94.102.52.161 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United Kingdom

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
94.102.52.36	attackspam	Sent packet to closed port: 22	2020-08-09 23:44:48
94.102.52.57	attackbots	[Thu May 21 12:06:10 2020] - DDoS Attack From IP: 94.102.52.57 Port: 56548	2020-07-09 03:53:58
94.102.52.44	attackspambots	May 27 00:05:26 pop3-login: Info: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\<9W41QJSmrABeZjQs\>\ May 27 00:47:06 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\ May 27 00:50:24 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\ May 27 00:59:20 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\ May 27 00:59:24 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\ May 27 01	2020-05-27 07:46:46
94.102.52.44	attackspam	May 26 18:59:50 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session= May 26 19:00:07 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session=<0DPwBpCmxk5eZjQs> May 26 19:00:19 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session= May 26 19:01:43 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session= May 26 19:02:11 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=	2020-05-27 01:15:11
94.102.52.44	attack	May 26 04:04:28 ns3042688 courier-pop3d: LOGIN FAILED, user=postmaster@sikla-shop.eu, ip=\[::ffff:94.102.52.44\] ...	2020-05-26 10:11:53
94.102.52.44	attackbotsspam	May 25 19:44:30 ns3042688 courier-pop3d: LOGIN FAILED, user=office@sikla-systems.es, ip=\[::ffff:94.102.52.44\] ...	2020-05-26 02:06:54
94.102.52.44	attackbotsspam	May 25 07:48:22 ns3042688 courier-pop3d: LOGIN FAILED, user=test@makita-dolmar.info, ip=\[::ffff:94.102.52.44\] ...	2020-05-25 13:49:29
94.102.52.57	attackbotsspam	05/24/2020-18:33:20.532373 94.102.52.57 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-05-25 06:51:24
94.102.52.44	attackbotsspam	May 24 13:56:10 ns3042688 courier-pop3d: LOGIN FAILED, user=webmaster@tienda-sikla.eu, ip=\[::ffff:94.102.52.44\] ...	2020-05-24 20:15:14
94.102.52.57	attack	Port scanning [23 denied]	2020-05-23 17:57:54
94.102.52.44	attack	May 22 21:47:50 ns3042688 courier-pop3d: LOGIN FAILED, user=reception@tienda-cmt.org, ip=\[::ffff:94.102.52.44\] ...	2020-05-23 03:49:51
94.102.52.44	attackbots	May 22 13:47:30 ns3042688 courier-pop3d: LOGIN FAILED, user=support@sikla-shop.eu, ip=\[::ffff:94.102.52.44\] ...	2020-05-22 19:54:43
94.102.52.57	attack	TCP ports : 11 / 338 / 448 / 564 / 911	2020-05-22 01:22:15
94.102.52.57	attackspambots	05/20/2020-13:13:08.646937 94.102.52.57 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-05-21 01:31:46
94.102.52.44	attackbotsspam	May 20 18:50:14 ns3042688 courier-pop3d: LOGIN FAILED, user=info@tienda-cmt.com, ip=\[::ffff:94.102.52.44\] ...	2020-05-21 00:57:25

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.102.52.161
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9644
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;94.102.52.161.			IN	A

;; AUTHORITY SECTION:
.			439	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022062202 1800 900 604800 86400

;; Query time: 55 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jun 23 06:06:29 CST 2022
;; MSG SIZE  rcvd: 106

Host info

b'Host 161.52.102.94.in-addr.arpa. not found: 3(NXDOMAIN)
'

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 161.52.102.94.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
156.155.136.254	attack	Ataque de fuerza bruta contra mi servidor virtual	2019-08-01 08:23:42
178.62.41.7	attack	Aug 1 02:02:13 srv-4 sshd\[3087\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.41.7 user=ftp Aug 1 02:02:15 srv-4 sshd\[3087\]: Failed password for ftp from 178.62.41.7 port 49160 ssh2 Aug 1 02:10:53 srv-4 sshd\[3359\]: Invalid user test from 178.62.41.7 Aug 1 02:10:53 srv-4 sshd\[3359\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.41.7 ...	2019-08-01 07:45:58
163.172.220.215	attackbotsspam	Wordfence	2019-08-01 08:05:05
8.26.21.17	attackbots	Aug 1 01:48:50 dev0-dcfr-rnet sshd[12516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.26.21.17 Aug 1 01:48:52 dev0-dcfr-rnet sshd[12516]: Failed password for invalid user vagrant from 8.26.21.17 port 41002 ssh2 Aug 1 01:53:44 dev0-dcfr-rnet sshd[12522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.26.21.17	2019-08-01 08:26:12
91.179.19.173	attackspam	NAME : BE-BELGACOM-20060904 CIDR : 91.176.0.0/13 SYN Flood DDoS Attack Belgium - block certain countries :) IP: 91.179.19.173 Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl	2019-08-01 08:13:01
153.36.236.242	attackspam	2019-08-01T00:13:28.433146abusebot-7.cloudsearch.cf sshd\[2816\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.36.236.242 user=root	2019-08-01 08:25:55
122.58.175.31	attack	Jul 31 23:51:03 tuxlinux sshd[46490]: Invalid user anne from 122.58.175.31 port 45687 Jul 31 23:51:03 tuxlinux sshd[46490]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.58.175.31 Jul 31 23:51:03 tuxlinux sshd[46490]: Invalid user anne from 122.58.175.31 port 45687 Jul 31 23:51:03 tuxlinux sshd[46490]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.58.175.31 Jul 31 23:51:03 tuxlinux sshd[46490]: Invalid user anne from 122.58.175.31 port 45687 Jul 31 23:51:03 tuxlinux sshd[46490]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.58.175.31 Jul 31 23:51:04 tuxlinux sshd[46490]: Failed password for invalid user anne from 122.58.175.31 port 45687 ssh2 ...	2019-08-01 08:14:07
189.62.77.62	attack	Jun 7 04:21:26 ubuntu sshd[17082]: Failed password for invalid user guest from 189.62.77.62 port 32225 ssh2 Jun 7 04:24:50 ubuntu sshd[17161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.62.77.62 Jun 7 04:24:52 ubuntu sshd[17161]: Failed password for invalid user nwalczak from 189.62.77.62 port 37473 ssh2	2019-08-01 08:15:34
209.141.58.114	attackspambots	Jul 31 23:13:56 srv03 sshd\[11848\]: Invalid user admin from 209.141.58.114 port 48236 Jul 31 23:13:56 srv03 sshd\[11848\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.58.114 Jul 31 23:13:58 srv03 sshd\[11848\]: Failed password for invalid user admin from 209.141.58.114 port 48236 ssh2	2019-08-01 08:26:58
45.176.43.253	attack	Automatic report - Port Scan Attack	2019-08-01 08:23:24
153.36.236.151	attack	2019-08-01T00:04:17.717474Z e62504626e7f New connection: 153.36.236.151:52514 (172.17.0.3:2222) [session: e62504626e7f] 2019-08-01T00:11:03.837198Z 7e30f88048a1 New connection: 153.36.236.151:55050 (172.17.0.3:2222) [session: 7e30f88048a1]	2019-08-01 08:22:53
106.52.29.40	attackbots	Automatic report - Banned IP Access	2019-08-01 08:24:45
61.228.177.5	attack	Jul 31 14:37:56 localhost kernel: [15842469.543260] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=61.228.177.5 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=34329 PROTO=TCP SPT=57878 DPT=37215 WINDOW=51771 RES=0x00 SYN URGP=0 Jul 31 14:37:56 localhost kernel: [15842469.543285] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=61.228.177.5 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=34329 PROTO=TCP SPT=57878 DPT=37215 SEQ=758669438 ACK=0 WINDOW=51771 RES=0x00 SYN URGP=0 Jul 31 14:43:14 localhost kernel: [15842787.298923] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=61.228.177.5 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=14392 PROTO=TCP SPT=57878 DPT=37215 WINDOW=51771 RES=0x00 SYN URGP=0 Jul 31 14:43:14 localhost kernel: [15842787.298953] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=61.228.177.5 DST=[mungedIP2] LEN=40 TOS=0x00 PR	2019-08-01 07:47:15
218.207.195.169	attackspam	Jul 31 23:51:07 eventyay sshd[19886]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.207.195.169 Jul 31 23:51:08 eventyay sshd[19886]: Failed password for invalid user git from 218.207.195.169 port 24957 ssh2 Jul 31 23:56:02 eventyay sshd[21102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.207.195.169 ...	2019-08-01 08:15:15
191.53.251.14	attackspam	Jul 31 14:42:13 web1 postfix/smtpd[1470]: warning: unknown[191.53.251.14]: SASL PLAIN authentication failed: authentication failure ...	2019-08-01 08:18:41

Recently Reported IPs

123.219.44.26	169.229.2.106	169.229.14.78	137.226.31.93
169.229.112.85	169.229.38.148	137.226.40.154	137.226.36.197
169.229.20.94	169.229.112.227	169.229.112.218	169.229.111.104
169.229.112.133	221.154.65.248	169.229.167.132	169.229.11.222
137.226.24.193	137.226.206.210	137.226.221.240	137.226.221.95