93.99.134.46 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Czech Republic

Internet Service Provider: V - Data S.R.O. Vysoke Myto

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Jun 5 17:02:20 mail.srvfarm.net postfix/smtps/smtpd[3138301]: warning: unknown[93.99.134.46]: SASL PLAIN authentication failed: Jun 5 17:02:20 mail.srvfarm.net postfix/smtps/smtpd[3138301]: lost connection after AUTH from unknown[93.99.134.46] Jun 5 17:03:28 mail.srvfarm.net postfix/smtps/smtpd[3138301]: warning: unknown[93.99.134.46]: SASL PLAIN authentication failed: Jun 5 17:03:28 mail.srvfarm.net postfix/smtps/smtpd[3138301]: lost connection after AUTH from unknown[93.99.134.46] Jun 5 17:10:44 mail.srvfarm.net postfix/smtpd[3150167]: warning: unknown[93.99.134.46]: SASL PLAIN authentication failed: Jun 5 17:10:44 mail.srvfarm.net postfix/smtpd[3150167]: lost connection after AUTH from unknown[93.99.134.46]	2020-06-08 00:15:13

Type

Details

Datetime

attack

Jun  5 17:02:20 mail.srvfarm.net postfix/smtps/smtpd[3138301]: warning: unknown[93.99.134.46]: SASL PLAIN authentication failed: 
Jun  5 17:02:20 mail.srvfarm.net postfix/smtps/smtpd[3138301]: lost connection after AUTH from unknown[93.99.134.46]
Jun  5 17:03:28 mail.srvfarm.net postfix/smtps/smtpd[3138301]: warning: unknown[93.99.134.46]: SASL PLAIN authentication failed: 
Jun  5 17:03:28 mail.srvfarm.net postfix/smtps/smtpd[3138301]: lost connection after AUTH from unknown[93.99.134.46]
Jun  5 17:10:44 mail.srvfarm.net postfix/smtpd[3150167]: warning: unknown[93.99.134.46]: SASL PLAIN authentication failed: 
Jun  5 17:10:44 mail.srvfarm.net postfix/smtpd[3150167]: lost connection after AUTH from unknown[93.99.134.46]

2020-06-08 00:15:13

Comments on same subnet:

IP	Type	Details	Datetime
93.99.134.28	attackbots	failed_logins	2020-09-19 01:54:05
93.99.134.28	attackspambots	failed_logins	2020-09-18 17:51:33
93.99.134.28	attackbotsspam	(CZ/Czechia/-) SMTP Bruteforcing attempts	2020-09-18 08:05:17
93.99.134.148	attackbotsspam	Brute force attempt	2020-08-30 08:02:10
93.99.134.132	attackspam	Distributed brute force attack	2020-07-31 16:47:22
93.99.134.28	attackspambots	(smtpauth) Failed SMTP AUTH login from 93.99.134.28 (CZ/Czechia/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-07-07 11:21:01 plain authenticator failed for ([93.99.134.28]) [93.99.134.28]: 535 Incorrect authentication data (set_id=info@beshelsa.com)	2020-07-07 17:20:57
93.99.134.28	attackbotsspam	Jun 18 13:50:56 mail.srvfarm.net postfix/smtps/smtpd[1469501]: warning: unknown[93.99.134.28]: SASL PLAIN authentication failed: Jun 18 13:50:56 mail.srvfarm.net postfix/smtps/smtpd[1469501]: lost connection after AUTH from unknown[93.99.134.28] Jun 18 13:52:52 mail.srvfarm.net postfix/smtps/smtpd[1472204]: warning: unknown[93.99.134.28]: SASL PLAIN authentication failed: Jun 18 13:52:52 mail.srvfarm.net postfix/smtps/smtpd[1472204]: lost connection after AUTH from unknown[93.99.134.28] Jun 18 13:59:23 mail.srvfarm.net postfix/smtpd[1474820]: warning: unknown[93.99.134.28]: SASL PLAIN authentication failed:	2020-06-19 00:13:54
93.99.134.148	attack	Jun 13 22:57:19 mail.srvfarm.net postfix/smtpd[1295659]: warning: unknown[93.99.134.148]: SASL PLAIN authentication failed: Jun 13 22:57:19 mail.srvfarm.net postfix/smtpd[1295659]: lost connection after AUTH from unknown[93.99.134.148] Jun 13 22:59:52 mail.srvfarm.net postfix/smtpd[1295659]: lost connection after CONNECT from unknown[93.99.134.148] Jun 13 23:05:58 mail.srvfarm.net postfix/smtps/smtpd[1295672]: warning: unknown[93.99.134.148]: SASL PLAIN authentication failed: Jun 13 23:05:58 mail.srvfarm.net postfix/smtps/smtpd[1295672]: lost connection after AUTH from unknown[93.99.134.148]	2020-06-14 08:07:11

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 93.99.134.46
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20712
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;93.99.134.46.			IN	A

;; AUTHORITY SECTION:
.			541	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020060700 1800 900 604800 86400

;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jun 08 00:15:07 CST 2020
;; MSG SIZE  rcvd: 116

Host info

Host 46.134.99.93.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 46.134.99.93.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
49.81.171.212	attackbots	Aug 9 05:49:19 icecube postfix/smtpd[63369]: NOQUEUE: reject: RCPT from unknown[49.81.171.212]: 554 5.7.1 Service unavailable; Client host [49.81.171.212] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/49.81.171.212 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=	2020-08-09 17:37:52
70.114.77.190	attackbotsspam	firewall-block, port(s): 445/tcp	2020-08-09 17:06:04
111.231.164.168	attackspam	2020-08-09T07:02:21.358204abusebot-8.cloudsearch.cf sshd[16123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.164.168 user=root 2020-08-09T07:02:22.438206abusebot-8.cloudsearch.cf sshd[16123]: Failed password for root from 111.231.164.168 port 60890 ssh2 2020-08-09T07:04:57.275604abusebot-8.cloudsearch.cf sshd[16201]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.164.168 user=root 2020-08-09T07:04:59.103752abusebot-8.cloudsearch.cf sshd[16201]: Failed password for root from 111.231.164.168 port 33168 ssh2 2020-08-09T07:07:28.080982abusebot-8.cloudsearch.cf sshd[16263]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.164.168 user=root 2020-08-09T07:07:29.973868abusebot-8.cloudsearch.cf sshd[16263]: Failed password for root from 111.231.164.168 port 33678 ssh2 2020-08-09T07:10:00.937246abusebot-8.cloudsearch.cf sshd[16284]: pam_unix(sshd: ...	2020-08-09 17:44:04
212.52.131.9	attackbots	Aug 9 05:58:03 hidden sshd[8842]: Failed password for hidden from 212.52.131.9 port 34810 ssh2 Aug 9 06:06:59 hidden sshd[11098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.52.131.9 user=root Aug 9 06:07:01 hidden sshd[11098]: Failed password for hidden from 212.52.131.9 port 40908 ssh2	2020-08-09 17:07:36
60.177.121.194	attack	(sshd) Failed SSH login from 60.177.121.194 (CN/China/194.121.177.60.broad.hz.zj.dynamic.163data.com.cn): 5 in the last 300 secs	2020-08-09 17:39:58
119.29.2.157	attack	Aug 9 08:05:48 ns381471 sshd[26817]: Failed password for root from 119.29.2.157 port 58077 ssh2	2020-08-09 17:34:17
187.162.246.198	attackbotsspam	Aug 9 08:35:45 scw-tender-jepsen sshd[28793]: Failed password for root from 187.162.246.198 port 44812 ssh2	2020-08-09 17:30:39
94.23.218.10	attackbots	Aug 9 05:49:16 sshgateway sshd\[18726\]: Invalid user default from 94.23.218.10 Aug 9 05:49:16 sshgateway sshd\[18726\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns207979.ovh.net Aug 9 05:49:18 sshgateway sshd\[18726\]: Failed password for invalid user default from 94.23.218.10 port 51694 ssh2	2020-08-09 17:37:17
74.82.47.43	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-08-09 17:04:23
218.92.0.249	attackbotsspam	2020-08-09T12:11:39.113918snf-827550 sshd[12165]: Failed password for root from 218.92.0.249 port 41635 ssh2 2020-08-09T12:11:42.408440snf-827550 sshd[12165]: Failed password for root from 218.92.0.249 port 41635 ssh2 2020-08-09T12:11:45.436875snf-827550 sshd[12165]: Failed password for root from 218.92.0.249 port 41635 ssh2 ...	2020-08-09 17:31:17
84.2.19.236	attack	DATE:2020-08-09 05:49:55, IP:84.2.19.236, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)	2020-08-09 17:13:43
152.136.149.160	attackbotsspam	<6 unauthorized SSH connections	2020-08-09 17:25:34
37.152.181.57	attackspambots	bruteforce detected	2020-08-09 17:18:24
124.226.2.70	attack	ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: tcp cat: Potentially Bad Trafficbytes: 62	2020-08-09 17:00:22
209.97.128.229	attackbotsspam	Failed password for root from 209.97.128.229 port 54082 ssh2 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.128.229 user=root Failed password for root from 209.97.128.229 port 37782 ssh2 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.128.229 user=root Failed password for root from 209.97.128.229 port 49716 ssh2	2020-08-09 17:39:15

Recently Reported IPs

161.35.112.80	45.162.20.154	91.241.19.60	27.71.12.124
39.41.152.225	142.93.226.80	3.22.240.108	109.245.127.154
170.84.140.10	166.122.1.40	96.98.154.85	128.71.202.139
46.207.148.10	167.71.12.38	138.197.167.24	8.28.7.20
217.197.40.130	210.16.88.38	200.108.143.90	194.105.132.73