94.102.54.164 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United Kingdom

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
94.102.54.221	attack	Sep 11 22:18:34 hidden postfix/postscreen[38933]: DNSBL rank 4 for [94.102.54.221]:49264	2020-10-10 22:22:21
94.102.54.246	attackbots	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-10-10 22:20:48
94.102.54.252	attackbotsspam	$f2bV_matches	2020-10-10 22:19:35
94.102.54.221	attackbotsspam	Sep 11 22:18:34 hidden postfix/postscreen[38933]: DNSBL rank 4 for [94.102.54.221]:49264	2020-10-10 14:15:41
94.102.54.246	attack	" "	2020-10-10 14:13:42
94.102.54.252	attack	Sep 21 00:19:27 hidden postfix/postscreen[26999]: DNSBL rank 3 for [94.102.54.252]:57832	2020-10-10 14:13:07
94.102.54.199	attack	Sep 18 19:57:34 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.54.199, lip=185.118.198.210, session= Sep 18 19:58:10 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.54.199, lip=185.118.198.210, session=<77hIPpqv5OpeZjbH> Sep 18 19:58:43 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.54.199, lip=185.118.198.210, session= Sep 18 20:01:13 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.54.199, lip=185.118.198.210, session= Sep 18 20:01:29 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=	2020-09-19 02:06:23
94.102.54.199	attack	Sep 18 10:21:16 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.54.199, lip=192.168.100.101, session=\\ Sep 18 10:25:14 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.54.199, lip=192.168.100.101, session=\<3zBWPZKvogBeZjbH\>\ Sep 18 10:45:09 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.54.199, lip=192.168.100.101, session=\\ Sep 18 10:48:31 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.54.199, lip=192.168.100.101, session=\\ Sep 18 10:51:04 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.54.199, lip=192.168.100.101, session=\\ Sep 18 10:55:19 pop3-logi	2020-09-18 18:03:45
94.102.54.199	attack	2020-09-18T02:20:04.112778lavrinenko.info dovecot[15589]: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.54.199, lip=95.216.137.45 2020-09-18T02:54:17.521356lavrinenko.info dovecot[15589]: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.54.199, lip=95.216.137.45 ...	2020-09-18 08:19:40
94.102.54.199	attackbots	Sep 17 18:23:52 h1655903 dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.54.199, lip=85.214.28.7, session=\ Sep 17 18:58:09 h1655903 dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.54.199, lip=85.214.28.7, session=\ Sep 17 19:32:17 h1655903 dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.54.199, lip=85.214.28.7, session=\ ...	2020-09-18 01:52:21
94.102.54.199	attack	2020-09-17T12:05:23.520227lavrinenko.info dovecot[15589]: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.54.199, lip=95.216.137.45 2020-09-17T12:39:37.173559lavrinenko.info dovecot[15589]: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.54.199, lip=95.216.137.45 ...	2020-09-17 17:54:12
94.102.54.199	attack	Sep 16 18:17:35 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.54.199, lip=185.118.198.210, session= Sep 16 18:18:34 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.54.199, lip=185.118.198.210, session= Sep 16 18:18:39 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=94.102.54.199, lip=185.118.198.210, session= Sep 16 18:19:03 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.54.199, lip=185.118.198.210, session= Sep 16 18:20:12 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, metho	2020-09-17 01:11:34
94.102.54.199	attackbotsspam	Sep 16 10:54:04 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.54.199, lip=185.118.198.210, session= Sep 16 10:55:03 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.54.199, lip=185.118.198.210, session= Sep 16 10:55:08 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=94.102.54.199, lip=185.118.198.210, session= Sep 16 10:55:32 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.54.199, lip=185.118.198.210, session= Sep 16 10:56:41 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=	2020-09-16 17:28:01
94.102.54.199	attack	Sep 15 16:53:34 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.54.199, lip=185.118.198.210, session= Sep 15 16:54:36 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.54.199, lip=185.118.198.210, session= Sep 15 16:54:57 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.54.199, lip=185.118.198.210, session= Sep 15 16:55:40 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.54.199, lip=185.118.198.210, session=<4m0WWFuvSPJeZjbH> Sep 15 16:55:45 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=	2020-09-15 23:08:39
94.102.54.199	attackbotsspam	(pop3d) Failed POP3 login from 94.102.54.199 (NL/Netherlands/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Sep 15 11:15:41 ir1 dovecot[3110802]: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.54.199, lip=5.63.12.44, session=<0z3Nf1SvbEJeZjbH>	2020-09-15 15:01:48

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.102.54.164
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25691
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;94.102.54.164.			IN	A

;; AUTHORITY SECTION:
.			404	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022062700 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jun 27 13:34:22 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 164.54.102.94.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 164.54.102.94.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
80.14.99.14	attackspambots	Invalid user user from 80.14.99.14 port 41109	2020-04-25 06:48:26
185.50.149.14	attackspambots	Apr 25 00:58:40 mail.srvfarm.net postfix/smtpd[743336]: warning: unknown[185.50.149.14]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 25 00:58:40 mail.srvfarm.net postfix/smtpd[747634]: warning: unknown[185.50.149.14]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 25 00:58:40 mail.srvfarm.net postfix/smtpd[743336]: lost connection after AUTH from unknown[185.50.149.14] Apr 25 00:58:40 mail.srvfarm.net postfix/smtpd[747634]: lost connection after AUTH from unknown[185.50.149.14] Apr 25 00:58:41 mail.srvfarm.net postfix/smtpd[747315]: lost connection after CONNECT from unknown[185.50.149.14]	2020-04-25 07:01:46
170.247.204.3	attack	Apr 25 00:40:51 mail.srvfarm.net postfix/smtpd[560962]: warning: unknown[170.247.204.3]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 25 00:40:51 mail.srvfarm.net postfix/smtpd[560962]: lost connection after AUTH from unknown[170.247.204.3] Apr 25 00:43:23 mail.srvfarm.net postfix/smtpd[743336]: warning: unknown[170.247.204.3]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 25 00:43:23 mail.srvfarm.net postfix/smtpd[743336]: lost connection after AUTH from unknown[170.247.204.3] Apr 25 00:46:04 mail.srvfarm.net postfix/smtpd[743336]: warning: unknown[170.247.204.3]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-04-25 07:02:36
194.61.27.248	attackbotsspam	Unauthorized connection attempt from IP address 194.61.27.248 on Port 3389(RDP)	2020-04-25 06:53:16
206.189.164.136	attackspam	Apr 25 00:35:35 server sshd[22799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.164.136 Apr 25 00:35:37 server sshd[22799]: Failed password for invalid user casen from 206.189.164.136 port 47486 ssh2 Apr 25 00:40:39 server sshd[23835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.164.136 ...	2020-04-25 06:54:56
201.229.157.27	attackbots	201.229.157.27 has been banned for [WebApp Attack] ...	2020-04-25 07:11:19
192.241.239.10	attack	Unauthorized connection attempt from IP address 192.241.239.10 on port 465	2020-04-25 06:42:47
52.183.3.7	attackspambots	Fri 4-24-20 5:27:19 am PDT 52.183.3.7/cms/server/php/ User Agent = Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36 Fri 4-24-20 5:27:20 am PDT 52.183.3.7 tried to load /public/upload_nhieuanh/server/php/ User Agent = Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1) Fri 4-24-20 5:27:21 am PDT 52.183.3.7 tried to load /public/server/php/ User Agent = Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Fri 4-24-20 5:27:22 am PDT 52.183.3.7tried to load /admin/gallery/server/php/ User Agent = Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/5.0) Fri 4-24-20 5:27:23 am PDT 52.183.3.7 tried to load /jQuery-File-Upload/server/php/ Fri 4-24-20 5:27:24 am PDT 52.183.3.7 tried to load /plugins/jQuery-File-Upload/server/php/ User Agent = Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36	2020-04-25 07:14:03
185.50.149.3	attackspam	Apr 24 23:48:03 l03 postfix/smtps/smtpd[10747]: lost connection after AUTH from unknown[185.50.149.3] Apr 24 23:48:14 l03 postfix/smtps/smtpd[10747]: lost connection after AUTH from unknown[185.50.149.3] Apr 24 23:49:49 l03 postfix/smtps/smtpd[10750]: lost connection after AUTH from unknown[185.50.149.3] Apr 24 23:49:53 l03 postfix/smtps/smtpd[10747]: lost connection after AUTH from unknown[185.50.149.3] Apr 24 23:49:59 l03 postfix/smtps/smtpd[10750]: lost connection after AUTH from unknown[185.50.149.3] ...	2020-04-25 07:02:19
111.231.141.141	attackspambots	Invalid user xs from 111.231.141.141 port 60082	2020-04-25 06:41:47
43.240.247.234	attack	Apr 25 00:29:13 OPSO sshd\[29373\]: Invalid user vf from 43.240.247.234 port 56834 Apr 25 00:29:13 OPSO sshd\[29373\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.240.247.234 Apr 25 00:29:14 OPSO sshd\[29373\]: Failed password for invalid user vf from 43.240.247.234 port 56834 ssh2 Apr 25 00:33:37 OPSO sshd\[32233\]: Invalid user plegrand from 43.240.247.234 port 47586 Apr 25 00:33:37 OPSO sshd\[32233\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.240.247.234	2020-04-25 06:48:55
121.201.123.252	attackbotsspam	Invalid user qx from 121.201.123.252 port 46686	2020-04-25 07:13:05
111.229.110.107	attackspam	Invalid user username from 111.229.110.107 port 41652	2020-04-25 07:12:02
59.10.5.156	attackspambots	Invalid user postgres from 59.10.5.156 port 49832	2020-04-25 06:46:33
222.186.42.155	attack	Apr 25 00:43:41 vmd38886 sshd\[3904\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.155 user=root Apr 25 00:43:43 vmd38886 sshd\[3904\]: Failed password for root from 222.186.42.155 port 47658 ssh2 Apr 25 00:43:45 vmd38886 sshd\[3904\]: Failed password for root from 222.186.42.155 port 47658 ssh2	2020-04-25 06:46:57

Recently Reported IPs

180.76.16.48	180.76.227.136	94.102.60.206	180.76.103.213
180.76.76.74	80.82.67.150	180.76.95.228	169.229.75.34
169.229.180.147	169.229.170.66	169.229.182.213	169.229.183.244
169.229.183.241	180.76.19.193	169.229.219.226	169.229.182.8
169.229.219.7	169.229.183.235	180.76.20.173	180.76.20.136