Substantial Risk
Threat level 8/10 for 102.89.17.238 based on 26 documented incidents.
Consistent suspicious behavior patterns. 82% confidence rating.
More threatening than 80% of monitored IPs
IP Address
102.89.17.238
IPv4
Public
NG
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
NG
Location
MTN NIGERIA Communication...
ASN 29465
26
Reports
Honeypot
Data Source
Threat Categories
SSH
26
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Reputable Network
This IP is hosted on a network (ASN 29465) with generally good reputation. The ISP MTN NIGERIA Communication limited maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Configure firewall rules and intrusion detection alerts.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
0/10
Inactive
Confidence Score
72%
High Confidence
Confidence History
3. Mar 2026 - 25. Apr 2026
82%
Current
Stable
Trend
Security Reports (26)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 102.89.17.238
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
NG
- ASN
- AS29465
- ISP
- MTN NIGERIA Communication limited
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 26
- First Reported
- 3 Mar 2026
- Last Reported
- 24 Apr 2026, 10:01
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS29465
MTN NIGERIA Communication limited
NG
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
168
Total IPs Monitored
970
Total Reports
5.8
Reports per IP
Network Context
This IP address belongs to MTN NIGERIA Communication limited (AS29465), which manages 168 IP addresses in our monitoring system. Out of these, 970 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
80
%
Global Threat Ranking
This IP is more threatening than 80% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,769 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
26
avg: 23
=
Network Comparison
Compared against 326 IPs in ASN 29465
Threat Level
8/10
network avg: 4.3
++
Total Reports
26
network avg: 3
++
Network MTN NIGERIA Communication limited has overall threat level 1/10
Geographic Comparison
Compared against 649 IPs in NG
Threat Level
8/10
country avg: 4.7
++
Total Reports
26
country avg: 6
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Saturday
6 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
26
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 04:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
187,378 threat incidents tracked globally • Last 24h: 18,990 Logs
FEED
Top Threat Sources
-
01
United States38,468 20.5% -
02
India29,138 15.6% -
03
China26,029 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,144 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,551 3% -
08
Russia4,703 2.5% -
09
Pakistan4,677 2.5% -
10
Netherlands4,358 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.8/10
Avg Threat
55%
Avg Confidence
18
High Threat
High-risk network: Majority of related IPs are flagged
102.88.137.145
10/10
Confidence
95%
Reports
103
Location
NG
NG
102.88.137.213
10/10
Confidence
91%
Reports
267
Location
NG
NG
102.88.137.80
8/10
Confidence
86%
Reports
181
Location
NG
NG
197.210.53.178
10/10
Confidence
62%
Reports
5
Location
NG
NG
102.90.97.163
10/10
Confidence
57%
Reports
11
Location
NG
NG
102.88.108.90
10/10
Confidence
57%
Reports
6
Location
NG
NG
102.90.102.109
10/10
Confidence
56%
Reports
8
Location
NG
NG
102.88.115.165
10/10
Confidence
56%
Reports
8
Location
NG
NG
102.91.105.100
10/10
Confidence
56%
Reports
4
Location
NG
NG
102.91.104.174
10/10
Confidence
53%
Reports
4
Location
NG
NG
102.90.98.246
10/10
Confidence
53%
Reports
4
Location
NG
NG
197.210.52.171
0/10
Confidence
51%
Reports
3
Location
NG
NG
102.91.72.92
0/10
Confidence
47%
Reports
3
Location
NG
NG
102.90.34.90
7/10
Confidence
46%
Reports
4
Location
NG
NG
102.88.115.104
10/10
Confidence
40%
Reports
5
Location
NG
NG
102.89.43.39
10/10
Confidence
40%
Reports
5
Location
NG
NG
102.90.116.180
10/10
Confidence
40%
Reports
5
Location
NG
NG
102.90.80.47
10/10
Confidence
40%
Reports
5
Location
NG
NG
197.210.55.208
10/10
Confidence
40%
Reports
4
Location
NG
NG
102.91.77.135
10/10
Confidence
40%
Reports
4
Location
NG
NG
IPs from the same country with similar threat profiles.
15
Related IPs
8.5/10
Avg Threat
96%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
152.32.141.172
7/10
Confidence
100%
Reports
77
ISP
UCLOUD INFORMAT...
102.220.160.154
8/10
Confidence
100%
Reports
26
ISP
VPS Dedicated LLC
165.154.10.187
7/10
Confidence
98%
Reports
72
ISP
UCLOUD INFORMAT...
152.32.141.40
7/10
Confidence
98%
Reports
71
ISP
UCLOUD INFORMAT...
152.32.141.86
7/10
Confidence
96%
Reports
89
ISP
UCLOUD INFORMAT...
152.32.143.6
8/10
Confidence
96%
Reports
76
ISP
UCLOUD INFORMAT...
102.88.137.145
10/10
Confidence
95%
Reports
103
ISP
MTN NIGERIA Com...
105.114.15.2
8/10
Confidence
95%
Reports
21
ISP
Celtel Nigeria ...
165.154.10.165
8/10
Confidence
95%
Reports
15
ISP
UCLOUD INFORMAT...
152.32.141.199
10/10
Confidence
95%
Reports
15
ISP
UCLOUD INFORMAT...
165.154.11.225
10/10
Confidence
94%
Reports
85
ISP
UCLOUD INFORMAT...
152.32.141.9
10/10
Confidence
94%
Reports
85
ISP
UCLOUD INFORMAT...
152.32.141.176
10/10
Confidence
94%
Reports
83
ISP
UCLOUD INFORMAT...
165.154.11.48
10/10
Confidence
94%
Reports
75
ISP
UCLOUD INFORMAT...
152.32.141.217
8/10
Confidence
94%
Reports
74
ISP
UCLOUD INFORMAT...
IPs with similar threat level and confidence scores.
15
Related IPs
8.4/10
Avg Threat
82%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
207.90.244.3
8/10
Confidence
82%
Reports
13,315
Location
US
US
207.90.244.2
8/10
Confidence
82%
Reports
13,206
Location
US
US
147.182.225.86
8/10
Confidence
82%
Reports
9,097
Location
US
US
130.12.181.104
8/10
Confidence
82%
Reports
3,340
Location
DE
DE
137.184.95.216
8/10
Confidence
82%
Reports
2,213
Location
US
US
101.36.107.103
8/10
Confidence
82%
Reports
890
Location
HK
HK
60.254.111.212
8/10
Confidence
82%
Reports
588
Location
IN
IN
64.62.197.212
8/10
Confidence
82%
Reports
571
Location
US
US
65.49.1.66
8/10
Confidence
82%
Reports
569
Location
US
US
204.76.203.213
10/10
Confidence
82%
Reports
561
Location
NL
NL
184.105.247.254
8/10
Confidence
82%
Reports
552
Location
US
US
216.218.206.67
10/10
Confidence
82%
Reports
522
Location
US
US
65.49.1.52
8/10
Confidence
82%
Reports
521
Location
US
US
80.94.95.221
10/10
Confidence
82%
Reports
469
Location
RO
RO
95.110.231.151
8/10
Confidence
82%
Reports
397
Location
IT
IT
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203