JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.88.55.66

102.88.55.66 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 38%: ?

38%

ISP	MTN Nigeria
Usage Type	Fixed Line ISP
ASN	AS29465
Domain Name	mtnnigeria.net
Country	🇳🇬 Nigeria
City	Lagos, Lagos

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.88.55.66

Whois 102.88.55.66

IP Abuse Reports for 102.88.55.66:

This IP address has been reported a total of 18 times from 15 distinct sources. 102.88.55.66 was first reported on June 6th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 A000Z	2026-07-05 09:47:19 (1 day ago)	Fail2Ban: 102.88.55.66 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 ... show more Fail2Ban: 102.88.55.66 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-03 23:18:18 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 102.88.55.66 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 102.88.55.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 19:18:11.819108 2026] [security2:error] [pid 28978:tid 28978] [client 102.88.55.66:1474] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 102.88.55.66 (+1 hits since last alert)\|mfleetservice.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mfleetservice.com"] [uri "/xmlrpc.php"] [unique_id "akhDM1NZMzsE_JGKnkOCuAAAACQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 YF	2026-07-03 21:00:45 (3 days ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force
Anonymous	2026-07-03 20:41:29 (3 days ago)	(wordpress) Failed wordpress login from 102.88.55.66 (NG/Nigeria/-)	Brute-Force
🇺🇸 bigscoots.com	2026-06-18 01:11:05 (2 weeks ago)	(smtpauth) Failed SMTP AUTH login from 102.88.55.66 (NG/Nigeria/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 102.88.55.66 (NG/Nigeria/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-06-17 21:10:04 dovecot_login authenticator failed for H=(5Sgp3x3nH) [102.88.55.66]:5964: 535 Incorrect authentication data ([email protected]) 2026-06-17 21:10:12 dovecot_login authenticator failed for H=(oa9VlLpBqL) [102.88.55.66]:6747: 535 Incorrect authentication data ([email protected]) 2026-06-17 21:10:24 dovecot_login authenticator failed for H=(5ywv98xK3) [102.88.55.66]:8380: 535 Incorrect authentication data ([email protected]) 2026-06-17 21:10:42 dovecot_login authenticator failed for H=(rSYTVL) [102.88.55.66]:5832: 535 Incorrect authentication data ([email protected]) 2026-06-17 21:11:00 dovecot_login authenticator failed for H=(xjOBObfPo) [102.88.55.66]:2075: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇩🇪 SMARTNET	2026-05-27 06:03:53 (1 month ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 991a3054-d12a-4e5e-ac87-2c17a3082180	DDoS Attack
Anonymous	2026-05-21 00:06:21 (1 month ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇦🇺 MAGIC	2026-05-02 00:34:28 (2 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2026-04-23 06:05:02 (2 months ago)	Web App Attack	Brute-Force Exploited Host Web App Attack
🇷🇴 StarTech Team	2026-04-23 06:01:32 (2 months ago)	Web App Atack	Web App Attack
🇦🇹 HoneyPotEu-AT	2026-04-23 05:57:26 (2 months ago)	102.88.55.66 - - [redacted] [23/Apr/2026:07:57:10 +0200] "GET /.env HTTP/1.1" 404 118 "-" "python-re ... show more 102.88.55.66 - - [redacted] [23/Apr/2026:07:57:10 +0200] "GET /.env HTTP/1.1" 404 118 "-" "python-requests/2.26.0" 0.000 - - 102.88.55.66 - - [redacted] [23/Apr/2026:07:57:10 +0200] "POST / HT ... show less	Bad Web Bot Web App Attack
🇦🇹 vikal	2026-04-23 05:44:26 (2 months ago)	102.88.55.66 - - [23/Apr/2026:07:44:26 +0200] "GET /.env HTTP/1.1" 301 162 "-" "python-requests/2.26 ... show more 102.88.55.66 - - [23/Apr/2026:07:44:26 +0200] "GET /.env HTTP/1.1" 301 162 "-" "python-requests/2.26.0" ... show less	Brute-Force SSH
🇳🇱 Savvii	2026-04-23 05:40:26 (2 months ago)	20 attempts against mh-misbehave-ban on storm	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-10 14:52:11 (6 months ago)	"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ... show more "Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access" show less	DDoS Attack SQL Injection Exploited Host
Anonymous	2025-11-24 18:24:48 (7 months ago)	scanning http requests from known botnet	Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 178.254.45.206

🇫🇷 176.138.162.23

🇺🇸 157.230.55.89

🇮🇩 103.178.175.117

🇨🇦 85.217.149.36

🇨🇾 69.94.125.170

🇮🇶 65.20.146.109

🇳🇱 64.89.162.146

🇪🇸 62.175.86.12

🇮🇳 2409:40d4:f1:a275:e5cb:ae0a:93fc:fdb0

🇪🇹 196.189.152.45

🇨🇦 146.190.255.23

🇳🇱 104.23.166.41

100.100.80.92

🇫🇷 92.92.161.27

🇮🇶 65.20.250.244

🇳🇱 185.136.15.10

🇮🇳 103.207.9.246

🇺🇸 103.143.11.150

🇧🇬 79.124.49.70