Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United Kingdom

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
94.102.52.36 attackspam
Sent packet to closed port: 22
2020-08-09 23:44:48
94.102.52.57 attackbots
[Thu May 21 12:06:10 2020] - DDoS Attack From IP: 94.102.52.57 Port: 56548
2020-07-09 03:53:58
94.102.52.44 attackspambots
May 27 00:05:26 pop3-login: Info: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\<9W41QJSmrABeZjQs\>\
May 27 00:47:06 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\
May 27 00:50:24 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\
May 27 00:59:20 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\
May 27 00:59:24 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\
May 27 01
2020-05-27 07:46:46
94.102.52.44 attackspam
May 26 18:59:50 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session=
May 26 19:00:07 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session=<0DPwBpCmxk5eZjQs>
May 26 19:00:19 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session=
May 26 19:01:43 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session=
May 26 19:02:11 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=
2020-05-27 01:15:11
94.102.52.44 attack
May 26 04:04:28 ns3042688 courier-pop3d: LOGIN FAILED, user=postmaster@sikla-shop.eu, ip=\[::ffff:94.102.52.44\]
...
2020-05-26 10:11:53
94.102.52.44 attackbotsspam
May 25 19:44:30 ns3042688 courier-pop3d: LOGIN FAILED, user=office@sikla-systems.es, ip=\[::ffff:94.102.52.44\]
...
2020-05-26 02:06:54
94.102.52.44 attackbotsspam
May 25 07:48:22 ns3042688 courier-pop3d: LOGIN FAILED, user=test@makita-dolmar.info, ip=\[::ffff:94.102.52.44\]
...
2020-05-25 13:49:29
94.102.52.57 attackbotsspam
05/24/2020-18:33:20.532373 94.102.52.57 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-05-25 06:51:24
94.102.52.44 attackbotsspam
May 24 13:56:10 ns3042688 courier-pop3d: LOGIN FAILED, user=webmaster@tienda-sikla.eu, ip=\[::ffff:94.102.52.44\]
...
2020-05-24 20:15:14
94.102.52.57 attack
Port scanning [23 denied]
2020-05-23 17:57:54
94.102.52.44 attack
May 22 21:47:50 ns3042688 courier-pop3d: LOGIN FAILED, user=reception@tienda-cmt.org, ip=\[::ffff:94.102.52.44\]
...
2020-05-23 03:49:51
94.102.52.44 attackbots
May 22 13:47:30 ns3042688 courier-pop3d: LOGIN FAILED, user=support@sikla-shop.eu, ip=\[::ffff:94.102.52.44\]
...
2020-05-22 19:54:43
94.102.52.57 attack
TCP ports : 11 / 338 / 448 / 564 / 911
2020-05-22 01:22:15
94.102.52.57 attackspambots
05/20/2020-13:13:08.646937 94.102.52.57 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-05-21 01:31:46
94.102.52.44 attackbotsspam
May 20 18:50:14 ns3042688 courier-pop3d: LOGIN FAILED, user=info@tienda-cmt.com, ip=\[::ffff:94.102.52.44\]
...
2020-05-21 00:57:25
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.102.52.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18451
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;94.102.52.104.			IN	A

;; AUTHORITY SECTION:
.			546	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022063001 1800 900 604800 86400

;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jul 01 15:37:21 CST 2022
;; MSG SIZE  rcvd: 106
Host info
104.52.102.94.in-addr.arpa domain name pointer no-reverse-dns-configured.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
104.52.102.94.in-addr.arpa	name = no-reverse-dns-configured.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
222.186.175.183 attack
SSH Brute-Force attacks
2020-08-14 21:33:22
23.129.64.180 attackbotsspam
Invalid user admin from 23.129.64.180 port 40891
2020-08-14 22:08:11
222.186.175.154 attackspam
Aug 14 15:59:42 vps sshd[881026]: Failed password for root from 222.186.175.154 port 9578 ssh2
Aug 14 15:59:46 vps sshd[881026]: Failed password for root from 222.186.175.154 port 9578 ssh2
Aug 14 15:59:48 vps sshd[881026]: Failed password for root from 222.186.175.154 port 9578 ssh2
Aug 14 15:59:52 vps sshd[881026]: Failed password for root from 222.186.175.154 port 9578 ssh2
Aug 14 15:59:56 vps sshd[881026]: Failed password for root from 222.186.175.154 port 9578 ssh2
...
2020-08-14 22:04:42
218.92.0.224 attack
Aug 14 16:02:52 eventyay sshd[4464]: Failed password for root from 218.92.0.224 port 14359 ssh2
Aug 14 16:03:07 eventyay sshd[4464]: error: maximum authentication attempts exceeded for root from 218.92.0.224 port 14359 ssh2 [preauth]
Aug 14 16:03:14 eventyay sshd[4467]: Failed password for root from 218.92.0.224 port 38316 ssh2
...
2020-08-14 22:06:58
134.175.197.158 attackspambots
Aug 14 08:20:29 bilbo sshd[26799]: User root from 134.175.197.158 not allowed because not listed in AllowUsers
Aug 14 08:20:47 bilbo sshd[26801]: User root from 134.175.197.158 not allowed because not listed in AllowUsers
Aug 14 08:23:20 bilbo sshd[26936]: User root from 134.175.197.158 not allowed because not listed in AllowUsers
Aug 14 08:26:24 bilbo sshd[29100]: User root from 134.175.197.158 not allowed because not listed in AllowUsers
...
2020-08-14 21:52:48
112.85.42.104 attackbotsspam
2020-08-14T17:03:20.539308lavrinenko.info sshd[21798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.104  user=root
2020-08-14T17:03:22.316122lavrinenko.info sshd[21798]: Failed password for root from 112.85.42.104 port 58478 ssh2
2020-08-14T17:03:20.539308lavrinenko.info sshd[21798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.104  user=root
2020-08-14T17:03:22.316122lavrinenko.info sshd[21798]: Failed password for root from 112.85.42.104 port 58478 ssh2
2020-08-14T17:03:24.600863lavrinenko.info sshd[21798]: Failed password for root from 112.85.42.104 port 58478 ssh2
...
2020-08-14 22:08:43
212.113.193.96 attackbotsspam
2020-08-14 21:45:15
35.185.238.24 attack
2020-08-14 21:30:16
212.92.106.96 attackbotsspam
2020-08-14 21:47:15
113.161.20.3 attackbotsspam
Lines containing failures of 113.161.20.3
Jul 29 08:44:42 server-name sshd[11934]: Invalid user mohammad from 113.161.20.3 port 48528
Jul 29 08:44:42 server-name sshd[11934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.161.20.3 
Jul 29 08:44:44 server-name sshd[11934]: Failed password for invalid user mohammad from 113.161.20.3 port 48528 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=113.161.20.3
2020-08-14 22:01:32
212.113.193.99 attackbots
2020-08-14 21:43:52
2a00:23c4:1307:4100:55da:47f6:c7b2:267c attack
2020-08-14 21:38:06
212.92.108.104 attack
2020-08-14 21:46:03
222.186.175.215 attackspam
2020-08-14T16:49:10.664120afi-git.jinr.ru sshd[3604]: Failed password for root from 222.186.175.215 port 52820 ssh2
2020-08-14T16:49:14.586338afi-git.jinr.ru sshd[3604]: Failed password for root from 222.186.175.215 port 52820 ssh2
2020-08-14T16:49:20.674135afi-git.jinr.ru sshd[3604]: Failed password for root from 222.186.175.215 port 52820 ssh2
2020-08-14T16:49:20.674268afi-git.jinr.ru sshd[3604]: error: maximum authentication attempts exceeded for root from 222.186.175.215 port 52820 ssh2 [preauth]
2020-08-14T16:49:20.674283afi-git.jinr.ru sshd[3604]: Disconnecting: Too many authentication failures [preauth]
...
2020-08-14 21:51:52
212.113.193.100 attackbots
2020-08-14 21:43:18

Recently Reported IPs

89.248.166.194 80.82.70.237 81.135.48.20 180.76.207.142
94.102.55.109 185.153.198.2 180.76.206.60 82.37.48.181
82.20.92.73 137.226.156.62 104.144.190.15 185.153.198.5
94.102.53.133 86.106.90.30 180.76.212.18 180.76.211.210
180.76.212.35 106.120.173.181 94.102.61.151 94.102.61.141