102.89.22.182

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
21% Elevated
41 reports
20 reporters · latest 2 days ago
ISP
MTNN-OJOTA-REGION-PREFIXES
Usage Type
Mobile ISP
ASN
AS29465
Domain Name
mtn.com
Country
🇳🇬 Nigeria
City
Lagos, Lagos
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
41 from 20 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 2 🇺🇸 United States of America 2 🇫🇷 France 1
Most common categories Port Scan 2 Bad Web Bot 2 Hacking 1 DDoS Attack 1 Web App Attack 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
denied SMB access attempt. destination port 445.
Port Scan Hacking
🇩🇪 LRob
Calendar filter flood (L7 DDoS) | host: escrime-auvergnerhonealpes.fr | path: http://escrime-auvergnerhonealpes.fr/calendrier-2/action~agenda/time_limit~1762556400/cat_ids~146/tag_ids~231,727,485,437,554,57 | src_port: 2838
DDoS Attack Web App Attack
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
Bad Web Bot
🇫🇷 Kejult
Honeypot Finding: SMB activity on TCP/445; 5 Dionaea events.
Port Scan
🇷🇴 INTEQ
Web attack from 102.89.22.182
Web App Attack
🇺🇸 stechusa
[Askari] | Behavior: Slow-read attack, HTTP/1.1 over TLS, Concurrent page load during attack, Targeting specific pages, Outdated browser
Bad Web Bot DDoS Attack
🇺🇸 stechusa
ELEVATED_THREAT | 137 IPs targeting /brand/satco-products-inc.html | Facet request during elevated threat (facet_ratio=0.98, unique_ips=709) | Recv-Q=1489 bytes on ESTABLISHED connection (threshold=1000)
Bad Web Bot DDoS Attack
🇺🇸 xmission.com
Blocked by UFW (TCP on 23) Source port: 20765 TTL: 43 Packet length: 60 TOS: 0x00 This report (for 102.89.22.182) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan Hacking Brute-Force
🇨🇿 lp
Brute-Force
🇫🇷 vtchost.com
invalid/bad user agent - possible botnet ...
Bad Web Bot
🇺🇸 RAP
2026-02-22 08:12:02 UTC Unauthorized activity to TCP port 445. SMB
Port Scan
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36
Bad Web Bot
🇳🇱 exxos
HTTP1.x attacks
DDoS Attack
🇳🇱 exxos
HTTP1.x attacks
DDoS Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 195.178.110.232
🇺🇸 108.146.29.78
🇹🇷 193.35.153.95
🇰🇷 121.180.217.182
🇫🇷 91.231.89.230
🇱🇻 84.245.250.156
🇷🇺 83.239.84.130
🇧🇷 34.95.132.245
🇳🇱 31.58.51.225
🇸🇬 14.102.84.119
🇺🇸 13.59.32.34
🇪🇸 5.182.83.231
🇮🇳 152.59.46.140
🇬🇧 82.31.28.153
🇺🇸 70.169.11.216
🇳🇱 64.205.72.140
feedback