94.102.48.239 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
94.102.48.51	attack	2020-10-06 23:59:13 auth_plain authenticator failed for (User) [94.102.48.51]: 535 Incorrect authentication data (set_id=info@com.ua,) 2020-10-06 23:59:13 auth_plain authenticator failed for (User) [94.102.48.51]: 535 Incorrect authentication data (set_id=info@com.ua,) ...	2020-10-07 05:08:43
94.102.48.51	attackbots	Oct 6 04:25:20 mail postfix/smtpd[66480]: warning: unknown[94.102.48.51]: SASL LOGIN authentication failed: generic failure Oct 6 04:25:20 mail postfix/smtpd[66480]: warning: unknown[94.102.48.51]: SASL LOGIN authentication failed: generic failure Oct 6 04:25:20 mail postfix/smtpd[66480]: warning: unknown[94.102.48.51]: SASL LOGIN authentication failed: generic failure ...	2020-10-06 12:58:11
94.102.48.51	attackspam	2020-09-17T09:42:53.977879linuxbox-skyline auth[20164]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=postmaster rhost=94.102.48.51 ...	2020-09-18 00:26:23
94.102.48.51	attackspambots	2020-09-17T01:10:44.951513linuxbox-skyline auth[15760]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=sales rhost=94.102.48.51 ...	2020-09-17 16:29:04
94.102.48.51	attackspambots	2020-09-16T16:43:04.862696linuxbox-skyline auth[4901]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user rhost=94.102.48.51 ...	2020-09-17 07:33:44

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.102.48.239
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8346
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;94.102.48.239.			IN	A

;; AUTHORITY SECTION:
.			186	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022063001 1800 900 604800 86400

;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jul 01 02:38:42 CST 2022
;; MSG SIZE  rcvd: 106

Host info

239.48.102.94.in-addr.arpa domain name pointer no-reverse-dns-configured.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
239.48.102.94.in-addr.arpa	name = no-reverse-dns-configured.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
218.249.45.162	attack	SSH login attempts.	2020-10-09 20:22:56
2.87.24.124	attackspambots	2020-10-09T06:34:24.864046server.mjenks.net sshd[209178]: Invalid user photos from 2.87.24.124 port 46498 2020-10-09T06:34:24.870801server.mjenks.net sshd[209178]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.87.24.124 2020-10-09T06:34:24.864046server.mjenks.net sshd[209178]: Invalid user photos from 2.87.24.124 port 46498 2020-10-09T06:34:26.607595server.mjenks.net sshd[209178]: Failed password for invalid user photos from 2.87.24.124 port 46498 ssh2 2020-10-09T06:36:40.027294server.mjenks.net sshd[209355]: Invalid user jakarta from 2.87.24.124 port 51452 ...	2020-10-09 20:13:15
134.175.59.225	attackspam	2020-10-09T15:29:55.493653paragon sshd[791965]: Failed password for root from 134.175.59.225 port 45890 ssh2 2020-10-09T15:33:20.829834paragon sshd[792018]: Invalid user web1 from 134.175.59.225 port 34992 2020-10-09T15:33:20.833713paragon sshd[792018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.59.225 2020-10-09T15:33:20.829834paragon sshd[792018]: Invalid user web1 from 134.175.59.225 port 34992 2020-10-09T15:33:23.454791paragon sshd[792018]: Failed password for invalid user web1 from 134.175.59.225 port 34992 ssh2 ...	2020-10-09 20:18:05
45.55.233.213	attackspam	[f2b] sshd bruteforce, retries: 1	2020-10-09 20:16:45
120.92.94.95	attackspambots	[f2b] sshd bruteforce, retries: 1	2020-10-09 20:33:26
184.105.247.196	attack	[N1.H1.VM1] Port Scanner Detected Blocked by UFW	2020-10-09 20:19:20
114.232.142.236	attackbots	TCP (SYN) 114.232.142.236:39296 -> port 23, len 40	2020-10-09 19:58:07
167.114.114.66	attackbotsspam	Oct 9 13:52:01 s1 sshd\[8775\]: Invalid user admin from 167.114.114.66 port 43562 Oct 9 13:52:01 s1 sshd\[8775\]: Failed password for invalid user admin from 167.114.114.66 port 43562 ssh2 Oct 9 14:08:36 s1 sshd\[13272\]: User mail from 167.114.114.66 not allowed because not listed in AllowUsers Oct 9 14:08:36 s1 sshd\[13272\]: Failed password for invalid user mail from 167.114.114.66 port 52118 ssh2 Oct 9 14:15:23 s1 sshd\[18735\]: Invalid user minecraft from 167.114.114.66 port 50586 Oct 9 14:15:23 s1 sshd\[18735\]: Failed password for invalid user minecraft from 167.114.114.66 port 50586 ssh2 ...	2020-10-09 20:26:16
202.191.132.211	attackspam	Found on CINS badguys / proto=6 . srcport=50120 . dstport=445 SMB . (1739)	2020-10-09 20:25:15
103.206.250.211	attackspam	1602190141 - 10/08/2020 22:49:01 Host: 103.206.250.211/103.206.250.211 Port: 445 TCP Blocked ...	2020-10-09 20:28:06
122.194.229.54	attackspam	2020-10-09T15:14:04.983808afi-git.jinr.ru sshd[30105]: Failed password for root from 122.194.229.54 port 59688 ssh2 2020-10-09T15:14:08.513529afi-git.jinr.ru sshd[30105]: Failed password for root from 122.194.229.54 port 59688 ssh2 2020-10-09T15:14:11.439050afi-git.jinr.ru sshd[30105]: Failed password for root from 122.194.229.54 port 59688 ssh2 2020-10-09T15:14:11.439188afi-git.jinr.ru sshd[30105]: error: maximum authentication attempts exceeded for root from 122.194.229.54 port 59688 ssh2 [preauth] 2020-10-09T15:14:11.439202afi-git.jinr.ru sshd[30105]: Disconnecting: Too many authentication failures [preauth] ...	2020-10-09 20:17:22
63.80.187.40	attackbots	E-Mail Spam (RBL) [REJECTED]	2020-10-09 20:29:01
119.102.24.183	attackspam	Fail2Ban - SMTP Bruteforce Attempt	2020-10-09 20:27:46
182.150.57.34	attackspam	Brute%20Force%20SSH	2020-10-09 20:12:23
23.247.5.197	attackbotsspam	{Attempting port 25. Deferred} Received: by unixhost (Postfix)N7 Thu, 8 Oct 2020 16:36:42 -0400 (EDT)N# Delivered-To: support@o########g.comN; s=dkim; i=wayne.powell@swinductork.top;N! bh=lL93pg	2020-10-09 20:09:09

Recently Reported IPs

42.156.139.226	94.102.48.79	137.226.166.174	180.76.218.217
98.226.49.17	176.119.7.70	98.209.242.238	176.119.7.68
176.119.7.101	98.39.170.161	180.76.215.248	180.76.184.57
107.179.20.204	98.191.66.244	108.60.249.239	108.14.65.148
98.226.204.105	180.76.219.25	180.76.186.37	137.226.245.108