94.102.49.193 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Netherlands

运营商(isp): Incrediserve Ltd

主机名(hostname): unknown

机构(organization): IP Volume inc

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
botsattackproxy	Bot	2024-04-11 12:03:13
attackbots	TCP (SYN) 94.102.49.193:6707 -> port 502, len 44	2020-10-05 03:01:09
attackspambots	TCP (SYN) 94.102.49.193:6707 -> port 502, len 44	2020-10-04 18:45:20
attackspam	Brute force attack stopped by firewall	2020-10-01 07:09:53
attack	scanning for vulnerabilities	2020-09-30 23:36:07
attackspam	TCP (SYN) 94.102.49.193:20270 -> port 3306, len 44	2020-08-31 16:07:57
attackspam	Port scan: Attack repeated for 24 hours	2020-08-31 04:49:42
attackbotsspam	$f2bV_matches	2020-08-28 00:58:34
attackspambots	94.102.49.193 - - [23/Aug/2020:09:49:39 +0200] "GET / HTTP/1.1" 403 3125 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.137 Safari/537.36" 94.102.49.193 - - [23/Aug/2020:09:49:44 +0200] "GET /robots.txt HTTP/1.1" 403 3125 "-" "-" 94.102.49.193 - - [23/Aug/2020:09:49:44 +0200] "GET /sitemap.xml HTTP/1.1" 403 3125 "-" "-" 94.102.49.193 - - [23/Aug/2020:09:49:44 +0200] "GET /.well-known/security.txt HTTP/1.1" 403 3125 "-" "-" 94.102.49.193 - - [23/Aug/2020:09:49:44 +0200] "GET /favicon.ico HTTP/1.1" 403 3125 "-" "python-requests/2.23.0" ...	2020-08-27 21:01:36
attack	ET CINS Active Threat Intelligence Poor Reputation IP group 91 - port: 3689 proto: tcp cat: Misc Attackbytes: 60	2020-08-14 02:32:23
attackspambots	" "	2020-08-13 04:01:05
attackspam	Honeypot hit.	2020-08-11 08:04:02
attackspam	TCP (SYN) 94.102.49.193:29011 -> port 1311, len 44	2020-08-07 15:56:29
attackspambots	Unauthorized connection attempt detected from IP address 94.102.49.193 to port 9944	2020-08-05 17:37:30
attack	TCP (SYN) 94.102.49.193:18438 -> port 23, len 44	2020-07-29 23:51:03
attack	Port scan: Attack repeated for 24 hours	2020-07-20 12:44:39
attack	Jul 19 22:38:22 debian-2gb-nbg1-2 kernel: \[17449645.167376\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=94.102.49.193 DST=195.201.40.59 LEN=33 TOS=0x10 PREC=0x00 TTL=120 ID=61168 PROTO=UDP SPT=32523 DPT=3283 LEN=13	2020-07-20 04:42:28
attackbotsspam	Fail2Ban Ban Triggered	2020-07-12 20:11:59
attack	Honeypot hit.	2020-07-01 10:27:03
attackspambots	[Sun May 31 14:29:56 2020] - DDoS Attack From IP: 94.102.49.193 Port: 24858	2020-06-24 02:44:47
attackspam	17/tcp 2628/tcp 2762/tcp... [2020-04-20/06-21]368pkt,185pt.(tcp),45pt.(udp)	2020-06-21 14:17:06
attackbots	Fail2Ban Ban Triggered	2020-06-21 07:59:02
attackspam	IP 94.102.49.193 attacked honeypot on port: 83 at 6/15/2020 4:54:37 AM	2020-06-15 13:26:42
attackspam	port	2020-05-15 08:04:26
attackbotsspam	May 7 21:53:00 debian-2gb-nbg1-2 kernel: \[11140064.381263\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=94.102.49.193 DST=195.201.40.59 LEN=44 TOS=0x10 PREC=0x00 TTL=120 ID=15739 PROTO=TCP SPT=20270 DPT=3306 WINDOW=34306 RES=0x00 SYN URGP=0	2020-05-08 04:03:32
attackbotsspam	Unauthorized connection attempt detected from IP address 94.102.49.193 to port 81 [T]	2020-04-25 22:39:14
attack	[Fri Apr 17 03:40:15 2020] - DDoS Attack From IP: 94.102.49.193 Port: 24858	2020-04-25 04:02:44
attack	Port 1234 scan denied	2020-04-17 06:26:36
attackspambots	Port scan: Attack repeated for 24 hours	2020-04-16 05:16:09
attackspambots	3389BruteforceStormFW22	2020-03-28 20:03:46

相同子网IP讨论:

IP	类型	评论内容	时间
94.102.49.190	proxy	VPN fraud	2023-05-29 12:52:27
94.102.49.191	attackspam	ET DROP Dshield Block Listed Source group 1 - port: 132 proto: tcp cat: Misc Attackbytes: 60	2020-10-14 05:37:55
94.102.49.191	attackspambots	Port-scan: detected 174 distinct ports within a 24-hour window.	2020-10-07 17:07:10
94.102.49.117	attack	massive Port Scan	2020-10-07 04:15:40
94.102.49.59	attack	port scan	2020-10-07 00:57:42
94.102.49.117	attackspambots	massive Port Scan	2020-10-06 20:19:06
94.102.49.59	attack	Hacker	2020-10-06 16:51:13
94.102.49.93	attackbotsspam	Port-scan: detected 200 distinct ports within a 24-hour window.	2020-10-04 06:25:39
94.102.49.93	attackbotsspam	Port-scan: detected 200 distinct ports within a 24-hour window.	2020-10-03 22:30:11
94.102.49.93	attackspam	[Sun Sep 27 22:47:43 2020] - Syn Flood From IP: 94.102.49.93 Port: 59653	2020-10-03 14:13:26
94.102.49.137	attackspam	Fri, 2020-10-02 08:33:48 - TCP Packet - Source:94.102.49.137 Destination:xxx.xxx.xxx.xxx - [PORT SCAN]	2020-10-03 04:32:19
94.102.49.137	attack	Oct 2 15:35:22 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=94.102.49.137 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=42330 PROTO=TCP SPT=45720 DPT=11117 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 2 15:35:22 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=94.102.49.137 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=28079 PROTO=TCP SPT=45720 DPT=11218 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 2 15:35:25 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=94.102.49.137 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=3153 PROTO=TCP SPT=45720 DPT=11222 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 2 15:35:25 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=94.102.49.137 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=16947 PROTO=TCP SPT=45720 DPT=11215 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 2 15: ...	2020-10-02 23:52:54
94.102.49.137	attackbotsspam	no-reverse-dns-configured.com	2020-10-02 20:24:29
94.102.49.137	attackspambots	port scan	2020-10-02 16:56:50
94.102.49.137	attackbots	Oct 1 21:04:31 TCP Attack: SRC=94.102.49.137 DST=[Masked] LEN=40 TOS=0x08 PREC=0x20 TTL=246 PROTO=TCP SPT=46270 DPT=10848 WINDOW=1024 RES=0x00 SYN URGP=0	2020-10-02 13:18:12

WHOIS信息:

DIG信息:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.102.49.193
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28978
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.102.49.193.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040400 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Thu Apr 04 22:37:27 +08 2019
;; MSG SIZE  rcvd: 117

HOST信息:

193.49.102.94.in-addr.arpa domain name pointer cloud.census.shodan.io.

NSLOOKUP信息:

Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
193.49.102.94.in-addr.arpa	name = cloud.census.shodan.io.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
104.248.114.58	attackbotsspam	Aug 6 05:40:29 vps647732 sshd[8441]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.114.58 Aug 6 05:40:31 vps647732 sshd[8441]: Failed password for invalid user access from 104.248.114.58 port 50802 ssh2 ...	2019-08-06 11:51:29
140.246.207.140	attackbotsspam	2019-08-05T20:22:56.193926wiz-ks3 sshd[20022]: Invalid user starcraft from 140.246.207.140 port 39908 2019-08-05T20:22:56.196036wiz-ks3 sshd[20022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.207.140 2019-08-05T20:22:56.193926wiz-ks3 sshd[20022]: Invalid user starcraft from 140.246.207.140 port 39908 2019-08-05T20:22:57.921739wiz-ks3 sshd[20022]: Failed password for invalid user starcraft from 140.246.207.140 port 39908 ssh2 2019-08-05T20:37:23.298500wiz-ks3 sshd[20038]: Invalid user pos from 140.246.207.140 port 55198 2019-08-05T20:37:23.300504wiz-ks3 sshd[20038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.207.140 2019-08-05T20:37:23.298500wiz-ks3 sshd[20038]: Invalid user pos from 140.246.207.140 port 55198 2019-08-05T20:37:25.046705wiz-ks3 sshd[20038]: Failed password for invalid user pos from 140.246.207.140 port 55198 ssh2 2019-08-05T20:40:42.405559wiz-ks3 sshd[20049]: Invalid user guest from 140.246	2019-08-06 11:39:43
113.176.123.43	attack	Honeypot attack, port: 445, PTR: static.vnpt.vn.	2019-08-06 11:38:01
14.18.32.156	attackspambots	2019-07-25T19:04:24.843881wiz-ks3 sshd[22090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.18.32.156 user=root 2019-07-25T19:04:26.992874wiz-ks3 sshd[22090]: Failed password for root from 14.18.32.156 port 16258 ssh2 2019-07-25T19:04:29.926461wiz-ks3 sshd[22094]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.18.32.156 user=root 2019-07-25T19:04:32.095481wiz-ks3 sshd[22094]: Failed password for root from 14.18.32.156 port 16623 ssh2 2019-07-25T19:04:29.926461wiz-ks3 sshd[22094]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.18.32.156 user=root 2019-07-25T19:04:32.095481wiz-ks3 sshd[22094]: Failed password for root from 14.18.32.156 port 16623 ssh2 2019-07-25T19:04:35.059045wiz-ks3 sshd[22098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.18.32.156 user=root 2019-07-25T19:04:37.052343wiz-ks3 sshd[22098]: Failed password for roo	2019-08-06 11:47:59
180.250.248.39	attack	SSH Brute Force, server-1 sshd[13368]: Failed password for invalid user tucker from 180.250.248.39 port 57678 ssh2	2019-08-06 11:57:01
122.241.209.227	attackspam	account brute force by foreign IP	2019-08-06 11:27:13
106.226.231.71	attack	account brute force by foreign IP	2019-08-06 11:31:57
203.118.57.21	attackbots	Aug 6 03:33:57 v22018076622670303 sshd\[3907\]: Invalid user centos from 203.118.57.21 port 46548 Aug 6 03:33:57 v22018076622670303 sshd\[3907\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.118.57.21 Aug 6 03:33:59 v22018076622670303 sshd\[3907\]: Failed password for invalid user centos from 203.118.57.21 port 46548 ssh2 ...	2019-08-06 12:25:59
159.65.129.64	attackspam	Aug 6 03:33:30 vpn01 sshd\[25978\]: Invalid user oracle from 159.65.129.64 Aug 6 03:33:30 vpn01 sshd\[25978\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.129.64 Aug 6 03:33:33 vpn01 sshd\[25978\]: Failed password for invalid user oracle from 159.65.129.64 port 37010 ssh2	2019-08-06 12:39:36
199.249.230.82	attackbots	20 attempts against mh-misbehave-ban on ice.magehost.pro	2019-08-06 11:49:31
193.32.161.48	attackbotsspam	08/05/2019-23:12:23.756606 193.32.161.48 Protocol: 6 ET SCAN NMAP -sS window 1024	2019-08-06 12:37:21
113.61.34.46	attackspambots	account brute force by foreign IP	2019-08-06 11:24:02
138.59.218.183	attack	Aug 6 03:39:37 km20725 sshd\[26539\]: Invalid user wwwdata from 138.59.218.183Aug 6 03:39:39 km20725 sshd\[26539\]: Failed password for invalid user wwwdata from 138.59.218.183 port 32844 ssh2Aug 6 03:46:43 km20725 sshd\[26942\]: Invalid user nawira from 138.59.218.183Aug 6 03:46:46 km20725 sshd\[26942\]: Failed password for invalid user nawira from 138.59.218.183 port 59378 ssh2 ...	2019-08-06 11:53:02
90.157.221.90	attack	Aug 6 04:34:57 srv-4 sshd\[15296\]: Invalid user admin from 90.157.221.90 Aug 6 04:34:57 srv-4 sshd\[15296\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=90.157.221.90 Aug 6 04:34:59 srv-4 sshd\[15296\]: Failed password for invalid user admin from 90.157.221.90 port 54735 ssh2 ...	2019-08-06 11:42:20
123.56.232.35	attack	2019-07-08T12:37:04.397026wiz-ks3 sshd[17465]: Invalid user user1 from 123.56.232.35 port 48431 2019-07-08T12:37:04.399192wiz-ks3 sshd[17465]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.56.232.35 2019-07-08T12:37:04.397026wiz-ks3 sshd[17465]: Invalid user user1 from 123.56.232.35 port 48431 2019-07-08T12:37:06.440303wiz-ks3 sshd[17465]: Failed password for invalid user user1 from 123.56.232.35 port 48431 ssh2 2019-07-08T12:37:09.929676wiz-ks3 sshd[17467]: Invalid user user2 from 123.56.232.35 port 59828 2019-07-08T12:37:09.931797wiz-ks3 sshd[17467]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.56.232.35 2019-07-08T12:37:09.929676wiz-ks3 sshd[17467]: Invalid user user2 from 123.56.232.35 port 59828 2019-07-08T12:37:11.992953wiz-ks3 sshd[17467]: Failed password for invalid user user2 from 123.56.232.35 port 59828 ssh2 2019-07-08T12:37:23.537989wiz-ks3 sshd[17471]: pam_unix(sshd:auth): authentication failure; logname=	2019-08-06 11:55:20

最近上报的IP列表

27.75.192.195	190.175.102.214	213.138.77.238	72.252.4.253
62.4.136.87	114.37.165.227	108.167.157.1	35.204.47.208
14.192.10.243	5.45.207.51	34.210.221.148	178.46.167.190
87.190.26.19	193.239.235.69	89.76.96.69	14.177.187.139
188.166.241.93	167.249.9.182	201.149.22.37	196.215.74.160