City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 94.102.49.193 | botsattackproxy | Bot |
2024-04-11 12:03:13 |
| 94.102.49.190 | proxy | VPN fraud |
2023-05-29 12:52:27 |
| 94.102.49.191 | attackspam | ET DROP Dshield Block Listed Source group 1 - port: 132 proto: tcp cat: Misc Attackbytes: 60 |
2020-10-14 05:37:55 |
| 94.102.49.191 | attackspambots | Port-scan: detected 174 distinct ports within a 24-hour window. |
2020-10-07 17:07:10 |
| 94.102.49.117 | attack | massive Port Scan |
2020-10-07 04:15:40 |
| 94.102.49.59 | attack | port scan |
2020-10-07 00:57:42 |
| 94.102.49.117 | attackspambots | massive Port Scan |
2020-10-06 20:19:06 |
| 94.102.49.59 | attack | Hacker |
2020-10-06 16:51:13 |
| 94.102.49.193 | attackbots |
|
2020-10-05 03:01:09 |
| 94.102.49.193 | attackspambots |
|
2020-10-04 18:45:20 |
| 94.102.49.93 | attackbotsspam | Port-scan: detected 200 distinct ports within a 24-hour window. |
2020-10-04 06:25:39 |
| 94.102.49.93 | attackbotsspam | Port-scan: detected 200 distinct ports within a 24-hour window. |
2020-10-03 22:30:11 |
| 94.102.49.93 | attackspam | [Sun Sep 27 22:47:43 2020] - Syn Flood From IP: 94.102.49.93 Port: 59653 |
2020-10-03 14:13:26 |
| 94.102.49.137 | attackspam | Fri, 2020-10-02 08:33:48 - TCP Packet - Source:94.102.49.137 Destination:xxx.xxx.xxx.xxx - [PORT SCAN] |
2020-10-03 04:32:19 |
| 94.102.49.137 | attack | Oct 2 15:35:22 *hidden* kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=94.102.49.137 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=42330 PROTO=TCP SPT=45720 DPT=11117 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 2 15:35:22 *hidden* kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=94.102.49.137 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=28079 PROTO=TCP SPT=45720 DPT=11218 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 2 15:35:25 *hidden* kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=94.102.49.137 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=3153 PROTO=TCP SPT=45720 DPT=11222 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 2 15:35:25 *hidden* kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=94.102.49.137 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=16947 PROTO=TCP SPT=45720 DPT=11215 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 2 15: ... |
2020-10-02 23:52:54 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.102.49.201
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47424
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;94.102.49.201. IN A
;; AUTHORITY SECTION:
. 395 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022062202 1800 900 604800 86400
;; Query time: 98 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jun 23 05:48:25 CST 2022
;; MSG SIZE rcvd: 106201.49.102.94.in-addr.arpa domain name pointer speedytelecom2-ip4.idfnv.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
201.49.102.94.in-addr.arpa name = speedytelecom2-ip4.idfnv.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 218.92.0.250 | attackbots | Aug 19 18:00:41 ift sshd\[39146\]: Failed password for root from 218.92.0.250 port 49253 ssh2Aug 19 18:01:05 ift sshd\[39186\]: Failed password for root from 218.92.0.250 port 19283 ssh2Aug 19 18:01:14 ift sshd\[39186\]: Failed password for root from 218.92.0.250 port 19283 ssh2Aug 19 18:01:18 ift sshd\[39186\]: Failed password for root from 218.92.0.250 port 19283 ssh2Aug 19 18:01:21 ift sshd\[39186\]: Failed password for root from 218.92.0.250 port 19283 ssh2 ... |
2020-08-19 23:02:10 |
| 45.227.255.224 | attackspam | Unauthorized connection attempt, Score = 100 , Ban for 15 Days |
2020-08-19 22:31:00 |
| 111.93.235.74 | attackbotsspam | Aug 19 13:56:45 plex-server sshd[3916497]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.93.235.74 Aug 19 13:56:45 plex-server sshd[3916497]: Invalid user lpf from 111.93.235.74 port 62366 Aug 19 13:56:47 plex-server sshd[3916497]: Failed password for invalid user lpf from 111.93.235.74 port 62366 ssh2 Aug 19 13:58:27 plex-server sshd[3917197]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.93.235.74 user=root Aug 19 13:58:30 plex-server sshd[3917197]: Failed password for root from 111.93.235.74 port 56394 ssh2 ... |
2020-08-19 22:22:50 |
| 140.207.81.233 | attack | Failed password for root from 140.207.81.233 port 24122 ssh2 Invalid user chandan from 140.207.81.233 port 56623 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.207.81.233 Invalid user chandan from 140.207.81.233 port 56623 Failed password for invalid user chandan from 140.207.81.233 port 56623 ssh2 |
2020-08-19 22:48:44 |
| 104.248.159.69 | attack | Aug 19 16:32:10 vpn01 sshd[29169]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.159.69 Aug 19 16:32:12 vpn01 sshd[29169]: Failed password for invalid user yj from 104.248.159.69 port 45380 ssh2 ... |
2020-08-19 23:04:26 |
| 187.44.86.102 | attackspam | Aug 19 15:31:00 vpn01 sshd[27795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.44.86.102 Aug 19 15:31:02 vpn01 sshd[27795]: Failed password for invalid user test from 187.44.86.102 port 3605 ssh2 ... |
2020-08-19 22:28:51 |
| 208.109.12.104 | attackspam | Aug 19 16:27:28 OPSO sshd\[8578\]: Invalid user newuser from 208.109.12.104 port 46604 Aug 19 16:27:28 OPSO sshd\[8578\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.109.12.104 Aug 19 16:27:30 OPSO sshd\[8578\]: Failed password for invalid user newuser from 208.109.12.104 port 46604 ssh2 Aug 19 16:32:47 OPSO sshd\[10024\]: Invalid user ysh from 208.109.12.104 port 55722 Aug 19 16:32:47 OPSO sshd\[10024\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.109.12.104 |
2020-08-19 22:39:57 |
| 45.134.179.57 | attack | [MK-VM5] Blocked by UFW |
2020-08-19 22:51:41 |
| 85.95.168.243 | attack | Unauthorized connection attempt from IP address 85.95.168.243 on Port 445(SMB) |
2020-08-19 22:20:47 |
| 116.247.108.10 | attackspambots | 2020-08-19T15:26:25.404876afi-git.jinr.ru sshd[2009]: Invalid user arne from 116.247.108.10 port 38114 2020-08-19T15:26:25.408202afi-git.jinr.ru sshd[2009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.247.108.10 2020-08-19T15:26:25.404876afi-git.jinr.ru sshd[2009]: Invalid user arne from 116.247.108.10 port 38114 2020-08-19T15:26:27.297959afi-git.jinr.ru sshd[2009]: Failed password for invalid user arne from 116.247.108.10 port 38114 ssh2 2020-08-19T15:30:33.628059afi-git.jinr.ru sshd[3060]: Invalid user bacula from 116.247.108.10 port 46024 ... |
2020-08-19 23:00:17 |
| 119.28.238.101 | attack | Aug 19 16:04:09 marvibiene sshd[10095]: Failed password for root from 119.28.238.101 port 36182 ssh2 |
2020-08-19 22:26:49 |
| 217.182.23.55 | attackspam | Aug 19 15:34:10 electroncash sshd[16200]: Invalid user administrator from 217.182.23.55 port 56032 Aug 19 15:34:10 electroncash sshd[16200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.182.23.55 Aug 19 15:34:10 electroncash sshd[16200]: Invalid user administrator from 217.182.23.55 port 56032 Aug 19 15:34:12 electroncash sshd[16200]: Failed password for invalid user administrator from 217.182.23.55 port 56032 ssh2 Aug 19 15:37:05 electroncash sshd[17009]: Invalid user ko from 217.182.23.55 port 50640 ... |
2020-08-19 22:44:01 |
| 165.227.193.157 | attack | Auto Fail2Ban report, multiple SSH login attempts. |
2020-08-19 22:29:12 |
| 185.250.220.170 | attackspam | unauthorized connection attempts |
2020-08-19 22:26:08 |
| 98.176.63.114 | attackbots | Port Scan detected! ... |
2020-08-19 22:33:11 |