94.102.52.28 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Netherlands

Internet Service Provider: Incrediserve Ltd

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	[12/Dec/2019:14:36:49 -0500] "\x16\x03\x02\x01o\x01" Blank UA	2019-12-13 21:59:01

Comments on same subnet:

IP	Type	Details	Datetime
94.102.52.36	attackspam	Sent packet to closed port: 22	2020-08-09 23:44:48
94.102.52.57	attackbots	[Thu May 21 12:06:10 2020] - DDoS Attack From IP: 94.102.52.57 Port: 56548	2020-07-09 03:53:58
94.102.52.44	attackspambots	May 27 00:05:26 pop3-login: Info: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\<9W41QJSmrABeZjQs\>\ May 27 00:47:06 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\ May 27 00:50:24 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\ May 27 00:59:20 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\ May 27 00:59:24 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\ May 27 01	2020-05-27 07:46:46
94.102.52.44	attackspam	May 26 18:59:50 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session= May 26 19:00:07 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session=<0DPwBpCmxk5eZjQs> May 26 19:00:19 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session= May 26 19:01:43 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session= May 26 19:02:11 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=	2020-05-27 01:15:11
94.102.52.44	attack	May 26 04:04:28 ns3042688 courier-pop3d: LOGIN FAILED, user=postmaster@sikla-shop.eu, ip=\[::ffff:94.102.52.44\] ...	2020-05-26 10:11:53
94.102.52.44	attackbotsspam	May 25 19:44:30 ns3042688 courier-pop3d: LOGIN FAILED, user=office@sikla-systems.es, ip=\[::ffff:94.102.52.44\] ...	2020-05-26 02:06:54
94.102.52.44	attackbotsspam	May 25 07:48:22 ns3042688 courier-pop3d: LOGIN FAILED, user=test@makita-dolmar.info, ip=\[::ffff:94.102.52.44\] ...	2020-05-25 13:49:29
94.102.52.57	attackbotsspam	05/24/2020-18:33:20.532373 94.102.52.57 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-05-25 06:51:24
94.102.52.44	attackbotsspam	May 24 13:56:10 ns3042688 courier-pop3d: LOGIN FAILED, user=webmaster@tienda-sikla.eu, ip=\[::ffff:94.102.52.44\] ...	2020-05-24 20:15:14
94.102.52.57	attack	Port scanning [23 denied]	2020-05-23 17:57:54
94.102.52.44	attack	May 22 21:47:50 ns3042688 courier-pop3d: LOGIN FAILED, user=reception@tienda-cmt.org, ip=\[::ffff:94.102.52.44\] ...	2020-05-23 03:49:51
94.102.52.44	attackbots	May 22 13:47:30 ns3042688 courier-pop3d: LOGIN FAILED, user=support@sikla-shop.eu, ip=\[::ffff:94.102.52.44\] ...	2020-05-22 19:54:43
94.102.52.57	attack	TCP ports : 11 / 338 / 448 / 564 / 911	2020-05-22 01:22:15
94.102.52.57	attackspambots	05/20/2020-13:13:08.646937 94.102.52.57 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-05-21 01:31:46
94.102.52.44	attackbotsspam	May 20 18:50:14 ns3042688 courier-pop3d: LOGIN FAILED, user=info@tienda-cmt.com, ip=\[::ffff:94.102.52.44\] ...	2020-05-21 00:57:25

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.102.52.28
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48214
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.102.52.28.			IN	A

;; AUTHORITY SECTION:
.			552	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019121300 1800 900 604800 86400

;; Query time: 102 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Dec 13 21:58:54 CST 2019
;; MSG SIZE  rcvd: 116

Host info

28.52.102.94.in-addr.arpa domain name pointer group-ib.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
28.52.102.94.in-addr.arpa	name = group-ib.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
177.102.90.150	attackbotsspam	Unauthorized connection attempt detected from IP address 177.102.90.150 to port 23	2020-05-13 03:19:15
99.105.91.245	attackbots	Unauthorized connection attempt detected from IP address 99.105.91.245 to port 23	2020-05-13 03:28:34
217.38.73.154	attackspambots	Port scan on 1 port(s): 5555	2020-05-13 03:47:08
200.158.79.249	attackbots	Unauthorized connection attempt detected from IP address 200.158.79.249 to port 445	2020-05-13 03:50:03
198.108.66.203	attack	scan z	2020-05-13 03:51:56
190.115.154.164	attack	Unauthorized connection attempt detected from IP address 190.115.154.164 to port 8000	2020-05-13 03:12:54
200.162.228.80	attackbotsspam	Unauthorized connection attempt detected from IP address 200.162.228.80 to port 23	2020-05-13 03:49:33
189.156.35.181	attackspam	Unauthorized connection attempt detected from IP address 189.156.35.181 to port 8080	2020-05-13 03:56:17
188.2.161.160	attackbots	Unauthorized connection attempt from IP address 188.2.161.160 on Port 445(SMB)	2020-05-13 03:56:33
85.98.102.248	attackbots	Unauthorized connection attempt detected from IP address 85.98.102.248 to port 23	2020-05-13 03:32:23
178.77.21.217	attackspambots	Unauthorized connection attempt detected from IP address 178.77.21.217 to port 23	2020-05-13 03:18:48
192.227.223.212	attack	Unauthorized connection attempt detected from IP address 192.227.223.212 to port 1433	2020-05-13 03:52:22
70.122.163.22	attackspambots	Unauthorized connection attempt detected from IP address 70.122.163.22 to port 80	2020-05-13 03:39:56
139.219.138.253	attack	Unauthorized connection attempt detected from IP address 139.219.138.253 to port 3389	2020-05-13 03:22:44
36.22.182.26	attackspambots	Unauthorized connection attempt detected from IP address 36.22.182.26 to port 445	2020-05-13 03:43:20

Recently Reported IPs

105.255.166.218	91.246.215.153	138.121.14.201	62.183.45.90
78.80.210.30	186.13.103.241	106.75.135.228	87.183.250.63
101.50.101.251	88.230.168.131	112.215.236.190	216.238.185.122
210.19.35.122	14.111.93.93	117.206.146.159	5.66.193.164
1.171.15.110	85.208.184.109	222.95.241.102	183.129.50.83