94.102.49.81 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United Kingdom

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
94.102.49.193	botsattackproxy	Bot	2024-04-11 12:03:13
94.102.49.190	proxy	VPN fraud	2023-05-29 12:52:27
94.102.49.191	attackspam	ET DROP Dshield Block Listed Source group 1 - port: 132 proto: tcp cat: Misc Attackbytes: 60	2020-10-14 05:37:55
94.102.49.191	attackspambots	Port-scan: detected 174 distinct ports within a 24-hour window.	2020-10-07 17:07:10
94.102.49.117	attack	massive Port Scan	2020-10-07 04:15:40
94.102.49.59	attack	port scan	2020-10-07 00:57:42
94.102.49.117	attackspambots	massive Port Scan	2020-10-06 20:19:06
94.102.49.59	attack	Hacker	2020-10-06 16:51:13
94.102.49.193	attackbots	TCP (SYN) 94.102.49.193:6707 -> port 502, len 44	2020-10-05 03:01:09
94.102.49.193	attackspambots	TCP (SYN) 94.102.49.193:6707 -> port 502, len 44	2020-10-04 18:45:20
94.102.49.93	attackbotsspam	Port-scan: detected 200 distinct ports within a 24-hour window.	2020-10-04 06:25:39
94.102.49.93	attackbotsspam	Port-scan: detected 200 distinct ports within a 24-hour window.	2020-10-03 22:30:11
94.102.49.93	attackspam	[Sun Sep 27 22:47:43 2020] - Syn Flood From IP: 94.102.49.93 Port: 59653	2020-10-03 14:13:26
94.102.49.137	attackspam	Fri, 2020-10-02 08:33:48 - TCP Packet - Source:94.102.49.137 Destination:xxx.xxx.xxx.xxx - [PORT SCAN]	2020-10-03 04:32:19
94.102.49.137	attack	Oct 2 15:35:22 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=94.102.49.137 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=42330 PROTO=TCP SPT=45720 DPT=11117 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 2 15:35:22 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=94.102.49.137 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=28079 PROTO=TCP SPT=45720 DPT=11218 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 2 15:35:25 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=94.102.49.137 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=3153 PROTO=TCP SPT=45720 DPT=11222 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 2 15:35:25 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=94.102.49.137 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=16947 PROTO=TCP SPT=45720 DPT=11215 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 2 15: ...	2020-10-02 23:52:54

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.102.49.81
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34988
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;94.102.49.81.			IN	A

;; AUTHORITY SECTION:
.			348	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022062601 1800 900 604800 86400

;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jun 27 13:18:12 CST 2022
;; MSG SIZE  rcvd: 105

Host info

81.49.102.94.in-addr.arpa domain name pointer no-reverse-dns-configured.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
81.49.102.94.in-addr.arpa	name = no-reverse-dns-configured.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
182.61.14.161	attackspambots	Jan 10 07:05:21 ArkNodeAT sshd\[15727\]: Invalid user qm from 182.61.14.161 Jan 10 07:05:21 ArkNodeAT sshd\[15727\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.14.161 Jan 10 07:05:23 ArkNodeAT sshd\[15727\]: Failed password for invalid user qm from 182.61.14.161 port 49846 ssh2	2020-01-10 19:39:06
218.92.0.191	attackbotsspam	01/10/2020-06:23:52.575686 218.92.0.191 Protocol: 6 ET SCAN Potential SSH Scan	2020-01-10 19:25:55
220.167.89.56	attack	23/tcp 23/tcp 23/tcp [2019-12-01/2020-01-10]3pkt	2020-01-10 19:28:52
112.73.67.137	attack	1433/tcp 445/tcp... [2019-11-18/2020-01-10]9pkt,2pt.(tcp)	2020-01-10 19:49:47
222.186.175.182	attackspambots	2020-01-10T11:16:47.027934+00:00 suse sshd[2674]: User root from 222.186.175.182 not allowed because not listed in AllowUsers 2020-01-10T11:16:49.804927+00:00 suse sshd[2674]: error: PAM: Authentication failure for illegal user root from 222.186.175.182 2020-01-10T11:16:47.027934+00:00 suse sshd[2674]: User root from 222.186.175.182 not allowed because not listed in AllowUsers 2020-01-10T11:16:49.804927+00:00 suse sshd[2674]: error: PAM: Authentication failure for illegal user root from 222.186.175.182 2020-01-10T11:16:47.027934+00:00 suse sshd[2674]: User root from 222.186.175.182 not allowed because not listed in AllowUsers 2020-01-10T11:16:49.804927+00:00 suse sshd[2674]: error: PAM: Authentication failure for illegal user root from 222.186.175.182 2020-01-10T11:16:49.807173+00:00 suse sshd[2674]: Failed keyboard-interactive/pam for invalid user root from 222.186.175.182 port 58616 ssh2 ...	2020-01-10 19:28:22
115.74.247.131	attackspambots	Jan 10 05:48:28 grey postfix/smtpd\[29272\]: NOQUEUE: reject: RCPT from unknown\[115.74.247.131\]: 554 5.7.1 Service unavailable\; Client host \[115.74.247.131\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[115.74.247.131\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-01-10 19:46:37
218.92.0.189	attackspam	Jan 9 23:42:47 home sshd[9240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.189 user=root Jan 9 23:42:48 home sshd[9240]: Failed password for root from 218.92.0.189 port 52199 ssh2 Jan 9 23:42:51 home sshd[9240]: Failed password for root from 218.92.0.189 port 52199 ssh2 Jan 9 23:42:47 home sshd[9240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.189 user=root Jan 9 23:42:48 home sshd[9240]: Failed password for root from 218.92.0.189 port 52199 ssh2 Jan 9 23:42:51 home sshd[9240]: Failed password for root from 218.92.0.189 port 52199 ssh2 Jan 9 23:42:47 home sshd[9240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.189 user=root Jan 9 23:42:48 home sshd[9240]: Failed password for root from 218.92.0.189 port 52199 ssh2 Jan 9 23:42:51 home sshd[9240]: Failed password for root from 218.92.0.189 port 52199 ssh2 Jan 9 23:42:53 home sshd[9240]: Fail	2020-01-10 19:45:31
109.107.178.203	attackbotsspam	1433/tcp 445/tcp... [2019-11-12/2020-01-10]5pkt,2pt.(tcp)	2020-01-10 19:46:23
110.49.70.245	attackbots	Automatic report - Banned IP Access	2020-01-10 19:58:48
115.42.177.43	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-10 19:52:58
114.7.2.17	attack	Unauthorized connection attempt detected from IP address 114.7.2.17 to port 445	2020-01-10 20:00:57
109.123.117.235	attack	3389BruteforceFW21	2020-01-10 19:56:19
110.138.150.152	attack	20/1/9@23:48:40: FAIL: Alarm-Network address from=110.138.150.152 ...	2020-01-10 19:36:10
79.37.95.229	attackbots	5555/tcp 5555/tcp 5555/tcp [2019-11-16/2020-01-10]3pkt	2020-01-10 19:34:57
95.9.61.234	attackbotsspam	37215/tcp 23/tcp 23/tcp [2019-12-22/2020-01-10]3pkt	2020-01-10 19:41:40

Recently Reported IPs

180.76.249.0	180.76.120.156	180.76.138.162	94.102.57.63
42.236.99.229	180.76.249.85	180.76.102.43	114.222.244.43
194.53.178.34	180.76.18.232	180.76.20.79	111.19.191.77
201.52.64.100	180.76.17.50	181.127.164.9	180.76.19.163
180.76.16.206	180.76.48.99	180.76.96.245	180.76.98.210