94.245.13.202 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Sweden

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
94.245.134.94	attackspam	TCP (SYN) 94.245.134.94:7027 -> port 445, len 52	2020-09-08 04:25:01
94.245.134.94	attackspam	TCP (SYN) 94.245.134.94:7027 -> port 445, len 52	2020-09-07 20:03:00
94.245.133.131	attack	20/8/27@00:14:48: FAIL: Alarm-Network address from=94.245.133.131 ...	2020-08-27 13:13:05
94.245.132.136	attackbotsspam	Unauthorized connection attempt detected from IP address 94.245.132.136 to port 81 [T]	2020-08-16 02:08:22
94.245.131.33	attack	Unauthorized connection attempt detected from IP address 94.245.131.33 to port 80 [T]	2020-07-22 01:13:37
94.245.130.227	attackspam	20/7/8@00:01:55: FAIL: Alarm-Network address from=94.245.130.227 ...	2020-07-08 18:12:36
94.245.134.176	attack	Unauthorized connection attempt detected from IP address 94.245.134.176 to port 445	2020-07-07 03:12:06
94.245.134.235	attackbots	Automatic report - XMLRPC Attack	2020-06-23 23:04:49
94.245.131.60	attack	Port scan on 2 port(s): 1433 65529	2020-04-28 18:42:53
94.245.134.182	attackbots	Unauthorized connection attempt detected from IP address 94.245.134.182 to port 8080 [J]	2020-02-23 17:36:26
94.245.132.131	attackspambots	Feb 21 05:53:22 grey postfix/smtpd\[16111\]: NOQUEUE: reject: RCPT from unknown\[94.245.132.131\]: 554 5.7.1 Service unavailable\; Client host \[94.245.132.131\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[94.245.132.131\]\; from=\ to=\ proto=SMTP helo=\ ...	2020-02-21 17:06:32
94.245.132.239	attack	unauthorized connection attempt	2020-01-28 17:40:08
94.245.134.228	attack	port scan and connect, tcp 80 (http)	2019-06-27 01:36:52

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.245.13.202
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13683
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;94.245.13.202.			IN	A

;; AUTHORITY SECTION:
.			238	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022062901 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jun 30 04:14:26 CST 2022
;; MSG SIZE  rcvd: 106

Host info

202.13.245.94.in-addr.arpa domain name pointer h94-245-13-202.cust.a3fiber.se.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
202.13.245.94.in-addr.arpa	name = h94-245-13-202.cust.a3fiber.se.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
176.31.250.160	attack	Sep 7 18:07:10 ny01 sshd[32685]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.31.250.160 Sep 7 18:07:12 ny01 sshd[32685]: Failed password for invalid user sftpuser from 176.31.250.160 port 58658 ssh2 Sep 7 18:11:44 ny01 sshd[1044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.31.250.160	2019-09-08 06:20:00
177.23.87.223	attack	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-07 21:27:24,909 INFO [amun_request_handler] PortScan Detected on Port: 445 (177.23.87.223)	2019-09-08 06:07:26
179.33.137.117	attackbots	F2B jail: sshd. Time: 2019-09-07 18:48:12, Reported by: VKReport	2019-09-08 05:45:13
45.238.88.8	attack	Automatic report - Port Scan Attack	2019-09-08 05:57:08
94.42.178.137	attack	Sep 7 21:38:25 web8 sshd\[29832\]: Invalid user passwd from 94.42.178.137 Sep 7 21:38:25 web8 sshd\[29832\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.42.178.137 Sep 7 21:38:27 web8 sshd\[29832\]: Failed password for invalid user passwd from 94.42.178.137 port 44580 ssh2 Sep 7 21:44:06 web8 sshd\[32559\]: Invalid user 12 from 94.42.178.137 Sep 7 21:44:06 web8 sshd\[32559\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.42.178.137	2019-09-08 05:49:38
93.244.211.38	attackbotsspam	A true believer: the host has been blocked 414 times, but he keeps trying. What a funny jester ...	2019-09-08 05:42:01
51.159.17.204	attack	Sep 7 11:29:41 php1 sshd\[21196\]: Invalid user smbuser from 51.159.17.204 Sep 7 11:29:41 php1 sshd\[21196\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.159.17.204 Sep 7 11:29:43 php1 sshd\[21196\]: Failed password for invalid user smbuser from 51.159.17.204 port 50948 ssh2 Sep 7 11:33:43 php1 sshd\[21594\]: Invalid user webmaster from 51.159.17.204 Sep 7 11:33:43 php1 sshd\[21594\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.159.17.204	2019-09-08 05:39:01
163.172.207.104	attackbotsspam	\[2019-09-07 17:04:21\] SECURITY\[1849\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-07T17:04:21.094-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="101011972592277524",SessionID="0x7fd9a818cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.207.104/52702",ACLName="no_extension_match" \[2019-09-07 17:08:14\] SECURITY\[1849\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-07T17:08:14.486-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="201011972592277524",SessionID="0x7fd9a879fbd8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.207.104/52882",ACLName="no_extension_match" \[2019-09-07 17:09:33\] SECURITY\[1849\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-07T17:09:33.926-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011972595725702",SessionID="0x7fd9a803e428",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.207.104/49780",AC	2019-09-08 05:45:59
139.59.25.3	attackspam	Sep 7 17:48:59 xtremcommunity sshd\[53599\]: Invalid user support from 139.59.25.3 port 37836 Sep 7 17:48:59 xtremcommunity sshd\[53599\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.25.3 Sep 7 17:49:01 xtremcommunity sshd\[53599\]: Failed password for invalid user support from 139.59.25.3 port 37836 ssh2 Sep 7 17:53:59 xtremcommunity sshd\[53786\]: Invalid user ftp_test from 139.59.25.3 port 53614 Sep 7 17:53:59 xtremcommunity sshd\[53786\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.25.3 ...	2019-09-08 05:55:34
113.160.244.144	attackspam	Sep 8 00:05:27 s64-1 sshd[31637]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.160.244.144 Sep 8 00:05:28 s64-1 sshd[31637]: Failed password for invalid user kafka from 113.160.244.144 port 60193 ssh2 Sep 8 00:11:07 s64-1 sshd[31740]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.160.244.144 ...	2019-09-08 06:16:12
101.75.43.42	attack	Port Scan: TCP/8080	2019-09-08 05:49:06
146.88.74.158	attack	2019-09-07T21:53:43.131906abusebot-2.cloudsearch.cf sshd\[520\]: Invalid user 12345 from 146.88.74.158 port 41375	2019-09-08 06:10:43
218.92.0.161	attackbotsspam	Sep 7 11:53:09 php2 sshd\[25788\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.161 user=root Sep 7 11:53:10 php2 sshd\[25788\]: Failed password for root from 218.92.0.161 port 60801 ssh2 Sep 7 11:53:26 php2 sshd\[25817\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.161 user=root Sep 7 11:53:28 php2 sshd\[25817\]: Failed password for root from 218.92.0.161 port 11516 ssh2 Sep 7 11:53:45 php2 sshd\[25838\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.161 user=root	2019-09-08 06:05:37
2.144.242.5	attackspambots	Sep 7 11:42:42 MK-Soft-VM7 sshd\[3933\]: Invalid user deployer from 2.144.242.5 port 33838 Sep 7 11:42:42 MK-Soft-VM7 sshd\[3933\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.144.242.5 Sep 7 11:42:45 MK-Soft-VM7 sshd\[3933\]: Failed password for invalid user deployer from 2.144.242.5 port 33838 ssh2 ...	2019-09-08 05:52:03
43.227.67.10	attackspam	Sep 7 11:50:32 kapalua sshd\[11395\]: Invalid user 12345 from 43.227.67.10 Sep 7 11:50:32 kapalua sshd\[11395\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.227.67.10 Sep 7 11:50:34 kapalua sshd\[11395\]: Failed password for invalid user 12345 from 43.227.67.10 port 53116 ssh2 Sep 7 11:53:49 kapalua sshd\[11704\]: Invalid user 123 from 43.227.67.10 Sep 7 11:53:49 kapalua sshd\[11704\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.227.67.10	2019-09-08 06:04:59

Recently Reported IPs

222.116.212.204	118.41.29.213	175.192.120.149	175.37.161.1
121.181.67.163	94.74.221.133	175.205.176.197	188.152.46.193
32.132.100.10	192.241.223.49	119.192.157.249	120.48.84.228
125.143.193.102	116.105.174.88	38.55.195.75	61.197.199.8
119.198.212.128	95.165.26.97	218.38.132.16	217.109.159.82