102.89.2.139 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Nigeria

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
102.89.2.28	attackbots	Listed on abuseat.org plus zen-spamhaus / proto=6 . srcport=56637 . dstport=445 . (3133)	2020-09-28 05:26:31
102.89.2.28	attack	Listed on abuseat.org plus zen-spamhaus / proto=6 . srcport=56637 . dstport=445 . (3133)	2020-09-27 21:45:27
102.89.2.28	attackspambots	Listed on abuseat.org plus zen-spamhaus / proto=6 . srcport=56637 . dstport=445 . (3133)	2020-09-27 13:30:28
102.89.2.35	attackbotsspam	1596284160 - 08/01/2020 14:16:00 Host: 102.89.2.35/102.89.2.35 Port: 445 TCP Blocked	2020-08-02 04:02:25
102.89.2.40	attackspam	1591388890 - 06/05/2020 22:28:10 Host: 102.89.2.40/102.89.2.40 Port: 445 TCP Blocked	2020-06-06 05:16:05
102.89.2.186	attack	1588507600 - 05/03/2020 14:06:40 Host: 102.89.2.186/102.89.2.186 Port: 445 TCP Blocked	2020-05-04 03:08:15
102.89.2.49	attack	1588507603 - 05/03/2020 14:06:43 Host: 102.89.2.49/102.89.2.49 Port: 445 TCP Blocked	2020-05-04 03:06:54
102.89.2.34	attack	(pop3d) Failed POP3 login from 102.89.2.34 (NG/Nigeria/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 1 02:00:35 ir1 dovecot[566034]: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=102.89.2.34, lip=5.63.12.44, session=	2020-04-01 06:55:48

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 102.89.2.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57277
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;102.89.2.139.			IN	A

;; AUTHORITY SECTION:
.			291	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021202 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 12:59:29 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 139.2.89.102.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 139.2.89.102.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
54.37.88.73	attack	$f2bV_matches	2019-09-09 10:16:17
188.93.234.85	attack	Sep 8 11:13:45 friendsofhawaii sshd\[16270\]: Invalid user admin from 188.93.234.85 Sep 8 11:13:45 friendsofhawaii sshd\[16270\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.93.234.85 Sep 8 11:13:47 friendsofhawaii sshd\[16270\]: Failed password for invalid user admin from 188.93.234.85 port 49798 ssh2 Sep 8 11:20:05 friendsofhawaii sshd\[16748\]: Invalid user sinusbot from 188.93.234.85 Sep 8 11:20:05 friendsofhawaii sshd\[16748\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.93.234.85	2019-09-09 11:01:38
118.175.20.162	attackbots	445/tcp 445/tcp 445/tcp [2019-07-17/09-08]3pkt	2019-09-09 10:23:17
139.59.105.141	attackbotsspam	Sep 8 09:41:54 hanapaa sshd\[29825\]: Invalid user test from 139.59.105.141 Sep 8 09:41:54 hanapaa sshd\[29825\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.105.141 Sep 8 09:41:56 hanapaa sshd\[29825\]: Failed password for invalid user test from 139.59.105.141 port 50680 ssh2 Sep 8 09:46:44 hanapaa sshd\[30258\]: Invalid user 1234567 from 139.59.105.141 Sep 8 09:46:44 hanapaa sshd\[30258\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.105.141	2019-09-09 10:45:58
46.105.99.212	attack	xmlrpc attack	2019-09-09 10:45:39
37.59.147.186	attackbots	WordPress XMLRPC scan :: 37.59.147.186 0.152 BYPASS [09/Sep/2019:05:26:44 1000] [censored_1] "POST /xmlrpc.php HTTP/1.1" 200 413 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2019-09-09 11:04:19
178.156.202.250	attackspambots	1900/udp 11211/tcp 389/udp... [2019-08-24/09-08]8pkt,1pt.(tcp),2pt.(udp)	2019-09-09 10:59:32
61.148.194.162	attackspambots	Sep 9 01:50:54 server sshd\[16906\]: Invalid user ftptest from 61.148.194.162 port 33046 Sep 9 01:50:54 server sshd\[16906\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.148.194.162 Sep 9 01:50:56 server sshd\[16906\]: Failed password for invalid user ftptest from 61.148.194.162 port 33046 ssh2 Sep 9 01:54:07 server sshd\[21258\]: Invalid user 123456 from 61.148.194.162 port 59532 Sep 9 01:54:07 server sshd\[21258\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.148.194.162	2019-09-09 10:34:12
54.38.47.28	attackspambots	Sep 8 16:22:45 eddieflores sshd\[14723\]: Invalid user Oracle from 54.38.47.28 Sep 8 16:22:45 eddieflores sshd\[14723\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3115987.ip-54-38-47.eu Sep 8 16:22:48 eddieflores sshd\[14723\]: Failed password for invalid user Oracle from 54.38.47.28 port 46236 ssh2 Sep 8 16:28:16 eddieflores sshd\[15197\]: Invalid user 123456 from 54.38.47.28 Sep 8 16:28:16 eddieflores sshd\[15197\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3115987.ip-54-38-47.eu	2019-09-09 10:36:26
185.166.215.101	attackspam	Sep 8 21:55:14 ovpn sshd\[8437\]: Invalid user appadmin from 185.166.215.101 Sep 8 21:55:14 ovpn sshd\[8437\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.166.215.101 Sep 8 21:55:16 ovpn sshd\[8437\]: Failed password for invalid user appadmin from 185.166.215.101 port 59928 ssh2 Sep 8 22:02:09 ovpn sshd\[9655\]: Invalid user user from 185.166.215.101 Sep 8 22:02:09 ovpn sshd\[9655\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.166.215.101	2019-09-09 10:48:15
81.22.45.71	attackspambots	Unauthorized connection attempt from IP address 81.22.45.71 on Port 3389(RDP)	2019-09-09 10:26:30
14.63.167.192	attack	Sep 8 12:53:48 eddieflores sshd\[27794\]: Invalid user guest from 14.63.167.192 Sep 8 12:53:48 eddieflores sshd\[27794\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.63.167.192 Sep 8 12:53:50 eddieflores sshd\[27794\]: Failed password for invalid user guest from 14.63.167.192 port 37410 ssh2 Sep 8 12:58:37 eddieflores sshd\[28316\]: Invalid user vncuser from 14.63.167.192 Sep 8 12:58:37 eddieflores sshd\[28316\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.63.167.192	2019-09-09 10:31:45
222.163.175.216	attack	Unauthorised access (Sep 8) SRC=222.163.175.216 LEN=40 TTL=49 ID=34101 TCP DPT=8080 WINDOW=17045 SYN	2019-09-09 10:38:35
114.33.207.200	attackspambots	52869/tcp 23/tcp... [2019-07-23/09-08]4pkt,2pt.(tcp)	2019-09-09 10:57:59
123.206.18.14	attackspambots	DATE:2019-09-09 01:37:39, IP:123.206.18.14, PORT:ssh brute force auth on SSH service (patata)	2019-09-09 10:18:06

Recently Reported IPs

102.88.4.10	102.68.225.108	102.69.165.202	102.89.16.24
102.69.19.47	102.89.2.168	102.70.59.107	102.89.2.56
102.89.32.140	102.89.32.35	102.89.32.163	102.89.32.109
102.89.32.71	102.89.32.95	102.89.33.59	102.89.32.58
102.89.33.140	102.89.34.160	102.89.33.153	102.89.34.36