JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.89.85.44

102.89.85.44 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 12%: ?

12%

ISP	MTN Nigeria
Usage Type	Mobile ISP
ASN	AS29465
Domain Name	mtnnigeria.net
Country	🇳🇬 Nigeria
City	Lagos, Lagos

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.89.85.44

Whois 102.89.85.44

IP Abuse Reports for 102.89.85.44:

This IP address has been reported a total of 8 times from 7 distinct sources. 102.89.85.44 was first reported on November 25th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-15 19:03:39 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 102.89.85.44 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 102.89.85.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 15:03:33.083405 2026] [security2:error] [pid 12815:tid 12834] [client 102.89.85.44:49720] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|vancekelly.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vancekelly.com"] [uri "/"] [unique_id "aqmWhfH9FdSgKFFmiWN1cwAAANE"], referer: https://marulov-kahn.blogspot.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-08-03 12:46:21 (1 month ago)	CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_forma ... show more CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_format~json) - DDoS \| req: /calendrier-2/action~agenda/cat_ids~189,191/tag_ids~593,563,792,671,473,433,785/request_format~json/ \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 show less	DDoS Attack Web App Attack
🇳🇱 tmiland	2026-07-10 17:21:04 (2 months ago)	(wordpress_xmlrpc) WordPress XMLPRC Attack 102.89.85.44 (NG/Nigeria/-): 3 in the last 3600 secs; IP: ... show more (wordpress_xmlrpc) WordPress XMLPRC Attack 102.89.85.44 (NG/Nigeria/-): 3 in the last 3600 secs; IP: 102.89.85.44; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 102.89.85.44 - - [10/Jul/2026:19:20:44 +0200] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.2)" 102.89.85.44 - - [10/Jul/2026:19:20:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "WordPress.com; https://wordpress.com" 102.89.85.44 - - [10/Jul/2026:19:20:58 +0200] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Jetpack/12.5; WordPress/6.4; http://site22674281.com" show less	Brute-Force
Anonymous	2026-06-30 18:25:25 (2 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇩🇪 SMARTNET	2025-11-26 02:37:10 (9 months ago)	Aisuru(Mirai variant) DDoS	DDoS Attack
Anonymous	2025-11-25 10:11:38 (9 months ago)	scanning http requests from known botnet	Web App Attack
🇩🇪 Coco Bongo	2025-09-07 11:30:58 (1 year ago)	1757244638 - 09/07/2025 13:30:38 Host: 102.89.85.44/102.89.85.44 Port: 445 TCP Blocked ...	Port Scan
Anonymous	2024-11-25 09:11:38 (1 year ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.244.170.207

🇮🇩 210.79.142.201

🇪🇨 200.50.234.126

🇻🇳 103.200.23.154

🇺🇸 64.62.197.126

🇱🇹 62.60.130.103

🇦🇺 58.7.180.218

🇩🇪 47.254.154.160

🇸🇬 47.236.197.228

🇸🇬 47.236.173.77

🇳🇱 45.142.193.169

🇺🇸 40.124.186.156

🇺🇸 34.125.34.177

🇺🇸 216.126.225.6

🇧🇷 186.26.99.241

🇹🇼 128.14.227.37

🇹🇷 94.154.43.218

🇺🇸 91.230.168.92

🇨🇳 60.223.251.132

🇧🇷 45.168.65.75