JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.89.68.230

102.89.68.230 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 20%: ?

20%

ISP	MTN Nigeria
Usage Type	Mobile ISP
ASN	AS29465
Domain Name	mtnnigeria.net
Country	🇳🇬 Nigeria
City	Lagos, Lagos

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.89.68.230

Whois 102.89.68.230

IP Abuse Reports for 102.89.68.230:

This IP address has been reported a total of 14 times from 11 distinct sources. 102.89.68.230 was first reported on April 29th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-27 13:34:30 (2 days ago)	denied traffic to a honeypot network. destination port 445.	Port Scan Hacking
Anonymous	2026-07-23 16:15:22 (5 days ago)	Large-scale coordinated botnet (777+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ... show more Large-scale coordinated botnet (777+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Attack Signature Blocked: /wishlist/index/add/product/13554/form_key/JnujX1xT3MaMzfCg/ \| UA: Opera/8.86.(X11; Linux x86_64; ce-RU) Presto/2.9.163 Version/11.00 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇫🇷 TheHoneyPotter	2026-06-17 18:13:43 (1 month ago)	Honeypot [fc-honeypot]: SMB traffic on port 445 Reported by: https://github.com/sefinek/T-Pot-To-Abu ... show more Honeypot [fc-honeypot]: SMB traffic on port 445 Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking
🇫🇷 sthoyer.de	2026-05-13 20:29:51 (2 months ago)	May 13 22:29:49 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more May 13 22:29:49 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=102.89.68.230 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x20 TTL=112 ID=26848 DF PROTO=TCP SPT=17244 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 Little Iguana	2026-05-13 20:28:46 (2 months ago)	trying to access non-authorized port	Port Scan
🇫🇷 sthoyer.de	2026-05-13 18:18:38 (2 months ago)	May 13 20:18:37 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more May 13 20:18:37 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=102.89.68.230 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x20 TTL=112 ID=11127 DF PROTO=TCP SPT=7721 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 vtchost.com	2026-05-13 15:14:25 (2 months ago)	May 13 17:14:25 vtchost kernel: [79666.922420] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11 ... show more May 13 17:14:25 vtchost kernel: [79666.922420] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11:cd:2a:b3:08:00 SRC=102.89.68.230 DST=161.97.181.152 LEN=52 TOS=0x00 PREC=0x20 TTL=110 ID=10095 DF PROTO=TCP SPT=32869 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 TPI-Abuse	2026-02-03 12:45:40 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 102.89.68.230 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 102.89.68.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 03 07:45:37.417788 2026] [security2:error] [pid 26544:tid 26550] [client 102.89.68.230:7641] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.fishrapper.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.fishrapper.com"] [uri "/images/2020-fishing-link-hovers/debug.log"] [unique_id "aYHt8TNWtKEYZx9395JWNQAAAEQ"], referer: http://www.fishrapper.com/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-21 08:22:42 (8 months ago)	scanning http requests from known botnet	Web App Attack
🇳🇱 exxos	2025-08-02 02:29:10 (11 months ago)	HTTP1.x attacks	DDoS Attack
🇬🇧 Birdo	2025-07-27 10:01:00 (1 year ago)	[Birdo SMB Honeypot] SMB unauthorized attempt	Port Scan Hacking Brute-Force Exploited Host
Anonymous	2025-07-27 09:24:30 (1 year ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
Anonymous	2025-04-29 11:02:15 (1 year ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇩🇪 Honeypot-EU-Fru	2025-04-29 08:42:06 (1 year ago)	1745916126 - 04/29/2025 10:42:06 Host: 102.89.68.230/102.89.68.230 Port: 445 TCP Blocked ...	Port Scan

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 219.85.82.211

🇺🇸 192.3.251.33

🇺🇸 136.66.51.201

🇬🇧 81.19.219.247

🇧🇬 79.124.49.134

🇺🇸 74.207.253.22

🇩🇪 69.5.169.27

🇨🇦 51.161.8.211

🇨🇭 37.140.254.212

🇺🇸 23.94.145.5

🇰🇿 2.133.33.68

🇭🇳 2803:4600:1222:dfb:ac54:f267:c6f1:bb74

172.20.200.12

🇨🇳 153.0.127.188

🇺🇸 107.174.194.11

🇩🇪 87.106.118.51

🇲🇦 81.192.46.29

🇷🇴 80.94.92.179

🇺🇸 71.6.233.222

🇫🇮 45.148.101.101