Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Nigeria

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Make a comment on this IP
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
102.89.2.28 attackbots 
Listed on    abuseat.org plus zen-spamhaus   / proto=6  .  srcport=56637  .  dstport=445  .     (3133)
 2020-09-28 05:26:31
102.89.2.28 attack 
Listed on    abuseat.org plus zen-spamhaus   / proto=6  .  srcport=56637  .  dstport=445  .     (3133)
 2020-09-27 21:45:27
102.89.2.28 attackspambots 
Listed on    abuseat.org plus zen-spamhaus   / proto=6  .  srcport=56637  .  dstport=445  .     (3133)
 2020-09-27 13:30:28
102.89.2.35 attackbotsspam 
1596284160 - 08/01/2020 14:16:00 Host: 102.89.2.35/102.89.2.35 Port: 445 TCP Blocked
 2020-08-02 04:02:25
102.89.2.40 attackspam 
1591388890 - 06/05/2020 22:28:10 Host: 102.89.2.40/102.89.2.40 Port: 445 TCP Blocked
 2020-06-06 05:16:05
102.89.2.186 attack 
1588507600 - 05/03/2020 14:06:40 Host: 102.89.2.186/102.89.2.186 Port: 445 TCP Blocked
 2020-05-04 03:08:15
102.89.2.49 attack 
1588507603 - 05/03/2020 14:06:43 Host: 102.89.2.49/102.89.2.49 Port: 445 TCP Blocked
 2020-05-04 03:06:54
102.89.2.34 attack 
(pop3d) Failed POP3 login from 102.89.2.34 (NG/Nigeria/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr  1 02:00:35 ir1 dovecot[566034]: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=102.89.2.34, lip=5.63.12.44, session=
 2020-04-01 06:55:48
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 102.89.2.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55497
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;102.89.2.94.			IN	A

;; AUTHORITY SECTION:
.			490	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 15:28:36 CST 2022
;; MSG SIZE  rcvd: 104
Host info
Host 94.2.89.102.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 94.2.89.102.in-addr.arpa: NXDOMAIN
Related IP info:
102.89.2.152
102.89.2.94
102.89.2.143
102.89.2.122
102.89.2.173
102.89.2.154
102.89.2.151
102.89.2.12
102.89.2.23
102.89.2.177
102.89.2.181
102.89.2.1
102.89.2.245
102.89.2.189
102.89.2.107
102.89.2.57
102.89.2.19
102.89.2.242
102.89.2.123
102.89.2.125
102.89.2.145
102.89.2.141
102.89.2.121
102.89.2.65
102.89.2.37
102.89.2.222
102.89.2.238
102.89.2.217
102.89.2.150
102.89.2.171
102.89.2.184
102.89.2.232
102.89.2.73
102.89.2.112
102.89.2.91
102.89.2.132
102.89.2.250
102.89.2.53
102.89.2.108
102.89.2.225
102.89.2.4
102.89.2.50
102.89.2.14
102.89.2.45
102.89.2.113
102.89.2.233
102.89.2.223
102.89.2.29
102.89.2.84
102.89.2.40
102.89.2.192
102.89.2.15
102.89.2.72
102.89.2.22
102.89.2.224
102.89.2.216
102.89.2.243
102.89.2.162
102.89.2.110
102.89.2.62
102.89.2.251
102.89.2.172
102.89.2.126
102.89.2.160
102.89.2.8
102.89.2.180
102.89.2.70
102.89.2.26
102.89.2.175
102.89.2.130
102.89.2.127
102.89.2.3
102.89.2.239
102.89.2.59
102.89.2.155
102.89.2.124
102.89.2.234
102.89.2.208
102.89.2.140
102.89.2.116
102.89.2.39
102.89.2.97
102.89.2.226
102.89.2.159
102.89.2.219
102.89.2.86
102.89.2.25
102.89.2.137
102.89.2.144
102.89.2.92
102.89.2.252
102.89.2.149
102.89.2.87
102.89.2.102
102.89.2.148
102.89.2.236
102.89.2.44
102.89.2.215
102.89.2.58
102.89.2.35
102.89.2.156
102.89.2.78
102.89.2.142
102.89.2.133
102.89.2.196
102.89.2.61
102.89.2.220
102.89.2.36
102.89.2.52
102.89.2.77
102.89.2.67
102.89.2.244
102.89.2.185
102.89.2.146
102.89.2.169
102.89.2.134
102.89.2.11
102.89.2.31
102.89.2.138
102.89.2.21
102.89.2.198
102.89.2.16
102.89.2.161
102.89.2.64
102.89.2.188
102.89.2.103
102.89.2.63
102.89.2.186
102.89.2.54
102.89.2.68
102.89.2.182
102.89.2.190
102.89.2.230
102.89.2.209
102.89.2.179
102.89.2.254
102.89.2.109
102.89.2.27
102.89.2.165
102.89.2.249
102.89.2.96
102.89.2.194
102.89.2.207
102.89.2.206
102.89.2.85
102.89.2.204
102.89.2.131
102.89.2.176
102.89.2.88
102.89.2.203
102.89.2.6
102.89.2.193
102.89.2.18
102.89.2.81
102.89.2.46
102.89.2.30
102.89.2.163
102.89.2.158
102.89.2.100
102.89.2.115
102.89.2.164
102.89.2.136
102.89.2.2
102.89.2.153
102.89.2.170
102.89.2.69
102.89.2.7
102.89.2.128
102.89.2.227
102.89.2.199
102.89.2.56
102.89.2.205
102.89.2.201
102.89.2.28
102.89.2.221
102.89.2.197
102.89.2.48
102.89.2.34
102.89.2.20
102.89.2.167
102.89.2.168
102.89.2.118
102.89.2.83
102.89.2.106
102.89.2.129
102.89.2.43
102.89.2.231
102.89.2.41
102.89.2.101
102.89.2.17
102.89.2.166
102.89.2.71
102.89.2.191
102.89.2.99
102.89.2.210
102.89.2.241
102.89.2.32
102.89.2.60
102.89.2.114
102.89.2.117
102.89.2.214
102.89.2.24
102.89.2.75
102.89.2.213
102.89.2.33
102.89.2.247
102.89.2.235
102.89.2.111
102.89.2.120
102.89.2.82
102.89.2.119
102.89.2.195
102.89.2.13
102.89.2.246
102.89.2.95
102.89.2.80
102.89.2.79
102.89.2.9
102.89.2.51
102.89.2.212
102.89.2.49
102.89.2.218
102.89.2.55
102.89.2.10
102.89.2.211
102.89.2.228
102.89.2.47
102.89.2.66
102.89.2.90
102.89.2.74
102.89.2.157
102.89.2.98
102.89.2.5
102.89.2.104
102.89.2.93
102.89.2.135
102.89.2.202
102.89.2.240
102.89.2.38
102.89.2.183
102.89.2.105
102.89.2.253
102.89.2.229
102.89.2.178
102.89.2.139
102.89.2.89
102.89.2.237
102.89.2.147
102.89.2.248
102.89.2.187
102.89.2.174
102.89.2.42
102.89.2.200
102.89.2.76
Related comments:
IP Type Details Datetime
185.200.118.85 attackbotsspam 
proto=tcp  .  spt=51804  .  dpt=3389  .  src=185.200.118.85  .  dst=xx.xx.4.1  .     (listed on     Github Combined on 3 lists )     (489)
 2019-08-04 01:45:36
203.215.48.78 attackspambots 
proto=tcp  .  spt=53625  .  dpt=25  .     (listed on Blocklist de  Aug 02)     (467)
 2019-08-04 02:10:36
177.67.143.208 attack 
Autoban   177.67.143.208 AUTH/CONNECT
 2019-08-04 02:18:04
139.59.94.54 attackbots 
Aug  3 17:13:30 vps647732 sshd[11437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.94.54
Aug  3 17:13:32 vps647732 sshd[11437]: Failed password for invalid user alex from 139.59.94.54 port 38194 ssh2
...
 2019-08-04 02:43:33
41.0.175.82 attack 
proto=tcp  .  spt=48449  .  dpt=25  .     (listed on Blocklist de  Aug 02)     (465)
 2019-08-04 02:15:22
193.70.38.80 attackspam 
Aug  2 16:35:53 fwservlet sshd[30227]: Invalid user james from 193.70.38.80
Aug  2 16:35:53 fwservlet sshd[30227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.38.80
Aug  2 16:35:55 fwservlet sshd[30227]: Failed password for invalid user james from 193.70.38.80 port 40004 ssh2
Aug  2 16:35:55 fwservlet sshd[30227]: Received disconnect from 193.70.38.80 port 40004:11: Bye Bye [preauth]
Aug  2 16:35:55 fwservlet sshd[30227]: Disconnected from 193.70.38.80 port 40004 [preauth]
Aug  2 16:45:52 fwservlet sshd[30472]: Invalid user minecraftserver from 193.70.38.80
Aug  2 16:45:52 fwservlet sshd[30472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.38.80


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=193.70.38.80
 2019-08-04 01:45:12
180.182.47.132 attackspam 
Aug  3 20:04:33 vps647732 sshd[15017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.182.47.132
Aug  3 20:04:35 vps647732 sshd[15017]: Failed password for invalid user matt from 180.182.47.132 port 37549 ssh2
...
 2019-08-04 02:15:56
142.93.254.124 attackspam 
2019-08-03T15:13:47.373186abusebot-2.cloudsearch.cf sshd\[27988\]: Invalid user nagios from 142.93.254.124 port 52834
 2019-08-04 02:31:29
186.227.179.230 attack 
SMTP-sasl brute force
...
 2019-08-04 02:13:47
200.44.50.155 attackspambots 
Automatic report - Banned IP Access
 2019-08-04 01:58:42
194.177.207.16 attackspam 
20 attempts against mh-ssh on flame.magehost.pro
 2019-08-04 02:47:21
185.175.93.18 attack 
firewall-block, port(s): 1983/tcp, 4363/tcp, 8803/tcp, 8923/tcp
 2019-08-04 01:44:09
87.121.49.250 attack 
proto=tcp  .  spt=43307  .  dpt=25  .     (listed on     Github Combined on 3 lists )     (458)
 2019-08-04 02:32:07
77.247.110.216 attackspam 
\[2019-08-03 13:28:27\] NOTICE\[2288\] chan_sip.c: Registration from '"120" \' failed for '77.247.110.216:5997' - Wrong password
\[2019-08-03 13:28:27\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-03T13:28:27.850-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="120",SessionID="0x7ff4d07e79a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.216/5997",Challenge="477991d6",ReceivedChallenge="477991d6",ReceivedHash="e2d13159e89a19454a22a18e3736fc2b"
\[2019-08-03 13:28:27\] NOTICE\[2288\] chan_sip.c: Registration from '"120" \' failed for '77.247.110.216:5997' - Wrong password
\[2019-08-03 13:28:27\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-03T13:28:27.944-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="120",SessionID="0x7ff4d0348688",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/7
 2019-08-04 01:49:14
167.99.143.90 attackbotsspam 
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.143.90  user=root
Failed password for root from 167.99.143.90 port 48764 ssh2
Invalid user lis from 167.99.143.90 port 43900
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.143.90
Failed password for invalid user lis from 167.99.143.90 port 43900 ssh2
 2019-08-04 02:07:07

Recently Reported IPs

36.11.170.190 31.129.161.199 197.37.53.47 117.213.40.187
82.59.223.125 82.151.125.243 120.86.254.69 178.250.89.130
122.54.161.222 43.155.114.143 20.109.241.83 41.47.116.136
43.132.109.207 178.72.68.219 207.190.89.7 78.239.6.168
167.94.138.129 59.96.241.215 51.91.17.125 87.252.241.105