91.245.30.100 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Czech Republic

Internet Service Provider: OK COMP s.r.o.

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	(smtpauth) Failed SMTP AUTH login from 91.245.30.100 (CZ/Czechia/static30-100.okcomp.cz): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-07-28 16:35:05 plain authenticator failed for ([91.245.30.100]) [91.245.30.100]: 535 Incorrect authentication data (set_id=nasr)	2020-07-28 23:53:11

Type

Details

Datetime

attackspambots

(smtpauth) Failed SMTP AUTH login from 91.245.30.100 (CZ/Czechia/static30-100.okcomp.cz): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-07-28 16:35:05 plain authenticator failed for ([91.245.30.100]) [91.245.30.100]: 535 Incorrect authentication data (set_id=nasr)

2020-07-28 23:53:11

Comments on same subnet:

IP	Type	Details	Datetime
91.245.30.150	attackspambots	Sep 11 18:00:30 mail.srvfarm.net postfix/smtps/smtpd[3875317]: warning: unknown[91.245.30.150]: SASL PLAIN authentication failed: Sep 11 18:00:30 mail.srvfarm.net postfix/smtps/smtpd[3875317]: lost connection after AUTH from unknown[91.245.30.150] Sep 11 18:06:45 mail.srvfarm.net postfix/smtps/smtpd[3875620]: warning: unknown[91.245.30.150]: SASL PLAIN authentication failed: Sep 11 18:06:45 mail.srvfarm.net postfix/smtps/smtpd[3875620]: lost connection after AUTH from unknown[91.245.30.150] Sep 11 18:08:32 mail.srvfarm.net postfix/smtpd[3889545]: warning: unknown[91.245.30.150]: SASL PLAIN authentication failed:	2020-09-13 01:43:37
91.245.30.150	attackspam	Sep 11 18:00:30 mail.srvfarm.net postfix/smtps/smtpd[3875317]: warning: unknown[91.245.30.150]: SASL PLAIN authentication failed: Sep 11 18:00:30 mail.srvfarm.net postfix/smtps/smtpd[3875317]: lost connection after AUTH from unknown[91.245.30.150] Sep 11 18:06:45 mail.srvfarm.net postfix/smtps/smtpd[3875620]: warning: unknown[91.245.30.150]: SASL PLAIN authentication failed: Sep 11 18:06:45 mail.srvfarm.net postfix/smtps/smtpd[3875620]: lost connection after AUTH from unknown[91.245.30.150] Sep 11 18:08:32 mail.srvfarm.net postfix/smtpd[3889545]: warning: unknown[91.245.30.150]: SASL PLAIN authentication failed:	2020-09-12 17:43:32
91.245.30.79	attack	Sep 7 12:09:56 mail.srvfarm.net postfix/smtpd[1050887]: warning: unknown[91.245.30.79]: SASL PLAIN authentication failed: Sep 7 12:09:56 mail.srvfarm.net postfix/smtpd[1050887]: lost connection after AUTH from unknown[91.245.30.79] Sep 7 12:14:31 mail.srvfarm.net postfix/smtpd[1050882]: warning: unknown[91.245.30.79]: SASL PLAIN authentication failed: Sep 7 12:14:31 mail.srvfarm.net postfix/smtpd[1050882]: lost connection after AUTH from unknown[91.245.30.79] Sep 7 12:15:08 mail.srvfarm.net postfix/smtpd[1039277]: warning: unknown[91.245.30.79]: SASL PLAIN authentication failed:	2020-09-12 02:45:11
91.245.30.79	attack	Sep 7 12:09:56 mail.srvfarm.net postfix/smtpd[1050887]: warning: unknown[91.245.30.79]: SASL PLAIN authentication failed: Sep 7 12:09:56 mail.srvfarm.net postfix/smtpd[1050887]: lost connection after AUTH from unknown[91.245.30.79] Sep 7 12:14:31 mail.srvfarm.net postfix/smtpd[1050882]: warning: unknown[91.245.30.79]: SASL PLAIN authentication failed: Sep 7 12:14:31 mail.srvfarm.net postfix/smtpd[1050882]: lost connection after AUTH from unknown[91.245.30.79] Sep 7 12:15:08 mail.srvfarm.net postfix/smtpd[1039277]: warning: unknown[91.245.30.79]: SASL PLAIN authentication failed:	2020-09-11 18:41:19
91.245.30.71	attackspambots	Brute force attempt	2020-08-31 13:04:59
91.245.30.92	attack	Aug 27 04:21:01 mail.srvfarm.net postfix/smtpd[1314728]: warning: unknown[91.245.30.92]: SASL PLAIN authentication failed: Aug 27 04:21:01 mail.srvfarm.net postfix/smtpd[1314728]: lost connection after AUTH from unknown[91.245.30.92] Aug 27 04:22:47 mail.srvfarm.net postfix/smtpd[1332132]: warning: unknown[91.245.30.92]: SASL PLAIN authentication failed: Aug 27 04:22:47 mail.srvfarm.net postfix/smtpd[1332132]: lost connection after AUTH from unknown[91.245.30.92] Aug 27 04:24:00 mail.srvfarm.net postfix/smtpd[1313892]: warning: unknown[91.245.30.92]: SASL PLAIN authentication failed:	2020-08-28 09:43:43
91.245.30.125	attack	Aug 16 05:14:59 mail.srvfarm.net postfix/smtps/smtpd[1888763]: warning: unknown[91.245.30.125]: SASL PLAIN authentication failed: Aug 16 05:14:59 mail.srvfarm.net postfix/smtps/smtpd[1888763]: lost connection after AUTH from unknown[91.245.30.125] Aug 16 05:22:34 mail.srvfarm.net postfix/smtpd[1888825]: warning: unknown[91.245.30.125]: SASL PLAIN authentication failed: Aug 16 05:22:34 mail.srvfarm.net postfix/smtpd[1888825]: lost connection after AUTH from unknown[91.245.30.125] Aug 16 05:24:01 mail.srvfarm.net postfix/smtpd[1888504]: warning: unknown[91.245.30.125]: SASL PLAIN authentication failed:	2020-08-16 13:05:13
91.245.30.150	attackspam	Jul 31 13:44:23 mail.srvfarm.net postfix/smtpd[346670]: warning: unknown[91.245.30.150]: SASL PLAIN authentication failed: Jul 31 13:44:23 mail.srvfarm.net postfix/smtpd[346670]: lost connection after AUTH from unknown[91.245.30.150] Jul 31 13:46:32 mail.srvfarm.net postfix/smtps/smtpd[344849]: warning: unknown[91.245.30.150]: SASL PLAIN authentication failed: Jul 31 13:46:32 mail.srvfarm.net postfix/smtps/smtpd[344849]: lost connection after AUTH from unknown[91.245.30.150] Jul 31 13:49:58 mail.srvfarm.net postfix/smtps/smtpd[348862]: warning: unknown[91.245.30.150]: SASL PLAIN authentication failed:	2020-08-01 00:31:18
91.245.30.105	attack	Jul 31 10:41:23 mail.srvfarm.net postfix/smtpd[280510]: warning: unknown[91.245.30.105]: SASL PLAIN authentication failed: Jul 31 10:41:23 mail.srvfarm.net postfix/smtpd[280510]: lost connection after AUTH from unknown[91.245.30.105] Jul 31 10:41:40 mail.srvfarm.net postfix/smtps/smtpd[274710]: warning: unknown[91.245.30.105]: SASL PLAIN authentication failed: Jul 31 10:41:40 mail.srvfarm.net postfix/smtps/smtpd[274710]: lost connection after AUTH from unknown[91.245.30.105] Jul 31 10:48:26 mail.srvfarm.net postfix/smtps/smtpd[278874]: warning: unknown[91.245.30.105]: SASL PLAIN authentication failed:	2020-07-31 17:22:19
91.245.30.146	attack	(smtpauth) Failed SMTP AUTH login from 91.245.30.146 (CZ/Czechia/static30-146.okcomp.cz): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-07-31 08:23:45 plain authenticator failed for ([91.245.30.146]) [91.245.30.146]: 535 Incorrect authentication data (set_id=a.nasiri)	2020-07-31 14:47:17
91.245.30.107	attack	Jul 29 08:08:18 Host-KEWR-E postfix/smtps/smtpd[30397]: lost connection after AUTH from unknown[91.245.30.107] ...	2020-07-30 02:08:00
91.245.30.147	attackspam	Jul 26 05:47:51 mail.srvfarm.net postfix/smtps/smtpd[1027769]: warning: unknown[91.245.30.147]: SASL PLAIN authentication failed: Jul 26 05:47:51 mail.srvfarm.net postfix/smtps/smtpd[1027769]: lost connection after AUTH from unknown[91.245.30.147] Jul 26 05:50:19 mail.srvfarm.net postfix/smtps/smtpd[1031887]: warning: unknown[91.245.30.147]: SASL PLAIN authentication failed: Jul 26 05:50:19 mail.srvfarm.net postfix/smtps/smtpd[1031887]: lost connection after AUTH from unknown[91.245.30.147] Jul 26 05:52:29 mail.srvfarm.net postfix/smtps/smtpd[1032031]: warning: unknown[91.245.30.147]: SASL PLAIN authentication failed:	2020-07-26 17:32:59
91.245.30.75	attackspambots	SASL PLAIN auth failed: ruser=...	2020-07-16 08:31:09
91.245.30.115	attack	Jun 16 05:23:09 mail.srvfarm.net postfix/smtps/smtpd[938143]: warning: unknown[91.245.30.115]: SASL PLAIN authentication failed: Jun 16 05:23:09 mail.srvfarm.net postfix/smtps/smtpd[938143]: lost connection after AUTH from unknown[91.245.30.115] Jun 16 05:26:56 mail.srvfarm.net postfix/smtpd[916111]: warning: unknown[91.245.30.115]: SASL PLAIN authentication failed: Jun 16 05:26:56 mail.srvfarm.net postfix/smtpd[916111]: lost connection after AUTH from unknown[91.245.30.115] Jun 16 05:28:42 mail.srvfarm.net postfix/smtps/smtpd[936248]: warning: unknown[91.245.30.115]: SASL PLAIN authentication failed:	2020-06-16 16:21:02
91.245.30.150	attackspam	Jun 5 18:29:15 mail.srvfarm.net postfix/smtps/smtpd[3174072]: warning: unknown[91.245.30.150]: SASL PLAIN authentication failed: Jun 5 18:29:15 mail.srvfarm.net postfix/smtps/smtpd[3174072]: lost connection after AUTH from unknown[91.245.30.150] Jun 5 18:35:54 mail.srvfarm.net postfix/smtps/smtpd[3174071]: warning: unknown[91.245.30.150]: SASL PLAIN authentication failed: Jun 5 18:35:54 mail.srvfarm.net postfix/smtps/smtpd[3174071]: lost connection after AUTH from unknown[91.245.30.150] Jun 5 18:37:37 mail.srvfarm.net postfix/smtps/smtpd[3175482]: warning: unknown[91.245.30.150]: SASL PLAIN authentication failed:	2020-06-07 23:41:21

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 91.245.30.100
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41563
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;91.245.30.100.			IN	A

;; AUTHORITY SECTION:
.			234	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020072800 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jul 28 23:52:57 CST 2020
;; MSG SIZE  rcvd: 117

Host info

100.30.245.91.in-addr.arpa domain name pointer static30-100.okcomp.cz.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
100.30.245.91.in-addr.arpa	name = static30-100.okcomp.cz.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
124.121.104.251	attackbotsspam	TCP (SYN) 124.121.104.251:7108 -> port 8080, len 44	2020-05-20 06:27:26
115.148.71.240	attackspambots	TCP (SYN) 115.148.71.240:56048 -> port 23, len 40	2020-05-20 06:24:20
210.5.156.219	attackbots	TCP (SYN) 210.5.156.219:52916 -> port 445, len 40	2020-05-20 06:39:09
157.47.20.28	attackbotsspam	TCP (SYN) 157.47.20.28:54829 -> port 445, len 52	2020-05-20 06:41:16
118.163.43.136	attackbots	TCP (SYN) 118.163.43.136:5932 -> port 23, len 40	2020-05-20 06:44:59
85.130.114.77	attackspam	TCP (SYN) 85.130.114.77:49972 -> port 445, len 52	2020-05-20 06:46:36
84.205.180.112	attackbotsspam	TCP (SYN) 84.205.180.112:34734 -> port 25, len 60	2020-05-20 06:21:12
220.137.34.130	attackspambots	TCP (SYN) 220.137.34.130:18777 -> port 23, len 40	2020-05-20 06:18:51
87.10.72.147	attackbots	TCP (SYN) 87.10.72.147:8109 -> port 80, len 44	2020-05-20 06:36:36
162.243.137.172	attackbots	firewall-block, port(s): 137/udp	2020-05-20 06:30:33
85.113.141.237	attack	TCP (SYN) 85.113.141.237:22209 -> port 80, len 40	2020-05-20 06:47:02
111.75.210.58	attackspam	Unauthorized connection attempt detected from IP address 111.75.210.58 to port 445 [T]	2020-05-20 06:31:15
31.42.165.227	attackspambots	TCP (SYN) 31.42.165.227:58318 -> port 1433, len 40	2020-05-20 06:48:50
84.205.181.132	attack	TCP (SYN) 84.205.181.132:43803 -> port 25, len 60	2020-05-20 06:20:22
122.121.19.231	attackspam	TCP (SYN) 122.121.19.231:12240 -> port 8080, len 44	2020-05-20 06:44:09

Recently Reported IPs

211.202.221.156	19.245.199.174	155.65.53.219	148.251.71.231
141.2.200.131	122.216.165.231	8.108.200.211	11.228.178.132
45.79.251.85	187.212.158.87	65.139.99.169	179.191.153.245
241.217.50.185	48.0.30.193	216.21.186.81	201.165.215.207
95.161.125.74	166.45.33.229	69.94.156.34	38.167.122.252