94.74.135.201 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Iran (Islamic Republic of)

Internet Service Provider: Farahoosh Dena PLC

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Jun 16 05:29:12 mail.srvfarm.net postfix/smtps/smtpd[937454]: warning: unknown[94.74.135.201]: SASL PLAIN authentication failed: Jun 16 05:29:12 mail.srvfarm.net postfix/smtps/smtpd[937454]: lost connection after AUTH from unknown[94.74.135.201] Jun 16 05:37:45 mail.srvfarm.net postfix/smtps/smtpd[937456]: warning: unknown[94.74.135.201]: SASL PLAIN authentication failed: Jun 16 05:37:46 mail.srvfarm.net postfix/smtps/smtpd[937456]: lost connection after AUTH from unknown[94.74.135.201] Jun 16 05:39:09 mail.srvfarm.net postfix/smtpd[936017]: warning: unknown[94.74.135.201]: SASL PLAIN authentication failed:	2020-06-16 15:47:20

Type

Details

Datetime

attack

Jun 16 05:29:12 mail.srvfarm.net postfix/smtps/smtpd[937454]: warning: unknown[94.74.135.201]: SASL PLAIN authentication failed: 
Jun 16 05:29:12 mail.srvfarm.net postfix/smtps/smtpd[937454]: lost connection after AUTH from unknown[94.74.135.201]
Jun 16 05:37:45 mail.srvfarm.net postfix/smtps/smtpd[937456]: warning: unknown[94.74.135.201]: SASL PLAIN authentication failed: 
Jun 16 05:37:46 mail.srvfarm.net postfix/smtps/smtpd[937456]: lost connection after AUTH from unknown[94.74.135.201]
Jun 16 05:39:09 mail.srvfarm.net postfix/smtpd[936017]: warning: unknown[94.74.135.201]: SASL PLAIN authentication failed:

2020-06-16 15:47:20

Comments on same subnet:

IP	Type	Details	Datetime
94.74.135.142	attackspambots	Automatic report - Port Scan Attack	2020-07-12 18:23:27

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.74.135.201
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27322
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.74.135.201.			IN	A

;; AUTHORITY SECTION:
.			401	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020061600 1800 900 604800 86400

;; Query time: 99 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jun 16 15:47:15 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 201.135.74.94.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 201.135.74.94.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
81.241.235.191	attack	Nov 21 11:40:10 work-partkepr sshd\[569\]: Invalid user gourtay from 81.241.235.191 port 35952 Nov 21 11:40:10 work-partkepr sshd\[569\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.241.235.191 ...	2019-11-21 20:11:56
61.148.16.162	attackbots	Nov 21 07:23:15 dedicated sshd[5102]: Invalid user ratanam from 61.148.16.162 port 2799	2019-11-21 20:05:36
222.186.30.59	attackbots	2019-11-20 UTC: 4x - root(4x)	2019-11-21 19:55:58
77.93.33.212	attack	Repeated brute force against a port	2019-11-21 20:18:43
200.29.154.210	attackbotsspam	Unauthorised access (Nov 21) SRC=200.29.154.210 LEN=40 TTL=239 ID=45793 TCP DPT=445 WINDOW=1024 SYN Unauthorised access (Nov 19) SRC=200.29.154.210 LEN=40 TTL=239 ID=26260 TCP DPT=1433 WINDOW=1024 SYN	2019-11-21 20:20:27
62.234.101.62	attack	SSH Bruteforce attack	2019-11-21 20:08:22
138.68.30.68	attackbots	53413/udp 53413/udp 53413/udp... [2019-10-21/11-21]1223pkt,1pt.(udp)	2019-11-21 19:51:21
120.133.133.243	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2019-11-21 20:13:02
185.248.101.229	attackbots	Exploit Attempt	2019-11-21 20:08:43
83.228.50.42	attack	port scan and connect, tcp 23 (telnet)	2019-11-21 20:19:33
81.28.100.129	attackspam	2019-11-21T07:22:39.507394stark.klein-stark.info postfix/smtpd\[2270\]: NOQUEUE: reject: RCPT from marmalade.shrewdmhealth.com\[81.28.100.129\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\ ...	2019-11-21 20:15:20
112.85.42.194	attackbots	2019-11-21T12:53:55.219299scmdmz1 sshd\[14125\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.194 user=root 2019-11-21T12:53:57.540513scmdmz1 sshd\[14125\]: Failed password for root from 112.85.42.194 port 32194 ssh2 2019-11-21T12:54:00.049288scmdmz1 sshd\[14125\]: Failed password for root from 112.85.42.194 port 32194 ssh2 ...	2019-11-21 20:07:25
187.141.71.27	attack	Nov 21 07:18:29 [host] sshd[31840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.141.71.27 user=backup Nov 21 07:18:31 [host] sshd[31840]: Failed password for backup from 187.141.71.27 port 51498 ssh2 Nov 21 07:22:33 [host] sshd[31875]: Invalid user ven from 187.141.71.27	2019-11-21 20:23:41
94.204.50.58	attackspambots	Honeypot attack, port: 23, PTR: PTR record not found	2019-11-21 20:11:32
201.116.12.217	attackspam	Nov 21 12:37:32 meumeu sshd[6926]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.116.12.217 Nov 21 12:37:35 meumeu sshd[6926]: Failed password for invalid user minas from 201.116.12.217 port 32967 ssh2 Nov 21 12:41:47 meumeu sshd[7393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.116.12.217 ...	2019-11-21 19:45:58

Recently Reported IPs

37.120.192.130	113.23.105.12	201.218.138.144	201.131.180.64
195.93.143.97	191.53.223.252	185.217.163.83	185.40.241.143
179.124.50.236	178.217.116.119	178.20.140.84	168.167.89.197
167.250.98.3	119.28.214.129	109.203.187.9	104.43.9.166
103.237.57.65	103.207.7.192	94.154.106.27	94.74.175.123