94.102.48.166 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United Kingdom

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
94.102.48.51	attack	2020-10-06 23:59:13 auth_plain authenticator failed for (User) [94.102.48.51]: 535 Incorrect authentication data (set_id=info@com.ua,) 2020-10-06 23:59:13 auth_plain authenticator failed for (User) [94.102.48.51]: 535 Incorrect authentication data (set_id=info@com.ua,) ...	2020-10-07 05:08:43
94.102.48.51	attackbots	Oct 6 04:25:20 mail postfix/smtpd[66480]: warning: unknown[94.102.48.51]: SASL LOGIN authentication failed: generic failure Oct 6 04:25:20 mail postfix/smtpd[66480]: warning: unknown[94.102.48.51]: SASL LOGIN authentication failed: generic failure Oct 6 04:25:20 mail postfix/smtpd[66480]: warning: unknown[94.102.48.51]: SASL LOGIN authentication failed: generic failure ...	2020-10-06 12:58:11
94.102.48.51	attackspam	2020-09-17T09:42:53.977879linuxbox-skyline auth[20164]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=postmaster rhost=94.102.48.51 ...	2020-09-18 00:26:23
94.102.48.51	attackspambots	2020-09-17T01:10:44.951513linuxbox-skyline auth[15760]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=sales rhost=94.102.48.51 ...	2020-09-17 16:29:04
94.102.48.51	attackspambots	2020-09-16T16:43:04.862696linuxbox-skyline auth[4901]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user rhost=94.102.48.51 ...	2020-09-17 07:33:44

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.102.48.166
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19748
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;94.102.48.166.			IN	A

;; AUTHORITY SECTION:
.			387	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022063000 1800 900 604800 86400

;; Query time: 41 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jul 01 01:41:31 CST 2022
;; MSG SIZE  rcvd: 106

Host info

166.48.102.94.in-addr.arpa domain name pointer no-reverse-dns-configured.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
166.48.102.94.in-addr.arpa	name = no-reverse-dns-configured.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
217.25.30.108	attackbots	RDP Brute-Force (honeypot 9)	2020-04-16 00:18:33
3.24.226.210	attack	Apr 15 19:05:27 site2 sshd\[7000\]: Failed password for root from 3.24.226.210 port 57784 ssh2Apr 15 19:09:51 site2 sshd\[7821\]: Invalid user chimistry from 3.24.226.210Apr 15 19:09:53 site2 sshd\[7821\]: Failed password for invalid user chimistry from 3.24.226.210 port 38334 ssh2Apr 15 19:14:14 site2 sshd\[8442\]: Invalid user work from 3.24.226.210Apr 15 19:14:17 site2 sshd\[8442\]: Failed password for invalid user work from 3.24.226.210 port 47118 ssh2 ...	2020-04-16 00:20:38
62.210.104.83	attackspam	62.210.104.83 - - [15/Apr/2020:18:19:44 +0200] "GET /wp-login.php HTTP/1.1" 200 1689 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 62.210.104.83 - - [15/Apr/2020:18:19:44 +0200] "POST /wp-login.php HTTP/1.1" 200 1811 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 62.210.104.83 - - [15/Apr/2020:18:19:44 +0200] "GET /wp-login.php HTTP/1.1" 200 1689 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 62.210.104.83 - - [15/Apr/2020:18:19:44 +0200] "POST /wp-login.php HTTP/1.1" 200 1790 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 62.210.104.83 - - [15/Apr/2020:18:19:44 +0200] "GET /wp-login.php HTTP/1.1" 200 1689 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 62.210.104.83 - - [15/Apr/2020:18:19:44 +0200] "POST /wp-login.php HTTP/1.1" 200 1790 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Fir ...	2020-04-16 00:28:56
52.62.171.180	attackspambots	De : Merci-LIDL ☑️ Re : 2͏é͏m͏e tentative pour ____# IP 52.62.171.180	2020-04-16 00:31:47
51.38.232.93	attackbotsspam	2020-04-13 21:30:36 server sshd[89897]: Failed password for invalid user pma from 51.38.232.93 port 38656 ssh2	2020-04-16 00:15:11
162.243.130.210	attack	Unauthorized connection attempt detected from IP address 162.243.130.210 to port 21	2020-04-16 00:23:03
123.16.90.57	attackbotsspam	(smtpauth) Failed SMTP AUTH login from 123.16.90.57 (VN/Vietnam/static.vnpt.vn): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-04-15 16:39:18 plain authenticator failed for ([127.0.0.1]) [123.16.90.57]: 535 Incorrect authentication data (set_id=info)	2020-04-16 00:29:55
190.151.32.228	attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-04-16 00:54:49
197.232.19.52	attackspambots	2020-04-15T12:22:54.819407shield sshd\[8055\]: Invalid user abc from 197.232.19.52 port 53796 2020-04-15T12:22:54.824096shield sshd\[8055\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.232.19.52 2020-04-15T12:22:57.295870shield sshd\[8055\]: Failed password for invalid user abc from 197.232.19.52 port 53796 ssh2 2020-04-15T12:27:18.436041shield sshd\[8905\]: Invalid user test from 197.232.19.52 port 56276 2020-04-15T12:27:18.440605shield sshd\[8905\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.232.19.52	2020-04-16 00:38:13
128.199.170.135	attackspam	Apr 15 14:51:29 XXXXXX sshd[450]: Invalid user patrice from 128.199.170.135 port 44063	2020-04-16 00:19:05
170.210.214.50	attackbotsspam	Apr 15 15:27:56 vps sshd[10246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.210.214.50 Apr 15 15:27:59 vps sshd[10246]: Failed password for invalid user tssrv from 170.210.214.50 port 43426 ssh2 Apr 15 15:41:26 vps sshd[10980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.210.214.50 ...	2020-04-16 00:50:43
113.252.73.248	attack	Honeypot attack, port: 5555, PTR: 248-73-252-113-on-nets.com.	2020-04-16 00:24:05
46.254.14.61	attackspam	2020-04-15T14:48:00.492715shield sshd\[1727\]: Invalid user upload from 46.254.14.61 port 40512 2020-04-15T14:48:00.496289shield sshd\[1727\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.254.14.61 2020-04-15T14:48:02.484906shield sshd\[1727\]: Failed password for invalid user upload from 46.254.14.61 port 40512 ssh2 2020-04-15T14:51:58.307556shield sshd\[2380\]: Invalid user user from 46.254.14.61 port 49022 2020-04-15T14:51:58.312138shield sshd\[2380\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.254.14.61	2020-04-16 00:38:32
77.55.212.110	attackspambots	Invalid user zxin20 from 77.55.212.110 port 42710	2020-04-16 00:26:26
36.75.142.194	attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-04-16 00:36:00

Recently Reported IPs

23.226.117.66	94.102.62.72	180.76.89.102	89.248.164.53
86.171.131.220	37.235.22.243	193.233.142.226	89.248.160.51
172.105.9.142	80.82.64.143	123.126.113.249	169.229.150.112
180.76.212.194	116.89.106.252	169.229.160.124	180.76.205.76
1.231.3.104	180.76.213.55	80.82.78.86	180.76.191.147