JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.88.54.82

102.88.54.82 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 43%: ?

43%

ISP	MTN Nigeria
Usage Type	Fixed Line ISP
ASN	AS29465
Domain Name	mtnnigeria.net
Country	🇳🇬 Nigeria
City	Lagos, Lagos

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.88.54.82

Whois 102.88.54.82

IP Abuse Reports for 102.88.54.82:

This IP address has been reported a total of 13 times from 11 distinct sources. 102.88.54.82 was first reported on January 17th 2026, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 tecnicorioja	2026-07-23 22:02:22 (17 hours ago)	POST /xmlrpc.php [23/Jul/2026:13:24:11	Web App Attack Brute-Force
🇩🇪 ghostwarriors	2026-07-23 14:21:09 (1 day ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-23 14:14:37 (1 day ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-07-23 10:32:41 (1 day ago)	(xmlrpc) Failed xmlrpc access from 102.88.54.82 (NG/Nigeria/-): 5 in the last 3600 secs (0-122)	Hacking
🇺🇸 TPI-Abuse	2026-07-23 09:59:04 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 102.88.54.82 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 102.88.54.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 05:59:00.112352 2026] [security2:error] [pid 2245162:tid 2245162] [client 102.88.54.82:6044] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 102.88.54.82 (+1 hits since last alert)\|towlesilvapsychotherapy.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "towlesilvapsychotherapy.com"] [uri "/xmlrpc.php"] [unique_id "amHl5E34D72BAbdXUShpfAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 08:51:25 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 102.88.54.82 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 102.88.54.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 04:51:22.196054 2026] [security2:error] [pid 24034:tid 24034] [client 102.88.54.82:2865] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 102.88.54.82 (+1 hits since last alert)\|lowkeytiki.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lowkeytiki.com"] [uri "/xmlrpc.php"] [unique_id "amHWCueodjP6E_HPVUBkhAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-22 21:31:34 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 102.88.54.82 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 102.88.54.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 17:31:28.093716 2026] [security2:error] [pid 1678145:tid 1678145] [client 102.88.54.82:2339] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 102.88.54.82 (+1 hits since last alert)\|masalamadrid.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "masalamadrid.com"] [uri "/xmlrpc.php"] [unique_id "amE2sOhKgm9DcX3fv37h4QAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 n2nguyenn2nguyen	2026-07-22 19:44:49 (1 day ago)	Blocked by YFC Security on https://fencingforward.com — type: xmlrpc_attempts	Brute-Force Web App Attack
🇺🇸 Matthew Ping	2026-03-31 18:45:07 (3 months ago)	SMTP authentication brute force blocked by CSF/LFD on wp3.	Email Spam Brute-Force
Anonymous	2026-03-17 05:00:04 (4 months ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
Anonymous	2026-02-17 15:10:56 (5 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2026-02-11 06:16:32 (5 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇱🇹 NotACaptcha	2026-01-17 18:00:25 (6 months ago)	Unauthorised access (Jan 17 20:00) SRC=102.88.54.82 LEN=60 TTL=45 ID=1440 DF TCP DPT=23 WINDOW=65535 ... show more Unauthorised access (Jan 17 20:00) SRC=102.88.54.82 LEN=60 TTL=45 ID=1440 DF TCP DPT=23 WINDOW=65535 SYN show less	Port Scan

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 147.185.133.89

🇨🇳 222.71.205.34

🇵🇰 103.72.1.42

🇧🇬 79.124.58.142

🇺🇸 23.92.19.130

🇺🇸 20.228.193.165

🇺🇸 20.65.193.191

🇦🇺 3.27.42.27

🇺🇸 3.15.28.49

🇵🇹 2001:818:eabd:4500:6dc9:ad67:6c3d:6cf0

🇹🇼 198.235.24.115

🇲🇾 165.154.147.69

🇺🇸 165.22.150.172

🇺🇿 84.54.90.36

🇷🇺 79.105.48.232

🇲🇽 69.6.207.207

🇺🇸 50.187.155.130

🇹🇼 49.158.208.139

🇧🇷 45.236.98.181

🇪🇨 45.224.97.244