94.40.75.147 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Poland

Internet Service Provider: Speed Con R.Wlazlo Przemysl

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Aug 15 01:33:07 mail.srvfarm.net postfix/smtpd[929447]: warning: 94-40-75-147.tktelekom.pl[94.40.75.147]: SASL PLAIN authentication failed: Aug 15 01:33:07 mail.srvfarm.net postfix/smtpd[929447]: lost connection after AUTH from 94-40-75-147.tktelekom.pl[94.40.75.147] Aug 15 01:38:59 mail.srvfarm.net postfix/smtpd[928779]: warning: 94-40-75-147.tktelekom.pl[94.40.75.147]: SASL PLAIN authentication failed: Aug 15 01:38:59 mail.srvfarm.net postfix/smtpd[928779]: lost connection after AUTH from 94-40-75-147.tktelekom.pl[94.40.75.147] Aug 15 01:39:12 mail.srvfarm.net postfix/smtpd[929447]: warning: 94-40-75-147.tktelekom.pl[94.40.75.147]: SASL PLAIN authentication failed:	2020-08-15 14:05:45
attack	SSH invalid-user multiple login try	2020-07-10 06:07:54
attack	Jun 5 14:51:56 mail.srvfarm.net postfix/smtps/smtpd[3095846]: warning: 94-40-75-147.tktelekom.pl[94.40.75.147]: SASL PLAIN authentication failed: Jun 5 14:51:56 mail.srvfarm.net postfix/smtps/smtpd[3095846]: lost connection after AUTH from 94-40-75-147.tktelekom.pl[94.40.75.147] Jun 5 14:52:17 mail.srvfarm.net postfix/smtps/smtpd[3095846]: warning: 94-40-75-147.tktelekom.pl[94.40.75.147]: SASL PLAIN authentication failed: Jun 5 14:52:17 mail.srvfarm.net postfix/smtps/smtpd[3095846]: lost connection after AUTH from 94-40-75-147.tktelekom.pl[94.40.75.147] Jun 5 15:00:01 mail.srvfarm.net postfix/smtps/smtpd[3095847]: warning: 94-40-75-147.tktelekom.pl[94.40.75.147]: SASL PLAIN authentication failed:	2020-06-08 01:00:42

Type

Details

Datetime

attackspam

Aug 15 01:33:07 mail.srvfarm.net postfix/smtpd[929447]: warning: 94-40-75-147.tktelekom.pl[94.40.75.147]: SASL PLAIN authentication failed: 
Aug 15 01:33:07 mail.srvfarm.net postfix/smtpd[929447]: lost connection after AUTH from 94-40-75-147.tktelekom.pl[94.40.75.147]
Aug 15 01:38:59 mail.srvfarm.net postfix/smtpd[928779]: warning: 94-40-75-147.tktelekom.pl[94.40.75.147]: SASL PLAIN authentication failed: 
Aug 15 01:38:59 mail.srvfarm.net postfix/smtpd[928779]: lost connection after AUTH from 94-40-75-147.tktelekom.pl[94.40.75.147]
Aug 15 01:39:12 mail.srvfarm.net postfix/smtpd[929447]: warning: 94-40-75-147.tktelekom.pl[94.40.75.147]: SASL PLAIN authentication failed:

2020-08-15 14:05:45

attack

SSH invalid-user multiple login try

2020-07-10 06:07:54

attack

Jun  5 14:51:56 mail.srvfarm.net postfix/smtps/smtpd[3095846]: warning: 94-40-75-147.tktelekom.pl[94.40.75.147]: SASL PLAIN authentication failed: 
Jun  5 14:51:56 mail.srvfarm.net postfix/smtps/smtpd[3095846]: lost connection after AUTH from 94-40-75-147.tktelekom.pl[94.40.75.147]
Jun  5 14:52:17 mail.srvfarm.net postfix/smtps/smtpd[3095846]: warning: 94-40-75-147.tktelekom.pl[94.40.75.147]: SASL PLAIN authentication failed: 
Jun  5 14:52:17 mail.srvfarm.net postfix/smtps/smtpd[3095846]: lost connection after AUTH from 94-40-75-147.tktelekom.pl[94.40.75.147]
Jun  5 15:00:01 mail.srvfarm.net postfix/smtps/smtpd[3095847]: warning: 94-40-75-147.tktelekom.pl[94.40.75.147]: SASL PLAIN authentication failed:

2020-06-08 01:00:42

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.40.75.147
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46728
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.40.75.147.			IN	A

;; AUTHORITY SECTION:
.			176	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020060700 1800 900 604800 86400

;; Query time: 92 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jun 08 01:00:38 CST 2020
;; MSG SIZE  rcvd: 116

Host info

147.75.40.94.in-addr.arpa domain name pointer 94-40-75-147.tktelekom.pl.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
147.75.40.94.in-addr.arpa	name = 94-40-75-147.tktelekom.pl.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
154.160.25.62	attackspam	Jun 29 05:55:09 smtp postfix/smtpd[97537]: NOQUEUE: reject: RCPT from unknown[154.160.25.62]: 554 5.7.1 Service unavailable; Client host [154.160.25.62] blocked using cbl.abuseat.org; Blocked - see http://www.abuseat.org/lookup.cgi?ip=154.160.25.62; from= to= proto=ESMTP helo=<[154.160.25.62]> ...	2020-06-29 15:07:46
92.38.88.6	attackspam	20/6/28@23:55:56: FAIL: Alarm-Network address from=92.38.88.6 20/6/28@23:55:56: FAIL: Alarm-Network address from=92.38.88.6 ...	2020-06-29 14:30:20
52.250.116.142	attackspambots	<6 unauthorized SSH connections	2020-06-29 15:10:10
51.77.146.170	attack	Jun 29 07:21:27 gestao sshd[14520]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.146.170 Jun 29 07:21:29 gestao sshd[14520]: Failed password for invalid user aaron from 51.77.146.170 port 40758 ssh2 Jun 29 07:24:40 gestao sshd[14535]: Failed password for root from 51.77.146.170 port 39180 ssh2 ...	2020-06-29 14:46:58
51.75.23.214	attackbotsspam	WordPress login Brute force / Web App Attack on client site.	2020-06-29 14:36:12
106.51.80.198	attackbotsspam	Invalid user family from 106.51.80.198 port 53348	2020-06-29 15:03:36
51.83.66.171	attackspam	TCP port : 995	2020-06-29 14:48:49
1.34.144.128	attack	Jun 29 08:25:29 lnxweb62 sshd[5113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.34.144.128	2020-06-29 14:49:05
122.51.243.143	attackspambots	2020-06-28T22:55:17.882970morrigan.ad5gb.com sshd[2066356]: Invalid user nix from 122.51.243.143 port 45938 2020-06-28T22:55:19.616632morrigan.ad5gb.com sshd[2066356]: Failed password for invalid user nix from 122.51.243.143 port 45938 ssh2	2020-06-29 14:59:07
49.88.112.117	attack	Jun 29 06:46:30 django-0 sshd[12821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.117 user=root Jun 29 06:46:31 django-0 sshd[12821]: Failed password for root from 49.88.112.117 port 42594 ssh2 ...	2020-06-29 15:08:28
105.159.253.46	attackspam	Jun 29 06:48:59 marvibiene sshd[19459]: Invalid user teamspeak from 105.159.253.46 port 6216 Jun 29 06:48:59 marvibiene sshd[19459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=105.159.253.46 Jun 29 06:48:59 marvibiene sshd[19459]: Invalid user teamspeak from 105.159.253.46 port 6216 Jun 29 06:49:01 marvibiene sshd[19459]: Failed password for invalid user teamspeak from 105.159.253.46 port 6216 ssh2 ...	2020-06-29 14:54:51
45.125.222.120	attackbotsspam	$f2bV_matches	2020-06-29 14:51:01
115.236.5.94	attack	TCP (SYN) 115.236.5.94:36211 -> port 1433, len 40	2020-06-29 14:29:14
65.49.20.68	attackspambots	TCP (SYN) 65.49.20.68:47098 -> port 22, len 44	2020-06-29 14:37:06
189.212.123.108	attackbots	Automatic report - Port Scan Attack	2020-06-29 14:51:26

Recently Reported IPs

179.171.103.134	46.101.189.37	88.99.84.129	36.226.14.20
212.164.64.52	125.231.132.151	112.215.253.213	140.213.25.34
27.255.15.240	114.38.67.125	2.229.103.214	193.202.45.42
14.202.155.196	144.91.67.203	95.65.76.74	8.4.89.180
110.147.213.70	149.202.68.111	92.99.6.72	229.113.231.219