94.102.52.39 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United Kingdom

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
94.102.52.36	attackspam	Sent packet to closed port: 22	2020-08-09 23:44:48
94.102.52.57	attackbots	[Thu May 21 12:06:10 2020] - DDoS Attack From IP: 94.102.52.57 Port: 56548	2020-07-09 03:53:58
94.102.52.44	attackspambots	May 27 00:05:26 pop3-login: Info: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\<9W41QJSmrABeZjQs\>\ May 27 00:47:06 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\ May 27 00:50:24 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\ May 27 00:59:20 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\ May 27 00:59:24 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\ May 27 01	2020-05-27 07:46:46
94.102.52.44	attackspam	May 26 18:59:50 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session= May 26 19:00:07 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session=<0DPwBpCmxk5eZjQs> May 26 19:00:19 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session= May 26 19:01:43 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session= May 26 19:02:11 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=	2020-05-27 01:15:11
94.102.52.44	attack	May 26 04:04:28 ns3042688 courier-pop3d: LOGIN FAILED, user=postmaster@sikla-shop.eu, ip=\[::ffff:94.102.52.44\] ...	2020-05-26 10:11:53
94.102.52.44	attackbotsspam	May 25 19:44:30 ns3042688 courier-pop3d: LOGIN FAILED, user=office@sikla-systems.es, ip=\[::ffff:94.102.52.44\] ...	2020-05-26 02:06:54
94.102.52.44	attackbotsspam	May 25 07:48:22 ns3042688 courier-pop3d: LOGIN FAILED, user=test@makita-dolmar.info, ip=\[::ffff:94.102.52.44\] ...	2020-05-25 13:49:29
94.102.52.57	attackbotsspam	05/24/2020-18:33:20.532373 94.102.52.57 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-05-25 06:51:24
94.102.52.44	attackbotsspam	May 24 13:56:10 ns3042688 courier-pop3d: LOGIN FAILED, user=webmaster@tienda-sikla.eu, ip=\[::ffff:94.102.52.44\] ...	2020-05-24 20:15:14
94.102.52.57	attack	Port scanning [23 denied]	2020-05-23 17:57:54
94.102.52.44	attack	May 22 21:47:50 ns3042688 courier-pop3d: LOGIN FAILED, user=reception@tienda-cmt.org, ip=\[::ffff:94.102.52.44\] ...	2020-05-23 03:49:51
94.102.52.44	attackbots	May 22 13:47:30 ns3042688 courier-pop3d: LOGIN FAILED, user=support@sikla-shop.eu, ip=\[::ffff:94.102.52.44\] ...	2020-05-22 19:54:43
94.102.52.57	attack	TCP ports : 11 / 338 / 448 / 564 / 911	2020-05-22 01:22:15
94.102.52.57	attackspambots	05/20/2020-13:13:08.646937 94.102.52.57 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-05-21 01:31:46
94.102.52.44	attackbotsspam	May 20 18:50:14 ns3042688 courier-pop3d: LOGIN FAILED, user=info@tienda-cmt.com, ip=\[::ffff:94.102.52.44\] ...	2020-05-21 00:57:25

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.102.52.39
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63910
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;94.102.52.39.			IN	A

;; AUTHORITY SECTION:
.			198	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022063001 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jul 01 03:04:32 CST 2022
;; MSG SIZE  rcvd: 105

Host info

39.52.102.94.in-addr.arpa domain name pointer no-reverse-dns-configured.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
39.52.102.94.in-addr.arpa	name = no-reverse-dns-configured.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
209.217.192.148	attack	Apr 16 18:56:29 markkoudstaal sshd[12190]: Failed password for root from 209.217.192.148 port 42292 ssh2 Apr 16 18:58:55 markkoudstaal sshd[12531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.217.192.148 Apr 16 18:58:56 markkoudstaal sshd[12531]: Failed password for invalid user fc from 209.217.192.148 port 33850 ssh2	2020-04-17 01:52:34
111.40.217.92	attackspam	2020-04-16T16:37:32.086915sd-86998 sshd[46616]: Invalid user ubuntu from 111.40.217.92 port 37019 2020-04-16T16:37:32.089253sd-86998 sshd[46616]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.40.217.92 2020-04-16T16:37:32.086915sd-86998 sshd[46616]: Invalid user ubuntu from 111.40.217.92 port 37019 2020-04-16T16:37:34.077641sd-86998 sshd[46616]: Failed password for invalid user ubuntu from 111.40.217.92 port 37019 ssh2 2020-04-16T16:40:34.522074sd-86998 sshd[46902]: Invalid user ubuntu from 111.40.217.92 port 55120 ...	2020-04-17 01:38:22
222.186.15.10	attackspam	Unauthorized connection attempt detected from IP address 222.186.15.10 to port 22 [T]	2020-04-17 01:55:53
129.28.177.29	attackspambots	Apr 16 17:36:52 *** sshd[8142]: Invalid user developer from 129.28.177.29	2020-04-17 01:46:06
35.220.210.160	attackspambots	Apr 16 12:10:54 sshgateway sshd\[9409\]: Invalid user qc from 35.220.210.160 Apr 16 12:10:54 sshgateway sshd\[9409\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.210.220.35.bc.googleusercontent.com Apr 16 12:10:56 sshgateway sshd\[9409\]: Failed password for invalid user qc from 35.220.210.160 port 41226 ssh2	2020-04-17 01:35:10
106.12.193.96	attack	Apr 16 16:57:23 ncomp sshd[30331]: Invalid user vf from 106.12.193.96 Apr 16 16:57:23 ncomp sshd[30331]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.193.96 Apr 16 16:57:23 ncomp sshd[30331]: Invalid user vf from 106.12.193.96 Apr 16 16:57:25 ncomp sshd[30331]: Failed password for invalid user vf from 106.12.193.96 port 50029 ssh2	2020-04-17 01:54:28
181.48.225.126	attackbotsspam	Apr 16 11:54:18 ws22vmsma01 sshd[116752]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.48.225.126 Apr 16 11:54:21 ws22vmsma01 sshd[116752]: Failed password for invalid user gitlab-runner from 181.48.225.126 port 52500 ssh2 ...	2020-04-17 01:36:39
67.205.135.127	attackspam	SSH brutforce	2020-04-17 01:51:24
37.10.175.73	attackspambots	DATE:2020-04-16 14:10:32, IP:37.10.175.73, PORT:1433 - MSSQL brute force auth on a honeypot server (epe-dc)	2020-04-17 01:54:51
45.55.231.94	attackbotsspam	Port Scan detected from 45.55.231.94 (US/United States/New Jersey/Clifton/-). 4 hits in the last 150 seconds	2020-04-17 01:48:24
54.165.231.250	attackspambots	16.04.2020 12:10:38 Recursive DNS scan	2020-04-17 01:47:50
51.75.126.115	attackbots	Apr 16 16:06:13 ip-172-31-62-245 sshd\[21869\]: Invalid user ftpuser from 51.75.126.115\ Apr 16 16:06:15 ip-172-31-62-245 sshd\[21869\]: Failed password for invalid user ftpuser from 51.75.126.115 port 37152 ssh2\ Apr 16 16:10:02 ip-172-31-62-245 sshd\[22019\]: Invalid user nm from 51.75.126.115\ Apr 16 16:10:04 ip-172-31-62-245 sshd\[22019\]: Failed password for invalid user nm from 51.75.126.115 port 43930 ssh2\ Apr 16 16:13:46 ip-172-31-62-245 sshd\[22061\]: Invalid user test from 51.75.126.115\	2020-04-17 01:43:40
163.44.149.235	attack	(sshd) Failed SSH login from 163.44.149.235 (JP/Japan/v163-44-149-235.a00a.g.sin1.static.cnode.io): 5 in the last 3600 secs	2020-04-17 01:53:17
118.24.149.173	attack	Apr 16 18:09:43 h1745522 sshd[25554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.149.173 user=root Apr 16 18:09:45 h1745522 sshd[25554]: Failed password for root from 118.24.149.173 port 42174 ssh2 Apr 16 18:12:12 h1745522 sshd[25744]: Invalid user b from 118.24.149.173 port 36854 Apr 16 18:12:12 h1745522 sshd[25744]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.149.173 Apr 16 18:12:12 h1745522 sshd[25744]: Invalid user b from 118.24.149.173 port 36854 Apr 16 18:12:14 h1745522 sshd[25744]: Failed password for invalid user b from 118.24.149.173 port 36854 ssh2 Apr 16 18:14:41 h1745522 sshd[25810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.149.173 user=root Apr 16 18:14:41 h1745522 sshd[25810]: Failed password for root from 118.24.149.173 port 59768 ssh2 Apr 16 18:16:46 h1745522 sshd[25905]: pam_unix(sshd:auth): authentication failur ...	2020-04-17 01:58:36
185.176.222.99	attackspam	" "	2020-04-17 01:34:23

Recently Reported IPs

80.82.69.35	89.248.166.190	104.175.193.70	80.82.69.225
94.102.60.213	80.82.76.120	94.102.56.119	94.102.55.85
176.119.7.116	94.102.56.68	42.156.138.88	89.248.164.2
180.76.228.222	180.76.195.67	94.102.53.150	180.76.195.57
180.76.239.189	180.76.249.169	180.76.195.214	180.76.195.218