94.102.56.149 - IPInfo

Basic Info

City: Amsterdam

Region: North Holland

Country: Netherlands

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
94.102.56.238	attackspam	Too many connections or unauthorized access detected from Yankee banned ip	2020-10-12 03:37:21
94.102.56.238	attack	2020-10-11 14:30:32 dovecot_login authenticator failed for (User) [94.102.56.238]: 535 Incorrect authentication data (set_id=office@usmancity.ru) 2020-10-11 14:30:38 dovecot_login authenticator failed for (User) [94.102.56.238]: 535 Incorrect authentication data (set_id=office@usmancity.ru) 2020-10-11 14:30:48 dovecot_login authenticator failed for (User) [94.102.56.238]: 535 Incorrect authentication data (set_id=office@usmancity.ru) ...	2020-10-11 19:32:44
94.102.56.238	attackspam	Oct 10 14:08:39 mail postfix/smtpd[102206]: warning: unknown[94.102.56.238]: SASL LOGIN authentication failed: generic failure Oct 10 14:08:39 mail postfix/smtpd[102206]: warning: unknown[94.102.56.238]: SASL LOGIN authentication failed: generic failure Oct 10 14:08:39 mail postfix/smtpd[102206]: warning: unknown[94.102.56.238]: SASL LOGIN authentication failed: generic failure Oct 10 14:08:39 mail postfix/smtpd[102206]: warning: unknown[94.102.56.238]: SASL LOGIN authentication failed: generic failure Oct 10 14:08:39 mail postfix/smtpd[102206]: warning: unknown[94.102.56.238]: SASL LOGIN authentication failed: generic failure ...	2020-10-10 22:16:54
94.102.56.238	attackbotsspam	Oct 10 06:36:11 ns308116 postfix/smtpd[8160]: warning: unknown[94.102.56.238]: SASL LOGIN authentication failed: authentication failure Oct 10 06:36:11 ns308116 postfix/smtpd[8160]: warning: unknown[94.102.56.238]: SASL LOGIN authentication failed: authentication failure Oct 10 06:36:11 ns308116 postfix/smtpd[8160]: warning: unknown[94.102.56.238]: SASL LOGIN authentication failed: authentication failure Oct 10 06:36:11 ns308116 postfix/smtpd[8160]: warning: unknown[94.102.56.238]: SASL LOGIN authentication failed: authentication failure Oct 10 06:36:11 ns308116 postfix/smtpd[8160]: warning: unknown[94.102.56.238]: SASL LOGIN authentication failed: authentication failure Oct 10 06:36:11 ns308116 postfix/smtpd[8160]: warning: unknown[94.102.56.238]: SASL LOGIN authentication failed: authentication failure ...	2020-10-10 14:10:32
94.102.56.238	attackspambots	2020-10-10 02:08:19 auth_plain authenticator failed for (User) [94.102.56.238]: 535 Incorrect authentication data (set_id=test@lavrinenko.info,) 2020-10-10 02:08:19 SMTP call from (User) [94.102.56.238] dropped: too many nonmail commands (last was "RSET") ...	2020-10-10 07:48:07
94.102.56.238	attackbotsspam	Oct 9 18:07:38 srv3 postfix/smtpd\[26675\]: warning: unknown\[94.102.56.238\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 9 18:07:44 srv3 postfix/smtpd\[26675\]: warning: unknown\[94.102.56.238\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 9 18:07:54 srv3 postfix/smtpd\[26675\]: warning: unknown\[94.102.56.238\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-10-10 00:10:00
94.102.56.238	attackspam	SMTP AUTH break-in attempt.	2020-10-09 15:55:55
94.102.56.151	attackbots	Persistent port scanning [69 denied]	2020-10-06 02:03:26
94.102.56.238	attack	warning: unknown[94.102.56.238]: SASL LOGIN authentication failed	2020-10-06 01:30:36
94.102.56.151	attackbots	Persistent port scanning [69 denied]	2020-10-05 17:51:34
94.102.56.238	attackspam	SASL LOGIN authentication failed: authentication failure	2020-10-05 17:22:19
94.102.56.216	attack	UDP 94.102.56.216:58033 -> port 9136, len 57	2020-10-04 06:42:37
94.102.56.238	attackspambots	Port probe and connect to SMTP:25. Auth intiated but dropped.	2020-10-04 03:59:49
94.102.56.216	attackbots	[N3.H3.VM3] Port Scanner Detected Blocked by UFW	2020-10-03 22:50:19
94.102.56.238	attackbots	2020-10-03 13:06:53 dovecot_login authenticator failed for $User$ \[94.102.56.238\]: 535 Incorrect authentication data $set_id=info@no-server.de$ 2020-10-03 13:06:59 dovecot_login authenticator failed for $User$ \[94.102.56.238\]: 535 Incorrect authentication data $set_id=info@no-server.de$ 2020-10-03 13:07:09 dovecot_login authenticator failed for $User$ \[94.102.56.238\]: 535 Incorrect authentication data $set_id=info@no-server.de$ 2020-10-03 13:07:26 dovecot_login authenticator failed for $User$ \[94.102.56.238\]: 535 Incorrect authentication data $set_id=info@no-server.de$ 2020-10-03 13:07:43 dovecot_login authenticator failed for $User$ \[94.102.56.238\]: 535 Incorrect authentication data $set_id=info@no-server.de$ 2020-10-03 13:08:00 dovecot_login authenticator failed for $User$ \[94.102.56.238\]: 535 Incorrect authentication data $set_id=info@no-server.de$ 2020-10-03 13:08:00 SMTP call from $User$ \[94.102.56.238\] dropped: too many nonmail commands \(l ...	2020-10-03 20:01:35

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.102.56.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9786
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;94.102.56.149.			IN	A

;; AUTHORITY SECTION:
.			203	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022063000 1800 900 604800 86400

;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jun 30 22:05:00 CST 2022
;; MSG SIZE  rcvd: 106

Host info

149.56.102.94.in-addr.arpa domain name pointer no-reverse-dns-configured.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
149.56.102.94.in-addr.arpa	name = no-reverse-dns-configured.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
118.39.108.242	attack	Unauthorized connection attempt detected from IP address 118.39.108.242 to port 5555 [J]	2020-02-05 07:00:10
109.124.176.138	attackbotsspam	$f2bV_matches	2020-02-05 07:20:00
138.122.146.162	attackspam	Unauthorized connection attempt detected from IP address 138.122.146.162 to port 2220 [J]	2020-02-05 07:15:21
42.58.90.88	attackbots	Unauthorized connection attempt detected from IP address 42.58.90.88 to port 23 [J]	2020-02-05 07:12:25
45.125.66.28	attackbots	Rude login attack (5 tries in 1d)	2020-02-05 07:29:02
197.232.47.210	attackbotsspam	Unauthorized connection attempt detected from IP address 197.232.47.210 to port 2220 [J]	2020-02-05 07:08:20
58.56.178.170	attack	Brute force attempt	2020-02-05 06:57:44
190.37.126.39	attack	Honeypot attack, port: 5555, PTR: 190-37-126-39.dyn.dsl.cantv.net.	2020-02-05 07:09:02
222.186.31.135	attackbots	Feb 5 00:04:09 dcd-gentoo sshd[589]: User root from 222.186.31.135 not allowed because none of user's groups are listed in AllowGroups Feb 5 00:04:12 dcd-gentoo sshd[589]: error: PAM: Authentication failure for illegal user root from 222.186.31.135 Feb 5 00:04:09 dcd-gentoo sshd[589]: User root from 222.186.31.135 not allowed because none of user's groups are listed in AllowGroups Feb 5 00:04:12 dcd-gentoo sshd[589]: error: PAM: Authentication failure for illegal user root from 222.186.31.135 Feb 5 00:04:09 dcd-gentoo sshd[589]: User root from 222.186.31.135 not allowed because none of user's groups are listed in AllowGroups Feb 5 00:04:12 dcd-gentoo sshd[589]: error: PAM: Authentication failure for illegal user root from 222.186.31.135 Feb 5 00:04:12 dcd-gentoo sshd[589]: Failed keyboard-interactive/pam for invalid user root from 222.186.31.135 port 23869 ssh2 ...	2020-02-05 07:04:47
45.125.66.184	attackspam	Rude login attack (5 tries in 1d)	2020-02-05 07:26:15
106.13.13.188	attackspambots	Unauthorized connection attempt detected from IP address 106.13.13.188 to port 2220 [J]	2020-02-05 07:02:12
106.12.59.23	attackspam	Feb 4 20:13:00 vlre-nyc-1 sshd\[10939\]: Invalid user jateen from 106.12.59.23 Feb 4 20:13:00 vlre-nyc-1 sshd\[10939\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.59.23 Feb 4 20:13:02 vlre-nyc-1 sshd\[10939\]: Failed password for invalid user jateen from 106.12.59.23 port 36968 ssh2 Feb 4 20:18:11 vlre-nyc-1 sshd\[11034\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.59.23 user=root Feb 4 20:18:13 vlre-nyc-1 sshd\[11034\]: Failed password for root from 106.12.59.23 port 41390 ssh2 ...	2020-02-05 07:17:08
42.2.13.100	attackbotsspam	Unauthorized connection attempt detected from IP address 42.2.13.100 to port 5555 [J]	2020-02-05 07:33:34
188.70.38.111	attackbotsspam	Feb 4 21:18:26 grey postfix/smtpd\[24341\]: NOQUEUE: reject: RCPT from unknown\[188.70.38.111\]: 554 5.7.1 Service unavailable\; Client host \[188.70.38.111\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=188.70.38.111\; from=\ to=\ proto=ESMTP helo=\<\[188.70.38.111\]\> ...	2020-02-05 07:03:51
112.85.42.182	attack	pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.182 user=root Failed password for root from 112.85.42.182 port 53513 ssh2 Failed password for root from 112.85.42.182 port 53513 ssh2 Failed password for root from 112.85.42.182 port 53513 ssh2 Failed password for root from 112.85.42.182 port 53513 ssh2	2020-02-05 07:12:12

Recently Reported IPs

180.76.189.152	185.145.177.208	137.226.204.145	103.159.132.141
211.248.230.164	180.76.193.174	180.76.172.74	180.76.162.169
169.229.241.216	180.76.172.48	42.156.138.200	169.229.242.21
47.35.88.112	180.76.162.213	180.76.172.22	137.226.203.166
50.69.176.134	194.135.33.137	46.225.142.219	180.76.68.211