94.102.56.11 - IPInfo

Basic Info

City: Amsterdam

Region: North Holland

Country: Netherlands

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
94.102.56.238	attackspam	Too many connections or unauthorized access detected from Yankee banned ip	2020-10-12 03:37:21
94.102.56.238	attack	2020-10-11 14:30:32 dovecot_login authenticator failed for (User) [94.102.56.238]: 535 Incorrect authentication data (set_id=office@usmancity.ru) 2020-10-11 14:30:38 dovecot_login authenticator failed for (User) [94.102.56.238]: 535 Incorrect authentication data (set_id=office@usmancity.ru) 2020-10-11 14:30:48 dovecot_login authenticator failed for (User) [94.102.56.238]: 535 Incorrect authentication data (set_id=office@usmancity.ru) ...	2020-10-11 19:32:44
94.102.56.238	attackspam	Oct 10 14:08:39 mail postfix/smtpd[102206]: warning: unknown[94.102.56.238]: SASL LOGIN authentication failed: generic failure Oct 10 14:08:39 mail postfix/smtpd[102206]: warning: unknown[94.102.56.238]: SASL LOGIN authentication failed: generic failure Oct 10 14:08:39 mail postfix/smtpd[102206]: warning: unknown[94.102.56.238]: SASL LOGIN authentication failed: generic failure Oct 10 14:08:39 mail postfix/smtpd[102206]: warning: unknown[94.102.56.238]: SASL LOGIN authentication failed: generic failure Oct 10 14:08:39 mail postfix/smtpd[102206]: warning: unknown[94.102.56.238]: SASL LOGIN authentication failed: generic failure ...	2020-10-10 22:16:54
94.102.56.238	attackbotsspam	Oct 10 06:36:11 ns308116 postfix/smtpd[8160]: warning: unknown[94.102.56.238]: SASL LOGIN authentication failed: authentication failure Oct 10 06:36:11 ns308116 postfix/smtpd[8160]: warning: unknown[94.102.56.238]: SASL LOGIN authentication failed: authentication failure Oct 10 06:36:11 ns308116 postfix/smtpd[8160]: warning: unknown[94.102.56.238]: SASL LOGIN authentication failed: authentication failure Oct 10 06:36:11 ns308116 postfix/smtpd[8160]: warning: unknown[94.102.56.238]: SASL LOGIN authentication failed: authentication failure Oct 10 06:36:11 ns308116 postfix/smtpd[8160]: warning: unknown[94.102.56.238]: SASL LOGIN authentication failed: authentication failure Oct 10 06:36:11 ns308116 postfix/smtpd[8160]: warning: unknown[94.102.56.238]: SASL LOGIN authentication failed: authentication failure ...	2020-10-10 14:10:32
94.102.56.238	attackspambots	2020-10-10 02:08:19 auth_plain authenticator failed for (User) [94.102.56.238]: 535 Incorrect authentication data (set_id=test@lavrinenko.info,) 2020-10-10 02:08:19 SMTP call from (User) [94.102.56.238] dropped: too many nonmail commands (last was "RSET") ...	2020-10-10 07:48:07
94.102.56.238	attackbotsspam	Oct 9 18:07:38 srv3 postfix/smtpd\[26675\]: warning: unknown\[94.102.56.238\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 9 18:07:44 srv3 postfix/smtpd\[26675\]: warning: unknown\[94.102.56.238\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 9 18:07:54 srv3 postfix/smtpd\[26675\]: warning: unknown\[94.102.56.238\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-10-10 00:10:00
94.102.56.238	attackspam	SMTP AUTH break-in attempt.	2020-10-09 15:55:55
94.102.56.151	attackbots	Persistent port scanning [69 denied]	2020-10-06 02:03:26
94.102.56.238	attack	warning: unknown[94.102.56.238]: SASL LOGIN authentication failed	2020-10-06 01:30:36
94.102.56.151	attackbots	Persistent port scanning [69 denied]	2020-10-05 17:51:34
94.102.56.238	attackspam	SASL LOGIN authentication failed: authentication failure	2020-10-05 17:22:19
94.102.56.216	attack	UDP 94.102.56.216:58033 -> port 9136, len 57	2020-10-04 06:42:37
94.102.56.238	attackspambots	Port probe and connect to SMTP:25. Auth intiated but dropped.	2020-10-04 03:59:49
94.102.56.216	attackbots	[N3.H3.VM3] Port Scanner Detected Blocked by UFW	2020-10-03 22:50:19
94.102.56.238	attackbots	2020-10-03 13:06:53 dovecot_login authenticator failed for $User$ \[94.102.56.238\]: 535 Incorrect authentication data $set_id=info@no-server.de$ 2020-10-03 13:06:59 dovecot_login authenticator failed for $User$ \[94.102.56.238\]: 535 Incorrect authentication data $set_id=info@no-server.de$ 2020-10-03 13:07:09 dovecot_login authenticator failed for $User$ \[94.102.56.238\]: 535 Incorrect authentication data $set_id=info@no-server.de$ 2020-10-03 13:07:26 dovecot_login authenticator failed for $User$ \[94.102.56.238\]: 535 Incorrect authentication data $set_id=info@no-server.de$ 2020-10-03 13:07:43 dovecot_login authenticator failed for $User$ \[94.102.56.238\]: 535 Incorrect authentication data $set_id=info@no-server.de$ 2020-10-03 13:08:00 dovecot_login authenticator failed for $User$ \[94.102.56.238\]: 535 Incorrect authentication data $set_id=info@no-server.de$ 2020-10-03 13:08:00 SMTP call from $User$ \[94.102.56.238\] dropped: too many nonmail commands \(l ...	2020-10-03 20:01:35

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.102.56.11
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10006
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;94.102.56.11.			IN	A

;; AUTHORITY SECTION:
.			222	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022061102 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 12 05:27:34 CST 2022
;; MSG SIZE  rcvd: 105

Host info

11.56.102.94.in-addr.arpa domain name pointer exit-nl4.yggdrasil.ws.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
11.56.102.94.in-addr.arpa	name = exit-nl4.yggdrasil.ws.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
159.89.116.255	attackbots	(PERMBLOCK) 159.89.116.255 (CA/Canada/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:	2020-09-22 02:39:50
89.248.160.139	attackbots	TCP (SYN) 89.248.160.139:59791 -> port 8089, len 44	2020-09-22 02:07:38
45.148.122.177	attackbotsspam	TCP (SYN) 45.148.122.177:16928 -> port 23, len 44	2020-09-22 02:39:24
27.7.80.107	attack	Listed on zen-spamhaus also abuseat.org and dnsbl-sorbs / proto=6 . srcport=1346 . dstport=23 . (2297)	2020-09-22 02:44:57
188.166.240.30	attackspambots	(sshd) Failed SSH login from 188.166.240.30 (SG/Singapore/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 21 12:37:30 server sshd[6710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.240.30 user=root Sep 21 12:37:32 server sshd[6710]: Failed password for root from 188.166.240.30 port 56988 ssh2 Sep 21 12:45:48 server sshd[7483]: Invalid user hadoop from 188.166.240.30 Sep 21 12:45:48 server sshd[7483]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.240.30 Sep 21 12:45:50 server sshd[7483]: Failed password for invalid user hadoop from 188.166.240.30 port 47878 ssh2	2020-09-22 02:49:41
165.22.53.207	attack	165.22.53.207 (SG/Singapore/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 21 13:00:23 jbs1 sshd[9436]: Failed password for root from 84.178.177.212 port 37514 ssh2 Sep 21 13:00:08 jbs1 sshd[9193]: Failed password for root from 200.35.194.138 port 55938 ssh2 Sep 21 12:59:45 jbs1 sshd[8720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.130.17 user=root Sep 21 12:59:47 jbs1 sshd[8720]: Failed password for root from 104.248.130.17 port 56742 ssh2 Sep 21 12:59:53 jbs1 sshd[8829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.53.207 user=root Sep 21 12:59:55 jbs1 sshd[8829]: Failed password for root from 165.22.53.207 port 38076 ssh2 IP Addresses Blocked: 84.178.177.212 (DE/Germany/-) 200.35.194.138 (VE/Venezuela/-) 104.248.130.17 (DE/Germany/-)	2020-09-22 02:14:08
117.28.25.50	attackspambots	2020-09-21T19:49:03.178189amanda2.illicoweb.com sshd\[38228\]: Invalid user test from 117.28.25.50 port 27375 2020-09-21T19:49:03.183534amanda2.illicoweb.com sshd\[38228\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.28.25.50 2020-09-21T19:49:05.022764amanda2.illicoweb.com sshd\[38228\]: Failed password for invalid user test from 117.28.25.50 port 27375 ssh2 2020-09-21T19:53:09.838081amanda2.illicoweb.com sshd\[38643\]: Invalid user hadoop from 117.28.25.50 port 27388 2020-09-21T19:53:09.842976amanda2.illicoweb.com sshd\[38643\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.28.25.50 ...	2020-09-22 02:09:24
217.182.71.54	attack	20 attempts against mh-ssh on echoip	2020-09-22 02:09:46
192.236.155.132	attackbotsspam	Sep 20 16:58:01 hermescis postfix/smtpd[25060]: NOQUEUE: reject: RCPT from unknown[192.236.155.132]: 550 5.1.1 : Recipient address rejected:* from=<193@l.massivellion.buzz> to= proto=ESMTP helo=	2020-09-22 02:54:52
111.230.210.176	attack	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-21T17:07:20Z and 2020-09-21T17:24:28Z	2020-09-22 02:47:19
202.62.83.165	attackspam	20/9/20@13:47:47: FAIL: Alarm-Network address from=202.62.83.165 20/9/20@13:47:47: FAIL: Alarm-Network address from=202.62.83.165 ...	2020-09-22 02:49:26
139.199.119.76	attackbots	Sep 21 14:21:09 eventyay sshd[20961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.119.76 Sep 21 14:21:11 eventyay sshd[20961]: Failed password for invalid user ftp from 139.199.119.76 port 34222 ssh2 Sep 21 14:26:00 eventyay sshd[21065]: Failed password for root from 139.199.119.76 port 39442 ssh2 ...	2020-09-22 02:41:01
112.226.6.227	attack	Listed on abuseat.org plus zen-spamhaus / proto=6 . srcport=64739 . dstport=23 . (2013)	2020-09-22 02:14:47
106.75.104.44	attack	Sep 21 16:28:40 ip-172-31-42-142 sshd\[31184\]: Failed password for root from 106.75.104.44 port 49856 ssh2\ Sep 21 16:30:40 ip-172-31-42-142 sshd\[31188\]: Failed password for root from 106.75.104.44 port 42684 ssh2\ Sep 21 16:32:51 ip-172-31-42-142 sshd\[31196\]: Failed password for root from 106.75.104.44 port 35514 ssh2\ Sep 21 16:34:58 ip-172-31-42-142 sshd\[31201\]: Failed password for root from 106.75.104.44 port 56574 ssh2\ Sep 21 16:36:57 ip-172-31-42-142 sshd\[31232\]: Failed password for root from 106.75.104.44 port 49402 ssh2\	2020-09-22 02:47:31
182.61.60.191	attackbotsspam	$f2bV_matches	2020-09-22 02:51:22

Recently Reported IPs

5.167.64.213	153.125.101.247	137.226.0.66	137.226.0.88
83.137.158.6	47.254.39.233	137.226.1.80	137.226.23.59
5.42.62.242	193.32.127.152	5.167.65.16	3.16.1.84
3.110.45.129	23.128.248.52	5.167.64.5	5.167.65.12
5.167.65.14	5.167.64.212	23.154.177.11	5.167.64.243