102.39.163.117

Basic Info

City: Benoni

Region: Gauteng

Country: South Africa

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 102.39.163.117
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58695
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;102.39.163.117.			IN	A

;; AUTHORITY SECTION:
.			499	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022040101 1800 900 604800 86400

;; Query time: 30 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Apr 01 20:40:08 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 117.163.39.102.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 117.163.39.102.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
124.16.4.5	attackbots	Jul 28 14:03:14 minden010 sshd[28284]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.16.4.5 Jul 28 14:03:16 minden010 sshd[28284]: Failed password for invalid user guotingyou from 124.16.4.5 port 11741 ssh2 Jul 28 14:07:21 minden010 sshd[29747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.16.4.5 ...	2020-07-28 20:48:42
162.241.193.129	attack	This IOC was found in a paste: https://pastebin.com/xLKF7Z5x with the title "Emotet_Doc_out_2020-07-28_11_57.txt" by paladin316 For more information, or to report interesting/incorrect findings, contact us - bot@tines.io	2020-07-28 20:24:07
213.227.154.138	attackspambots	213.227.154.138 secureserver@servers.com	2020-07-28 20:40:01
128.72.31.28	attackbotsspam	Jul 28 17:22:53 gw1 sshd[26319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.72.31.28 Jul 28 17:22:55 gw1 sshd[26319]: Failed password for invalid user yyl from 128.72.31.28 port 59080 ssh2 ...	2020-07-28 20:37:48
212.83.132.45	attackbots	[2020-07-28 08:29:59] NOTICE[1248] chan_sip.c: Registration from '"752"' failed for '212.83.132.45:9073' - Wrong password [2020-07-28 08:29:59] SECURITY[1275] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-07-28T08:29:59.251-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="752",SessionID="0x7f2720091a88",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.132.45/9073",Challenge="7b6ef2ee",ReceivedChallenge="7b6ef2ee",ReceivedHash="854259912c3cda4104a1b5fc05bac261" [2020-07-28 08:31:18] NOTICE[1248] chan_sip.c: Registration from '"750"' failed for '212.83.132.45:8971' - Wrong password [2020-07-28 08:31:18] SECURITY[1275] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-07-28T08:31:18.357-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="750",SessionID="0x7f2720091a88",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.132 ...	2020-07-28 20:36:00
85.209.0.161	attackbots	Jul 28 14:11:31 tor-proxy-02 sshd\[23977\]: User root from 85.209.0.161 not allowed because not listed in AllowUsers Jul 28 14:11:31 tor-proxy-02 sshd\[23977\]: Connection closed by 85.209.0.161 port 63812 \[preauth\] Jul 28 14:11:32 tor-proxy-02 sshd\[23978\]: User root from 85.209.0.161 not allowed because not listed in AllowUsers ...	2020-07-28 20:23:27
112.85.42.188	attackbotsspam	07/28/2020-08:24:43.120621 112.85.42.188 Protocol: 6 ET SCAN Potential SSH Scan	2020-07-28 20:26:39
79.8.196.108	attackbotsspam	$f2bV_matches	2020-07-28 20:30:52
59.41.95.60	attack	1595938079 - 07/28/2020 14:07:59 Host: 59.41.95.60/59.41.95.60 Port: 445 TCP Blocked	2020-07-28 20:34:54
182.253.119.50	attackbots	Jul 28 14:39:23 ip106 sshd[5175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.253.119.50 Jul 28 14:39:25 ip106 sshd[5175]: Failed password for invalid user wht from 182.253.119.50 port 35630 ssh2 ...	2020-07-28 20:49:23
198.211.120.99	attack	Jul 28 12:26:55 onepixel sshd[3656956]: Invalid user yyl from 198.211.120.99 port 47380 Jul 28 12:26:55 onepixel sshd[3656956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.211.120.99 Jul 28 12:26:55 onepixel sshd[3656956]: Invalid user yyl from 198.211.120.99 port 47380 Jul 28 12:26:57 onepixel sshd[3656956]: Failed password for invalid user yyl from 198.211.120.99 port 47380 ssh2 Jul 28 12:30:42 onepixel sshd[3659068]: Invalid user lirui from 198.211.120.99 port 59336	2020-07-28 20:36:29
193.27.228.178	attackspambots	Jul 28 14:07:41 debian-2gb-nbg1-2 kernel: \[18196562.243635\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=193.27.228.178 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=4607 PROTO=TCP SPT=59016 DPT=3379 WINDOW=1024 RES=0x00 SYN URGP=0	2020-07-28 20:51:07
64.90.36.114	attack	64.90.36.114 - - [28/Jul/2020:13:56:12 +0200] "POST /xmlrpc.php HTTP/1.1" 403 21860 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 64.90.36.114 - - [28/Jul/2020:14:07:47 +0200] "POST /xmlrpc.php HTTP/1.1" 403 12590 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-07-28 20:47:51
134.122.126.86	attack	$f2bV_matches	2020-07-28 20:20:07
183.89.243.58	attackbots	Dovecot Invalid User Login Attempt.	2020-07-28 20:41:55

Recently Reported IPs

102.39.107.32	102.89.33.13	37.107.213.130	102.89.33.159
102.89.33.178	102.89.34.222	102.89.34.238	102.89.34.34
102.9.247.128	102.91.17.78	102.91.4.153	102.91.5.219
102.91.5.238	102.91.5.5	102.91.6.94	103.1.105.26
103.1.148.120	103.1.185.227	103.1.187.249	103.1.213.221