City: unknown
Region: unknown
Country: Brazil
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 138.219.201.42 | attackspam | Oct 4 17:04:33 mail.srvfarm.net postfix/smtps/smtpd[1047457]: warning: porta42.santana.internettelecom.com.br[138.219.201.42]: SASL PLAIN authentication failed: Oct 4 17:04:33 mail.srvfarm.net postfix/smtps/smtpd[1047457]: lost connection after AUTH from porta42.santana.internettelecom.com.br[138.219.201.42] Oct 4 17:06:51 mail.srvfarm.net postfix/smtpd[1046612]: warning: porta42.santana.internettelecom.com.br[138.219.201.42]: SASL PLAIN authentication failed: Oct 4 17:06:52 mail.srvfarm.net postfix/smtpd[1046612]: lost connection after AUTH from porta42.santana.internettelecom.com.br[138.219.201.42] Oct 4 17:07:55 mail.srvfarm.net postfix/smtpd[1047103]: warning: porta42.santana.internettelecom.com.br[138.219.201.42]: SASL PLAIN authentication failed: |
2020-10-05 05:20:57 |
| 138.219.201.42 | attackspam | Oct 4 05:11:02 mail.srvfarm.net postfix/smtpd[714208]: warning: porta42.santana.internettelecom.com.br[138.219.201.42]: SASL PLAIN authentication failed: Oct 4 05:11:02 mail.srvfarm.net postfix/smtpd[714208]: lost connection after AUTH from porta42.santana.internettelecom.com.br[138.219.201.42] Oct 4 05:15:57 mail.srvfarm.net postfix/smtps/smtpd[727896]: warning: porta42.santana.internettelecom.com.br[138.219.201.42]: SASL PLAIN authentication failed: Oct 4 05:15:57 mail.srvfarm.net postfix/smtps/smtpd[727896]: lost connection after AUTH from porta42.santana.internettelecom.com.br[138.219.201.42] Oct 4 05:16:16 mail.srvfarm.net postfix/smtpd[727586]: warning: porta42.santana.internettelecom.com.br[138.219.201.42]: SASL PLAIN authentication failed: |
2020-10-04 21:15:13 |
| 138.219.201.42 | attack | Oct 4 05:11:02 mail.srvfarm.net postfix/smtpd[714208]: warning: porta42.santana.internettelecom.com.br[138.219.201.42]: SASL PLAIN authentication failed: Oct 4 05:11:02 mail.srvfarm.net postfix/smtpd[714208]: lost connection after AUTH from porta42.santana.internettelecom.com.br[138.219.201.42] Oct 4 05:15:57 mail.srvfarm.net postfix/smtps/smtpd[727896]: warning: porta42.santana.internettelecom.com.br[138.219.201.42]: SASL PLAIN authentication failed: Oct 4 05:15:57 mail.srvfarm.net postfix/smtps/smtpd[727896]: lost connection after AUTH from porta42.santana.internettelecom.com.br[138.219.201.42] Oct 4 05:16:16 mail.srvfarm.net postfix/smtpd[727586]: warning: porta42.santana.internettelecom.com.br[138.219.201.42]: SASL PLAIN authentication failed: |
2020-10-04 13:01:03 |
| 138.219.201.25 | attack | 5x Failed Password |
2020-09-17 20:03:20 |
| 138.219.201.25 | attackbotsspam | 2020-09-17T01:40:29.276815abusebot-8.cloudsearch.cf sshd[2370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=porta25.santana.internettelecom.com.br user=root 2020-09-17T01:40:31.219407abusebot-8.cloudsearch.cf sshd[2370]: Failed password for root from 138.219.201.25 port 40586 ssh2 2020-09-17T01:45:16.071630abusebot-8.cloudsearch.cf sshd[2536]: Invalid user klaus from 138.219.201.25 port 52478 2020-09-17T01:45:16.078598abusebot-8.cloudsearch.cf sshd[2536]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=porta25.santana.internettelecom.com.br 2020-09-17T01:45:16.071630abusebot-8.cloudsearch.cf sshd[2536]: Invalid user klaus from 138.219.201.25 port 52478 2020-09-17T01:45:17.755292abusebot-8.cloudsearch.cf sshd[2536]: Failed password for invalid user klaus from 138.219.201.25 port 52478 ssh2 2020-09-17T01:50:00.547645abusebot-8.cloudsearch.cf sshd[2592]: pam_unix(sshd:auth): authentication failure; lognam ... |
2020-09-17 12:13:52 |
| 138.219.201.25 | attackspam | Brute-Force,SSH |
2020-09-17 03:30:26 |
| 138.219.201.25 | attack | Aug 25 09:28:00 vps46666688 sshd[12456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.219.201.25 Aug 25 09:28:02 vps46666688 sshd[12456]: Failed password for invalid user dbadmin from 138.219.201.25 port 57704 ssh2 ... |
2020-08-25 23:45:44 |
| 138.219.201.25 | attack | Invalid user srm from 138.219.201.25 port 38316 |
2020-08-21 18:46:01 |
| 138.219.201.240 | attackspam | Automatic report - Port Scan Attack |
2019-12-28 13:14:07 |
| 138.219.201.13 | attackspam | SMTP/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM - |
2019-07-08 18:56:02 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.219.201.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52867
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;138.219.201.242. IN A
;; AUTHORITY SECTION:
. 503 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 00:08:45 CST 2022
;; MSG SIZE rcvd: 108242.201.219.138.in-addr.arpa domain name pointer porta242.santana.internettelecom.com.br.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
242.201.219.138.in-addr.arpa name = porta242.santana.internettelecom.com.br.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.186.31.83 | attackbots | SSH Brute-Force reported by Fail2Ban |
2020-03-13 03:31:39 |
| 119.226.50.238 | attackspam | Port probing on unauthorized port 445 |
2020-03-13 03:09:50 |
| 51.77.56.9 | attack | suspicious action Thu, 12 Mar 2020 14:06:58 -0300 |
2020-03-13 03:04:15 |
| 37.191.129.217 | attack | Telnet/23 MH Probe, Scan, BF, Hack - |
2020-03-13 03:17:38 |
| 5.228.32.238 | attackbotsspam | 2019-12-04T14:51:29.189Z CLOSE host=5.228.32.238 port=37035 fd=4 time=20.003 bytes=20 ... |
2020-03-13 03:13:55 |
| 49.235.58.208 | attackbotsspam | ... |
2020-03-13 03:04:38 |
| 50.81.153.100 | attackspambots | 2019-11-15T22:16:21.830Z CLOSE host=50.81.153.100 port=56448 fd=4 time=20.020 bytes=23 ... |
2020-03-13 03:10:43 |
| 157.230.123.253 | attackbotsspam | Mar 12 15:17:58 NPSTNNYC01T sshd[22463]: Failed password for root from 157.230.123.253 port 47738 ssh2 Mar 12 15:18:12 NPSTNNYC01T sshd[22470]: Failed password for root from 157.230.123.253 port 56212 ssh2 ... |
2020-03-13 03:25:19 |
| 58.171.34.200 | attackbots | 2019-11-14T21:23:06.150Z CLOSE host=58.171.34.200 port=51879 fd=4 time=30.019 bytes=31 ... |
2020-03-13 02:57:40 |
| 51.89.23.22 | attack | 2020-02-21T00:58:39.091Z CLOSE host=51.89.23.22 port=50868 fd=4 time=20.006 bytes=8 ... |
2020-03-13 03:03:39 |
| 123.58.5.243 | attackbots | Mar 12 13:28:55 v22018076622670303 sshd\[2240\]: Invalid user sammy from 123.58.5.243 port 38825 Mar 12 13:28:55 v22018076622670303 sshd\[2240\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.58.5.243 Mar 12 13:28:57 v22018076622670303 sshd\[2240\]: Failed password for invalid user sammy from 123.58.5.243 port 38825 ssh2 ... |
2020-03-13 03:03:04 |
| 219.140.198.51 | attackbotsspam | Mar 12 16:22:58 localhost sshd\[14836\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.140.198.51 user=root Mar 12 16:22:59 localhost sshd\[14836\]: Failed password for root from 219.140.198.51 port 41924 ssh2 Mar 12 16:28:32 localhost sshd\[16796\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.140.198.51 user=root |
2020-03-13 03:23:39 |
| 54.36.54.24 | attackbots | port |
2020-03-13 02:54:52 |
| 49.88.112.63 | attack | 2019-12-09T05:04:51.616Z CLOSE host=49.88.112.63 port=17433 fd=4 time=20.015 bytes=7 ... |
2020-03-13 03:20:31 |
| 185.175.93.17 | attack | 03/12/2020-12:02:55.561782 185.175.93.17 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2020-03-13 02:58:36 |