JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.90.109.80

102.90.109.80 was found in our database!

This IP was reported 191 times. Confidence of Abuse is 100%: ?

100%

ISP	MTN Nigeria
Usage Type	Fixed Line ISP
ASN	AS29465
Domain Name	mtnnigeria.net
Country	🇳🇬 Nigeria
City	Lagos, Lagos

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.90.109.80

Whois 102.90.109.80

IP Abuse Reports for 102.90.109.80:

This IP address has been reported a total of 191 times from 82 distinct sources. 102.90.109.80 was first reported on June 13th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 voormedia	2026-06-21 20:53:24 (4 hours ago)	Accessed trap at '/xmlrpc.php'	Web App Attack
🇺🇸 RHNoah	2026-06-21 18:34:52 (6 hours ago)	(directadmin) Failed DirectAdmin phpMyAdmin login from 102.90.109.80 (NG/-/-): 5 in the last 3600 se ... show more (directadmin) Failed DirectAdmin phpMyAdmin login from 102.90.109.80 (NG/-/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DIRECTADMIN; Logs: Jun 21 18:34:51 phpmyadmin: user denied: [email protected] (mysql-denied) from 102.90.109.80 Jun 21 18:34:51 phpmyadmin: user denied: [email protected] (mysql-denied) from 102.90.109.80 Jun 21 18:34:51 phpmyadmin: user denied: [email protected] (mysql-denied) from 102.90.109.80 Jun 21 18:34:51 phpmyadmin: user denied: [email protected] (mysql-denied) from 102.90.109.80 Jun 21 18:34:51 phpmyadmin: user denied: [email protected] (mysql-denied) from 102.90.109.80 show less	Port Scan
🇩🇪 Skyrider	2026-06-21 16:53:04 (8 hours ago)	Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.	Bad Web Bot Web App Attack
🇧🇪 Saec	2026-06-21 16:45:05 (8 hours ago)	Jarvis auto-ban: CF honeypot path /wp-login.php (1× on saec.me)	Port Scan Web App Attack
🇫🇷 dynamix	2026-06-21 16:36:25 (8 hours ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇫🇮 YF	2026-06-21 16:00:25 (9 hours ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force
🇬🇧 Bytemark	2026-06-21 12:34:11 (12 hours ago)	102.90.109.80 - - [21/Jun/2026:13:34:00 +0100] "GET /xmlrpc.php HTTP/1.1" 404 27 "http://xiaomi.eu/x ... show more 102.90.109.80 - - [21/Jun/2026:13:34:00 +0100] "GET /xmlrpc.php HTTP/1.1" 404 27 "http://xiaomi.eu/xmlrpc.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 102.90.109.80 - - [21/Jun/2026:13:34:01 +0100] "GET /xmlrpc.php HTTP/1.1" 404 27 "http://xiaomi.eu/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0" 102.90.109.80 - - [21/Jun/2026:13:34:10 +0100] "GET /wp-login.php HTTP/1.1" 404 27 "http://xiaomi.eu/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" show less	Brute-Force Web App Attack
Anonymous	2026-06-21 09:20:36 (16 hours ago)	Automatically blocked after 9 security events. Observed repeated web application attack probes. Sour ... show more Automatically blocked after 9 security events. Observed repeated web application attack probes. Source: Cloudflare security controls. show less	Hacking Web App Attack
🇳🇱 i-turnradio.nl	2026-06-21 05:36:02 (19 hours ago)	2026-06-21 @ 07:36:01 (CET) ~ Blocked for trying to access: /xmlrpc.php	Web App Attack
🇮🇪 Coolnagour	2026-06-21 03:37:42 (21 hours ago)	http-probing: /xmlrpc.php	Web App Attack
🇳🇱 Site.eu	2026-06-21 01:44:40 (23 hours ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇮🇩 soc-yk	2026-06-20 23:55:13 (1 day ago)	Type: suspicious_network_activity Risk: 91 Events: 532 Evidence: - Persistent suspicious network ac ... show more Type: suspicious_network_activity Risk: 91 Events: 532 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Port Scan Hacking
🇲🇾 Rizzy	2026-06-20 23:52:07 (1 day ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇬🇧 Bytemark	2026-06-20 23:40:04 (1 day ago)	102.90.109.80 - - [21/Jun/2026:00:39:58 +0100] "GET /xmlrpc.php HTTP/1.1" 404 27 "http://xiaomi.eu/x ... show more 102.90.109.80 - - [21/Jun/2026:00:39:58 +0100] "GET /xmlrpc.php HTTP/1.1" 404 27 "http://xiaomi.eu/xmlrpc.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 102.90.109.80 - - [21/Jun/2026:00:39:58 +0100] "GET /xmlrpc.php HTTP/1.1" 404 27 "http://xiaomi.eu/xmlrpc.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 102.90.109.80 - - [21/Jun/2026:00:40:03 +0100] "GET /wp-login.php HTTP/1.1" 404 27 "http://xiaomi.eu/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0" show less	Brute-Force Web App Attack
Anonymous	2026-06-20 21:06:10 (1 day ago)	Attac	Brute-Force

Showing 1 to 15 of 191 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 187.191.48.4

🇹🇭 150.95.27.209

🇬🇧 89.37.172.131

🇰🇷 211.105.129.57

🇭🇰 194.187.178.5

🇩🇪 167.233.68.137

🇺🇸 165.154.163.136

🇸🇦 151.254.4.208

🇰🇷 113.131.183.15

🇩🇪 94.16.17.140

🇳🇱 45.148.10.152

🇺🇸 2604:a880:400:d1:0:4:9e93:3001

🇲🇴 182.93.50.90

🇵🇱 151.115.48.199

🇧🇷 138.36.100.162

🇸🇬 118.139.165.143

🇺🇸 64.62.156.37

🇭🇰 43.155.74.109

🇳🇱 20.71.254.235

🇬🇧 2.99.213.222