94.74.132.134 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Iran (ISLAMIC Republic Of)

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
94.74.132.203	attackbots	07/10/2020-23:57:06.886914 94.74.132.203 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	2020-07-11 12:53:43

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.74.132.134
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28642
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;94.74.132.134.			IN	A

;; AUTHORITY SECTION:
.			228	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400

;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 21:18:09 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 134.132.74.94.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 134.132.74.94.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
37.59.43.14	attackspambots	37.59.43.14 - - \[21/Jun/2019:06:43:19 +0200\] "GET /wp-login.php HTTP/1.1" 200 1129 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 37.59.43.14 - - \[21/Jun/2019:06:43:19 +0200\] "POST /wp-login.php HTTP/1.1" 200 1524 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 37.59.43.14 - - \[21/Jun/2019:06:43:20 +0200\] "GET /wp-login.php HTTP/1.1" 200 1129 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 37.59.43.14 - - \[21/Jun/2019:06:43:20 +0200\] "POST /wp-login.php HTTP/1.1" 200 1507 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 37.59.43.14 - - \[21/Jun/2019:06:43:20 +0200\] "GET /wp-login.php HTTP/1.1" 200 1129 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 37.59.43.14 - - \[21/Jun/2019:06:43:21 +0200\] "POST /wp-login.php HTTP/1.1" 200 1503 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/201001	2019-06-21 14:12:49
114.248.64.118	attackbots	Lines containing failures of 114.248.64.118 auth.log:Jun 20 20:10:01 omfg sshd[16628]: Connection from 114.248.64.118 port 59104 on 78.46.60.16 port 22 auth.log:Jun 20 20:10:02 omfg sshd[16628]: Bad protocol version identification '' from 114.248.64.118 port 59104 auth.log:Jun 20 20:10:03 omfg sshd[16782]: Connection from 114.248.64.118 port 59612 on 78.46.60.16 port 22 auth.log:Jun 20 20:10:21 omfg sshd[16782]: Invalid user support from 114.248.64.118 auth.log:Jun 20 20:10:23 omfg sshd[16782]: Connection closed by 114.248.64.118 port 59612 [preauth] auth.log:Jun 20 20:10:24 omfg sshd[17444]: Connection from 114.248.64.118 port 38830 on 78.46.60.16 port 22 auth.log:Jun 20 20:10:38 omfg sshd[17444]: Invalid user ubnt from 114.248.64.118 auth.log:Jun 20 20:10:40 omfg sshd[17444]: Connection closed by 114.248.64.118 port 38830 [preauth] auth.log:Jun 20 20:10:41 omfg sshd[17453]: Connection from 114.248.64.118 port 44916 on 78.46.60.16 port 22 auth.log:Jun 20 20:10:57 omfg s........ ------------------------------	2019-06-21 14:19:47
185.211.245.170	attack	Jun 21 04:57:56 mail postfix/smtpd\[31647\]: warning: unknown\[185.211.245.170\]: SASL PLAIN authentication failed: \ Jun 21 04:58:04 mail postfix/smtpd\[31647\]: warning: unknown\[185.211.245.170\]: SASL PLAIN authentication failed: \ Jun 21 05:50:00 mail postfix/smtpd\[32624\]: warning: unknown\[185.211.245.170\]: SASL PLAIN authentication failed: \ Jun 21 06:45:06 mail postfix/smtpd\[980\]: warning: unknown\[185.211.245.170\]: SASL PLAIN authentication failed: \	2019-06-21 14:00:19
139.199.106.127	attackbotsspam	20 attempts against mh-ssh on pluto.magehost.pro	2019-06-21 14:03:57
206.201.6.252	attackspam	445/tcp [2019-06-21]1pkt	2019-06-21 14:11:57
118.200.27.194	attackspam	3389BruteforceFW23	2019-06-21 14:08:26
49.88.226.181	attack	Brute force SMTP login attempts.	2019-06-21 13:47:12
223.111.157.201	attackbotsspam	3306/tcp 3389/tcp... [2019-04-25/06-21]11pkt,2pt.(tcp)	2019-06-21 13:40:53
185.222.211.13	attackbots	2019-06-21 07:47:44 H=\(hosting-by.nstorage.org\) \[185.222.211.13\] F=\ rejected RCPT \: Unrouteable address 2019-06-21 07:47:44 H=\(hosting-by.nstorage.org\) \[185.222.211.13\] F=\ rejected RCPT \: Unrouteable address 2019-06-21 07:47:44 H=\(hosting-by.nstorage.org\) \[185.222.211.13\] F=\ rejected RCPT \: Unrouteable address 2019-06-21 07:47:44 H=\(hosting-by.nstorage.org\) \[185.222.211.13\] F=\ rejected RCPT \: Unrouteable address 2019-06-21 07:47:44 H=\(hosting-by.nstorage.org\) \[185.222.211.13\] F=\ rejected RCPT \: Unrouteable address 2019-06-21 07:47:44 H=\(hosting-by.nstorage.org\) \[185.222.211.13\] F=\ rejected RCPT \: Unrouteable address 2019-06-21 07:47:44 H=\(hosting-by.nstorage.org\) \	2019-06-21 13:54:18
109.252.62.43	attack	¯\_(ツ)_/¯	2019-06-21 13:54:56
124.158.124.223	attack	23/tcp [2019-06-21]1pkt	2019-06-21 14:04:23
213.142.9.28	attackbots	5555/tcp [2019-06-21]1pkt	2019-06-21 14:03:08
184.105.139.90	attack	21/tcp 11211/tcp 50075/tcp... [2019-04-21/06-21]32pkt,13pt.(tcp),2pt.(udp)	2019-06-21 13:50:09
182.74.119.10	attack	Unauthorised access (Jun 21) SRC=182.74.119.10 LEN=48 TTL=118 ID=27791 DF TCP DPT=445 WINDOW=8192 SYN	2019-06-21 14:13:50
107.170.240.84	attackbotsspam	" "	2019-06-21 14:09:08

Recently Reported IPs

39.43.44.7	41.34.115.194	175.43.140.228	171.231.143.123
103.82.11.233	196.44.227.55	24.138.25.4	156.67.172.185
222.178.221.170	123.214.90.133	177.67.146.222	95.104.167.218
131.0.121.191	34.107.33.243	14.48.213.229	52.250.1.188
79.1.232.13	178.128.168.187	201.150.176.235	45.94.219.86