94.102.52.217 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
94.102.52.36	attackspam	Sent packet to closed port: 22	2020-08-09 23:44:48
94.102.52.57	attackbots	[Thu May 21 12:06:10 2020] - DDoS Attack From IP: 94.102.52.57 Port: 56548	2020-07-09 03:53:58
94.102.52.44	attackspambots	May 27 00:05:26 pop3-login: Info: Disconnected: Inactivity $auth failed, 1 attempts in 180 secs$: user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\<9W41QJSmrABeZjQs\>\ May 27 00:47:06 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\ May 27 00:50:24 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\ May 27 00:59:20 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\ May 27 00:59:24 pop3-login: Info: Aborted login $auth failed, 1 attempts in 6 secs$: user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\ May 27 01	2020-05-27 07:46:46
94.102.52.44	attackspam	May 26 18:59:50 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session= May 26 19:00:07 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session=<0DPwBpCmxk5eZjQs> May 26 19:00:19 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session= May 26 19:01:43 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session= May 26 19:02:11 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=	2020-05-27 01:15:11
94.102.52.44	attack	May 26 04:04:28 ns3042688 courier-pop3d: LOGIN FAILED, user=postmaster@sikla-shop.eu, ip=\[::ffff:94.102.52.44\] ...	2020-05-26 10:11:53
94.102.52.44	attackbotsspam	May 25 19:44:30 ns3042688 courier-pop3d: LOGIN FAILED, user=office@sikla-systems.es, ip=\[::ffff:94.102.52.44\] ...	2020-05-26 02:06:54
94.102.52.44	attackbotsspam	May 25 07:48:22 ns3042688 courier-pop3d: LOGIN FAILED, user=test@makita-dolmar.info, ip=\[::ffff:94.102.52.44\] ...	2020-05-25 13:49:29
94.102.52.57	attackbotsspam	05/24/2020-18:33:20.532373 94.102.52.57 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-05-25 06:51:24
94.102.52.44	attackbotsspam	May 24 13:56:10 ns3042688 courier-pop3d: LOGIN FAILED, user=webmaster@tienda-sikla.eu, ip=\[::ffff:94.102.52.44\] ...	2020-05-24 20:15:14
94.102.52.57	attack	Port scanning [23 denied]	2020-05-23 17:57:54
94.102.52.44	attack	May 22 21:47:50 ns3042688 courier-pop3d: LOGIN FAILED, user=reception@tienda-cmt.org, ip=\[::ffff:94.102.52.44\] ...	2020-05-23 03:49:51
94.102.52.44	attackbots	May 22 13:47:30 ns3042688 courier-pop3d: LOGIN FAILED, user=support@sikla-shop.eu, ip=\[::ffff:94.102.52.44\] ...	2020-05-22 19:54:43
94.102.52.57	attack	TCP ports : 11 / 338 / 448 / 564 / 911	2020-05-22 01:22:15
94.102.52.57	attackspambots	05/20/2020-13:13:08.646937 94.102.52.57 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-05-21 01:31:46
94.102.52.44	attackbotsspam	May 20 18:50:14 ns3042688 courier-pop3d: LOGIN FAILED, user=info@tienda-cmt.com, ip=\[::ffff:94.102.52.44\] ...	2020-05-21 00:57:25

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.102.52.217
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56478
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;94.102.52.217.			IN	A

;; AUTHORITY SECTION:
.			125	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022063001 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jul 01 03:54:56 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 217.52.102.94.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 217.52.102.94.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
222.163.161.7	attackspam	Unauthorised access (Aug 29) SRC=222.163.161.7 LEN=40 TTL=49 ID=17085 TCP DPT=8080 WINDOW=34126 SYN	2019-08-29 09:47:43
125.26.162.135	attackbots	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-29 00:39:28,657 INFO [amun_request_handler] PortScan Detected on Port: 445 (125.26.162.135)	2019-08-29 09:51:28
121.14.70.29	attackbotsspam	Aug 28 15:35:59 kapalua sshd\[9156\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.14.70.29 user=root Aug 28 15:36:01 kapalua sshd\[9156\]: Failed password for root from 121.14.70.29 port 44404 ssh2 Aug 28 15:40:37 kapalua sshd\[9720\]: Invalid user resin from 121.14.70.29 Aug 28 15:40:37 kapalua sshd\[9720\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.14.70.29 Aug 28 15:40:39 kapalua sshd\[9720\]: Failed password for invalid user resin from 121.14.70.29 port 39179 ssh2	2019-08-29 09:43:38
140.249.35.66	attackbotsspam	Aug 29 03:50:55 eventyay sshd[30904]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.249.35.66 Aug 29 03:50:58 eventyay sshd[30904]: Failed password for invalid user gpadmin from 140.249.35.66 port 42870 ssh2 Aug 29 03:59:52 eventyay sshd[523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.249.35.66 ...	2019-08-29 10:13:52
27.254.41.13	attackbotsspam	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-28 22:25:22,021 INFO [amun_request_handler] PortScan Detected on Port: 445 (27.254.41.13)	2019-08-29 09:58:49
54.39.51.31	attackspambots	Aug 29 02:01:05 localhost sshd\[91789\]: Invalid user kiran from 54.39.51.31 port 32862 Aug 29 02:01:05 localhost sshd\[91789\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.51.31 Aug 29 02:01:07 localhost sshd\[91789\]: Failed password for invalid user kiran from 54.39.51.31 port 32862 ssh2 Aug 29 02:04:59 localhost sshd\[91908\]: Invalid user wp-user from 54.39.51.31 port 49364 Aug 29 02:04:59 localhost sshd\[91908\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.51.31 ...	2019-08-29 10:08:57
177.43.76.36	attackspam	$f2bV_matches	2019-08-29 10:16:31
80.211.133.238	attackbotsspam	Aug 28 16:02:39 hiderm sshd\[22314\]: Invalid user ircd from 80.211.133.238 Aug 28 16:02:39 hiderm sshd\[22314\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=cultadv.cloud Aug 28 16:02:41 hiderm sshd\[22314\]: Failed password for invalid user ircd from 80.211.133.238 port 56890 ssh2 Aug 28 16:06:41 hiderm sshd\[22688\]: Invalid user test from 80.211.133.238 Aug 28 16:06:41 hiderm sshd\[22688\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=cultadv.cloud	2019-08-29 10:19:43
159.65.8.65	attackbotsspam	Aug 29 06:52:23 webhost01 sshd[20787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.8.65 Aug 29 06:52:25 webhost01 sshd[20787]: Failed password for invalid user muddu from 159.65.8.65 port 43070 ssh2 ...	2019-08-29 10:20:02
51.254.220.20	attackspambots	Aug 29 01:52:38 localhost sshd\[31791\]: Invalid user mbrown from 51.254.220.20 port 50525 Aug 29 01:52:38 localhost sshd\[31791\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.220.20 Aug 29 01:52:41 localhost sshd\[31791\]: Failed password for invalid user mbrown from 51.254.220.20 port 50525 ssh2	2019-08-29 09:49:13
123.30.240.39	attackspambots	Aug 28 16:05:45 eddieflores sshd\[19770\]: Invalid user web from 123.30.240.39 Aug 28 16:05:45 eddieflores sshd\[19770\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.30.240.39 Aug 28 16:05:47 eddieflores sshd\[19770\]: Failed password for invalid user web from 123.30.240.39 port 45342 ssh2 Aug 28 16:10:18 eddieflores sshd\[20226\]: Invalid user postgres from 123.30.240.39 Aug 28 16:10:18 eddieflores sshd\[20226\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.30.240.39	2019-08-29 10:17:53
34.73.254.71	attack	2019-08-29T02:01:30.715057abusebot.cloudsearch.cf sshd\[26184\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=71.254.73.34.bc.googleusercontent.com user=root	2019-08-29 10:02:02
118.170.108.207	attackbotsspam	Telnet Server BruteForce Attack	2019-08-29 10:28:07
178.60.38.58	attackspam	Aug 29 01:39:38 localhost sshd\[91123\]: Invalid user dsc from 178.60.38.58 port 43666 Aug 29 01:39:38 localhost sshd\[91123\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.60.38.58 Aug 29 01:39:39 localhost sshd\[91123\]: Failed password for invalid user dsc from 178.60.38.58 port 43666 ssh2 Aug 29 01:44:00 localhost sshd\[91271\]: Invalid user luan from 178.60.38.58 port 38291 Aug 29 01:44:00 localhost sshd\[91271\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.60.38.58 ...	2019-08-29 09:49:41
180.76.162.66	attackbotsspam	Aug 29 01:20:52 MK-Soft-VM5 sshd\[24869\]: Invalid user jcs from 180.76.162.66 port 57655 Aug 29 01:20:52 MK-Soft-VM5 sshd\[24869\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.162.66 Aug 29 01:20:53 MK-Soft-VM5 sshd\[24869\]: Failed password for invalid user jcs from 180.76.162.66 port 57655 ssh2 ...	2019-08-29 10:17:28

Recently Reported IPs

180.76.155.174	180.76.18.237	180.76.102.221	180.76.140.125
180.76.85.210	80.82.67.88	180.76.119.35	180.76.133.225
169.229.168.55	180.76.90.164	169.229.189.248	68.228.20.1
180.76.123.162	180.76.92.53	180.76.117.171	180.76.91.159
169.229.162.196	169.229.254.139	169.229.169.115	180.76.207.247