94.49.166.64 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Saudi Arabia

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.49.166.64
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13401
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;94.49.166.64.			IN	A

;; AUTHORITY SECTION:
.			29	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012300 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 23 17:07:51 CST 2025
;; MSG SIZE  rcvd: 105

Host info

Host 64.166.49.94.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 64.166.49.94.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
104.236.226.93	attackspam	Jul 20 10:24:10 rancher-0 sshd[473898]: Invalid user cyrille from 104.236.226.93 port 59362 Jul 20 10:24:12 rancher-0 sshd[473898]: Failed password for invalid user cyrille from 104.236.226.93 port 59362 ssh2 ...	2020-07-20 16:38:19
206.189.35.138	attackbots	206.189.35.138 - - \[20/Jul/2020:07:51:34 +0200\] "POST /wp-login.php HTTP/1.0" 200 2797 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 206.189.35.138 - - \[20/Jul/2020:07:51:37 +0200\] "POST /wp-login.php HTTP/1.0" 200 2724 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 206.189.35.138 - - \[20/Jul/2020:07:51:39 +0200\] "POST /wp-login.php HTTP/1.0" 200 2762 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2020-07-20 16:34:58
120.29.112.191	attackbots	Attempts against non-existent wp-login	2020-07-20 17:10:38
120.31.138.70	attack	Jul 20 08:40:05 localhost sshd[74636]: Invalid user vaibhav from 120.31.138.70 port 57520 Jul 20 08:40:05 localhost sshd[74636]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.31.138.70 Jul 20 08:40:05 localhost sshd[74636]: Invalid user vaibhav from 120.31.138.70 port 57520 Jul 20 08:40:07 localhost sshd[74636]: Failed password for invalid user vaibhav from 120.31.138.70 port 57520 ssh2 Jul 20 08:45:12 localhost sshd[75085]: Invalid user volk from 120.31.138.70 port 34268 ...	2020-07-20 16:56:10
112.85.42.180	attackspam	Jul 20 19:00:50 localhost sshd[3953856]: Unable to negotiate with 112.85.42.180 port 61258: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] ...	2020-07-20 17:07:53
183.166.171.187	attack	Jul 20 05:51:18 srv01 postfix/smtpd\[19898\]: warning: unknown\[183.166.171.187\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 20 05:51:29 srv01 postfix/smtpd\[19898\]: warning: unknown\[183.166.171.187\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 20 05:51:45 srv01 postfix/smtpd\[19898\]: warning: unknown\[183.166.171.187\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 20 05:52:04 srv01 postfix/smtpd\[19898\]: warning: unknown\[183.166.171.187\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 20 05:52:16 srv01 postfix/smtpd\[19898\]: warning: unknown\[183.166.171.187\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-07-20 17:09:00
94.25.181.162	attack	2020-07-20 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=94.25.181.162	2020-07-20 16:56:46
24.37.113.22	attackbots	24.37.113.22 - - [20/Jul/2020:07:09:59 +0100] "POST /wp-login.php HTTP/1.1" 200 1875 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 24.37.113.22 - - [20/Jul/2020:07:10:00 +0100] "POST /wp-login.php HTTP/1.1" 200 1860 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 24.37.113.22 - - [20/Jul/2020:07:10:01 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-07-20 16:46:01
176.31.105.14	attackspambots	2020-07-20T07:26:46Z - RDP login failed multiple times. (176.31.105.14)	2020-07-20 16:49:07
39.100.128.83	attackspam	Jul 20 06:53:56 vps687878 sshd\[3394\]: Failed password for invalid user jaya from 39.100.128.83 port 33248 ssh2 Jul 20 06:57:02 vps687878 sshd\[3600\]: Invalid user hpy from 39.100.128.83 port 41258 Jul 20 06:57:02 vps687878 sshd\[3600\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.100.128.83 Jul 20 06:57:05 vps687878 sshd\[3600\]: Failed password for invalid user hpy from 39.100.128.83 port 41258 ssh2 Jul 20 06:58:33 vps687878 sshd\[3846\]: Invalid user abba from 39.100.128.83 port 59354 Jul 20 06:58:33 vps687878 sshd\[3846\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.100.128.83 ...	2020-07-20 16:43:34
114.119.167.193	attackspam	Automatic report - Port Scan	2020-07-20 16:47:24
60.251.42.155	attackbotsspam	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-07-20T03:44:28Z and 2020-07-20T03:52:22Z	2020-07-20 17:03:22
116.85.66.34	attackbots	invalid login attempt (testuser)	2020-07-20 17:07:30
94.102.49.65	attackbotsspam	Jul 20 08:23:27 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=94.102.49.65, lip=192.168.100.101, session=\\ Jul 20 08:43:56 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=94.102.49.65, lip=192.168.100.101, session=\\ Jul 20 08:48:59 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=94.102.49.65, lip=192.168.100.101, session=\\ Jul 20 09:15:35 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=94.102.49.65, lip=192.168.100.101, session=\\ Jul 20 09:20:40 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=94.102.49.65, lip=192.168.100.101, session=\\ Jul 20 09:26:49 pop3-lo	2020-07-20 16:34:28
2604:a880:400:d0::8d:6001	attackbots	2604:a880:400:d0::8d:6001 - - [20/Jul/2020:07:11:23 +0100] "POST /wp-login.php HTTP/1.1" 200 2345 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 2604:a880:400:d0::8d:6001 - - [20/Jul/2020:07:11:24 +0100] "POST /wp-login.php HTTP/1.1" 200 2329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 2604:a880:400:d0::8d:6001 - - [20/Jul/2020:07:11:30 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-07-20 17:00:44

Recently Reported IPs

42.31.182.129	126.243.156.96	133.155.253.39	196.7.59.224
99.162.104.137	109.236.3.231	98.221.43.134	235.119.193.99
70.115.106.77	5.94.149.252	50.202.156.128	81.161.3.213
3.161.4.198	218.165.10.39	83.64.112.36	41.238.42.224
187.67.3.170	159.34.66.76	98.40.37.30	89.181.160.25