94.102.52.0 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United Kingdom

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
94.102.52.36	attackspam	Sent packet to closed port: 22	2020-08-09 23:44:48
94.102.52.57	attackbots	[Thu May 21 12:06:10 2020] - DDoS Attack From IP: 94.102.52.57 Port: 56548	2020-07-09 03:53:58
94.102.52.44	attackspambots	May 27 00:05:26 pop3-login: Info: Disconnected: Inactivity $auth failed, 1 attempts in 180 secs$: user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\<9W41QJSmrABeZjQs\>\ May 27 00:47:06 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\ May 27 00:50:24 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\ May 27 00:59:20 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\ May 27 00:59:24 pop3-login: Info: Aborted login $auth failed, 1 attempts in 6 secs$: user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\ May 27 01	2020-05-27 07:46:46
94.102.52.44	attackspam	May 26 18:59:50 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session= May 26 19:00:07 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session=<0DPwBpCmxk5eZjQs> May 26 19:00:19 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session= May 26 19:01:43 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session= May 26 19:02:11 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=	2020-05-27 01:15:11
94.102.52.44	attack	May 26 04:04:28 ns3042688 courier-pop3d: LOGIN FAILED, user=postmaster@sikla-shop.eu, ip=\[::ffff:94.102.52.44\] ...	2020-05-26 10:11:53
94.102.52.44	attackbotsspam	May 25 19:44:30 ns3042688 courier-pop3d: LOGIN FAILED, user=office@sikla-systems.es, ip=\[::ffff:94.102.52.44\] ...	2020-05-26 02:06:54
94.102.52.44	attackbotsspam	May 25 07:48:22 ns3042688 courier-pop3d: LOGIN FAILED, user=test@makita-dolmar.info, ip=\[::ffff:94.102.52.44\] ...	2020-05-25 13:49:29
94.102.52.57	attackbotsspam	05/24/2020-18:33:20.532373 94.102.52.57 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-05-25 06:51:24
94.102.52.44	attackbotsspam	May 24 13:56:10 ns3042688 courier-pop3d: LOGIN FAILED, user=webmaster@tienda-sikla.eu, ip=\[::ffff:94.102.52.44\] ...	2020-05-24 20:15:14
94.102.52.57	attack	Port scanning [23 denied]	2020-05-23 17:57:54
94.102.52.44	attack	May 22 21:47:50 ns3042688 courier-pop3d: LOGIN FAILED, user=reception@tienda-cmt.org, ip=\[::ffff:94.102.52.44\] ...	2020-05-23 03:49:51
94.102.52.44	attackbots	May 22 13:47:30 ns3042688 courier-pop3d: LOGIN FAILED, user=support@sikla-shop.eu, ip=\[::ffff:94.102.52.44\] ...	2020-05-22 19:54:43
94.102.52.57	attack	TCP ports : 11 / 338 / 448 / 564 / 911	2020-05-22 01:22:15
94.102.52.57	attackspambots	05/20/2020-13:13:08.646937 94.102.52.57 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-05-21 01:31:46
94.102.52.44	attackbotsspam	May 20 18:50:14 ns3042688 courier-pop3d: LOGIN FAILED, user=info@tienda-cmt.com, ip=\[::ffff:94.102.52.44\] ...	2020-05-21 00:57:25

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.102.52.0
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23407
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;94.102.52.0.			IN	A

;; AUTHORITY SECTION:
.			131	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022062601 1800 900 604800 86400

;; Query time: 22 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jun 27 12:51:48 CST 2022
;; MSG SIZE  rcvd: 104

Host info

Host 0.52.102.94.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 0.52.102.94.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
51.38.236.221	attack	Aug 10 20:17:28 [munged] sshd[5777]: Invalid user oy from 51.38.236.221 port 57292 Aug 10 20:17:28 [munged] sshd[5777]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.236.221	2019-08-11 03:05:34
210.12.129.112	attack	Aug 10 17:10:14 MK-Soft-Root2 sshd\[9209\]: Invalid user crs from 210.12.129.112 port 45828 Aug 10 17:10:14 MK-Soft-Root2 sshd\[9209\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.12.129.112 Aug 10 17:10:16 MK-Soft-Root2 sshd\[9209\]: Failed password for invalid user crs from 210.12.129.112 port 45828 ssh2 ...	2019-08-11 03:07:05
197.254.62.14	attack	proto=tcp . spt=55175 . dpt=25 . (listed on Blocklist de Aug 09) (513)	2019-08-11 02:51:36
94.102.49.64	attackbots	Aug 10 13:29:36 aat-srv002 sshd[15986]: Failed password for root from 94.102.49.64 port 56278 ssh2 Aug 10 13:33:50 aat-srv002 sshd[16065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.102.49.64 Aug 10 13:33:51 aat-srv002 sshd[16065]: Failed password for invalid user db2inst1 from 94.102.49.64 port 51922 ssh2 ...	2019-08-11 02:50:35
5.181.108.220	attackbots	Multiple SSH auth failures recorded by fail2ban	2019-08-11 03:00:09
34.80.72.249	attackbotsspam	Aug 10 14:53:58 [host] sshd[15936]: Invalid user ts3user from 34.80.72.249 Aug 10 14:53:58 [host] sshd[15936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.80.72.249 Aug 10 14:54:00 [host] sshd[15936]: Failed password for invalid user ts3user from 34.80.72.249 port 41080 ssh2	2019-08-11 03:08:14
54.37.46.137	attackspambots	$f2bV_matches	2019-08-11 02:59:48
142.93.71.94	attackspam	Aug 10 20:11:24 SilenceServices sshd[310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.71.94 Aug 10 20:11:25 SilenceServices sshd[310]: Failed password for invalid user intenseanimation from 142.93.71.94 port 39840 ssh2 Aug 10 20:15:39 SilenceServices sshd[3917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.71.94	2019-08-11 02:19:16
200.49.39.210	attack	Aug 10 19:32:16 * sshd[14946]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.49.39.210 Aug 10 19:32:18 * sshd[14946]: Failed password for invalid user ncim from 200.49.39.210 port 60106 ssh2	2019-08-11 02:16:52
23.238.17.14	attack	Looking for resource vulnerabilities	2019-08-11 02:48:55
97.80.151.210	attackspam	Brute force RDP, port 3389	2019-08-11 02:39:35
120.138.117.102	attackbots	Mail sent to address hacked/leaked from Last.fm	2019-08-11 03:06:29
139.162.42.119	attackbots	eintrachtkultkellerfulda.de 139.162.42.119 \[10/Aug/2019:14:13:59 +0200\] "POST /wp-login.php HTTP/1.1" 200 2062 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" eintrachtkultkellerfulda.de 139.162.42.119 \[10/Aug/2019:14:14:01 +0200\] "POST /wp-login.php HTTP/1.1" 200 2067 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2019-08-11 02:54:45
177.23.73.158	attackbots	failed_logins	2019-08-11 02:29:39
185.220.101.5	attackbots	Fail2Ban - SSH Bruteforce Attempt	2019-08-11 02:41:16

Recently Reported IPs

89.248.164.83	180.76.98.74	131.161.9.3	180.76.12.51
169.229.155.44	180.76.15.114	180.76.99.55	169.229.172.162
220.181.108.7	42.236.99.99	180.76.138.158	180.76.138.78
180.76.138.37	180.76.13.47	180.76.255.207	220.181.108.9
180.76.15.48	180.76.17.250	180.76.18.99	42.236.10.241