94.102.52.29 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Netherlands

Internet Service Provider: Incrediserve Ltd

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	94.102.52.29 - - \[13/Mar/2020:20:47:47 +0800\] "GET /wp-content/plugins/rolo-slider/assets/css/admin.css HTTP/1.1" 404 38374 "-" "Mozilla/4.0 $compatible\; MSIE 6.0\; Windows NT 5.1\; SV1$"	2020-03-13 22:55:22

Comments on same subnet:

IP	Type	Details	Datetime
94.102.52.36	attackspam	Sent packet to closed port: 22	2020-08-09 23:44:48
94.102.52.57	attackbots	[Thu May 21 12:06:10 2020] - DDoS Attack From IP: 94.102.52.57 Port: 56548	2020-07-09 03:53:58
94.102.52.44	attackspambots	May 27 00:05:26 pop3-login: Info: Disconnected: Inactivity $auth failed, 1 attempts in 180 secs$: user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\<9W41QJSmrABeZjQs\>\ May 27 00:47:06 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\ May 27 00:50:24 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\ May 27 00:59:20 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\ May 27 00:59:24 pop3-login: Info: Aborted login $auth failed, 1 attempts in 6 secs$: user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\ May 27 01	2020-05-27 07:46:46
94.102.52.44	attackspam	May 26 18:59:50 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session= May 26 19:00:07 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session=<0DPwBpCmxk5eZjQs> May 26 19:00:19 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session= May 26 19:01:43 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session= May 26 19:02:11 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=	2020-05-27 01:15:11
94.102.52.44	attack	May 26 04:04:28 ns3042688 courier-pop3d: LOGIN FAILED, user=postmaster@sikla-shop.eu, ip=\[::ffff:94.102.52.44\] ...	2020-05-26 10:11:53
94.102.52.44	attackbotsspam	May 25 19:44:30 ns3042688 courier-pop3d: LOGIN FAILED, user=office@sikla-systems.es, ip=\[::ffff:94.102.52.44\] ...	2020-05-26 02:06:54
94.102.52.44	attackbotsspam	May 25 07:48:22 ns3042688 courier-pop3d: LOGIN FAILED, user=test@makita-dolmar.info, ip=\[::ffff:94.102.52.44\] ...	2020-05-25 13:49:29
94.102.52.57	attackbotsspam	05/24/2020-18:33:20.532373 94.102.52.57 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-05-25 06:51:24
94.102.52.44	attackbotsspam	May 24 13:56:10 ns3042688 courier-pop3d: LOGIN FAILED, user=webmaster@tienda-sikla.eu, ip=\[::ffff:94.102.52.44\] ...	2020-05-24 20:15:14
94.102.52.57	attack	Port scanning [23 denied]	2020-05-23 17:57:54
94.102.52.44	attack	May 22 21:47:50 ns3042688 courier-pop3d: LOGIN FAILED, user=reception@tienda-cmt.org, ip=\[::ffff:94.102.52.44\] ...	2020-05-23 03:49:51
94.102.52.44	attackbots	May 22 13:47:30 ns3042688 courier-pop3d: LOGIN FAILED, user=support@sikla-shop.eu, ip=\[::ffff:94.102.52.44\] ...	2020-05-22 19:54:43
94.102.52.57	attack	TCP ports : 11 / 338 / 448 / 564 / 911	2020-05-22 01:22:15
94.102.52.57	attackspambots	05/20/2020-13:13:08.646937 94.102.52.57 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-05-21 01:31:46
94.102.52.44	attackbotsspam	May 20 18:50:14 ns3042688 courier-pop3d: LOGIN FAILED, user=info@tienda-cmt.com, ip=\[::ffff:94.102.52.44\] ...	2020-05-21 00:57:25

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.102.52.29
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33111
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.102.52.29.			IN	A

;; AUTHORITY SECTION:
.			577	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020031300 1800 900 604800 86400

;; Query time: 108 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 13 22:55:15 CST 2020
;; MSG SIZE  rcvd: 116

Host info

29.52.102.94.in-addr.arpa domain name pointer group-ib.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
29.52.102.94.in-addr.arpa	name = group-ib.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
188.120.250.39	attackspam	Automatic report - SSH Brute-Force Attack	2019-11-07 02:12:28
92.63.194.56	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2019-11-07 02:03:10
220.121.58.55	attack	SSH brutforce	2019-11-07 02:23:11
103.221.252.46	attack	$f2bV_matches_ltvn	2019-11-07 02:26:56
45.179.189.89	attackspambots	Automatic report - Port Scan Attack	2019-11-07 02:20:59
177.8.244.38	attackspam	$f2bV_matches	2019-11-07 01:53:50
120.92.138.124	attackbotsspam	Nov 6 15:31:18 tux-35-217 sshd\[30657\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.138.124 user=root Nov 6 15:31:21 tux-35-217 sshd\[30657\]: Failed password for root from 120.92.138.124 port 35866 ssh2 Nov 6 15:36:40 tux-35-217 sshd\[30692\]: Invalid user kathrin from 120.92.138.124 port 7976 Nov 6 15:36:40 tux-35-217 sshd\[30692\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.138.124 ...	2019-11-07 02:27:59
94.102.56.181	attack	ET CINS Active Threat Intelligence Poor Reputation IP group 94 - port: 6167 proto: TCP cat: Misc Attack	2019-11-07 01:54:19
23.228.238.91	attackbots	Automatic report - SSH Brute-Force Attack	2019-11-07 02:08:13
98.207.101.228	attackspambots	Nov 6 03:26:27 server sshd\[28399\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-98-207-101-228.hsd1.ca.comcast.net Nov 6 03:26:28 server sshd\[28399\]: Failed password for invalid user kaptain from 98.207.101.228 port 42560 ssh2 Nov 6 17:14:02 server sshd\[16740\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-98-207-101-228.hsd1.ca.comcast.net user=root Nov 6 17:14:04 server sshd\[16740\]: Failed password for root from 98.207.101.228 port 42183 ssh2 Nov 6 17:37:52 server sshd\[23384\]: Invalid user kurtz from 98.207.101.228 Nov 6 17:37:52 server sshd\[23384\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-98-207-101-228.hsd1.ca.comcast.net ...	2019-11-07 02:11:25
183.87.158.68	attackbots	Automatic report - Port Scan Attack	2019-11-07 02:24:38
49.88.112.71	attackspam	2019-11-06T17:48:17.747693shield sshd\[9127\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.71 user=root 2019-11-06T17:48:20.074979shield sshd\[9127\]: Failed password for root from 49.88.112.71 port 45824 ssh2 2019-11-06T17:48:23.041830shield sshd\[9127\]: Failed password for root from 49.88.112.71 port 45824 ssh2 2019-11-06T17:48:24.746073shield sshd\[9127\]: Failed password for root from 49.88.112.71 port 45824 ssh2 2019-11-06T17:48:53.707444shield sshd\[9140\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.71 user=root	2019-11-07 01:54:55
106.12.179.165	attack	5x Failed Password	2019-11-07 02:26:39
217.17.161.50	attackspambots	[portscan] Port scan	2019-11-07 02:07:35
185.86.164.98	attackbotsspam	Wordpress attack	2019-11-07 02:13:02

Recently Reported IPs

187.15.89.211	85.75.228.83	45.177.94.83	35.202.157.96
223.185.130.92	104.244.77.95	202.83.28.186	144.217.254.159
190.204.183.27	216.221.44.228	125.91.17.195	172.217.173.3
217.182.33.33	144.217.206.177	85.26.211.83	149.129.54.112
149.126.16.238	191.246.86.100	83.226.108.68	50.31.134.63