JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.89.69.34

102.89.69.34 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 51%: ?

51%

ISP	MTN Nigeria
Usage Type	Mobile ISP
ASN	AS29465
Domain Name	mtnnigeria.net
Country	🇳🇬 Nigeria
City	Lagos, Lagos

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.89.69.34

Whois 102.89.69.34

IP Abuse Reports for 102.89.69.34:

This IP address has been reported a total of 11 times from 10 distinct sources. 102.89.69.34 was first reported on November 30th 2024, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-08-25 04:06:34 (8 hours ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 06:58:32 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 102.89.69.34 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 102.89.69.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 02:58:27.441953 2026] [security2:error] [pid 16455:tid 16455] [client 102.89.69.34:57739] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.xtremeautodetailing.com"] [uri "/.env"] [unique_id "aovrk3reTL6e04ahxGtuhAAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 ptlab	2026-08-24 06:45:11 (1 day ago)	Detected env_leak attack from WP-host.	Hacking Web App Attack
🇺🇦 URAN Publishing Service	2026-08-24 06:44:46 (1 day ago)	[24/Aug/2026:09:44:46 +0300] -- 102.89.69.34 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /. ... show more [24/Aug/2026:09:44:46 +0300] -- 102.89.69.34 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /.env HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 06:17:58 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 102.89.69.34 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 102.89.69.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 02:17:52.157077 2026] [security2:error] [pid 2109:tid 2109] [client 102.89.69.34:2201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.partybusdaytonabeach.com"] [uri "/.env"] [unique_id "aoviELsRbgbBLKKaBXjJlQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇭🇷 bubausluge	2026-08-24 06:14:49 (1 day ago)	Blocked by https://aegis.hr — WAF: ModSec rule match - (MITRE T1190), 1 attempts, Period: 2026-08-24 ... show more Blocked by https://aegis.hr — WAF: ModSec rule match - (MITRE T1190), 1 attempts, Period: 2026-08-24 05:57:22 to 2026-08-24 05:57:22 show less	Web App Attack Hacking
🇺🇸 ambor	2026-08-24 05:54:00 (1 day ago)	Honeypot triggered on tcpdata.com - Attempted to access /.env (config_file_probe). User-Agent: Mozil ... show more Honeypot triggered on tcpdata.com - Attempted to access /.env (config_file_probe). User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:148.0) Gecko/20100101 Firefox/148.0 show less	Web App Attack
🇩🇪 Phenix Info	2026-08-24 05:51:08 (1 day ago)	SmallGuard.fr - Forbidden Ext.	Web App Attack
🇺🇸 kosada.com	2026-08-17 09:36:43 (1 week ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇪🇸 Hugopvigo	2025-09-18 13:45:25 (11 months ago)	102.89.69.34 - - [18/Sep/2025:15:45:24 +0200] "GET /.env HTTP/1.1" 301 562 "-" "python-requests/2.26 ... show more 102.89.69.34 - - [18/Sep/2025:15:45:24 +0200] "GET /.env HTTP/1.1" 301 562 "-" "python-requests/2.26.0" ... show less	Hacking Brute-Force Web App Attack SSH
Anonymous	2024-11-30 11:37:16 (1 year ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 174.168.163.93

🇫🇮 147.185.133.21

🇧🇭 109.161.142.193

🇺🇸 103.143.238.100

🇫🇷 91.231.89.213

🇭🇰 35.241.123.237

🇺🇸 34.135.200.178

🇺🇸 20.65.138.86

🇰🇷 211.240.117.75

🇸🇬 138.75.240.41

🇺🇸 64.23.130.139

🇰🇿 62.108.40.9

🇫🇷 51.210.150.97

🇬🇧 35.203.211.37

🇸🇬 8.219.197.10

🇳🇱 206.189.14.1

🇺🇦 176.108.3.49

🇲🇲 121.46.71.52

🇺🇦 95.67.92.36

🇳🇱 91.92.47.232