94.102.49.193 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Netherlands

Internet Service Provider: Incrediserve Ltd

Hostname: unknown

Organization: IP Volume inc

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
botsattackproxy	Bot	2024-04-11 12:03:13
attackbots	TCP (SYN) 94.102.49.193:6707 -> port 502, len 44	2020-10-05 03:01:09
attackspambots	TCP (SYN) 94.102.49.193:6707 -> port 502, len 44	2020-10-04 18:45:20
attackspam	Brute force attack stopped by firewall	2020-10-01 07:09:53
attack	scanning for vulnerabilities	2020-09-30 23:36:07
attackspam	TCP (SYN) 94.102.49.193:20270 -> port 3306, len 44	2020-08-31 16:07:57
attackspam	Port scan: Attack repeated for 24 hours	2020-08-31 04:49:42
attackbotsspam	$f2bV_matches	2020-08-28 00:58:34
attackspambots	94.102.49.193 - - [23/Aug/2020:09:49:39 +0200] "GET / HTTP/1.1" 403 3125 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.137 Safari/537.36" 94.102.49.193 - - [23/Aug/2020:09:49:44 +0200] "GET /robots.txt HTTP/1.1" 403 3125 "-" "-" 94.102.49.193 - - [23/Aug/2020:09:49:44 +0200] "GET /sitemap.xml HTTP/1.1" 403 3125 "-" "-" 94.102.49.193 - - [23/Aug/2020:09:49:44 +0200] "GET /.well-known/security.txt HTTP/1.1" 403 3125 "-" "-" 94.102.49.193 - - [23/Aug/2020:09:49:44 +0200] "GET /favicon.ico HTTP/1.1" 403 3125 "-" "python-requests/2.23.0" ...	2020-08-27 21:01:36
attack	ET CINS Active Threat Intelligence Poor Reputation IP group 91 - port: 3689 proto: tcp cat: Misc Attackbytes: 60	2020-08-14 02:32:23
attackspambots	" "	2020-08-13 04:01:05
attackspam	Honeypot hit.	2020-08-11 08:04:02
attackspam	TCP (SYN) 94.102.49.193:29011 -> port 1311, len 44	2020-08-07 15:56:29
attackspambots	Unauthorized connection attempt detected from IP address 94.102.49.193 to port 9944	2020-08-05 17:37:30
attack	TCP (SYN) 94.102.49.193:18438 -> port 23, len 44	2020-07-29 23:51:03
attack	Port scan: Attack repeated for 24 hours	2020-07-20 12:44:39
attack	Jul 19 22:38:22 debian-2gb-nbg1-2 kernel: \[17449645.167376\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=94.102.49.193 DST=195.201.40.59 LEN=33 TOS=0x10 PREC=0x00 TTL=120 ID=61168 PROTO=UDP SPT=32523 DPT=3283 LEN=13	2020-07-20 04:42:28
attackbotsspam	Fail2Ban Ban Triggered	2020-07-12 20:11:59
attack	Honeypot hit.	2020-07-01 10:27:03
attackspambots	[Sun May 31 14:29:56 2020] - DDoS Attack From IP: 94.102.49.193 Port: 24858	2020-06-24 02:44:47
attackspam	17/tcp 2628/tcp 2762/tcp... [2020-04-20/06-21]368pkt,185pt.(tcp),45pt.(udp)	2020-06-21 14:17:06
attackbots	Fail2Ban Ban Triggered	2020-06-21 07:59:02
attackspam	IP 94.102.49.193 attacked honeypot on port: 83 at 6/15/2020 4:54:37 AM	2020-06-15 13:26:42
attackspam	port	2020-05-15 08:04:26
attackbotsspam	May 7 21:53:00 debian-2gb-nbg1-2 kernel: \[11140064.381263\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=94.102.49.193 DST=195.201.40.59 LEN=44 TOS=0x10 PREC=0x00 TTL=120 ID=15739 PROTO=TCP SPT=20270 DPT=3306 WINDOW=34306 RES=0x00 SYN URGP=0	2020-05-08 04:03:32
attackbotsspam	Unauthorized connection attempt detected from IP address 94.102.49.193 to port 81 [T]	2020-04-25 22:39:14
attack	[Fri Apr 17 03:40:15 2020] - DDoS Attack From IP: 94.102.49.193 Port: 24858	2020-04-25 04:02:44
attack	Port 1234 scan denied	2020-04-17 06:26:36
attackspambots	Port scan: Attack repeated for 24 hours	2020-04-16 05:16:09
attackspambots	3389BruteforceStormFW22	2020-03-28 20:03:46

Comments on same subnet:

IP	Type	Details	Datetime
94.102.49.190	proxy	VPN fraud	2023-05-29 12:52:27
94.102.49.191	attackspam	ET DROP Dshield Block Listed Source group 1 - port: 132 proto: tcp cat: Misc Attackbytes: 60	2020-10-14 05:37:55
94.102.49.191	attackspambots	Port-scan: detected 174 distinct ports within a 24-hour window.	2020-10-07 17:07:10
94.102.49.117	attack	massive Port Scan	2020-10-07 04:15:40
94.102.49.59	attack	port scan	2020-10-07 00:57:42
94.102.49.117	attackspambots	massive Port Scan	2020-10-06 20:19:06
94.102.49.59	attack	Hacker	2020-10-06 16:51:13
94.102.49.93	attackbotsspam	Port-scan: detected 200 distinct ports within a 24-hour window.	2020-10-04 06:25:39
94.102.49.93	attackbotsspam	Port-scan: detected 200 distinct ports within a 24-hour window.	2020-10-03 22:30:11
94.102.49.93	attackspam	[Sun Sep 27 22:47:43 2020] - Syn Flood From IP: 94.102.49.93 Port: 59653	2020-10-03 14:13:26
94.102.49.137	attackspam	Fri, 2020-10-02 08:33:48 - TCP Packet - Source:94.102.49.137 Destination:xxx.xxx.xxx.xxx - [PORT SCAN]	2020-10-03 04:32:19
94.102.49.137	attack	Oct 2 15:35:22 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=94.102.49.137 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=42330 PROTO=TCP SPT=45720 DPT=11117 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 2 15:35:22 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=94.102.49.137 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=28079 PROTO=TCP SPT=45720 DPT=11218 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 2 15:35:25 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=94.102.49.137 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=3153 PROTO=TCP SPT=45720 DPT=11222 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 2 15:35:25 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=94.102.49.137 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=16947 PROTO=TCP SPT=45720 DPT=11215 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 2 15: ...	2020-10-02 23:52:54
94.102.49.137	attackbotsspam	no-reverse-dns-configured.com	2020-10-02 20:24:29
94.102.49.137	attackspambots	port scan	2020-10-02 16:56:50
94.102.49.137	attackbots	Oct 1 21:04:31 TCP Attack: SRC=94.102.49.137 DST=[Masked] LEN=40 TOS=0x08 PREC=0x20 TTL=246 PROTO=TCP SPT=46270 DPT=10848 WINDOW=1024 RES=0x00 SYN URGP=0	2020-10-02 13:18:12

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.102.49.193
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28978
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.102.49.193.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040400 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Thu Apr 04 22:37:27 +08 2019
;; MSG SIZE  rcvd: 117

Host info

193.49.102.94.in-addr.arpa domain name pointer cloud.census.shodan.io.

Nslookup info:

Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
193.49.102.94.in-addr.arpa	name = cloud.census.shodan.io.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
62.234.89.176	attackspam	TCP (SYN) 62.234.89.176:55774 -> port 17304, len 44	2020-06-22 03:13:06
218.92.0.250	attack	2020-06-21T20:52:15.480798sd-86998 sshd[28203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.250 user=root 2020-06-21T20:52:17.430529sd-86998 sshd[28203]: Failed password for root from 218.92.0.250 port 34112 ssh2 2020-06-21T20:52:21.124380sd-86998 sshd[28203]: Failed password for root from 218.92.0.250 port 34112 ssh2 2020-06-21T20:52:15.480798sd-86998 sshd[28203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.250 user=root 2020-06-21T20:52:17.430529sd-86998 sshd[28203]: Failed password for root from 218.92.0.250 port 34112 ssh2 2020-06-21T20:52:21.124380sd-86998 sshd[28203]: Failed password for root from 218.92.0.250 port 34112 ssh2 2020-06-21T20:52:15.480798sd-86998 sshd[28203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.250 user=root 2020-06-21T20:52:17.430529sd-86998 sshd[28203]: Failed password for root from 218.92.0.250 p ...	2020-06-22 02:59:46
101.251.242.141	attackbots	Jun 21 14:28:54 debian-2gb-nbg1-2 kernel: \[15001214.176248\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=101.251.242.141 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=29025 PROTO=TCP SPT=52764 DPT=21794 WINDOW=1024 RES=0x00 SYN URGP=0	2020-06-22 03:12:06
94.102.51.17	attackbotsspam	Jun 21 21:08:31 debian-2gb-nbg1-2 kernel: \[15025190.385328\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=94.102.51.17 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=28885 PROTO=TCP SPT=42407 DPT=26801 WINDOW=1024 RES=0x00 SYN URGP=0	2020-06-22 03:23:40
92.190.153.246	attack	2020-06-21T08:17:52.964711mail.thespaminator.com sshd[22235]: Invalid user teste from 92.190.153.246 port 58304 2020-06-21T08:17:54.753861mail.thespaminator.com sshd[22235]: Failed password for invalid user teste from 92.190.153.246 port 58304 ssh2 ...	2020-06-22 03:27:27
218.92.0.221	attack	Jun 21 21:25:44 buvik sshd[9957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.221 user=root Jun 21 21:25:46 buvik sshd[9957]: Failed password for root from 218.92.0.221 port 62007 ssh2 Jun 21 21:25:48 buvik sshd[9957]: Failed password for root from 218.92.0.221 port 62007 ssh2 ...	2020-06-22 03:26:16
113.105.80.34	attackbots	Jun 21 12:07:41 vlre-nyc-1 sshd\[17155\]: Invalid user student from 113.105.80.34 Jun 21 12:07:41 vlre-nyc-1 sshd\[17155\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.105.80.34 Jun 21 12:07:44 vlre-nyc-1 sshd\[17155\]: Failed password for invalid user student from 113.105.80.34 port 55440 ssh2 Jun 21 12:10:06 vlre-nyc-1 sshd\[17236\]: Invalid user redmine from 113.105.80.34 Jun 21 12:10:06 vlre-nyc-1 sshd\[17236\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.105.80.34 ...	2020-06-22 03:21:58
72.82.142.116	attackbots	'Fail2Ban'	2020-06-22 03:04:39
103.27.61.222	attackbotsspam	HTTP SQL Injection Attempt , PTR: PTR record not found	2020-06-22 03:22:58
216.155.93.77	attackspam	Jun 21 17:16:41 hell sshd[28374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.155.93.77 Jun 21 17:16:43 hell sshd[28374]: Failed password for invalid user test from 216.155.93.77 port 34770 ssh2 ...	2020-06-22 03:24:14
203.229.183.243	attackspam	Jun 21 17:21:58 ns382633 sshd\[23387\]: Invalid user ts from 203.229.183.243 port 2132 Jun 21 17:21:58 ns382633 sshd\[23387\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.229.183.243 Jun 21 17:22:00 ns382633 sshd\[23387\]: Failed password for invalid user ts from 203.229.183.243 port 2132 ssh2 Jun 21 17:28:24 ns382633 sshd\[24570\]: Invalid user deploy from 203.229.183.243 port 55205 Jun 21 17:28:24 ns382633 sshd\[24570\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.229.183.243	2020-06-22 03:34:46
113.173.131.187	attack	Automatic report - Port Scan Attack	2020-06-22 03:06:10
192.241.142.93	attackbots	Jun 21 11:33:07 firewall sshd[14868]: Failed password for invalid user aliyun from 192.241.142.93 port 46314 ssh2 Jun 21 11:36:01 firewall sshd[14970]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.142.93 user=root Jun 21 11:36:02 firewall sshd[14970]: Failed password for root from 192.241.142.93 port 38924 ssh2 ...	2020-06-22 03:18:59
110.185.227.238	attack	Jun 19 00:14:44 cumulus sshd[19920]: Invalid user event from 110.185.227.238 port 36650 Jun 19 00:14:44 cumulus sshd[19920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.185.227.238 Jun 19 00:14:46 cumulus sshd[19920]: Failed password for invalid user event from 110.185.227.238 port 36650 ssh2 Jun 19 00:14:46 cumulus sshd[19920]: Received disconnect from 110.185.227.238 port 36650:11: Bye Bye [preauth] Jun 19 00:14:46 cumulus sshd[19920]: Disconnected from 110.185.227.238 port 36650 [preauth] Jun 19 00:26:57 cumulus sshd[21147]: Invalid user user2 from 110.185.227.238 port 51638 Jun 19 00:26:57 cumulus sshd[21147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.185.227.238 Jun 19 00:26:59 cumulus sshd[21147]: Failed password for invalid user user2 from 110.185.227.238 port 51638 ssh2 Jun 19 00:26:59 cumulus sshd[21147]: Received disconnect from 110.185.227.238 port 51638:11: Bye ........ -------------------------------	2020-06-22 03:27:58
83.97.20.31	attack	firewall-block, port(s): 1080/tcp, 3128/tcp, 8089/tcp	2020-06-22 03:28:53

Recently Reported IPs

27.75.192.195	190.175.102.214	213.138.77.238	72.252.4.253
62.4.136.87	114.37.165.227	108.167.157.1	35.204.47.208
14.192.10.243	5.45.207.51	34.210.221.148	178.46.167.190
87.190.26.19	193.239.235.69	89.76.96.69	14.177.187.139
188.166.241.93	167.249.9.182	201.149.22.37	196.215.74.160