Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Nigeria

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Make a comment on this IP
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
102.89.2.28 attackbots 
Listed on    abuseat.org plus zen-spamhaus   / proto=6  .  srcport=56637  .  dstport=445  .     (3133)
 2020-09-28 05:26:31
102.89.2.28 attack 
Listed on    abuseat.org plus zen-spamhaus   / proto=6  .  srcport=56637  .  dstport=445  .     (3133)
 2020-09-27 21:45:27
102.89.2.28 attackspambots 
Listed on    abuseat.org plus zen-spamhaus   / proto=6  .  srcport=56637  .  dstport=445  .     (3133)
 2020-09-27 13:30:28
102.89.2.35 attackbotsspam 
1596284160 - 08/01/2020 14:16:00 Host: 102.89.2.35/102.89.2.35 Port: 445 TCP Blocked
 2020-08-02 04:02:25
102.89.2.40 attackspam 
1591388890 - 06/05/2020 22:28:10 Host: 102.89.2.40/102.89.2.40 Port: 445 TCP Blocked
 2020-06-06 05:16:05
102.89.2.186 attack 
1588507600 - 05/03/2020 14:06:40 Host: 102.89.2.186/102.89.2.186 Port: 445 TCP Blocked
 2020-05-04 03:08:15
102.89.2.49 attack 
1588507603 - 05/03/2020 14:06:43 Host: 102.89.2.49/102.89.2.49 Port: 445 TCP Blocked
 2020-05-04 03:06:54
102.89.2.34 attack 
(pop3d) Failed POP3 login from 102.89.2.34 (NG/Nigeria/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr  1 02:00:35 ir1 dovecot[566034]: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=102.89.2.34, lip=5.63.12.44, session=
 2020-04-01 06:55:48
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 102.89.2.222
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13406
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;102.89.2.222.			IN	A

;; AUTHORITY SECTION:
.			399	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400

;; Query time: 45 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 22:46:31 CST 2022
;; MSG SIZE  rcvd: 105
Host info
Host 222.2.89.102.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 222.2.89.102.in-addr.arpa: NXDOMAIN
Related IP info:
102.89.2.201
102.89.2.177
102.89.2.233
102.89.2.67
102.89.2.5
102.89.2.48
102.89.2.141
102.89.2.59
102.89.2.243
102.89.2.232
102.89.2.223
102.89.2.203
102.89.2.61
102.89.2.121
102.89.2.139
102.89.2.54
102.89.2.218
102.89.2.254
102.89.2.24
102.89.2.224
102.89.2.128
102.89.2.241
102.89.2.216
102.89.2.27
102.89.2.97
102.89.2.29
102.89.2.164
102.89.2.108
102.89.2.36
102.89.2.31
102.89.2.172
102.89.2.100
102.89.2.145
102.89.2.21
102.89.2.176
102.89.2.204
102.89.2.245
102.89.2.186
102.89.2.123
102.89.2.82
102.89.2.14
102.89.2.140
102.89.2.112
102.89.2.102
102.89.2.149
102.89.2.72
102.89.2.119
102.89.2.190
102.89.2.227
102.89.2.136
102.89.2.122
102.89.2.68
102.89.2.146
102.89.2.70
102.89.2.160
102.89.2.215
102.89.2.151
102.89.2.161
102.89.2.252
102.89.2.133
102.89.2.192
102.89.2.10
102.89.2.166
102.89.2.6
102.89.2.183
102.89.2.226
102.89.2.206
102.89.2.174
102.89.2.98
102.89.2.251
102.89.2.197
102.89.2.81
102.89.2.230
102.89.2.235
102.89.2.131
102.89.2.154
102.89.2.193
102.89.2.225
102.89.2.116
102.89.2.129
102.89.2.249
102.89.2.135
102.89.2.101
102.89.2.120
102.89.2.148
102.89.2.92
102.89.2.175
102.89.2.104
102.89.2.205
102.89.2.234
102.89.2.46
102.89.2.168
102.89.2.1
102.89.2.4
102.89.2.179
102.89.2.214
102.89.2.89
102.89.2.210
102.89.2.13
102.89.2.114
102.89.2.57
102.89.2.137
102.89.2.56
102.89.2.181
102.89.2.90
102.89.2.69
102.89.2.87
102.89.2.202
102.89.2.38
102.89.2.32
102.89.2.111
102.89.2.86
102.89.2.236
102.89.2.25
102.89.2.62
102.89.2.34
102.89.2.170
102.89.2.105
102.89.2.106
102.89.2.2
102.89.2.43
102.89.2.169
102.89.2.66
102.89.2.88
102.89.2.47
102.89.2.96
102.89.2.212
102.89.2.30
102.89.2.95
102.89.2.222
102.89.2.22
102.89.2.52
102.89.2.238
102.89.2.65
102.89.2.117
102.89.2.12
102.89.2.185
102.89.2.51
102.89.2.8
102.89.2.231
102.89.2.49
102.89.2.19
102.89.2.80
102.89.2.26
102.89.2.213
102.89.2.15
102.89.2.180
102.89.2.45
102.89.2.58
102.89.2.28
102.89.2.79
102.89.2.130
102.89.2.132
102.89.2.240
102.89.2.228
102.89.2.63
102.89.2.91
102.89.2.217
102.89.2.53
102.89.2.198
102.89.2.194
102.89.2.94
102.89.2.191
102.89.2.50
102.89.2.165
102.89.2.60
102.89.2.173
102.89.2.64
102.89.2.75
102.89.2.182
102.89.2.147
102.89.2.163
102.89.2.195
102.89.2.156
102.89.2.71
102.89.2.9
102.89.2.237
102.89.2.209
102.89.2.153
102.89.2.152
102.89.2.150
102.89.2.7
102.89.2.37
102.89.2.187
102.89.2.126
102.89.2.23
102.89.2.155
102.89.2.18
102.89.2.229
102.89.2.253
102.89.2.144
102.89.2.211
102.89.2.127
102.89.2.219
102.89.2.167
102.89.2.35
102.89.2.138
102.89.2.115
102.89.2.143
102.89.2.200
102.89.2.196
102.89.2.162
102.89.2.157
102.89.2.44
102.89.2.250
102.89.2.134
102.89.2.189
102.89.2.55
102.89.2.93
102.89.2.113
102.89.2.99
102.89.2.42
102.89.2.85
102.89.2.178
102.89.2.110
102.89.2.159
102.89.2.39
102.89.2.83
102.89.2.125
102.89.2.247
102.89.2.199
102.89.2.40
102.89.2.73
102.89.2.74
102.89.2.109
102.89.2.103
102.89.2.188
102.89.2.244
102.89.2.171
102.89.2.118
102.89.2.239
102.89.2.242
102.89.2.184
102.89.2.11
102.89.2.208
102.89.2.20
102.89.2.41
102.89.2.246
102.89.2.17
102.89.2.3
102.89.2.207
102.89.2.33
102.89.2.142
102.89.2.76
102.89.2.220
102.89.2.124
102.89.2.107
102.89.2.221
102.89.2.158
102.89.2.77
102.89.2.84
102.89.2.248
102.89.2.16
102.89.2.78
Related comments:
IP Type Details Datetime
41.62.210.230 attackbotsspam 
[10/Aug/2020 x@x
[10/Aug/2020 x@x
[10/Aug/2020 x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=41.62.210.230
 2020-08-11 00:36:10
36.89.213.100 attack 
$f2bV_matches
 2020-08-11 01:00:44
180.208.58.145 attack 
Bruteforce detected by fail2ban
 2020-08-11 00:37:44
170.106.150.204 attackspam 
2020-08-08 16:04:43 server sshd[87993]: Failed password for invalid user root from 170.106.150.204 port 48036 ssh2
 2020-08-11 01:13:38
69.143.66.225 attack 
69.143.66.225 - - [10/Aug/2020:13:56:13 +0100] "POST /xmlrpc.php HTTP/1.1" 503 18281 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1"
69.143.66.225 - - [10/Aug/2020:13:56:13 +0100] "POST /wp-login.php HTTP/1.1" 503 18281 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1"
69.143.66.225 - - [10/Aug/2020:14:03:20 +0100] "POST /xmlrpc.php HTTP/1.1" 503 18281 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1"
...
 2020-08-11 00:49:57
58.250.89.46 attackbots 
$f2bV_matches
 2020-08-11 01:06:46
45.84.196.70 attackbotsspam 
web-1 [ssh] SSH Attack
 2020-08-11 01:00:24
61.106.15.74 attackbotsspam 
Unauthorised access (Aug 10) SRC=61.106.15.74 LEN=48 TOS=0x10 PREC=0x40 TTL=115 ID=31434 DF TCP DPT=445 WINDOW=8192 SYN
 2020-08-11 01:06:13
189.35.204.217 attack 
189.35.204.217 - - [10/Aug/2020:18:04:55 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
189.35.204.217 - - [10/Aug/2020:18:04:58 +0100] "POST /wp-login.php HTTP/1.1" 403 897 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
189.35.204.217 - - [10/Aug/2020:18:08:21 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
...
 2020-08-11 01:16:55
161.82.172.94 attackbotsspam 
Banned for a week because repeated abuses, for example SSH, but not only
 2020-08-11 01:11:18
221.0.94.20 attackspam 
Aug 10 03:27:06 vm0 sshd[21153]: Failed password for root from 221.0.94.20 port 1825 ssh2
Aug 10 14:03:59 vm0 sshd[8876]: Failed password for root from 221.0.94.20 port 18126 ssh2
...
 2020-08-11 01:22:11
187.162.134.187 attack 
Automatic report - Port Scan Attack
 2020-08-11 00:42:00
200.89.154.99 attack 
Aug 10 18:20:18 vpn01 sshd[18655]: Failed password for root from 200.89.154.99 port 37210 ssh2
...
 2020-08-11 00:34:24
103.100.209.172 attackbots 
Aug 10 16:16:44 cosmoit sshd[25125]: Failed password for root from 103.100.209.172 port 48639 ssh2
 2020-08-11 01:03:54
150.158.193.244 attackbotsspam 
Aug 10 16:05:01 ift sshd\[56205\]: Failed password for root from 150.158.193.244 port 44504 ssh2Aug 10 16:07:16 ift sshd\[56616\]: Failed password for root from 150.158.193.244 port 40888 ssh2Aug 10 16:09:35 ift sshd\[56901\]: Failed password for root from 150.158.193.244 port 37262 ssh2Aug 10 16:11:55 ift sshd\[57451\]: Failed password for root from 150.158.193.244 port 33638 ssh2Aug 10 16:14:12 ift sshd\[57672\]: Failed password for root from 150.158.193.244 port 58250 ssh2
...
 2020-08-11 00:53:17

Recently Reported IPs

102.89.11.226 102.89.2.20 102.89.16.21 102.89.6.52
102.89.3.188 102.90.5.138 102.89.16.30 102.90.9.2
102.90.9.158 102.91.17.154 102.91.4.97 102.91.14.118
102.91.5.63 102.91.17.18 102.91.5.19 102.91.6.10
103.0.137.2 103.0.145.211 102.91.5.65 103.1.103.145