94.102.49.193 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Netherlands

运营商(isp): Incrediserve Ltd

主机名(hostname): unknown

机构(organization): IP Volume inc

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
botsattackproxy	Bot	2024-04-11 12:03:13
attackbots	TCP (SYN) 94.102.49.193:6707 -> port 502, len 44	2020-10-05 03:01:09
attackspambots	TCP (SYN) 94.102.49.193:6707 -> port 502, len 44	2020-10-04 18:45:20
attackspam	Brute force attack stopped by firewall	2020-10-01 07:09:53
attack	scanning for vulnerabilities	2020-09-30 23:36:07
attackspam	TCP (SYN) 94.102.49.193:20270 -> port 3306, len 44	2020-08-31 16:07:57
attackspam	Port scan: Attack repeated for 24 hours	2020-08-31 04:49:42
attackbotsspam	$f2bV_matches	2020-08-28 00:58:34
attackspambots	94.102.49.193 - - [23/Aug/2020:09:49:39 +0200] "GET / HTTP/1.1" 403 3125 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.137 Safari/537.36" 94.102.49.193 - - [23/Aug/2020:09:49:44 +0200] "GET /robots.txt HTTP/1.1" 403 3125 "-" "-" 94.102.49.193 - - [23/Aug/2020:09:49:44 +0200] "GET /sitemap.xml HTTP/1.1" 403 3125 "-" "-" 94.102.49.193 - - [23/Aug/2020:09:49:44 +0200] "GET /.well-known/security.txt HTTP/1.1" 403 3125 "-" "-" 94.102.49.193 - - [23/Aug/2020:09:49:44 +0200] "GET /favicon.ico HTTP/1.1" 403 3125 "-" "python-requests/2.23.0" ...	2020-08-27 21:01:36
attack	ET CINS Active Threat Intelligence Poor Reputation IP group 91 - port: 3689 proto: tcp cat: Misc Attackbytes: 60	2020-08-14 02:32:23
attackspambots	" "	2020-08-13 04:01:05
attackspam	Honeypot hit.	2020-08-11 08:04:02
attackspam	TCP (SYN) 94.102.49.193:29011 -> port 1311, len 44	2020-08-07 15:56:29
attackspambots	Unauthorized connection attempt detected from IP address 94.102.49.193 to port 9944	2020-08-05 17:37:30
attack	TCP (SYN) 94.102.49.193:18438 -> port 23, len 44	2020-07-29 23:51:03
attack	Port scan: Attack repeated for 24 hours	2020-07-20 12:44:39
attack	Jul 19 22:38:22 debian-2gb-nbg1-2 kernel: \[17449645.167376\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=94.102.49.193 DST=195.201.40.59 LEN=33 TOS=0x10 PREC=0x00 TTL=120 ID=61168 PROTO=UDP SPT=32523 DPT=3283 LEN=13	2020-07-20 04:42:28
attackbotsspam	Fail2Ban Ban Triggered	2020-07-12 20:11:59
attack	Honeypot hit.	2020-07-01 10:27:03
attackspambots	[Sun May 31 14:29:56 2020] - DDoS Attack From IP: 94.102.49.193 Port: 24858	2020-06-24 02:44:47
attackspam	17/tcp 2628/tcp 2762/tcp... [2020-04-20/06-21]368pkt,185pt.(tcp),45pt.(udp)	2020-06-21 14:17:06
attackbots	Fail2Ban Ban Triggered	2020-06-21 07:59:02
attackspam	IP 94.102.49.193 attacked honeypot on port: 83 at 6/15/2020 4:54:37 AM	2020-06-15 13:26:42
attackspam	port	2020-05-15 08:04:26
attackbotsspam	May 7 21:53:00 debian-2gb-nbg1-2 kernel: \[11140064.381263\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=94.102.49.193 DST=195.201.40.59 LEN=44 TOS=0x10 PREC=0x00 TTL=120 ID=15739 PROTO=TCP SPT=20270 DPT=3306 WINDOW=34306 RES=0x00 SYN URGP=0	2020-05-08 04:03:32
attackbotsspam	Unauthorized connection attempt detected from IP address 94.102.49.193 to port 81 [T]	2020-04-25 22:39:14
attack	[Fri Apr 17 03:40:15 2020] - DDoS Attack From IP: 94.102.49.193 Port: 24858	2020-04-25 04:02:44
attack	Port 1234 scan denied	2020-04-17 06:26:36
attackspambots	Port scan: Attack repeated for 24 hours	2020-04-16 05:16:09
attackspambots	3389BruteforceStormFW22	2020-03-28 20:03:46

相同子网IP讨论:

IP	类型	评论内容	时间
94.102.49.190	proxy	VPN fraud	2023-05-29 12:52:27
94.102.49.191	attackspam	ET DROP Dshield Block Listed Source group 1 - port: 132 proto: tcp cat: Misc Attackbytes: 60	2020-10-14 05:37:55
94.102.49.191	attackspambots	Port-scan: detected 174 distinct ports within a 24-hour window.	2020-10-07 17:07:10
94.102.49.117	attack	massive Port Scan	2020-10-07 04:15:40
94.102.49.59	attack	port scan	2020-10-07 00:57:42
94.102.49.117	attackspambots	massive Port Scan	2020-10-06 20:19:06
94.102.49.59	attack	Hacker	2020-10-06 16:51:13
94.102.49.93	attackbotsspam	Port-scan: detected 200 distinct ports within a 24-hour window.	2020-10-04 06:25:39
94.102.49.93	attackbotsspam	Port-scan: detected 200 distinct ports within a 24-hour window.	2020-10-03 22:30:11
94.102.49.93	attackspam	[Sun Sep 27 22:47:43 2020] - Syn Flood From IP: 94.102.49.93 Port: 59653	2020-10-03 14:13:26
94.102.49.137	attackspam	Fri, 2020-10-02 08:33:48 - TCP Packet - Source:94.102.49.137 Destination:xxx.xxx.xxx.xxx - [PORT SCAN]	2020-10-03 04:32:19
94.102.49.137	attack	Oct 2 15:35:22 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=94.102.49.137 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=42330 PROTO=TCP SPT=45720 DPT=11117 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 2 15:35:22 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=94.102.49.137 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=28079 PROTO=TCP SPT=45720 DPT=11218 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 2 15:35:25 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=94.102.49.137 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=3153 PROTO=TCP SPT=45720 DPT=11222 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 2 15:35:25 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=94.102.49.137 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=16947 PROTO=TCP SPT=45720 DPT=11215 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 2 15: ...	2020-10-02 23:52:54
94.102.49.137	attackbotsspam	no-reverse-dns-configured.com	2020-10-02 20:24:29
94.102.49.137	attackspambots	port scan	2020-10-02 16:56:50
94.102.49.137	attackbots	Oct 1 21:04:31 TCP Attack: SRC=94.102.49.137 DST=[Masked] LEN=40 TOS=0x08 PREC=0x20 TTL=246 PROTO=TCP SPT=46270 DPT=10848 WINDOW=1024 RES=0x00 SYN URGP=0	2020-10-02 13:18:12

WHOIS信息:

DIG信息:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.102.49.193
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28978
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.102.49.193.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040400 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Thu Apr 04 22:37:27 +08 2019
;; MSG SIZE  rcvd: 117

HOST信息:

193.49.102.94.in-addr.arpa domain name pointer cloud.census.shodan.io.

NSLOOKUP信息:

Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
193.49.102.94.in-addr.arpa	name = cloud.census.shodan.io.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
83.167.244.178	attack	MLV GET /blog/wp-admin/	2019-07-10 10:11:45
180.150.230.204	attackbots	3389BruteforceFW21	2019-07-10 10:52:11
148.102.53.178	attackbots	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-08 19:52:36,750 INFO [shellcode_manager] (148.102.53.178) no match, writing hexdump (9b550beebc0905dd2617ca13de5ebcf4 :2389371) - MS17010 (EternalBlue)	2019-07-10 10:28:40
45.67.14.180	attackspambots	2019-07-10T06:29:31.135590enmeeting.mahidol.ac.th sshd\[24480\]: User root from 45.67.14.180 not allowed because not listed in AllowUsers 2019-07-10T06:29:31.260275enmeeting.mahidol.ac.th sshd\[24480\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.67.14.180 user=root 2019-07-10T06:29:33.822378enmeeting.mahidol.ac.th sshd\[24480\]: Failed password for invalid user root from 45.67.14.180 port 54676 ssh2 ...	2019-07-10 10:55:42
119.29.15.124	attack	SSH bruteforce	2019-07-10 10:41:21
80.250.234.105	attackbotsspam	Unauthorized connection attempt from IP address 80.250.234.105 on Port 445(SMB)	2019-07-10 10:20:14
116.0.2.46	attackspambots	Unauthorized connection attempt from IP address 116.0.2.46 on Port 445(SMB)	2019-07-10 10:36:18
177.141.198.149	attackspambots	Reported by AbuseIPDB proxy server.	2019-07-10 10:38:40
178.44.136.242	attackbotsspam	Unauthorized connection attempt from IP address 178.44.136.242 on Port 445(SMB)	2019-07-10 10:38:09
138.197.153.228	attackbotsspam	Jul 10 03:53:01 62-210-73-4 sshd\[2765\]: Invalid user pfdracin from 138.197.153.228 port 56670 Jul 10 03:53:01 62-210-73-4 sshd\[2765\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.153.228 ...	2019-07-10 10:44:29
148.63.108.65	attackspam	Automated report - ssh fail2ban: Jul 10 01:30:46 wrong password, user=share, port=58018, ssh2 Jul 10 02:07:27 authentication failure Jul 10 02:07:28 wrong password, user=tf, port=53662, ssh2	2019-07-10 10:57:52
141.98.80.31	attack	Jul 10 04:24:14 localhost sshd\[3276\]: Invalid user admin from 141.98.80.31 port 46530 Jul 10 04:24:14 localhost sshd\[3276\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.80.31 Jul 10 04:24:16 localhost sshd\[3276\]: Failed password for invalid user admin from 141.98.80.31 port 46530 ssh2	2019-07-10 10:44:07
181.120.140.134	attackspam	Unauthorized connection attempt from IP address 181.120.140.134 on Port 445(SMB)	2019-07-10 10:17:00
163.172.67.146	attack	Jul 10 01:52:22 localhost sshd\[18789\]: Invalid user glenn from 163.172.67.146 port 54200 Jul 10 01:52:22 localhost sshd\[18789\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.67.146 Jul 10 01:52:24 localhost sshd\[18789\]: Failed password for invalid user glenn from 163.172.67.146 port 54200 ssh2 ...	2019-07-10 10:08:52
104.144.89.66	attackbotsspam	Automatic report - Web App Attack	2019-07-10 10:39:31

最近上报的IP列表

27.75.192.195	190.175.102.214	213.138.77.238	72.252.4.253
62.4.136.87	114.37.165.227	108.167.157.1	35.204.47.208
14.192.10.243	5.45.207.51	34.210.221.148	178.46.167.190
87.190.26.19	193.239.235.69	89.76.96.69	14.177.187.139
188.166.241.93	167.249.9.182	201.149.22.37	196.215.74.160