102.90.103.138

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
34% Elevated
31 reports
22 reporters · latest 1 week ago
ISP
MTN Nigeria
Usage Type
Mobile ISP
ASN
AS29465
Domain Name
mtnnigeria.net
Country
🇳🇬 Nigeria
City
Port Harcourt, Rivers State
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
31 from 22 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 3 🇺🇸 United States of America 2 🇦🇺 Australia 1
Most common categories Port Scan 5 Bad Web Bot 1 DDoS Attack 1 Brute-Force 1 Web App Attack 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 vtchost.com
portscan on honeypot system ...
Port Scan
🇫🇷 thecocasio
PortSentry honeypot: unsolicited TCP connection to closed decoy port 445 (SMB) on a host running no such service. Automated port-scan detection at 2026-10-27T21:14:05Z.
Port Scan
🇺🇸 xclmp
Unauthorized connection attempts consistent with that of port probing and scanning from 102.90.103.138 were detected at 2026-10-26 22:53:14 UTC. Learn More: https://fia.project-furina.com/report/6448
Port Scan
🇫🇷 Kejult
Honeypot Finding: SMB activity on TCP/445; 5 Dionaea events.
Port Scan
🇭🇰 mutebot.net
SRC=102.90.103.138, PROTO=TCP, SPT=37483, DPT=445
Port Scan
🇦🇺 dyln
Dyls honeypot brute-force: SMB (4 total hits)
Brute-Force
🇩🇪 LRob
Calendar filter flood (L7 DDoS) | host: www.escrimeaura.fr | path: /calendrier-2/action~agenda/time_limit~1763766000/cat_ids~148,361,157,330,140/tag_ids~433,344,622,339,401/request_format~json/ | src_port: 56333
DDoS Attack Web App Attack
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot
🇬🇧 Birdo
[Birdo SMB Honeypot] SMB unauthorized attempt
Exploited Host Brute-Force Port Scan Hacking
🇩🇪 Mailguard-FRD
1774865118 - 03/30/2026 12:05:18 Host: 102.90.103.138/102.90.103.138 Port: 445 TCP Blocked ...
Port Scan
🇬🇧 CrystalMaker
Vulnerability scan - GET /webmail/; GET /webmail/
Hacking
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36 CravingExplorer/2.4.1
Bad Web Bot
🇹🇷 rtbh.com.tr
list.rtbh.com.tr report: tcp/445
Brute-Force
🇩🇪 check-the-sum.fr
Port Scanning
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇹🇼 198.235.24.77
🇺🇸 165.22.150.134
🇷🇴 80.94.92.128
🇩🇪 69.5.169.23
🇬🇧 45.135.142.153
🇬🇧 45.135.142.137
🇷🇴 2.57.122.209
🇮🇳 117.216.208.83
🇳🇱 109.160.32.150
🇧🇩 103.41.244.159
🇬🇧 45.135.142.171
🇬🇧 45.135.142.158
🇨🇳 36.152.25.50
🇰🇷 14.55.199.214
🇮🇱 5.29.135.63
🇹🇼 198.235.24.80
🇬🇧 194.50.235.146
🇦🇷 190.122.128.248
🇺🇸 142.93.16.100
🇮🇳 128.185.33.227
feedback