94.102.52.122 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United Kingdom

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
94.102.52.36	attackspam	Sent packet to closed port: 22	2020-08-09 23:44:48
94.102.52.57	attackbots	[Thu May 21 12:06:10 2020] - DDoS Attack From IP: 94.102.52.57 Port: 56548	2020-07-09 03:53:58
94.102.52.44	attackspambots	May 27 00:05:26 pop3-login: Info: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\<9W41QJSmrABeZjQs\>\ May 27 00:47:06 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\ May 27 00:50:24 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\ May 27 00:59:20 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\ May 27 00:59:24 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\ May 27 01	2020-05-27 07:46:46
94.102.52.44	attackspam	May 26 18:59:50 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session= May 26 19:00:07 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session=<0DPwBpCmxk5eZjQs> May 26 19:00:19 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session= May 26 19:01:43 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session= May 26 19:02:11 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=	2020-05-27 01:15:11
94.102.52.44	attack	May 26 04:04:28 ns3042688 courier-pop3d: LOGIN FAILED, user=postmaster@sikla-shop.eu, ip=\[::ffff:94.102.52.44\] ...	2020-05-26 10:11:53
94.102.52.44	attackbotsspam	May 25 19:44:30 ns3042688 courier-pop3d: LOGIN FAILED, user=office@sikla-systems.es, ip=\[::ffff:94.102.52.44\] ...	2020-05-26 02:06:54
94.102.52.44	attackbotsspam	May 25 07:48:22 ns3042688 courier-pop3d: LOGIN FAILED, user=test@makita-dolmar.info, ip=\[::ffff:94.102.52.44\] ...	2020-05-25 13:49:29
94.102.52.57	attackbotsspam	05/24/2020-18:33:20.532373 94.102.52.57 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-05-25 06:51:24
94.102.52.44	attackbotsspam	May 24 13:56:10 ns3042688 courier-pop3d: LOGIN FAILED, user=webmaster@tienda-sikla.eu, ip=\[::ffff:94.102.52.44\] ...	2020-05-24 20:15:14
94.102.52.57	attack	Port scanning [23 denied]	2020-05-23 17:57:54
94.102.52.44	attack	May 22 21:47:50 ns3042688 courier-pop3d: LOGIN FAILED, user=reception@tienda-cmt.org, ip=\[::ffff:94.102.52.44\] ...	2020-05-23 03:49:51
94.102.52.44	attackbots	May 22 13:47:30 ns3042688 courier-pop3d: LOGIN FAILED, user=support@sikla-shop.eu, ip=\[::ffff:94.102.52.44\] ...	2020-05-22 19:54:43
94.102.52.57	attack	TCP ports : 11 / 338 / 448 / 564 / 911	2020-05-22 01:22:15
94.102.52.57	attackspambots	05/20/2020-13:13:08.646937 94.102.52.57 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-05-21 01:31:46
94.102.52.44	attackbotsspam	May 20 18:50:14 ns3042688 courier-pop3d: LOGIN FAILED, user=info@tienda-cmt.com, ip=\[::ffff:94.102.52.44\] ...	2020-05-21 00:57:25

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.102.52.122
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4794
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;94.102.52.122.			IN	A

;; AUTHORITY SECTION:
.			423	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022062601 1800 900 604800 86400

;; Query time: 22 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jun 27 13:10:49 CST 2022
;; MSG SIZE  rcvd: 106

Host info

122.52.102.94.in-addr.arpa domain name pointer no-reverse-dns-configured.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
122.52.102.94.in-addr.arpa	name = no-reverse-dns-configured.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
51.83.46.16	attack	2019-09-13T15:53:07.846571abusebot-5.cloudsearch.cf sshd\[12908\]: Invalid user deploy from 51.83.46.16 port 35208	2019-09-14 00:16:24
49.88.112.113	attack	Sep 13 06:09:52 web9 sshd\[24026\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.113 user=root Sep 13 06:09:53 web9 sshd\[24026\]: Failed password for root from 49.88.112.113 port 34128 ssh2 Sep 13 06:10:49 web9 sshd\[24203\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.113 user=root Sep 13 06:10:51 web9 sshd\[24203\]: Failed password for root from 49.88.112.113 port 11150 ssh2 Sep 13 06:11:50 web9 sshd\[24382\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.113 user=root	2019-09-14 00:12:02
221.226.58.102	attackspambots	Sep 13 06:09:19 auw2 sshd\[20582\]: Invalid user debian from 221.226.58.102 Sep 13 06:09:19 auw2 sshd\[20582\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.226.58.102 Sep 13 06:09:22 auw2 sshd\[20582\]: Failed password for invalid user debian from 221.226.58.102 port 33844 ssh2 Sep 13 06:14:04 auw2 sshd\[20960\]: Invalid user support from 221.226.58.102 Sep 13 06:14:04 auw2 sshd\[20960\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.226.58.102	2019-09-14 00:26:58
101.124.6.112	attack	Sep 13 17:45:42 tux-35-217 sshd\[1388\]: Invalid user deploy from 101.124.6.112 port 33708 Sep 13 17:45:42 tux-35-217 sshd\[1388\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.124.6.112 Sep 13 17:45:44 tux-35-217 sshd\[1388\]: Failed password for invalid user deploy from 101.124.6.112 port 33708 ssh2 Sep 13 17:51:02 tux-35-217 sshd\[1401\]: Invalid user username from 101.124.6.112 port 39470 Sep 13 17:51:02 tux-35-217 sshd\[1401\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.124.6.112 ...	2019-09-14 00:10:57
192.227.249.182	attackbotsspam	Looking for resource vulnerabilities	2019-09-14 00:52:31
85.144.226.170	attack	Sep 13 06:58:37 auw2 sshd\[25960\]: Invalid user jenkins from 85.144.226.170 Sep 13 06:58:37 auw2 sshd\[25960\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=170-226-144-85.ftth.glasoperator.nl Sep 13 06:58:39 auw2 sshd\[25960\]: Failed password for invalid user jenkins from 85.144.226.170 port 43716 ssh2 Sep 13 07:03:28 auw2 sshd\[26386\]: Invalid user nagios from 85.144.226.170 Sep 13 07:03:28 auw2 sshd\[26386\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=170-226-144-85.ftth.glasoperator.nl	2019-09-14 01:08:27
182.52.123.186	attack	Microsoft-Windows-Security-Auditing	2019-09-14 00:30:41
218.4.239.146	attackspam	Trying to log into mailserver (postfix/smtp) using multiple names and passwords	2019-09-14 00:48:25
180.124.21.250	attackbots	Sep 13 14:14:56 elektron postfix/smtpd\[20244\]: NOQUEUE: reject: RCPT from unknown\[180.124.21.250\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[180.124.21.250\]\; from=\ to=\ proto=ESMTP helo=\ Sep 13 14:15:11 elektron postfix/smtpd\[20010\]: NOQUEUE: reject: RCPT from unknown\[180.124.21.250\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[180.124.21.250\]\; from=\ to=\ proto=ESMTP helo=\ Sep 13 14:16:02 elektron postfix/smtpd\[20010\]: NOQUEUE: reject: RCPT from unknown\[180.124.21.250\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[180.124.21.250\]\; from=\ to=\ proto=ESMTP helo=\	2019-09-14 00:55:44
182.150.58.202	attackspambots	23/tcp 23/tcp [2019-08-25/09-13]2pkt	2019-09-14 00:40:21
159.65.255.153	attackbotsspam	Sep 13 01:49:55 web1 sshd\[13013\]: Invalid user password from 159.65.255.153 Sep 13 01:49:55 web1 sshd\[13013\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.255.153 Sep 13 01:49:57 web1 sshd\[13013\]: Failed password for invalid user password from 159.65.255.153 port 49744 ssh2 Sep 13 01:54:15 web1 sshd\[13374\]: Invalid user ark from 159.65.255.153 Sep 13 01:54:15 web1 sshd\[13374\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.255.153	2019-09-14 00:38:42
111.231.121.62	attack	Sep 13 05:52:29 web9 sshd\[20734\]: Invalid user admin01 from 111.231.121.62 Sep 13 05:52:29 web9 sshd\[20734\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.121.62 Sep 13 05:52:31 web9 sshd\[20734\]: Failed password for invalid user admin01 from 111.231.121.62 port 35900 ssh2 Sep 13 05:57:18 web9 sshd\[21575\]: Invalid user dspace from 111.231.121.62 Sep 13 05:57:18 web9 sshd\[21575\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.121.62	2019-09-14 00:15:08
121.254.179.10	attackspambots	Portscan or hack attempt detected by psad/fwsnort	2019-09-14 00:12:29
121.205.221.131	attack	Rude login attack (14 tries in 1d)	2019-09-14 00:23:06
106.12.15.230	attackspambots	Sep 13 06:23:05 aiointranet sshd\[11329\]: Invalid user qweasd123 from 106.12.15.230 Sep 13 06:23:05 aiointranet sshd\[11329\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.15.230 Sep 13 06:23:07 aiointranet sshd\[11329\]: Failed password for invalid user qweasd123 from 106.12.15.230 port 52966 ssh2 Sep 13 06:27:32 aiointranet sshd\[12426\]: Invalid user azureuser from 106.12.15.230 Sep 13 06:27:32 aiointranet sshd\[12426\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.15.230	2019-09-14 00:34:45

Recently Reported IPs

89.248.166.4	94.102.52.2	103.154.90.130	180.76.147.38
169.229.148.6	181.47.235.145	180.76.19.96	169.229.141.61
119.28.108.210	180.76.20.12	180.76.20.138	184.164.97.83
180.107.250.208	169.229.163.107	169.229.10.109	220.181.108.189
169.229.141.93	177.125.227.86	220.181.108.236	180.76.82.21