City: unknown
Region: unknown
Country: Brazil
Internet Service Provider: G20 Telecomunicacoes Ltda
Hostname: unknown
Organization: unknown
Usage Type: Commercial
| Type | Details | Datetime |
|---|---|---|
| attackspambots | [ER hit] Tried to deliver spam. Already well known. |
2019-08-11 14:12:35 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 138.97.42.202 | attack | 2020-05-21T16:44:01.507630abusebot-4.cloudsearch.cf sshd[5675]: Invalid user qdyh from 138.97.42.202 port 39250 2020-05-21T16:44:01.514759abusebot-4.cloudsearch.cf sshd[5675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.42.202 2020-05-21T16:44:01.507630abusebot-4.cloudsearch.cf sshd[5675]: Invalid user qdyh from 138.97.42.202 port 39250 2020-05-21T16:44:03.874162abusebot-4.cloudsearch.cf sshd[5675]: Failed password for invalid user qdyh from 138.97.42.202 port 39250 ssh2 2020-05-21T16:47:08.712559abusebot-4.cloudsearch.cf sshd[5831]: Invalid user nab from 138.97.42.202 port 47584 2020-05-21T16:47:08.720194abusebot-4.cloudsearch.cf sshd[5831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.42.202 2020-05-21T16:47:08.712559abusebot-4.cloudsearch.cf sshd[5831]: Invalid user nab from 138.97.42.202 port 47584 2020-05-21T16:47:10.417307abusebot-4.cloudsearch.cf sshd[5831]: Failed password for i ... |
2020-05-22 03:11:42 |
| 138.97.42.202 | attack | May 9 02:12:12 h1745522 sshd[14414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.42.202 user=root May 9 02:12:13 h1745522 sshd[14414]: Failed password for root from 138.97.42.202 port 55770 ssh2 May 9 02:14:03 h1745522 sshd[14437]: Invalid user administrador from 138.97.42.202 port 48380 May 9 02:14:03 h1745522 sshd[14437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.42.202 May 9 02:14:03 h1745522 sshd[14437]: Invalid user administrador from 138.97.42.202 port 48380 May 9 02:14:05 h1745522 sshd[14437]: Failed password for invalid user administrador from 138.97.42.202 port 48380 ssh2 May 9 02:15:54 h1745522 sshd[14488]: Invalid user futures from 138.97.42.202 port 40958 May 9 02:15:54 h1745522 sshd[14488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.42.202 May 9 02:15:54 h1745522 sshd[14488]: Invalid user futures from 138.97.4 ... |
2020-05-09 19:36:02 |
| 138.97.42.202 | attackspambots | May 7 11:30:39 ns382633 sshd\[555\]: Invalid user tester from 138.97.42.202 port 53680 May 7 11:30:39 ns382633 sshd\[555\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.42.202 May 7 11:30:41 ns382633 sshd\[555\]: Failed password for invalid user tester from 138.97.42.202 port 53680 ssh2 May 7 11:32:56 ns382633 sshd\[824\]: Invalid user harvey from 138.97.42.202 port 51610 May 7 11:32:56 ns382633 sshd\[824\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.42.202 |
2020-05-07 18:12:04 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.97.42.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30812
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.97.42.2. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019081100 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Aug 11 14:12:16 CST 2019
;; MSG SIZE rcvd: 1152.42.97.138.in-addr.arpa domain name pointer Pool-2.42.97.138.g20telecom.net.br.Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
2.42.97.138.in-addr.arpa name = Pool-2.42.97.138.g20telecom.net.br.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 118.168.7.90 | attack | Unauthorized connection attempt detected from IP address 118.168.7.90 to port 4567 [J] |
2020-01-22 23:27:33 |
| 59.126.26.55 | attack | Unauthorized connection attempt detected from IP address 59.126.26.55 to port 4567 [J] |
2020-01-22 23:09:55 |
| 212.253.86.36 | attack | Unauthorized connection attempt detected from IP address 212.253.86.36 to port 81 [J] |
2020-01-22 23:41:58 |
| 77.96.11.28 | attackspambots | Unauthorized connection attempt detected from IP address 77.96.11.28 to port 23 [J] |
2020-01-22 23:36:17 |
| 18.223.132.57 | attackspam | Unauthorized connection attempt detected from IP address 18.223.132.57 to port 2220 [J] |
2020-01-22 23:40:29 |
| 187.108.220.105 | attack | Unauthorized connection attempt detected from IP address 187.108.220.105 to port 88 [J] |
2020-01-22 23:47:56 |
| 211.230.94.226 | attack | Unauthorized connection attempt detected from IP address 211.230.94.226 to port 4567 [J] |
2020-01-22 23:16:20 |
| 123.109.100.146 | attackspambots | Unauthorized connection attempt detected from IP address 123.109.100.146 to port 8081 [J] |
2020-01-22 23:26:12 |
| 99.252.164.74 | attackspambots | Unauthorized connection attempt detected from IP address 99.252.164.74 to port 81 [J] |
2020-01-22 23:33:15 |
| 220.135.85.244 | attackbots | Unauthorized connection attempt detected from IP address 220.135.85.244 to port 4567 [J] |
2020-01-22 23:16:03 |
| 41.39.70.95 | attackspam | Unauthorized connection attempt detected from IP address 41.39.70.95 to port 1433 [J] |
2020-01-22 23:12:23 |
| 62.85.52.124 | attack | Unauthorized connection attempt detected from IP address 62.85.52.124 to port 5555 [J] |
2020-01-22 23:37:28 |
| 42.119.214.66 | attackspambots | Unauthorized connection attempt detected from IP address 42.119.214.66 to port 23 [T] |
2020-01-22 23:10:54 |
| 49.233.92.166 | attackspambots | Unauthorized connection attempt detected from IP address 49.233.92.166 to port 2220 [J] |
2020-01-22 23:38:59 |
| 37.191.232.6 | attackbots | Unauthorized connection attempt detected from IP address 37.191.232.6 to port 5555 [J] |
2020-01-22 23:12:49 |