AbuseIPDB » 94.41.0.165

94.41.0.165 was found in our database!

This IP was reported 3,512 times. Confidence of Abuse is 2%: ?

ISP	JSC Ufanet
Usage Type	Fixed Line ISP
Hostname(s)	94.41.0.165.static.ufanet.ru
Domain Name	ufanet.ru
Country	Russian Federation
City	Mikhaylovka, Bashkortostan, Respublika

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 94.41.0.165

Whois 94.41.0.165

IP Abuse Reports for 94.41.0.165:

This IP address has been reported a total of 3,512 times from 411 distinct sources. 94.41.0.165 was first reported on January 24th 2022, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
dwmp	2024-01-02 05:31:10 (9 months ago)	Jan 2 01:20:25 plesk postfix/smtpd[1298276]: warning: 94.41.0.165.static.ufanet.ru[94.41.0.165]: SA ... show moreJan 2 01:20:25 plesk postfix/smtpd[1298276]: warning: 94.41.0.165.static.ufanet.ru[94.41.0.165]: SASL LOGIN authentication failed: authentication failure Jan 2 01:25:25 plesk postfix/smtpd[1298276]: disconnect from 94.41.0.165.static.ufanet.ru[94.41.0.165] ehlo=1 auth=0/1 commands=1/2 Jan 2 06:31:09 plesk postfix/smtpd[1324358]: lost connection after CONNECT from 94.41.0.165.static.ufanet.ru[94.41.0.165] ... show less	Brute-Force SSH
CR Honey Pot	2024-01-01 20:32:30 (9 months ago)	Brute force SASL ...	Brute-Force
Burayot	2024-01-01 17:48:32 (9 months ago)	LF_DISTATTACK: 94.41.0.165 (RU/Russia/94.41.0.165.static.ufanet.ru), 2 distributed smtpauth attacks ... show moreLF_DISTATTACK: 94.41.0.165 (RU/Russia/94.41.0.165.static.ufanet.ru), 2 distributed smtpauth attacks on account [redacted] in the last 3600 secs show less	DDoS Attack
Paul Smith	2024-01-01 15:41:59 (9 months ago)	Email Auth Brute force attack 12/12 in last day	Brute-Force
www.tana.it	2024-01-01 15:41:44 (9 months ago)	SMTP auth dictionary attack	Brute-Force
cticom.ms	2024-01-01 11:15:31 (9 months ago)	Email Auth Brute force attack 3/3 in last day	Brute-Force
Anonymous	2024-01-01 03:46:16 (9 months ago)	2024-01-01 03:46:16,035 INFO [ImapSSLServer-652] [ip=192.168.1.235;oip=94.41.0.165;via=192.168.1.23 ... show more2024-01-01 03:46:16,035 INFO [ImapSSLServer-652] [ip=192.168.1.235;oip=94.41.0.165;via=192.168.1.235(nginx/1.20.0);ua=Zimbra/8.8.15_GA_4581;cid=3531;] account - Error occurred during authentication: authentication failed for [[email protected]]. Reason: invalid password. 2024-01-01 03:46:16,035 INFO [ImapSSLServer-652] [ip=192.168.1.235;oip=94.41.0.165;via=192.168.1.235(nginx/1.20.0);ua=Zimbra/8.8.15_GA_4581;cid=3531;] imap - authentication failed for [[email protected]] (invalid password) 2024-01-01 03:46:16,036 INFO [ImapSSLServer-652] [ip=192.168.1.235;oip=94.41.0.165;via=192.168.1.235(nginx/1.20.0);ua=Zimbra/8.8.15_GA_4581;cid=3531;] account - Error occurred during authentication: authentication failed for [[email protected]]. Reason: invalid password. ... show less	Brute-Force Web App Attack
IpdbBot	2023-12-31 21:09:04 (9 months ago)	Too many invalid connections	Hacking
Burayot	2023-12-31 16:50:32 (9 months ago)	LF_DISTATTACK: 94.41.0.165 (RU/Russia/94.41.0.165.static.ufanet.ru), 6 distributed smtpauth attacks ... show moreLF_DISTATTACK: 94.41.0.165 (RU/Russia/94.41.0.165.static.ufanet.ru), 6 distributed smtpauth attacks on account [redacted] in the last 3600 secs show less	DDoS Attack
Paul Smith	2023-12-31 15:38:53 (9 months ago)	Email Auth Brute force attack 7/7 in last day	Brute-Force
fnthosting	2023-12-31 14:38:01 (9 months ago)	Brute Force on 12/31/2023 17:38:01 (UTC+03:00) Istanbul	Brute-Force
Fusl	2023-12-31 07:07:23 (9 months ago)	received unsolicited smtp data stream: Date: Sun, 31 Dec 2023 08:07:09 +0100 From: rddfu ... show morereceived unsolicited smtp data stream: Date: Sun, 31 Dec 2023 08:07:09 +0100 From: [email protected] Subject: =?UTF-8?B?cmRkZnVAYWRkci5lcztyZGRmdUBhZGRyLmVzO2FkZHIyMDIxITttYWlsLmFk?= =?UTF-8?B?ZHIuZXM7MjU7MDtMT0dJTg==?= To: [email protected] show less	Email Spam
basing	2023-12-31 05:09:16 (9 months ago)	2023-12-31 06:09:16 pzb SASL PLAIN auth failed: rhost=94.41.0.165...	Brute-Force
dwmp	2023-12-31 00:46:33 (9 months ago)	Dec 31 01:46:32 plesk postfix/smtpd[1094363]: warning: 94.41.0.165.static.ufanet.ru[94.41.0.165]: SA ... show moreDec 31 01:46:32 plesk postfix/smtpd[1094363]: warning: 94.41.0.165.static.ufanet.ru[94.41.0.165]: SASL LOGIN authentication failed: authentication failure Dec 31 01:46:32 plesk postfix/smtpd[1094363]: lost connection after AUTH from 94.41.0.165.static.ufanet.ru[94.41.0.165] Dec 31 01:46:32 plesk postfix/smtpd[1094363]: disconnect from 94.41.0.165.static.ufanet.ru[94.41.0.165] ehlo=1 auth=0/1 commands=1/2 ... show less	Brute-Force SSH
cticom.ms	2023-12-30 18:09:38 (9 months ago)	Email Auth Brute force attack 3/3 in last day	Brute-Force