94.102.52.29 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Netherlands

运营商(isp): Incrediserve Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	94.102.52.29 - - \[13/Mar/2020:20:47:47 +0800\] "GET /wp-content/plugins/rolo-slider/assets/css/admin.css HTTP/1.1" 404 38374 "-" "Mozilla/4.0 \(compatible\; MSIE 6.0\; Windows NT 5.1\; SV1\)"	2020-03-13 22:55:22

相同子网IP讨论:

IP	类型	评论内容	时间
94.102.52.36	attackspam	Sent packet to closed port: 22	2020-08-09 23:44:48
94.102.52.57	attackbots	[Thu May 21 12:06:10 2020] - DDoS Attack From IP: 94.102.52.57 Port: 56548	2020-07-09 03:53:58
94.102.52.44	attackspambots	May 27 00:05:26 pop3-login: Info: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\<9W41QJSmrABeZjQs\>\ May 27 00:47:06 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\ May 27 00:50:24 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\ May 27 00:59:20 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\ May 27 00:59:24 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=94.102.52.44, lip=192.168.100.101, session=\\ May 27 01	2020-05-27 07:46:46
94.102.52.44	attackspam	May 26 18:59:50 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session= May 26 19:00:07 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session=<0DPwBpCmxk5eZjQs> May 26 19:00:19 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session= May 26 19:01:43 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session= May 26 19:02:11 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=	2020-05-27 01:15:11
94.102.52.44	attack	May 26 04:04:28 ns3042688 courier-pop3d: LOGIN FAILED, user=postmaster@sikla-shop.eu, ip=\[::ffff:94.102.52.44\] ...	2020-05-26 10:11:53
94.102.52.44	attackbotsspam	May 25 19:44:30 ns3042688 courier-pop3d: LOGIN FAILED, user=office@sikla-systems.es, ip=\[::ffff:94.102.52.44\] ...	2020-05-26 02:06:54
94.102.52.44	attackbotsspam	May 25 07:48:22 ns3042688 courier-pop3d: LOGIN FAILED, user=test@makita-dolmar.info, ip=\[::ffff:94.102.52.44\] ...	2020-05-25 13:49:29
94.102.52.57	attackbotsspam	05/24/2020-18:33:20.532373 94.102.52.57 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-05-25 06:51:24
94.102.52.44	attackbotsspam	May 24 13:56:10 ns3042688 courier-pop3d: LOGIN FAILED, user=webmaster@tienda-sikla.eu, ip=\[::ffff:94.102.52.44\] ...	2020-05-24 20:15:14
94.102.52.57	attack	Port scanning [23 denied]	2020-05-23 17:57:54
94.102.52.44	attack	May 22 21:47:50 ns3042688 courier-pop3d: LOGIN FAILED, user=reception@tienda-cmt.org, ip=\[::ffff:94.102.52.44\] ...	2020-05-23 03:49:51
94.102.52.44	attackbots	May 22 13:47:30 ns3042688 courier-pop3d: LOGIN FAILED, user=support@sikla-shop.eu, ip=\[::ffff:94.102.52.44\] ...	2020-05-22 19:54:43
94.102.52.57	attack	TCP ports : 11 / 338 / 448 / 564 / 911	2020-05-22 01:22:15
94.102.52.57	attackspambots	05/20/2020-13:13:08.646937 94.102.52.57 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-05-21 01:31:46
94.102.52.44	attackbotsspam	May 20 18:50:14 ns3042688 courier-pop3d: LOGIN FAILED, user=info@tienda-cmt.com, ip=\[::ffff:94.102.52.44\] ...	2020-05-21 00:57:25

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.102.52.29
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33111
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.102.52.29.			IN	A

;; AUTHORITY SECTION:
.			577	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020031300 1800 900 604800 86400

;; Query time: 108 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 13 22:55:15 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

29.52.102.94.in-addr.arpa domain name pointer group-ib.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
29.52.102.94.in-addr.arpa	name = group-ib.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
192.35.169.20	attackspam	02-Aug-2020 08:22:34.923 client @0x7f3246e52f60 192.35.169.20#7282 (213.1.168.192.in-addr.arpa): query (cache) '213.1.168.192.in-addr.arpa/PTR/IN' denied	2020-08-02 21:45:53
87.251.74.182	attack	Aug 2 14:56:06 debian-2gb-nbg1-2 kernel: \[18631442.259940\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=87.251.74.182 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=44119 PROTO=TCP SPT=41972 DPT=4262 WINDOW=1024 RES=0x00 SYN URGP=0	2020-08-02 21:27:06
212.64.88.97	attackspam	2020-08-02T07:43:17.1273171495-001 sshd[21137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.88.97 user=root 2020-08-02T07:43:19.0681401495-001 sshd[21137]: Failed password for root from 212.64.88.97 port 32784 ssh2 2020-08-02T07:47:50.0401811495-001 sshd[21357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.88.97 user=root 2020-08-02T07:47:52.6577961495-001 sshd[21357]: Failed password for root from 212.64.88.97 port 51934 ssh2 2020-08-02T07:52:20.9260131495-001 sshd[21543]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.88.97 user=root 2020-08-02T07:52:23.0773021495-001 sshd[21543]: Failed password for root from 212.64.88.97 port 42844 ssh2 ...	2020-08-02 21:23:57
170.82.236.19	attackspam	[ssh] SSH attack	2020-08-02 21:49:57
222.186.15.18	attackspambots	Aug 2 15:09:51 OPSO sshd\[14201\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.18 user=root Aug 2 15:09:53 OPSO sshd\[14201\]: Failed password for root from 222.186.15.18 port 60063 ssh2 Aug 2 15:09:56 OPSO sshd\[14201\]: Failed password for root from 222.186.15.18 port 60063 ssh2 Aug 2 15:09:59 OPSO sshd\[14201\]: Failed password for root from 222.186.15.18 port 60063 ssh2 Aug 2 15:12:10 OPSO sshd\[14576\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.18 user=root	2020-08-02 21:30:15
74.102.15.6	attackspam	Port Scan detected from 74.102.15.6 (US/United States/New Jersey/Elmwood Park/pool-74-102-15-6.nwrknj.fios.verizon.net). 4 hits in the last 85 seconds	2020-08-02 21:35:01
104.244.78.231	attack	Aug 2 14:13:15 ns382633 sshd\[7608\]: Invalid user admin from 104.244.78.231 port 44186 Aug 2 14:13:15 ns382633 sshd\[7608\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.78.231 Aug 2 14:13:17 ns382633 sshd\[7608\]: Failed password for invalid user admin from 104.244.78.231 port 44186 ssh2 Aug 2 14:13:17 ns382633 sshd\[7610\]: Invalid user admin from 104.244.78.231 port 44876 Aug 2 14:13:18 ns382633 sshd\[7610\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.78.231	2020-08-02 21:20:24
200.243.21.50	attack	Aug 2 15:39:28 vps sshd[302408]: Failed password for root from 200.243.21.50 port 60988 ssh2 Aug 2 15:41:10 vps sshd[312879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.243.21.50 user=root Aug 2 15:41:12 vps sshd[312879]: Failed password for root from 200.243.21.50 port 42980 ssh2 Aug 2 15:42:57 vps sshd[318726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.243.21.50 user=root Aug 2 15:42:59 vps sshd[318726]: Failed password for root from 200.243.21.50 port 53211 ssh2 ...	2020-08-02 21:43:01
124.104.146.32	attackspam	Port Scan ...	2020-08-02 21:58:32
141.98.9.159	attackspam	Aug 2 13:04:05 ip-172-31-61-156 sshd[32500]: Invalid user admin from 141.98.9.159 Aug 2 13:04:05 ip-172-31-61-156 sshd[32500]: Failed none for invalid user admin from 141.98.9.159 port 37521 ssh2 Aug 2 13:04:05 ip-172-31-61-156 sshd[32500]: Invalid user admin from 141.98.9.159 Aug 2 13:04:05 ip-172-31-61-156 sshd[32500]: Failed none for invalid user admin from 141.98.9.159 port 37521 ssh2 ...	2020-08-02 21:54:47
177.39.142.108	attack	(smtpauth) Failed SMTP AUTH login from 177.39.142.108 (BR/Brazil/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-08-02 16:42:40 plain authenticator failed for ([177.39.142.108]) [177.39.142.108]: 535 Incorrect authentication data (set_id=info@mobarezco.com)	2020-08-02 21:47:40
58.87.75.178	attack	Aug 2 14:24:58 abendstille sshd\[8471\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.87.75.178 user=root Aug 2 14:25:01 abendstille sshd\[8471\]: Failed password for root from 58.87.75.178 port 52196 ssh2 Aug 2 14:28:40 abendstille sshd\[11978\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.87.75.178 user=root Aug 2 14:28:42 abendstille sshd\[11978\]: Failed password for root from 58.87.75.178 port 36402 ssh2 Aug 2 14:32:26 abendstille sshd\[15413\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.87.75.178 user=root ...	2020-08-02 21:16:06
122.51.180.34	attackspambots	Aug 2 14:09:18 marvibiene sshd[16791]: Failed password for root from 122.51.180.34 port 42896 ssh2	2020-08-02 21:41:00
116.196.82.45	attack	Attempted Brute Force (dovecot)	2020-08-02 21:55:43
187.63.37.107	attack	(smtpauth) Failed SMTP AUTH login from 187.63.37.107 (BR/Brazil/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-08-02 16:42:46 plain authenticator failed for ([187.63.37.107]) [187.63.37.107]: 535 Incorrect authentication data (set_id=info)	2020-08-02 21:43:19

最近上报的IP列表

187.15.89.211	85.75.228.83	45.177.94.83	35.202.157.96
223.185.130.92	104.244.77.95	202.83.28.186	144.217.254.159
190.204.183.27	216.221.44.228	125.91.17.195	172.217.173.3
217.182.33.33	144.217.206.177	85.26.211.83	149.129.54.112
149.126.16.238	191.246.86.100	83.226.108.68	50.31.134.63