94.102.51.2 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United Kingdom

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
94.102.51.28	attackspambots	ET CINS Active Threat Intelligence Poor Reputation IP group 86 - port: 14265 proto: tcp cat: Misc Attackbytes: 60	2020-10-14 05:18:39
94.102.51.28	attackbots	[portscan] Port scan	2020-10-13 20:55:07
94.102.51.17	attackspambots	Fail2Ban Ban Triggered	2020-10-13 12:24:11
94.102.51.28	attack	Oct 13 05:48:00 [host] kernel: [2892792.420159] [U Oct 13 05:52:10 [host] kernel: [2893042.585542] [U Oct 13 05:59:27 [host] kernel: [2893479.003593] [U Oct 13 06:00:45 [host] kernel: [2893556.972194] [U Oct 13 06:02:58 [host] kernel: [2893690.599550] [U Oct 13 06:03:57 [host] kernel: [2893748.886505] [U	2020-10-13 12:23:49
94.102.51.17	attack	[MK-Root1] Blocked by UFW	2020-10-13 05:13:55
94.102.51.28	attackbotsspam	Oct 12 22:53:57 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.51.28 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=50790 PROTO=TCP SPT=46594 DPT=45355 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 12 22:58:36 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.51.28 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=4168 PROTO=TCP SPT=46594 DPT=47667 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 12 23:01:47 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.51.28 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=40976 PROTO=TCP SPT=46594 DPT=13886 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 12 23:08:05 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.51.28 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=34845 PROTO=TCP SPT=46594 DPT=29762 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 12 23:09:15 *hidd ...	2020-10-13 05:13:37
94.102.51.17	attackbotsspam	firewall-block, port(s): 5275/tcp	2020-10-11 01:43:06
94.102.51.78	attackspambots	Oct 9 12:46:02 haigwepa sshd[8112]: Failed password for root from 94.102.51.78 port 45205 ssh2 Oct 9 12:46:06 haigwepa sshd[8112]: Failed password for root from 94.102.51.78 port 45205 ssh2 ...	2020-10-10 02:03:42
94.102.51.78	attackbots	[MK-VM3] SSH login failed	2020-10-09 17:48:16
94.102.51.28	attackspambots	TCP (SYN) 94.102.51.28:45039 -> port 42954, len 44	2020-10-09 05:42:43
94.102.51.28	attack	49164/tcp 52334/tcp 60882/tcp... [2020-08-07/10-08]47445pkt,38785pt.(tcp)	2020-10-08 21:57:39
94.102.51.28	attack	[H1.VM2] Blocked by UFW	2020-10-08 13:52:57
94.102.51.28	attackbots	TCP (SYN) 94.102.51.28:45039 -> port 19163, len 44	2020-10-08 02:53:29
94.102.51.28	attackbots	Oct 7 12:48:08 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.51.28 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=46543 PROTO=TCP SPT=45039 DPT=31360 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 7 12:49:13 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.51.28 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=21421 PROTO=TCP SPT=45039 DPT=53281 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 7 13:01:05 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.51.28 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=43131 PROTO=TCP SPT=45039 DPT=23703 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 7 13:03:35 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.51.28 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=43904 PROTO=TCP SPT=45039 DPT=44237 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 7 13:05:31 hidden ...	2020-10-07 19:07:31
94.102.51.28	attackbotsspam	Port scan: Attack repeated for 24 hours	2020-10-01 07:40:34

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.102.51.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35465
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;94.102.51.2.			IN	A

;; AUTHORITY SECTION:
.			437	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022063000 1800 900 604800 86400

;; Query time: 22 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jul 01 00:20:12 CST 2022
;; MSG SIZE  rcvd: 104

Host info

2.51.102.94.in-addr.arpa domain name pointer no-reverse-dns-configured.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
2.51.102.94.in-addr.arpa	name = no-reverse-dns-configured.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
197.95.193.173	attack	Triggered by Fail2Ban at Ares web server	2019-09-30 08:03:05
185.109.43.54	attackbotsspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/185.109.43.54/ GB - 1H : (91) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : GB NAME ASN : ASN204258 IP : 185.109.43.54 CIDR : 185.109.40.0/22 PREFIX COUNT : 1 UNIQUE IP COUNT : 1024 WYKRYTE ATAKI Z ASN204258 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 INFO : Port SSH 22 Scan Detected and Blocked by ADMIN - data recovery	2019-09-30 07:58:20
140.148.227.92	attackspam	Sep 29 20:49:20 hermescis postfix/smtpd\[26486\]: NOQUEUE: reject: RCPT from unknown\[140.148.227.92\]: 550 5.1.1 \: Recipient address rejected:* from=\ to=\ proto=ESMTP helo=\	2019-09-30 07:42:16
222.186.175.151	attack	Sep 29 19:30:42 TORMINT sshd\[8779\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.151 user=root Sep 29 19:30:44 TORMINT sshd\[8779\]: Failed password for root from 222.186.175.151 port 23520 ssh2 Sep 29 19:31:02 TORMINT sshd\[8779\]: Failed password for root from 222.186.175.151 port 23520 ssh2 ...	2019-09-30 07:33:43
62.12.115.116	attackspambots	web-1 [ssh_2] SSH Attack	2019-09-30 07:33:09
23.129.64.213	attackbots	Sep 30 00:39:09 rotator sshd\[3031\]: Failed password for root from 23.129.64.213 port 61900 ssh2Sep 30 00:39:12 rotator sshd\[3031\]: Failed password for root from 23.129.64.213 port 61900 ssh2Sep 30 00:39:15 rotator sshd\[3031\]: Failed password for root from 23.129.64.213 port 61900 ssh2Sep 30 00:39:18 rotator sshd\[3031\]: Failed password for root from 23.129.64.213 port 61900 ssh2Sep 30 00:39:21 rotator sshd\[3031\]: Failed password for root from 23.129.64.213 port 61900 ssh2Sep 30 00:39:24 rotator sshd\[3031\]: Failed password for root from 23.129.64.213 port 61900 ssh2 ...	2019-09-30 08:03:56
193.32.163.182	attackspambots	Sep 29 06:04:00 XXX sshd[27611]: Invalid user admin from 193.32.163.182 port 36805	2019-09-30 08:06:50
183.82.2.251	attackbotsspam	Sep 30 01:43:58 vps647732 sshd[22285]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.82.2.251 Sep 30 01:44:01 vps647732 sshd[22285]: Failed password for invalid user smart123 from 183.82.2.251 port 44965 ssh2 ...	2019-09-30 07:50:35
23.129.64.216	attackbotsspam	Sep 29 22:15:22 thevastnessof sshd[14885]: Failed password for root from 23.129.64.216 port 20076 ssh2 ...	2019-09-30 07:37:44
187.113.44.9	attackbots	Sep 30 01:57:57 vps01 sshd[31986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.113.44.9 Sep 30 01:57:59 vps01 sshd[31986]: Failed password for invalid user webadmin from 187.113.44.9 port 50524 ssh2	2019-09-30 08:08:26
85.107.13.239	attackbotsspam	port scan and connect, tcp 23 (telnet)	2019-09-30 07:31:17
52.2.36.145	attack	AMAZON SCAMMERS!	2019-09-30 07:45:28
106.12.134.58	attackbotsspam	Sep 29 23:02:03 OPSO sshd\[8974\]: Invalid user nikhil from 106.12.134.58 port 60284 Sep 29 23:02:03 OPSO sshd\[8974\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.134.58 Sep 29 23:02:05 OPSO sshd\[8974\]: Failed password for invalid user nikhil from 106.12.134.58 port 60284 ssh2 Sep 29 23:06:36 OPSO sshd\[10119\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.134.58 user=root Sep 29 23:06:37 OPSO sshd\[10119\]: Failed password for root from 106.12.134.58 port 42224 ssh2	2019-09-30 08:07:36
222.186.42.4	attackspam	Sep 30 06:26:31 itv-usvr-02 sshd[21012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.4 user=root Sep 30 06:26:33 itv-usvr-02 sshd[21012]: Failed password for root from 222.186.42.4 port 41862 ssh2	2019-09-30 07:46:21
134.209.87.150	attackspambots	v+ssh-bruteforce	2019-09-30 07:59:20

Recently Reported IPs

80.82.66.200	131.161.11.186	154.30.185.39	129.154.192.70
45.225.95.162	176.119.7.174	39.96.0.0	202.43.237.50
81.181.130.102	176.119.7.57	169.229.253.5	67.13.12.61
169.229.252.177	169.229.239.50	169.229.237.48	169.229.239.153
169.229.213.107	180.76.80.146	169.229.227.64	169.229.234.135