194.147.142.130 Threat Intelligence and Host Information

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Potentially Malicious Host 🟡 35/100

Host and Network Information

• Tags: Nextray, SSH, Telnet, attack, awsbah, bruteforce, cyber security, ioc, login, malicious, phishing, scanner, telnet
• View other sources: Spamhaus VirusTotal

• Contained within other IP sets: turris_greylist

• Country: Netherlands
• Network: AS60631 pars parva system co. ltd.
• Noticed: 6 times
• Protcols Attacked: telnet
• Countries Attacked: Bahrain, Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
• Passive DNS Results: ftp.chiniipars.ir pop.chiniipars.ir www.chiniipars.ir smtp.chiniipars.ir chiniipars.ir ftp.sp-artgroup.ir pop.sp-artgroup.ir www.sp-artgroup.ir smtp.sp-artgroup.ir kaf.elsuren.ir www.kaf.elsuren.ir ftp.nazisaki.com www.nazisaki.com smtp.nazisaki.com pop.nazisaki.com myferenx.store iranitland.com www.iranitland.com sinavalton.com www.sinavalton.com www.my-ecard.ir pop.my-ecard.ir my-ecard.ir ftp.my-ecard.ir smtp.my-ecard.ir www.hamid-jamali.ir smtp.hamid-jamali.ir ftp.hamid-jamali.ir pop.hamid-jamali.ir www.netelearn.com netelearn.com homachain.ir smtp.homachain.ir pop.homachain.ir www.homachain.ir hamid-jamali.ir pop.farnazshz.ir ftp.farnazshz.ir www.farnazshz.ir smtp.farnazshz.ir farnazshz.ir bamabashidtravel.ir hakhamaneshbuilding.ir abdel.alisshp.ir mobleoffer.com www.mobleoffer.com net-boutique-men.ir ftp.net-boutique-men.ir www.net-boutique-men.ir smtp.net-boutique-men.ir pop.net-boutique-men.ir www.tabrizazma.com tabrizazma.com test.drshabkhiz.com termeh.org smtp.termeh.org www.termeh.org ftp.termeh.org pop.termeh.org techrate.co ftp.techrate.co www.techrate.co pop.techrate.co smtp.techrate.co smtp.pastilletoys.ir www.pastilletoys.ir pop.pastilletoys.ir ftp.pastilletoys.ir appiveh.ir www.novintarhesepahan.ir novintarhesepahan.ir www.mehrmaster.ir smtp.mehrmaster.ir ftp.mehrmaster.ir pop.mehrmaster.ir mehrmaster.ir smtp.aliroustaei24.ir aliroustaei24.ir www.aliroustaei24.ir pop.aliroustaei24.ir ftp.aliroustaei24.ir smtp.tehranhome.net pop.tehranhome.net www.tehranhome.net tehranhome.net ftp.tehranhome.net shamlooproperty.com www.shamlooproperty.com smtp.shamlooproperty.com ftp.shamlooproperty.com pop.shamlooproperty.com shaalinshop.ir webdesignbyiman.ir pop.nik-yar13.ir www.nik-yar13.ir ftp.nik-yar13.ir smtp.nik-yar13.ir pop.arqanoun98.ir www.arqanoun98.ir ftp.arqanoun98.ir smtp.arqanoun98.ir arqanoun98.ir site2.majidrostamian.ir amiri.alisshp.ir smtp.almas-land.ir www.almas-land.ir ftp.almas-land.ir pop.almas-land.ir almas-land.ir ftp.dona1396.ir pop.dona1396.ir www.dona1396.ir smtp.dona1396.ir simnab.com www.simnab.com smtp.simnab.com pop.azadito.com azadito.com www.azadito.com smtp.azadito.com www.game.nima86.ir site1.majidrostamian.ir salamatgoostar.ir _sip._tcp.asrepardis.ir www.ai-tec.ir pop.ai-tec.ir smtp.ai-tec.ir ftp.ai-tec.ir cert.acpi.ir ai-tec.ir lalakids.ir ftp.lalakids.ir pop.lalakids.ir www.lalakids.ir smtp.lalakids.ir _dmarc.asrepardis.ir www.sismoonyamin.ir toyshani.ir www.toyshani.ir pop.filsofan.com smtp.filsofan.com www.filsofan.com filsofan.com ftp.filsofan.com pop.takmmber.ir smtp.takmmber.ir www.takmmber.ir takmmber.ir pop.m-digishop.ir smtp.m-digishop.ir ftp.m-digishop.ir www.m-digishop.ir m-digishop.ir smtp.golden-wp.ir pop.golden-wp.ir www.golden-wp.ir golden-wp.ir ftp.golden-wp.ir shahrefarhangvadanesh.com ftp.yarzagros.ir www.yarzagros.ir yarzagros.ir pop.yarzagros.ir smtp.yarzagros.ir smtp.parandoush.ir www.parandoush.ir pop.parandoush.ir ftp.parandoush.ir parandoush.ir pop.monocollection.ir monocollection.ir smtp.monocollection.ir www.monocollection.ir ftp.monocollection.ir www.asbabshadi.ir asbabshadi.ir pop.seroiusss.ir www.seroiusss.ir smtp.seroiusss.ir ftp.seroiusss.ir seroiusss.ir sunjico.ir www.sunjico.ir ftp.sunjico.ir pop.sunjico.ir smtp.sunjico.ir game.nima86.ir www.tosetavanjam.ir pop.tosetavanjam.ir smtp.tosetavanjam.ir ftp.tosetavanjam.ir tosetavanjam.ir bot.nima86.ir digixato.ir www.digixato.ir ftp.shahreizogam.ir pop.shahreizogam.ir smtp.shahreizogam.ir www.shahreizogam.ir shahreizogam.ir smtp.front-learn.ir ftp.front-learn.ir front-learn.ir pop.front-learn.ir www.front-learn.ir www.payeshbazzar.ir pop.payeshbazzar.ir ftp.payeshbazzar.ir payeshbazzar.ir smtp.payeshbazzar.ir electromandegar.ir www.electromandegar.ir vvoodoocrafts.com fa.vvoodoocrafts.com didgahacademy.ir tajeron.ir www.tajeron.ir isologr8.com www.isologr8.com smtp.vila360.ir pop.vila360.ir www.vila360.ir r41d3r.mehdinezamian.ir sp-artgroup.ir www.art-tanin.ir art-tanin.ir sanole.ir www.sanole.ir book.jozve-ketab.ir www.plgkala.com plgkala.com ftp.designerd.ir www.designerd.ir pop.designerd.ir smtp.designerd.ir www.mahtakzm.ir mahtakzm.ir virgoul.com www.virgoul.com vila360.ir plascoland.ir akhbarehonari.ir artnewspress.ir hedyeclo.ir www.hedyeclo.ir smtp.hedyeclo.ir ftp.hedyeclo.ir pop.hedyeclo.ir smtp.hedyeclothing.ir pop.hedyeclothing.ir hedyeclothing.ir www.hedyeclothing.ir zhalino.com www.zhalino.com www.zhalino.ir zhalino.ir smtp.bestrento.com www.bestrento.com pop.bestrento.com smtp.khorshidsavar.ir ftp.khorshidsavar.ir www.khorshidsavar.ir khorshidsavar.ir pop.khorshidsavar.ir www.hotelgachsar24.ir hotelgachsar24.ir pop.sahar-emeeri.ir ftp.sahar-emeeri.ir www.sahar-emeeri.ir sahar-emeeri.ir smtp.sahar-emeeri.ir www.vandalvip.ir pop.vandalvip.ir ftp.vandalvip.ir smtp.vandalvip.ir smtp.horsaaccessories.ir www.horsaaccessories.ir pop.horsaaccessories.ir horsaaccessories.ir ftp.horsaaccessories.ir vandalvip.ir shahrekariman.ir smtp.dr-hoda-jazayeri.com pop.dr-hoda-jazayeri.com dr-hoda-jazayeri.com www.dr-hoda-jazayeri.com ftp.dr-hoda-jazayeri.com pop.adlitm.ir adlitm.ir smtp.adlitm.ir ftp.adlitm.ir www.adlitm.ir www.darsaayesaareeshgh.ir book-genre.ir pop.ovisina.ir ftp.ovisina.ir smtp.ovisina.ir www.ovisina.ir ovisina.ir qalebino.ir www.qalebino.ir pop.qalebino.ir smtp.qalebino.ir ftp.qalebino.ir smtp.sonyabanoo.com ftp.sonyabanoo.com pop.sonyabanoo.com sonyabanoo.com www.sonyabanoo.com ftp.ninjamoviez.com www.ninjamoviez.com smtp.ninjamoviez.com pop.ninjamoviez.com ninjamoviez.com ftp.amouzhak.ir smtp.amouzhak.ir www.amouzhak.ir pop.amouzhak.ir www.b1o.ir b1o.ir amouzhak.ir pop.winproof.ir smtp.winproof.ir www.winproof.ir winproof.ir ftp.winproof.ir www.asobot.ir ftp.asobot.ir smtp.asobot.ir pop.asobot.ir asobot.ir amouzhak.com ftp.basmehchi.ir basmehchi.ir www.basmehchi.ir smtp.basmehchi.ir pop.basmehchi.ir nik-yar13.ir shimaattari.ir www.shimaattari.ir pop.mkvroomshop.com www.mkvroomshop.com ftp.mkvroomshop.com mkvroomshop.com smtp.mkvroomshop.com dl.asatarazesepahan.ir smtp.armanpolymeryazd.com armanpolymeryazd.com www.armanpolymeryazd.com pop.armanpolymeryazd.com ftp.armanpolymeryazd.com pop.belkameh.ir belkameh.ir www.belkameh.ir smtp.belkameh.ir ftp.belkameh.ir www.shafayaar.ir shafayaar.ir dl.emxteam.ir inforain.ir www.merdadshekari.ir pop.merdadshekari.ir ftp.merdadshekari.ir smtp.merdadshekari.ir merdadshekari.ir www.asatarazesepahan.ir ftp.asatarazesepahan.ir pop.asatarazesepahan.ir asatarazesepahan.ir smtp.asatarazesepahan.ir smtp.finmen.ir ftp.finmen.ir www.finmen.ir finmen.ir pop.finmen.ir www.elcoelectronic.com ftp.elcoelectronic.com smtp.elcoelectronic.com pop.elcoelectronic.com smtp.mahdieab18.ir ftp.mahdieab18.ir pop.mahdieab18.ir www.mahdieab18.ir www.ayda2-asghariyan.ir smtp.ayda2-asghariyan.ir pop.ayda2-asghariyan.ir ftp.ayda2-asghariyan.ir ayda2-asghariyan.ir mahdieab18.ir dab-co.ir www.dab-co.ir ftp.sadrsobhanco.ir www.sadrsobhanco.ir smtp.sadrsobhanco.ir sadrsobhanco.ir pop.sadrsobhanco.ir noavarantechnoniro.com www.noavarantechnoniro.com ahvazcoffee.com www.leo-co.ir leo-co.ir www.1giftcard.ir 1giftcard.ir pop.1giftcard.ir smtp.1giftcard.ir ftp.1giftcard.ir smtp.baamardom.ir www.baamardom.ir pop.baamardom.ir ftp.baamardom.ir baamardom.ir www.andishehtazeh.ir smtp.andishehtazeh.ir ftp.andishehtazeh.ir pop.andishehtazeh.ir andishehtazeh.ir smtp.yavarmardom.ir www.yavarmardom.ir ftp.yavarmardom.ir pop.yavarmardom.ir yavarmardom.ir www.shirinjahanlahijan.ir smtp.shirinjahanlahijan.ir ftp.shirinjahanlahijan.ir pop.shirinjahanlahijan.ir shirinjahanlahijan.ir guide.emxteam.ir www.euphoriabrand.com euphoriabrand.com www.rajabiamir.ir ftp.rajabiamir.ir smtp.rajabiamir.ir rajabiamir.ir pop.rajabiamir.ir smtp.clarkshopiran.ir pop.clarkshopiran.ir www.clarkshopiran.ir ftp.clarkshopiran.ir sogandrajabi.ir clarkshopiran.ir dadehweb.com jasmineaccesoory.ir aicomplex.ir www.aicomplex.ir www.polimering.ir pop.polimering.ir smtp.polimering.ir polimering.ir ftp.polimering.ir smtp.red-mag.ir pop.red-mag.ir ftp.red-mag.ir www.red-mag.ir smtp.emxteam.ir ftp.emxteam.ir www.emxteam.ir emxteam.ir pop.emxteam.ir ftp.ertano.ir pop.ertano.ir smtp.ertano.ir www.ertano.ir ertano.ir reyrecord.ir www.reyrecord.ir ftp.mansourehjafarkarimi.ir pop.mansourehjafarkarimi.ir smtp.mansourehjafarkarimi.ir www.mansourehjafarkarimi.ir mansourehjafarkarimi.ir azmoon.acpi.ir www.arsinrug.com arsinrug.com www.jarah.clinic jarah.clinic helpticket.ir www.dorrinsaffari.com dorrinsaffari.com smtp.nima86.ir nima86.ir pop.nima86.ir ftp.nima86.ir www.nima86.ir ajaxir1.woo.ir ir1.woomedia.ir ftp.best-win.ir pop.best-win.ir smtp.best-win.ir www.best-win.ir best-win.ir www.iliplus.com designerd.ir dore.catcoplus.ir www.fatemeh1381kh.ir pop.fatemeh1381kh.ir smtp.fatemeh1381kh.ir fatemeh1381kh.ir bibazi.ir www.bibazi.ir www.nabazi.ir

Open Ports Detected

110 143 21 2222 25 3333 443 465 80 995

Map

Whois Information

• inetnum: 194.147.142.128 - 194.147.142.255
• netname: Parspack
• abuse-c: AR50522-RIPE
• country: IR
• admin-c: AR50522-RIPE
• tech-c: AR50522-RIPE
• status: ASSIGNED PA
• mnt-by: PTP-MNT
• created: 2021-12-08T17:38:45Z
• last-modified: 2022-01-24T04:15:46Z
• role: Abuse-C Role
• address: Unit 4, No. 2, 35th west alley
• address: 1998865778
• address: Tehran
• address: IRAN, ISLAMIC REPUBLIC OF
• nic-hdl: AR50522-RIPE
• abuse-mailbox: [email protected]
• mnt-by: mnt-ir-parsparva3-1
• created: 2019-01-29T15:40:15Z
• last-modified: 2019-01-29T15:40:15Z
• route: 194.147.142.0/24
• origin: AS60631
• mnt-by: PTP-MNT
• mnt-by: PTP-MNT
• created: 2022-01-24T04:18:23Z
• last-modified: 2022-01-24T04:18:23Z

Links to attack logs

awsbah-telnet-bruteforce-ip-list-2021-09-21