Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
94.102.49.193 botsattackproxy
Bot
2024-04-11 12:03:13
94.102.49.190 proxy
VPN fraud
2023-05-29 12:52:27
94.102.49.191 attackspam
ET DROP Dshield Block Listed Source group 1 - port: 132 proto: tcp cat: Misc Attackbytes: 60
2020-10-14 05:37:55
94.102.49.191 attackspambots
Port-scan: detected 174 distinct ports within a 24-hour window.
2020-10-07 17:07:10
94.102.49.117 attack
massive Port Scan
2020-10-07 04:15:40
94.102.49.59 attack
port scan
2020-10-07 00:57:42
94.102.49.117 attackspambots
massive Port Scan
2020-10-06 20:19:06
94.102.49.59 attack
Hacker
2020-10-06 16:51:13
94.102.49.193 attackbots
 TCP (SYN) 94.102.49.193:6707 -> port 502, len 44
2020-10-05 03:01:09
94.102.49.193 attackspambots
 TCP (SYN) 94.102.49.193:6707 -> port 502, len 44
2020-10-04 18:45:20
94.102.49.93 attackbotsspam
Port-scan: detected 200 distinct ports within a 24-hour window.
2020-10-04 06:25:39
94.102.49.93 attackbotsspam
Port-scan: detected 200 distinct ports within a 24-hour window.
2020-10-03 22:30:11
94.102.49.93 attackspam
[Sun Sep 27 22:47:43 2020] - Syn Flood From IP: 94.102.49.93 Port: 59653
2020-10-03 14:13:26
94.102.49.137 attackspam
Fri, 2020-10-02 08:33:48 - TCP Packet - Source:94.102.49.137 Destination:xxx.xxx.xxx.xxx - [PORT SCAN]
2020-10-03 04:32:19
94.102.49.137 attack
Oct 2 15:35:22 *hidden* kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=94.102.49.137 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=42330 PROTO=TCP SPT=45720 DPT=11117 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 2 15:35:22 *hidden* kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=94.102.49.137 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=28079 PROTO=TCP SPT=45720 DPT=11218 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 2 15:35:25 *hidden* kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=94.102.49.137 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=3153 PROTO=TCP SPT=45720 DPT=11222 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 2 15:35:25 *hidden* kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=94.102.49.137 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=16947 PROTO=TCP SPT=45720 DPT=11215 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 2 15:
...
2020-10-02 23:52:54
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.102.49.201
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47424
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;94.102.49.201.			IN	A

;; AUTHORITY SECTION:
.			395	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022062202 1800 900 604800 86400

;; Query time: 98 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jun 23 05:48:25 CST 2022
;; MSG SIZE  rcvd: 106
Host info
201.49.102.94.in-addr.arpa domain name pointer speedytelecom2-ip4.idfnv.net.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
201.49.102.94.in-addr.arpa	name = speedytelecom2-ip4.idfnv.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
51.68.44.158 attackbots
Automatic report - Banned IP Access
2019-09-16 00:06:40
116.22.197.14 attackspam
$f2bV_matches
2019-09-16 00:10:53
103.214.170.175 attack
F2B jail: sshd. Time: 2019-09-15 17:55:20, Reported by: VKReport
2019-09-16 00:07:17
68.183.136.244 attackbotsspam
Sep 15 04:51:23 aiointranet sshd\[12615\]: Invalid user bob from 68.183.136.244
Sep 15 04:51:23 aiointranet sshd\[12615\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.136.244
Sep 15 04:51:25 aiointranet sshd\[12615\]: Failed password for invalid user bob from 68.183.136.244 port 52130 ssh2
Sep 15 04:55:37 aiointranet sshd\[13060\]: Invalid user mongodb from 68.183.136.244
Sep 15 04:55:37 aiointranet sshd\[13060\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.136.244
2019-09-15 23:47:43
222.186.42.15 attack
Sep 15 06:41:09 php1 sshd\[15481\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.15  user=root
Sep 15 06:41:12 php1 sshd\[15481\]: Failed password for root from 222.186.42.15 port 24556 ssh2
Sep 15 06:41:15 php1 sshd\[15481\]: Failed password for root from 222.186.42.15 port 24556 ssh2
Sep 15 06:41:26 php1 sshd\[15513\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.15  user=root
Sep 15 06:41:28 php1 sshd\[15513\]: Failed password for root from 222.186.42.15 port 42468 ssh2
2019-09-16 00:44:27
123.207.40.70 attackspam
SSH Brute-Force reported by Fail2Ban
2019-09-16 00:24:45
156.207.176.43 attack
Chat Spam
2019-09-15 23:46:08
222.186.31.144 attackspam
Sep 15 12:07:06 plusreed sshd[17841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.144  user=root
Sep 15 12:07:08 plusreed sshd[17841]: Failed password for root from 222.186.31.144 port 44593 ssh2
...
2019-09-16 00:27:01
81.22.59.82 attack
SPF Fail sender not permitted to send mail for @metromax.ru / Sent mail to target address hacked/leaked from abandonia in 2016
2019-09-15 23:59:20
123.31.32.150 attackspambots
Sep 15 12:50:14 TORMINT sshd\[17207\]: Invalid user !QAZ2wsx from 123.31.32.150
Sep 15 12:50:14 TORMINT sshd\[17207\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.31.32.150
Sep 15 12:50:17 TORMINT sshd\[17207\]: Failed password for invalid user !QAZ2wsx from 123.31.32.150 port 35834 ssh2
...
2019-09-16 00:57:11
139.199.164.132 attack
Sep 15 18:55:41 server sshd\[13860\]: Invalid user fd from 139.199.164.132 port 34104
Sep 15 18:55:41 server sshd\[13860\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.164.132
Sep 15 18:55:42 server sshd\[13860\]: Failed password for invalid user fd from 139.199.164.132 port 34104 ssh2
Sep 15 19:00:07 server sshd\[13299\]: Invalid user dana from 139.199.164.132 port 36894
Sep 15 19:00:07 server sshd\[13299\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.164.132
2019-09-16 00:20:27
51.89.164.43 attackspambots
FR - 1H : (52)  Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : FR 
 NAME ASN : ASN16276 
 
 IP : 51.89.164.43 
 
 CIDR : 51.89.0.0/16 
 
 PREFIX COUNT : 132 
 
 UNIQUE IP COUNT : 3052544 
 
 
 WYKRYTE ATAKI Z ASN16276 :  
  1H - 1 
  3H - 2 
  6H - 5 
 12H - 14 
 24H - 21 
 
 INFO : SYN Flood DDoS Attack Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN  - data recovery 
  https://help-dysk.pl
2019-09-15 23:41:07
39.98.79.192 attack
RDP Scan
2019-09-16 00:07:51
104.248.179.60 attack
2019-09-15T15:28:00.902948abusebot-3.cloudsearch.cf sshd\[19720\]: Invalid user Public@123 from 104.248.179.60 port 45144
2019-09-16 00:21:04
107.180.68.110 attack
Sep 15 04:47:54 web1 sshd\[8786\]: Invalid user unix from 107.180.68.110
Sep 15 04:47:54 web1 sshd\[8786\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.180.68.110
Sep 15 04:47:56 web1 sshd\[8786\]: Failed password for invalid user unix from 107.180.68.110 port 41314 ssh2
Sep 15 04:51:39 web1 sshd\[9135\]: Invalid user ranjit from 107.180.68.110
Sep 15 04:51:39 web1 sshd\[9135\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.180.68.110
2019-09-16 00:04:54

Recently Reported IPs

180.76.112.85 169.229.205.38 169.229.43.230 137.226.238.115
169.229.44.54 137.226.6.238 169.229.196.205 137.226.27.170
137.226.53.188 137.226.213.182 169.229.6.171 137.226.216.94
137.226.234.44 169.229.25.153 169.229.9.206 169.229.9.77
137.226.164.20 169.229.9.212 180.76.42.115 137.226.252.123