-login.php/xmlrpc.php 34 times in 1 minutes	Brute-Force Web App Attack
🇩🇪 Séfora Srl	2026-07-10 21:04:12 (2 days ago)	Failed attempt detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇺🇸 TPI-Abuse	2026-07-10 20:58:50 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 102.88.54.144 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 102.88.54.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 16:58:45.055716 2026] [security2:error] [pid 3304916:tid 3304916] [client 102.88.54.144:4747] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 102.88.54.144 (+1 hits since last alert)\|redlitephotos.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "redlitephotos.com"] [uri "/xmlrpc.php"] [unique_id "alFdBVw06eQBdpjoTOoztAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-10 19:59:52 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 102.88.54.144 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 102.88.54.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 15:59:45.949996 2026] [security2:error] [pid 22571:tid 22683] [client 102.88.54.144:8030] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 102.88.54.144 (+1 hits since last alert)\|ethicmark.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ethicmark.org"] [uri "/xmlrpc.php"] [unique_id "alFPMZjgdxSrHeJKBtkrkAAAAQU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-07-10 19:55:53 (2 days ago)	CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc \| req: ["/xmlrpc.php"] \| UA: ["Jetpack/12.1; Wor ... show more CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc \| req: ["/xmlrpc.php"] \| UA: ["Jetpack/12.1; WordPress/6.3; http://site49895255.com","Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.1)","Jetpack/12.5; WordPress/6.4; http:// show less	Brute-Force Web App Attack
Anonymous	2026-07-10 16:51:31 (2 days ago)	[redacted] 102.88.54.144 - - [10/Jul/2026:18:50:47 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "J ... show more [redacted] 102.88.54.144 - - [10/Jul/2026:18:50:47 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.1)" [redacted] 102.88.54.144 - - [10/Jul/2026:18:50:57 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 102.88.54.144 - - [10/Jul/2026:18:51:08 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.4)" [redacted] 102.88.54.144 - - [10/Jul/2026:18:51:19 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.2)" [redacted] 102.88.54.144 - - [10/Jul/2026:18:51:30 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.4; http://site39331783.com" ... show less	Hacking Web App Attack
Anonymous	2026-07-10 14:51:09 (2 days ago)	(wordpress) Failed wordpress login from 102.88.54.144 (NG/Nigeria/-)	Brute-Force
Anonymous	2026-06-23 17:38:35 (2 weeks ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇩🇪 SMARTNET	2026-05-27 06:03:53 (1 month ago)	Aisuru(Mirai variant) DDoS \| Incident ID: e316b406-db2c-400a-bc37-dfbfcc0acc61	DDoS Attack
🇺🇸 jfz-abuse	2026-04-16 02:48:36 (2 months ago)	fail2ban: dovecot ...	Brute-Force
🇺🇸 stechusa	2026-03-31 17:45:11 (3 months ago)	[Askari] \| Behavior: URL template abuse, HTTP/1.1 over TLS, Targeting specific pages, Concurrent pag ... show more [Askari] \| Behavior: URL template abuse, HTTP/1.1 over TLS, Targeting specific pages, Concurrent page load during attack, Slow-read attack show less	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-03-31 17:45:11 (3 months ago)	61 IPs targeting /brand/satco-products-inc/satco-light-bulbs.html \| URL template shared by 8 IPs: /b ... show more 61 IPs targeting /brand/satco-products-inc/satco-light-bulbs.html \| URL template shared by 8 IPs: /brand/satco-products-inc/satco-light-bulbs.html?bulb_shape_type=&bulb_shape=& \| Recv-Q=1489 bytes on ESTABLISHED connection (threshold=1000) show less	Bad Web Bot DDoS Attack
🇺🇸 TPI-Abuse	2026-03-27 22:28:32 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 102.88.54.144 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 102.88.54.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 18:28:26.572140 2026] [security2:error] [pid 23263:tid 23263] [client 102.88.54.144:8986] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|johnpratt.net\|F\|2"] [data ".shoalbaylodge.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "johnpratt.net"] [uri "/www.shoalbaylodge.com"] [unique_id "accEiv4AwY8EZx71DX_7dgAAACg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-10 14:52:11 (7 months ago)	"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ... show more "Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access" show less	DDoS Attack SQL Injection Exploited Host

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 173.230.155.26

🇺🇸 154.16.119.22

🇮🇩 103.151.140.79

🇮🇩 103.150.45.45

🇸🇮 102.220.160.29

🇳🇱 91.92.42.227

🇺🇸 85.254.40.73

🇺🇸 71.229.1.186

🇳🇱 45.148.10.240

🇺🇸 216.180.246.58

🇭🇰 199.45.155.80

🇹🇼 198.235.24.114

🇺🇸 173.255.247.156

🇺🇸 170.187.145.157

🇸🇳 154.124.85.42

🇺🇸 151.240.62.57

🇻🇳 103.149.170.44

🇮🇳 103.149.165.60

🇱🇾 102.219.227.90

🇮🇷 84.47.209.102