City: unknown
Region: unknown
Country: Brazil
Internet Service Provider: Lanteca Telecom Ltda - ME
Hostname: unknown
Organization: unknown
Usage Type: Fixed Line ISP
| Type | Details | Datetime |
|---|---|---|
| attack | Sep 16 18:33:38 mail.srvfarm.net postfix/smtps/smtpd[3600946]: warning: 138-122-222-213.lanteca.com.br[138.122.222.213]: SASL PLAIN authentication failed: Sep 16 18:33:39 mail.srvfarm.net postfix/smtps/smtpd[3600946]: lost connection after AUTH from 138-122-222-213.lanteca.com.br[138.122.222.213] Sep 16 18:37:53 mail.srvfarm.net postfix/smtpd[3601766]: warning: 138-122-222-213.lanteca.com.br[138.122.222.213]: SASL PLAIN authentication failed: Sep 16 18:37:53 mail.srvfarm.net postfix/smtpd[3601766]: lost connection after AUTH from 138-122-222-213.lanteca.com.br[138.122.222.213] Sep 16 18:38:10 mail.srvfarm.net postfix/smtps/smtpd[3601499]: warning: 138-122-222-213.lanteca.com.br[138.122.222.213]: SASL PLAIN authentication failed: |
2020-09-18 01:34:33 |
| attack | Sep 16 18:33:38 mail.srvfarm.net postfix/smtps/smtpd[3600946]: warning: 138-122-222-213.lanteca.com.br[138.122.222.213]: SASL PLAIN authentication failed: Sep 16 18:33:39 mail.srvfarm.net postfix/smtps/smtpd[3600946]: lost connection after AUTH from 138-122-222-213.lanteca.com.br[138.122.222.213] Sep 16 18:37:53 mail.srvfarm.net postfix/smtpd[3601766]: warning: 138-122-222-213.lanteca.com.br[138.122.222.213]: SASL PLAIN authentication failed: Sep 16 18:37:53 mail.srvfarm.net postfix/smtpd[3601766]: lost connection after AUTH from 138-122-222-213.lanteca.com.br[138.122.222.213] Sep 16 18:38:10 mail.srvfarm.net postfix/smtps/smtpd[3601499]: warning: 138-122-222-213.lanteca.com.br[138.122.222.213]: SASL PLAIN authentication failed: |
2020-09-17 17:36:03 |
| attack | Sep 16 18:33:38 mail.srvfarm.net postfix/smtps/smtpd[3600946]: warning: 138-122-222-213.lanteca.com.br[138.122.222.213]: SASL PLAIN authentication failed: Sep 16 18:33:39 mail.srvfarm.net postfix/smtps/smtpd[3600946]: lost connection after AUTH from 138-122-222-213.lanteca.com.br[138.122.222.213] Sep 16 18:37:53 mail.srvfarm.net postfix/smtpd[3601766]: warning: 138-122-222-213.lanteca.com.br[138.122.222.213]: SASL PLAIN authentication failed: Sep 16 18:37:53 mail.srvfarm.net postfix/smtpd[3601766]: lost connection after AUTH from 138-122-222-213.lanteca.com.br[138.122.222.213] Sep 16 18:38:10 mail.srvfarm.net postfix/smtps/smtpd[3601499]: warning: 138-122-222-213.lanteca.com.br[138.122.222.213]: SASL PLAIN authentication failed: |
2020-09-17 08:42:48 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 138.122.222.207 | attack | Attempted Brute Force (dovecot) |
2020-10-08 00:48:42 |
| 138.122.222.207 | attackspambots | Attempted Brute Force (dovecot) |
2020-10-07 16:57:44 |
| 138.122.222.239 | attackspam | Sep 16 18:09:37 mail.srvfarm.net postfix/smtpd[3597748]: warning: 138-122-222-239.lanteca.com.br[138.122.222.239]: SASL PLAIN authentication failed: Sep 16 18:09:37 mail.srvfarm.net postfix/smtpd[3597748]: lost connection after AUTH from 138-122-222-239.lanteca.com.br[138.122.222.239] Sep 16 18:18:04 mail.srvfarm.net postfix/smtps/smtpd[3600179]: warning: 138-122-222-239.lanteca.com.br[138.122.222.239]: SASL PLAIN authentication failed: Sep 16 18:18:04 mail.srvfarm.net postfix/smtps/smtpd[3600179]: lost connection after AUTH from 138-122-222-239.lanteca.com.br[138.122.222.239] Sep 16 18:18:34 mail.srvfarm.net postfix/smtps/smtpd[3584298]: warning: 138-122-222-239.lanteca.com.br[138.122.222.239]: SASL PLAIN authentication failed: |
2020-09-18 01:50:56 |
| 138.122.222.239 | attack | Sep 16 18:09:37 mail.srvfarm.net postfix/smtpd[3597748]: warning: 138-122-222-239.lanteca.com.br[138.122.222.239]: SASL PLAIN authentication failed: Sep 16 18:09:37 mail.srvfarm.net postfix/smtpd[3597748]: lost connection after AUTH from 138-122-222-239.lanteca.com.br[138.122.222.239] Sep 16 18:18:04 mail.srvfarm.net postfix/smtps/smtpd[3600179]: warning: 138-122-222-239.lanteca.com.br[138.122.222.239]: SASL PLAIN authentication failed: Sep 16 18:18:04 mail.srvfarm.net postfix/smtps/smtpd[3600179]: lost connection after AUTH from 138-122-222-239.lanteca.com.br[138.122.222.239] Sep 16 18:18:34 mail.srvfarm.net postfix/smtps/smtpd[3584298]: warning: 138-122-222-239.lanteca.com.br[138.122.222.239]: SASL PLAIN authentication failed: |
2020-09-17 17:52:04 |
| 138.122.222.207 | attackbotsspam | Aug 16 05:21:35 mail.srvfarm.net postfix/smtps/smtpd[1874192]: warning: 138-122-222-207.lanteca.com.br[138.122.222.207]: SASL PLAIN authentication failed: Aug 16 05:21:36 mail.srvfarm.net postfix/smtps/smtpd[1874192]: lost connection after AUTH from 138-122-222-207.lanteca.com.br[138.122.222.207] Aug 16 05:26:15 mail.srvfarm.net postfix/smtps/smtpd[1888818]: warning: 138-122-222-207.lanteca.com.br[138.122.222.207]: SASL PLAIN authentication failed: Aug 16 05:26:15 mail.srvfarm.net postfix/smtps/smtpd[1888818]: lost connection after AUTH from 138-122-222-207.lanteca.com.br[138.122.222.207] Aug 16 05:29:00 mail.srvfarm.net postfix/smtpd[1888504]: warning: 138-122-222-207.lanteca.com.br[138.122.222.207]: SASL PLAIN authentication failed: |
2020-08-16 13:01:31 |
| 138.122.222.82 | attackbotsspam | SASL PLAIN auth failed: ruser=... |
2020-07-16 09:09:03 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.122.222.213
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 784
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.122.222.213. IN A
;; AUTHORITY SECTION:
. 173 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020091602 1800 900 604800 86400
;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Sep 17 08:42:43 CST 2020
;; MSG SIZE rcvd: 119213.222.122.138.in-addr.arpa domain name pointer 138-122-222-213.lanteca.com.br.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
213.222.122.138.in-addr.arpa name = 138-122-222-213.lanteca.com.br.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 200.116.160.38 | attack | Aug 16 18:46:18 vps691689 sshd[14439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.116.160.38 Aug 16 18:46:19 vps691689 sshd[14439]: Failed password for invalid user sshadmin from 200.116.160.38 port 38620 ssh2 Aug 16 18:52:10 vps691689 sshd[14619]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.116.160.38 ... |
2019-08-17 01:08:11 |
| 114.91.68.29 | attackbotsspam | Aug 15 23:11:55 GIZ-Server-02 sshd[13238]: Invalid user developer from 114.91.68.29 Aug 15 23:11:55 GIZ-Server-02 sshd[13238]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.91.68.29 Aug 15 23:11:56 GIZ-Server-02 sshd[13238]: Failed password for invalid user developer from 114.91.68.29 port 40096 ssh2 Aug 15 23:11:57 GIZ-Server-02 sshd[13238]: Received disconnect from 114.91.68.29: 11: Bye Bye [preauth] Aug 15 23:20:17 GIZ-Server-02 sshd[18230]: User r.r from 114.91.68.29 not allowed because not listed in AllowUsers Aug 15 23:20:17 GIZ-Server-02 sshd[18230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.91.68.29 user=r.r Aug 15 23:20:19 GIZ-Server-02 sshd[18230]: Failed password for invalid user r.r from 114.91.68.29 port 35668 ssh2 Aug 15 23:20:20 GIZ-Server-02 sshd[18230]: Received disconnect from 114.91.68.29: 11: Bye Bye [preauth] Aug 15 23:28:30 GIZ-Server-02 sshd[22021]: I........ ------------------------------- |
2019-08-17 01:12:40 |
| 203.82.42.90 | attackbotsspam | Aug 16 19:27:49 vps647732 sshd[21269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.82.42.90 Aug 16 19:27:50 vps647732 sshd[21269]: Failed password for invalid user usuario from 203.82.42.90 port 38658 ssh2 ... |
2019-08-17 01:27:59 |
| 59.127.250.112 | attack | scan z |
2019-08-17 00:53:01 |
| 159.65.3.197 | attack | Aug 16 19:10:05 MK-Soft-Root2 sshd\[24176\]: Invalid user rh from 159.65.3.197 port 41607 Aug 16 19:10:05 MK-Soft-Root2 sshd\[24176\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.3.197 Aug 16 19:10:07 MK-Soft-Root2 sshd\[24176\]: Failed password for invalid user rh from 159.65.3.197 port 41607 ssh2 ... |
2019-08-17 01:12:15 |
| 115.207.73.72 | attackspam | Aug 15 21:28:20 wildwolf ssh-honeypotd[26164]: Failed password for admin from 115.207.73.72 port 44678 ssh2 (target: 158.69.100.139:22, password: pfsense) Aug 15 21:28:32 wildwolf ssh-honeypotd[26164]: Failed password for admin from 115.207.73.72 port 44678 ssh2 (target: 158.69.100.139:22, password: 1234) Aug 15 21:28:36 wildwolf ssh-honeypotd[26164]: Failed password for admin from 115.207.73.72 port 44678 ssh2 (target: 158.69.100.139:22, password: aerohive) Aug 15 21:28:38 wildwolf ssh-honeypotd[26164]: Failed password for admin from 115.207.73.72 port 44678 ssh2 (target: 158.69.100.139:22, password: 7ujMko0admin) Aug 15 21:28:42 wildwolf ssh-honeypotd[26164]: Failed password for admin from 115.207.73.72 port 44678 ssh2 (target: 158.69.100.139:22, password: 12345) Aug 15 21:28:46 wildwolf ssh-honeypotd[26164]: Failed password for admin from 115.207.73.72 port 44678 ssh2 (target: 158.69.100.139:22, password: 1111) Aug 15 21:28:49 wildwolf ssh-honeypotd[26164]: Failed pas........ ------------------------------ |
2019-08-17 01:07:05 |
| 95.130.9.90 | attack | Aug 16 18:58:31 vpn01 sshd\[24198\]: Invalid user 666666 from 95.130.9.90 Aug 16 18:58:31 vpn01 sshd\[24198\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.130.9.90 Aug 16 18:58:33 vpn01 sshd\[24198\]: Failed password for invalid user 666666 from 95.130.9.90 port 52034 ssh2 |
2019-08-17 01:02:02 |
| 13.67.67.168 | attackbotsspam | Aug 16 06:36:10 lcdev sshd\[410\]: Invalid user one from 13.67.67.168 Aug 16 06:36:10 lcdev sshd\[410\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.67.67.168 Aug 16 06:36:12 lcdev sshd\[410\]: Failed password for invalid user one from 13.67.67.168 port 3456 ssh2 Aug 16 06:45:48 lcdev sshd\[1398\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.67.67.168 user=root Aug 16 06:45:50 lcdev sshd\[1398\]: Failed password for root from 13.67.67.168 port 3456 ssh2 |
2019-08-17 00:57:22 |
| 183.238.193.227 | attack | Aug 16 12:50:55 xtremcommunity sshd\[21047\]: Invalid user rsync from 183.238.193.227 port 21627 Aug 16 12:50:55 xtremcommunity sshd\[21047\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.238.193.227 Aug 16 12:50:57 xtremcommunity sshd\[21047\]: Failed password for invalid user rsync from 183.238.193.227 port 21627 ssh2 Aug 16 12:57:16 xtremcommunity sshd\[21297\]: Invalid user ec2-user from 183.238.193.227 port 45316 Aug 16 12:57:16 xtremcommunity sshd\[21297\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.238.193.227 ... |
2019-08-17 01:03:33 |
| 23.129.64.209 | attackspambots | 'Fail2Ban' |
2019-08-17 00:43:53 |
| 207.180.235.203 | attackspam | Aug 16 06:31:05 sachi sshd\[19899\]: Invalid user gose from 207.180.235.203 Aug 16 06:31:05 sachi sshd\[19899\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=vmi287485.contaboserver.net Aug 16 06:31:08 sachi sshd\[19899\]: Failed password for invalid user gose from 207.180.235.203 port 34466 ssh2 Aug 16 06:35:36 sachi sshd\[20255\]: Invalid user ts3server from 207.180.235.203 Aug 16 06:35:36 sachi sshd\[20255\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=vmi287485.contaboserver.net |
2019-08-17 00:38:05 |
| 142.93.203.108 | attackbotsspam | Aug 16 16:47:46 web8 sshd\[26499\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.203.108 user=root Aug 16 16:47:48 web8 sshd\[26499\]: Failed password for root from 142.93.203.108 port 47294 ssh2 Aug 16 16:52:12 web8 sshd\[28613\]: Invalid user test from 142.93.203.108 Aug 16 16:52:12 web8 sshd\[28613\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.203.108 Aug 16 16:52:15 web8 sshd\[28613\]: Failed password for invalid user test from 142.93.203.108 port 39268 ssh2 |
2019-08-17 01:08:40 |
| 220.167.100.60 | attack | Aug 16 17:16:57 debian sshd\[22575\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.167.100.60 user=root Aug 16 17:16:59 debian sshd\[22575\]: Failed password for root from 220.167.100.60 port 47968 ssh2 ... |
2019-08-17 01:19:41 |
| 119.61.26.165 | attack | 2019-08-16T16:48:03.096229abusebot-8.cloudsearch.cf sshd\[22647\]: Invalid user bill from 119.61.26.165 port 49423 |
2019-08-17 01:16:08 |
| 85.40.208.178 | attack | 2019-08-16T16:17:34.391750abusebot-7.cloudsearch.cf sshd\[26202\]: Invalid user raoul from 85.40.208.178 port 3246 |
2019-08-17 00:44:35 |