Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Nigeria

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
102.89.2.28 attackbots
Listed on    abuseat.org plus zen-spamhaus   / proto=6  .  srcport=56637  .  dstport=445  .     (3133)
2020-09-28 05:26:31
102.89.2.28 attack
Listed on    abuseat.org plus zen-spamhaus   / proto=6  .  srcport=56637  .  dstport=445  .     (3133)
2020-09-27 21:45:27
102.89.2.28 attackspambots
Listed on    abuseat.org plus zen-spamhaus   / proto=6  .  srcport=56637  .  dstport=445  .     (3133)
2020-09-27 13:30:28
102.89.2.35 attackbotsspam
1596284160 - 08/01/2020 14:16:00 Host: 102.89.2.35/102.89.2.35 Port: 445 TCP Blocked
2020-08-02 04:02:25
102.89.2.40 attackspam
1591388890 - 06/05/2020 22:28:10 Host: 102.89.2.40/102.89.2.40 Port: 445 TCP Blocked
2020-06-06 05:16:05
102.89.2.186 attack
1588507600 - 05/03/2020 14:06:40 Host: 102.89.2.186/102.89.2.186 Port: 445 TCP Blocked
2020-05-04 03:08:15
102.89.2.49 attack
1588507603 - 05/03/2020 14:06:43 Host: 102.89.2.49/102.89.2.49 Port: 445 TCP Blocked
2020-05-04 03:06:54
102.89.2.34 attack
(pop3d) Failed POP3 login from 102.89.2.34 (NG/Nigeria/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr  1 02:00:35 ir1 dovecot[566034]: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=102.89.2.34, lip=5.63.12.44, session=
2020-04-01 06:55:48
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 102.89.2.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57277
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;102.89.2.139.			IN	A

;; AUTHORITY SECTION:
.			291	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021202 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 12:59:29 CST 2022
;; MSG SIZE  rcvd: 105
Host info
Host 139.2.89.102.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 139.2.89.102.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
222.186.173.183 attack
2020-05-15T09:06:07.548903centos sshd[27859]: Failed password for root from 222.186.173.183 port 50320 ssh2
2020-05-15T09:06:13.842063centos sshd[27859]: Failed password for root from 222.186.173.183 port 50320 ssh2
2020-05-15T09:06:18.607126centos sshd[27859]: Failed password for root from 222.186.173.183 port 50320 ssh2
...
2020-05-15 15:12:24
88.151.139.140 attackspambots
From CCTV User Interface Log
...::ffff:88.151.139.140 - - [14/May/2020:23:54:20 +0000] "GET / HTTP/1.1" 200 960
::ffff:88.151.139.140 - - [14/May/2020:23:54:20 +0000] "GET / HTTP/1.1" 200 960
...
2020-05-15 15:07:19
46.101.206.205 attackspambots
Port scan denied
2020-05-15 14:53:06
185.137.234.155 attack
May 15 08:44:53 debian-2gb-nbg1-2 kernel: \[11783943.244720\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.137.234.155 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=6442 PROTO=TCP SPT=41586 DPT=3353 WINDOW=1024 RES=0x00 SYN URGP=0
2020-05-15 14:59:12
43.231.60.172 attackspambots
php WP PHPmyadamin ABUSE blocked for 12h
2020-05-15 14:33:58
222.186.173.215 attackbots
May 15 08:28:27 home sshd[30000]: Failed password for root from 222.186.173.215 port 30514 ssh2
May 15 08:28:41 home sshd[30000]: error: maximum authentication attempts exceeded for root from 222.186.173.215 port 30514 ssh2 [preauth]
May 15 08:28:47 home sshd[30055]: Failed password for root from 222.186.173.215 port 37512 ssh2
...
2020-05-15 14:45:30
160.153.147.141 attack
xmlrpc attack
2020-05-15 14:59:53
112.137.138.4 attack
C1,DEF GET /phpMyAdmin/scripts/setup.php
2020-05-15 15:06:49
64.225.57.63 attack
Automatically reported by fail2ban report script (mx1)
2020-05-15 14:49:40
106.13.228.153 attackbots
May 15 10:03:35 gw1 sshd[26859]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.228.153
May 15 10:03:37 gw1 sshd[26859]: Failed password for invalid user postgres from 106.13.228.153 port 59152 ssh2
...
2020-05-15 14:57:54
212.129.250.84 attackbotsspam
May 15 08:08:00 vserver sshd\[17069\]: Invalid user deploy from 212.129.250.84May 15 08:08:02 vserver sshd\[17069\]: Failed password for invalid user deploy from 212.129.250.84 port 52538 ssh2May 15 08:12:18 vserver sshd\[17150\]: Invalid user mobile from 212.129.250.84May 15 08:12:21 vserver sshd\[17150\]: Failed password for invalid user mobile from 212.129.250.84 port 44948 ssh2
...
2020-05-15 15:15:10
140.143.230.161 attackspambots
Invalid user ranger from 140.143.230.161 port 38668
2020-05-15 15:10:51
51.178.41.60 attackspambots
May 15 08:31:35 ns381471 sshd[30976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.41.60
May 15 08:31:38 ns381471 sshd[30976]: Failed password for invalid user build from 51.178.41.60 port 33864 ssh2
2020-05-15 14:58:45
157.245.194.35 attackbots
$f2bV_matches
2020-05-15 14:53:47
175.36.183.218 attackbotsspam
2020-05-15T06:57:41.773404rocketchat.forhosting.nl sshd[1216]: Invalid user charles from 175.36.183.218 port 37262
2020-05-15T06:57:44.141556rocketchat.forhosting.nl sshd[1216]: Failed password for invalid user charles from 175.36.183.218 port 37262 ssh2
2020-05-15T07:01:41.520979rocketchat.forhosting.nl sshd[1338]: Invalid user testftp from 175.36.183.218 port 33620
...
2020-05-15 14:40:49

Recently Reported IPs

102.88.4.10 102.68.225.108 102.69.165.202 102.89.16.24
102.69.19.47 102.89.2.168 102.70.59.107 102.89.2.56
102.89.32.140 102.89.32.35 102.89.32.163 102.89.32.109
102.89.32.71 102.89.32.95 102.89.33.59 102.89.32.58
102.89.33.140 102.89.34.160 102.89.33.153 102.89.34.36