201.55.142.135

Basic Info

City: unknown

Region: unknown

Country: Brazil

Internet Service Provider: WI - Provedor de Telecomunicacoes Ltda.

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Aug 14 23:49:22 mail.srvfarm.net postfix/smtpd[738030]: warning: unknown[201.55.142.135]: SASL PLAIN authentication failed: Aug 14 23:49:23 mail.srvfarm.net postfix/smtpd[738030]: lost connection after AUTH from unknown[201.55.142.135] Aug 14 23:53:36 mail.srvfarm.net postfix/smtps/smtpd[739407]: warning: unknown[201.55.142.135]: SASL PLAIN authentication failed: Aug 14 23:53:37 mail.srvfarm.net postfix/smtps/smtpd[739407]: lost connection after AUTH from unknown[201.55.142.135] Aug 14 23:59:22 mail.srvfarm.net postfix/smtpd[736667]: warning: unknown[201.55.142.135]: SASL PLAIN authentication failed:	2020-08-15 17:13:32
attackbots	Jun 18 12:25:38 mail.srvfarm.net postfix/smtpd[1443188]: warning: unknown[201.55.142.135]: SASL PLAIN authentication failed: Jun 18 12:25:38 mail.srvfarm.net postfix/smtpd[1443188]: lost connection after AUTH from unknown[201.55.142.135] Jun 18 12:28:59 mail.srvfarm.net postfix/smtpd[1445381]: warning: unknown[201.55.142.135]: SASL PLAIN authentication failed: Jun 18 12:28:59 mail.srvfarm.net postfix/smtpd[1445381]: lost connection after AUTH from unknown[201.55.142.135] Jun 18 12:31:47 mail.srvfarm.net postfix/smtpd[1445365]: warning: unknown[201.55.142.135]: SASL PLAIN authentication failed:	2020-06-19 01:28:20

Type

Details

Datetime

attack

Aug 14 23:49:22 mail.srvfarm.net postfix/smtpd[738030]: warning: unknown[201.55.142.135]: SASL PLAIN authentication failed: 
Aug 14 23:49:23 mail.srvfarm.net postfix/smtpd[738030]: lost connection after AUTH from unknown[201.55.142.135]
Aug 14 23:53:36 mail.srvfarm.net postfix/smtps/smtpd[739407]: warning: unknown[201.55.142.135]: SASL PLAIN authentication failed: 
Aug 14 23:53:37 mail.srvfarm.net postfix/smtps/smtpd[739407]: lost connection after AUTH from unknown[201.55.142.135]
Aug 14 23:59:22 mail.srvfarm.net postfix/smtpd[736667]: warning: unknown[201.55.142.135]: SASL PLAIN authentication failed:

2020-08-15 17:13:32

attackbots

Jun 18 12:25:38 mail.srvfarm.net postfix/smtpd[1443188]: warning: unknown[201.55.142.135]: SASL PLAIN authentication failed: 
Jun 18 12:25:38 mail.srvfarm.net postfix/smtpd[1443188]: lost connection after AUTH from unknown[201.55.142.135]
Jun 18 12:28:59 mail.srvfarm.net postfix/smtpd[1445381]: warning: unknown[201.55.142.135]: SASL PLAIN authentication failed: 
Jun 18 12:28:59 mail.srvfarm.net postfix/smtpd[1445381]: lost connection after AUTH from unknown[201.55.142.135]
Jun 18 12:31:47 mail.srvfarm.net postfix/smtpd[1445365]: warning: unknown[201.55.142.135]: SASL PLAIN authentication failed:

2020-06-19 01:28:20

Comments on same subnet:

IP	Type	Details	Datetime
201.55.142.243	attackbots	Sep 13 18:26:49 mail.srvfarm.net postfix/smtps/smtpd[1230736]: warning: unknown[201.55.142.243]: SASL PLAIN authentication failed: Sep 13 18:26:49 mail.srvfarm.net postfix/smtps/smtpd[1230736]: lost connection after AUTH from unknown[201.55.142.243] Sep 13 18:32:14 mail.srvfarm.net postfix/smtpd[1230212]: warning: unknown[201.55.142.243]: SASL PLAIN authentication failed: Sep 13 18:32:15 mail.srvfarm.net postfix/smtpd[1230212]: lost connection after AUTH from unknown[201.55.142.243] Sep 13 18:33:48 mail.srvfarm.net postfix/smtpd[1232021]: warning: unknown[201.55.142.243]: SASL PLAIN authentication failed:	2020-09-15 03:37:06
201.55.142.243	attackspambots	Sep 13 18:26:49 mail.srvfarm.net postfix/smtps/smtpd[1230736]: warning: unknown[201.55.142.243]: SASL PLAIN authentication failed: Sep 13 18:26:49 mail.srvfarm.net postfix/smtps/smtpd[1230736]: lost connection after AUTH from unknown[201.55.142.243] Sep 13 18:32:14 mail.srvfarm.net postfix/smtpd[1230212]: warning: unknown[201.55.142.243]: SASL PLAIN authentication failed: Sep 13 18:32:15 mail.srvfarm.net postfix/smtpd[1230212]: lost connection after AUTH from unknown[201.55.142.243] Sep 13 18:33:48 mail.srvfarm.net postfix/smtpd[1232021]: warning: unknown[201.55.142.243]: SASL PLAIN authentication failed:	2020-09-14 19:33:28
201.55.142.209	attackbotsspam	Aug 16 05:30:29 mail.srvfarm.net postfix/smtpd[1875198]: warning: unknown[201.55.142.209]: SASL PLAIN authentication failed: Aug 16 05:30:29 mail.srvfarm.net postfix/smtpd[1875198]: lost connection after AUTH from unknown[201.55.142.209] Aug 16 05:30:30 mail.srvfarm.net postfix/smtps/smtpd[1888818]: warning: unknown[201.55.142.209]: SASL PLAIN authentication failed: Aug 16 05:30:30 mail.srvfarm.net postfix/smtps/smtpd[1888818]: lost connection after AUTH from unknown[201.55.142.209] Aug 16 05:36:50 mail.srvfarm.net postfix/smtpd[1888503]: warning: unknown[201.55.142.209]: SASL PLAIN authentication failed:	2020-08-16 12:38:33
201.55.142.243	attack	Aug 15 02:17:39 mail.srvfarm.net postfix/smtps/smtpd[963474]: warning: unknown[201.55.142.243]: SASL PLAIN authentication failed: Aug 15 02:17:40 mail.srvfarm.net postfix/smtps/smtpd[963474]: lost connection after AUTH from unknown[201.55.142.243] Aug 15 02:18:38 mail.srvfarm.net postfix/smtpd[965947]: warning: unknown[201.55.142.243]: SASL PLAIN authentication failed: Aug 15 02:18:39 mail.srvfarm.net postfix/smtpd[965947]: lost connection after AUTH from unknown[201.55.142.243] Aug 15 02:26:15 mail.srvfarm.net postfix/smtps/smtpd[963278]: warning: unknown[201.55.142.243]: SASL PLAIN authentication failed:	2020-08-15 12:47:55
201.55.142.31	attackbotsspam	"SMTP brute force auth login attempt."	2020-08-13 17:32:34
201.55.142.73	attackbotsspam	failed_logins	2020-07-30 19:22:43
201.55.142.36	attack	Jul 25 05:34:46 mail.srvfarm.net postfix/smtpd[366527]: warning: unknown[201.55.142.36]: SASL PLAIN authentication failed: Jul 25 05:34:46 mail.srvfarm.net postfix/smtpd[366527]: lost connection after AUTH from unknown[201.55.142.36] Jul 25 05:34:57 mail.srvfarm.net postfix/smtps/smtpd[365719]: warning: unknown[201.55.142.36]: SASL PLAIN authentication failed: Jul 25 05:34:58 mail.srvfarm.net postfix/smtps/smtpd[365719]: lost connection after AUTH from unknown[201.55.142.36] Jul 25 05:40:51 mail.srvfarm.net postfix/smtps/smtpd[365719]: warning: unknown[201.55.142.36]: SASL PLAIN authentication failed:	2020-07-25 15:00:15
201.55.142.15	attack	Jul 24 16:48:42 mail.srvfarm.net postfix/smtps/smtpd[2334300]: warning: unknown[201.55.142.15]: SASL PLAIN authentication failed: Jul 24 16:48:43 mail.srvfarm.net postfix/smtps/smtpd[2334300]: lost connection after AUTH from unknown[201.55.142.15] Jul 24 16:52:26 mail.srvfarm.net postfix/smtps/smtpd[2332586]: warning: unknown[201.55.142.15]: SASL PLAIN authentication failed: Jul 24 16:52:27 mail.srvfarm.net postfix/smtps/smtpd[2332586]: lost connection after AUTH from unknown[201.55.142.15] Jul 24 16:52:45 mail.srvfarm.net postfix/smtpd[2332939]: warning: unknown[201.55.142.15]: SASL PLAIN authentication failed:	2020-07-25 03:38:13
201.55.142.36	attackbots	failed_logins	2020-07-11 14:43:04
201.55.142.25	attack	$f2bV_matches	2019-09-12 21:27:09

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 201.55.142.135
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44430
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;201.55.142.135.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020061801 1800 900 604800 86400

;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jun 19 01:28:15 CST 2020
;; MSG SIZE  rcvd: 118

Host info

Host 135.142.55.201.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 135.142.55.201.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
123.207.74.24	attackbotsspam	May 6 22:58:24 mout sshd[20437]: Invalid user test from 123.207.74.24 port 40440	2020-05-07 05:29:40
162.243.232.174	attack	" "	2020-05-07 05:44:37
128.1.132.230	attackspambots	May 6 15:28:36 server1 sshd\[26133\]: Invalid user maxim from 128.1.132.230 May 6 15:28:36 server1 sshd\[26133\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.1.132.230 May 6 15:28:38 server1 sshd\[26133\]: Failed password for invalid user maxim from 128.1.132.230 port 56626 ssh2 May 6 15:32:32 server1 sshd\[27369\]: Invalid user getmail from 128.1.132.230 May 6 15:32:32 server1 sshd\[27369\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.1.132.230 ...	2020-05-07 05:41:19
62.234.126.132	attackbotsspam	May 6 22:51:00 buvik sshd[6448]: Failed password for invalid user palm from 62.234.126.132 port 39514 ssh2 May 6 22:56:40 buvik sshd[7314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.126.132 user=root May 6 22:56:41 buvik sshd[7314]: Failed password for root from 62.234.126.132 port 44314 ssh2 ...	2020-05-07 05:12:27
31.209.21.17	attackspam	May 7 00:24:48 ift sshd\[53857\]: Invalid user marcelo from 31.209.21.17May 7 00:24:50 ift sshd\[53857\]: Failed password for invalid user marcelo from 31.209.21.17 port 51462 ssh2May 7 00:28:16 ift sshd\[54610\]: Invalid user marx from 31.209.21.17May 7 00:28:18 ift sshd\[54610\]: Failed password for invalid user marx from 31.209.21.17 port 60092 ssh2May 7 00:31:41 ift sshd\[55177\]: Failed password for root from 31.209.21.17 port 40490 ssh2 ...	2020-05-07 05:46:09
106.124.141.108	attackbots	May 6 22:18:35 haigwepa sshd[5819]: Failed password for root from 106.124.141.108 port 44350 ssh2 ...	2020-05-07 05:20:22
82.252.133.174	attack	Automatic report - Port Scan Attack	2020-05-07 05:39:05
168.235.81.184	attack	2020-05-06T21:24:42.201479shield sshd\[4138\]: Invalid user dev from 168.235.81.184 port 41318 2020-05-06T21:24:42.206002shield sshd\[4138\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.235.81.184 2020-05-06T21:24:43.979581shield sshd\[4138\]: Failed password for invalid user dev from 168.235.81.184 port 41318 ssh2 2020-05-06T21:28:36.637421shield sshd\[5210\]: Invalid user crawler from 168.235.81.184 port 53774 2020-05-06T21:28:36.642111shield sshd\[5210\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.235.81.184	2020-05-07 05:40:35
62.240.13.58	attackspam	Automatic report - Port Scan Attack	2020-05-07 05:44:53
128.14.133.58	attackspambots	[ 🇳🇱 ] REQUEST: /solr/	2020-05-07 05:17:54
222.186.31.166	attack	May 6 23:15:27 vps639187 sshd\[6271\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.166 user=root May 6 23:15:28 vps639187 sshd\[6271\]: Failed password for root from 222.186.31.166 port 29507 ssh2 May 6 23:15:31 vps639187 sshd\[6271\]: Failed password for root from 222.186.31.166 port 29507 ssh2 ...	2020-05-07 05:18:25
185.234.218.249	attack	May 6 23:27:06 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=185.234.218.249, lip=172.104.140.148, session= May 6 23:29:47 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=185.234.218.249, lip=172.104.140.148, session=<4k6LdgGl0Ay56tr5> May 6 23:31:35 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=185.234.218.249, lip=172.104.140.148, session=<7Oj0fAGl+mW56tr5> May 6 23:34:16 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=185.234.218.249, lip=172.104.140.148, session= May 6 23:36:01 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=185.234.218.249, lip=172.104.140.148, session= ...	2020-05-07 05:38:08
141.98.81.108	attackspambots	May 6 22:53:14 sxvn sshd[631187]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.81.108	2020-05-07 05:11:12
222.186.180.6	attack	May 6 23:37:34 eventyay sshd[25814]: Failed password for root from 222.186.180.6 port 16522 ssh2 May 6 23:37:47 eventyay sshd[25814]: error: maximum authentication attempts exceeded for root from 222.186.180.6 port 16522 ssh2 [preauth] May 6 23:37:53 eventyay sshd[25824]: Failed password for root from 222.186.180.6 port 35120 ssh2 ...	2020-05-07 05:47:02
51.83.75.97	attackspam	SSH Brute-Forcing (server1)	2020-05-07 05:32:37

Recently Reported IPs

77.45.86.165	63.81.93.144	46.21.208.102	71.73.144.208
31.170.62.22	191.53.236.145	188.112.9.180	187.95.180.135
210.51.148.111	186.250.200.87	186.96.196.178	181.174.144.78
181.174.144.39	177.87.253.119	177.23.75.23	138.122.97.194
45.160.136.227	95.47.238.38	189.226.58.172	5.160.213.184