102.90.115.28

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
26% Elevated
17 reports
15 reporters Β· latest 53 minutes ago
ISP
MTN Nigeria
Usage Type
Mobile ISP
ASN
AS29465
Domain Name
mtnnigeria.net
Country
πŸ‡³πŸ‡¬ Nigeria
City
Port Harcourt, Rivers State
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
17 from 15 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations πŸ‡©πŸ‡ͺ Germany 2 πŸ‡«πŸ‡· France 2 πŸ‡ΊπŸ‡Έ United States of America 2
Most common categories Port Scan 3 Hacking 3 Bad Web Bot 2 Exploited Host 1 DDoS Attack 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
πŸ‡©πŸ‡ͺ IP Analyzer
Unauthorized connection attempt from IP address 102.90.115.28 on Port 445(SMB)
Port Scan
πŸ‡¨πŸ‡­ ALPHANET
Botnet or web spider not respecting robots.txt
DDoS Attack Exploited Host
πŸ‡ΊπŸ‡Έ ι¬Όε½±233
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
πŸ‡ΊπŸ‡Έ ι¬Όε½±233
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
πŸ‡©πŸ‡ͺ Luhte
Unsolicited TCP connection from 102.90.115.28 to port 0 at 2026-09-05T18:39:17Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
Port Scan Hacking
πŸ‡«πŸ‡· Entalpi.net
Tried to hit sensible closed port commonly used in attacks
Port Scan Hacking
πŸ‡«πŸ‡· EvoX
Hacking
πŸ‡«πŸ‡· sthoyer.de
Port Scan
πŸ‡ΊπŸ‡Έ cwytech
Fleet-wide ban from the Ghostfleet πŸ‘». Triggered by scenario: cwy/global-exclusion-high.
Hacking
πŸ‡¬πŸ‡§ PeravixGroup
Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud
IoT Targeted Brute-Force
πŸ‡ΊπŸ‡Έ TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
πŸ‡ΊπŸ‡Έ kosada.com
Web bot: DDoS
DDoS Attack Bad Web Bot
Anonymous
Automated report (2026-01-30T14:33:06-05:00). Spambot detected.
Blog Spam Bad Web Bot
πŸ‡©πŸ‡ͺ 403veli
Confirmed malicious activity observed via T-Pot honeypot Observed 35 events on port 445 (unknown) from 2026-01-06T12:05:17+00:00 to 2026-01-06T12:13:09.334000+00:00. Sample: {"src_port": 19167, "dest_port": 445, "src_ip": "102.90.115.28"}
Brute-Force
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

πŸ‡§πŸ‡· 177.27.76.210
πŸ‡³πŸ‡¬ 165.73.201.216
πŸ‡·πŸ‡΄ 80.94.95.173
πŸ‡ΊπŸ‡Έ 66.132.172.146
πŸ‡§πŸ‡· 45.163.85.221
πŸ‡ΊπŸ‡Έ 35.222.180.213
πŸ‡ͺπŸ‡Έ 213.94.49.13
πŸ‡ΊπŸ‡Έ 194.54.144.107
πŸ‡ΊπŸ‡Έ 194.54.144.105
πŸ‡²πŸ‡½ 189.238.221.148
πŸ‡§πŸ‡· 179.209.205.236
πŸ‡°πŸ‡· 175.204.214.145
πŸ‡§πŸ‡· 168.205.190.245
πŸ‡­πŸ‡° 165.154.61.12
πŸ‡ΊπŸ‡Έ 159.89.135.7
πŸ‡ΊπŸ‡Έ 109.105.210.40
πŸ‡ΊπŸ‡Έ 71.6.134.229
πŸ‡ΊπŸ‡Έ 52.128.42.104
πŸ‡΅πŸ‡Ή 37.189.118.172
πŸ‡ΉπŸ‡Ό 198.235.24.102