41.139.17.117 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Ghana

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
41.139.17.120	attack	Sep 23 20:54:35 mail.srvfarm.net postfix/smtpd[241499]: warning: unknown[41.139.17.120]: SASL PLAIN authentication failed: Sep 23 20:54:35 mail.srvfarm.net postfix/smtpd[241499]: lost connection after AUTH from unknown[41.139.17.120] Sep 23 20:57:56 mail.srvfarm.net postfix/smtps/smtpd[241517]: warning: unknown[41.139.17.120]: SASL PLAIN authentication failed: Sep 23 20:57:56 mail.srvfarm.net postfix/smtps/smtpd[241517]: lost connection after AUTH from unknown[41.139.17.120] Sep 23 20:58:28 mail.srvfarm.net postfix/smtps/smtpd[243899]: warning: unknown[41.139.17.120]: SASL PLAIN authentication failed:	2020-09-24 20:45:32
41.139.17.120	attack	Sep 23 20:54:35 mail.srvfarm.net postfix/smtpd[241499]: warning: unknown[41.139.17.120]: SASL PLAIN authentication failed: Sep 23 20:54:35 mail.srvfarm.net postfix/smtpd[241499]: lost connection after AUTH from unknown[41.139.17.120] Sep 23 20:57:56 mail.srvfarm.net postfix/smtps/smtpd[241517]: warning: unknown[41.139.17.120]: SASL PLAIN authentication failed: Sep 23 20:57:56 mail.srvfarm.net postfix/smtps/smtpd[241517]: lost connection after AUTH from unknown[41.139.17.120] Sep 23 20:58:28 mail.srvfarm.net postfix/smtps/smtpd[243899]: warning: unknown[41.139.17.120]: SASL PLAIN authentication failed:	2020-09-24 12:41:55
41.139.17.120	attackspambots	Sep 23 20:54:35 mail.srvfarm.net postfix/smtpd[241499]: warning: unknown[41.139.17.120]: SASL PLAIN authentication failed: Sep 23 20:54:35 mail.srvfarm.net postfix/smtpd[241499]: lost connection after AUTH from unknown[41.139.17.120] Sep 23 20:57:56 mail.srvfarm.net postfix/smtps/smtpd[241517]: warning: unknown[41.139.17.120]: SASL PLAIN authentication failed: Sep 23 20:57:56 mail.srvfarm.net postfix/smtps/smtpd[241517]: lost connection after AUTH from unknown[41.139.17.120] Sep 23 20:58:28 mail.srvfarm.net postfix/smtps/smtpd[243899]: warning: unknown[41.139.17.120]: SASL PLAIN authentication failed:	2020-09-24 04:11:34
41.139.176.250	attack	Icarus honeypot on github	2020-06-29 21:15:57
41.139.173.55	attackspam	failed_logins	2020-06-03 18:42:15
41.139.171.117	attackbots	(imapd) Failed IMAP login from 41.139.171.117 (KE/Kenya/41-139-171-117.safaricombusiness.co.ke): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 29 08:22:25 ir1 dovecot[264309]: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=41.139.171.117, lip=5.63.12.44, session=	2020-04-29 19:05:13
41.139.171.137	attackbots	(imapd) Failed IMAP login from 41.139.171.137 (KE/Kenya/41-139-171-137.safaricombusiness.co.ke): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 26 16:30:00 ir1 dovecot[264309]: imap-login: Disconnected (auth failed, 1 attempts in 4 secs): user=, method=PLAIN, rip=41.139.171.137, lip=5.63.12.44, TLS, session=<1O1HVjCk784pi6uJ>	2020-04-27 01:56:53
41.139.172.117	attackspambots	Dovecot Invalid User Login Attempt.	2020-04-17 01:07:20
41.139.171.35	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 04:43:17
41.139.171.139	attack	Brute force attempt	2020-02-05 05:06:59
41.139.170.203	attackbotsspam	Unauthorized connection attempt from IP address 41.139.170.203 on Port 445(SMB)	2020-01-16 04:46:28
41.139.174.30	attackspambots	Sun, 21 Jul 2019 18:28:08 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-22 05:55:07

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 41.139.17.117
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63748
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;41.139.17.117.			IN	A

;; AUTHORITY SECTION:
.			309	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020701 1800 900 604800 86400

;; Query time: 100 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 05:17:09 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 117.17.139.41.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 117.17.139.41.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
129.204.122.242	attackbotsspam	May 21 08:11:18 r.ca sshd[5700]: Failed password for invalid user jpc from 129.204.122.242 port 33342 ssh2	2020-05-21 21:09:56
162.243.137.228	attack	Unauthorized SSH login attempts	2020-05-21 21:28:45
103.144.148.172	attackspambots	detected by Fail2Ban	2020-05-21 21:23:36
129.28.103.85	attackspam	May 21 14:03:40 santamaria sshd\[12011\]: Invalid user bue from 129.28.103.85 May 21 14:03:40 santamaria sshd\[12011\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.103.85 May 21 14:03:43 santamaria sshd\[12011\]: Failed password for invalid user bue from 129.28.103.85 port 34240 ssh2 ...	2020-05-21 20:52:16
132.232.66.227	attackbotsspam	May 21 14:37:27 abendstille sshd\[16728\]: Invalid user vck from 132.232.66.227 May 21 14:37:27 abendstille sshd\[16728\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.66.227 May 21 14:37:29 abendstille sshd\[16728\]: Failed password for invalid user vck from 132.232.66.227 port 34504 ssh2 May 21 14:42:15 abendstille sshd\[21652\]: Invalid user vzu from 132.232.66.227 May 21 14:42:15 abendstille sshd\[21652\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.66.227 ...	2020-05-21 21:00:46
192.42.116.24	attackspam	$f2bV_matches	2020-05-21 20:52:03
119.235.19.66	attack	May 21 15:09:08 vps sshd[60671]: Failed password for invalid user xbc from 119.235.19.66 port 43836 ssh2 May 21 15:12:03 vps sshd[77300]: Invalid user nld from 119.235.19.66 port 60059 May 21 15:12:03 vps sshd[77300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.235.19.66 May 21 15:12:06 vps sshd[77300]: Failed password for invalid user nld from 119.235.19.66 port 60059 ssh2 May 21 15:15:12 vps sshd[94244]: Invalid user gkj from 119.235.19.66 port 48050 ...	2020-05-21 21:16:05
195.208.218.95	attackbotsspam	SMB Server BruteForce Attack	2020-05-21 21:05:56
118.180.50.200	attack	May 21 14:03:33 debian-2gb-nbg1-2 kernel: \[12321434.871687\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=118.180.50.200 DST=195.201.40.59 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=7889 DF PROTO=TCP SPT=59212 DPT=60010 WINDOW=14600 RES=0x00 SYN URGP=0	2020-05-21 21:01:06
218.98.26.102	attackspambots	May 21 13:03:19 sigma sshd\[5171\]: Invalid user ivn from 218.98.26.102May 21 13:03:21 sigma sshd\[5171\]: Failed password for invalid user ivn from 218.98.26.102 port 35478 ssh2 ...	2020-05-21 21:10:36
27.64.234.242	attackbots	Automatic report - Port Scan Attack	2020-05-21 20:56:54
49.235.143.244	attackspam	May 21 14:03:19 vps639187 sshd\[6649\]: Invalid user rvo from 49.235.143.244 port 57628 May 21 14:03:19 vps639187 sshd\[6649\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.143.244 May 21 14:03:21 vps639187 sshd\[6649\]: Failed password for invalid user rvo from 49.235.143.244 port 57628 ssh2 ...	2020-05-21 21:10:59
92.46.24.183	attackbots	2020-05-21 06:58:45.837282-0500 localhost smtpd[75565]: NOQUEUE: reject: RCPT from unknown[92.46.24.183]: 554 5.7.1 Service unavailable; Client host [92.46.24.183] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/92.46.24.183 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<[92.46.24.183]>	2020-05-21 21:26:52
51.83.66.171	attackbotsspam	ET CINS Active Threat Intelligence Poor Reputation IP group 36 - port: 7443 proto: TCP cat: Misc Attack	2020-05-21 20:57:45
88.255.176.50	attack	20/5/21@08:03:45: FAIL: Alarm-Network address from=88.255.176.50 20/5/21@08:03:45: FAIL: Alarm-Network address from=88.255.176.50 ...	2020-05-21 20:51:44

Recently Reported IPs

122.170.96.60	117.222.167.83	120.208.17.230	139.194.60.65
178.136.215.111	170.244.164.32	218.155.136.57	12.156.45.155
186.167.2.218	59.62.188.130	122.54.127.35	117.247.228.173
187.167.67.161	31.3.192.16	183.220.92.192	101.188.73.243
71.6.233.147	212.120.213.145	83.11.51.154	81.16.1.71