City: unknown
Region: unknown
Country: Brazil
Internet Service Provider: Inexa Tecnologia Ltda.
Hostname: unknown
Organization: unknown
Usage Type: Fixed Line ISP
| Type | Details | Datetime |
|---|---|---|
| attackspambots | RDP Brute-Force (Grieskirchen RZ1) |
2019-09-14 19:18:03 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 138.99.194.171 | attackspam | Unauthorized IMAP connection attempt |
2020-08-16 17:59:45 |
| 138.99.194.219 | attackspambots | Unauthorized IMAP connection attempt |
2020-08-08 14:28:24 |
| 138.99.195.162 | attackspambots | Suspicious access to SMTP/POP/IMAP services. |
2020-07-19 22:36:15 |
| 138.99.194.19 | attackspambots | Lines containing failures of 138.99.194.19 Jun 22 13:43:43 keyhelp sshd[12049]: Invalid user admin from 138.99.194.19 port 54273 Jun 22 13:43:43 keyhelp sshd[12049]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.194.19 Jun 22 13:43:45 keyhelp sshd[12049]: Failed password for invalid user admin from 138.99.194.19 port 54273 ssh2 Jun 22 13:43:45 keyhelp sshd[12049]: Connection closed by invalid user admin 138.99.194.19 port 54273 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=138.99.194.19 |
2020-06-22 22:47:12 |
| 138.99.194.230 | attackspam | Unauthorized IMAP connection attempt |
2020-06-18 19:48:26 |
| 138.99.194.69 | attackspam | Invalid user admin from 138.99.194.69 port 56621 |
2020-06-18 06:45:04 |
| 138.99.194.82 | attackspambots | Jun 10 21:51:18 Host-KLAX-C postfix/submission/smtpd[6055]: lost connection after CONNECT from unknown[138.99.194.82] ... |
2020-06-11 17:53:52 |
| 138.99.194.49 | attack | Invalid user admin from 138.99.194.49 port 40866 |
2020-05-29 02:06:48 |
| 138.99.195.179 | attackspambots | May 28 13:52:39 xeon postfix/smtpd[6206]: warning: unknown[138.99.195.179]: SASL LOGIN authentication failed: authentication failure |
2020-05-29 01:08:40 |
| 138.99.190.233 | attack | Unauthorized connection attempt detected from IP address 138.99.190.233 to port 80 [J] |
2020-03-02 03:47:38 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.99.19.243
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31597
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.99.19.243. IN A
;; AUTHORITY SECTION:
. 1941 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019091400 1800 900 604800 86400
;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Sep 14 19:17:58 CST 2019
;; MSG SIZE rcvd: 117Host 243.19.99.138.in-addr.arpa. not found: 3(NXDOMAIN)Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 243.19.99.138.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 103.31.54.72 | attackspam | " " |
2019-09-15 14:55:54 |
| 51.15.87.199 | attackbotsspam | F2B jail: sshd. Time: 2019-09-15 07:11:45, Reported by: VKReport |
2019-09-15 15:02:02 |
| 157.55.39.70 | attackbots | Automatic report - Banned IP Access |
2019-09-15 14:17:29 |
| 188.213.172.204 | attack | Sep 15 01:56:46 vps200512 sshd\[25591\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.213.172.204 user=root Sep 15 01:56:49 vps200512 sshd\[25591\]: Failed password for root from 188.213.172.204 port 59494 ssh2 Sep 15 02:01:03 vps200512 sshd\[25672\]: Invalid user test from 188.213.172.204 Sep 15 02:01:03 vps200512 sshd\[25672\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.213.172.204 Sep 15 02:01:06 vps200512 sshd\[25672\]: Failed password for invalid user test from 188.213.172.204 port 48542 ssh2 |
2019-09-15 15:05:38 |
| 119.96.221.11 | attackbots | Sep 15 02:10:34 web1 postfix/smtpd[12918]: warning: unknown[119.96.221.11]: SASL LOGIN authentication failed: authentication failure ... |
2019-09-15 14:22:32 |
| 51.144.160.217 | attack | Reported by AbuseIPDB proxy server. |
2019-09-15 14:18:12 |
| 222.186.175.8 | attackbots | Sep 15 08:09:45 rotator sshd\[17183\]: Failed password for root from 222.186.175.8 port 18378 ssh2Sep 15 08:09:47 rotator sshd\[17183\]: Failed password for root from 222.186.175.8 port 18378 ssh2Sep 15 08:09:49 rotator sshd\[17183\]: Failed password for root from 222.186.175.8 port 18378 ssh2Sep 15 08:09:51 rotator sshd\[17183\]: Failed password for root from 222.186.175.8 port 18378 ssh2Sep 15 08:09:53 rotator sshd\[17183\]: Failed password for root from 222.186.175.8 port 18378 ssh2Sep 15 08:09:55 rotator sshd\[17183\]: Failed password for root from 222.186.175.8 port 18378 ssh2 ... |
2019-09-15 15:00:16 |
| 194.36.174.15 | attackspambots | Automatic report - Banned IP Access |
2019-09-15 14:20:31 |
| 51.38.237.78 | attack | Sep 14 20:14:18 web9 sshd\[19469\]: Invalid user dominik from 51.38.237.78 Sep 14 20:14:18 web9 sshd\[19469\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.237.78 Sep 14 20:14:20 web9 sshd\[19469\]: Failed password for invalid user dominik from 51.38.237.78 port 60752 ssh2 Sep 14 20:23:09 web9 sshd\[21125\]: Invalid user usuario from 51.38.237.78 Sep 14 20:23:09 web9 sshd\[21125\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.237.78 |
2019-09-15 14:33:23 |
| 31.41.113.113 | attackbots | Sep 15 04:54:32 mail kernel: [2486396.005096] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=31.41.113.113 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=51993 PROTO=TCP SPT=56071 DPT=9797 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-09-15 15:02:34 |
| 218.92.0.187 | attackbotsspam | Sep 15 01:21:46 aat-srv002 sshd[1880]: Failed password for root from 218.92.0.187 port 7080 ssh2 Sep 15 01:21:59 aat-srv002 sshd[1880]: error: maximum authentication attempts exceeded for root from 218.92.0.187 port 7080 ssh2 [preauth] Sep 15 01:22:04 aat-srv002 sshd[1890]: Failed password for root from 218.92.0.187 port 13366 ssh2 Sep 15 01:22:18 aat-srv002 sshd[1890]: error: maximum authentication attempts exceeded for root from 218.92.0.187 port 13366 ssh2 [preauth] ... |
2019-09-15 15:07:14 |
| 200.150.87.131 | attackbotsspam | Sep 14 23:53:54 vps200512 sshd\[23665\]: Invalid user tesna from 200.150.87.131 Sep 14 23:53:54 vps200512 sshd\[23665\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.150.87.131 Sep 14 23:53:56 vps200512 sshd\[23665\]: Failed password for invalid user tesna from 200.150.87.131 port 52146 ssh2 Sep 14 23:59:15 vps200512 sshd\[23756\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.150.87.131 user=root Sep 14 23:59:17 vps200512 sshd\[23756\]: Failed password for root from 200.150.87.131 port 40082 ssh2 |
2019-09-15 14:56:54 |
| 159.203.193.245 | attackbots | 400 BAD REQUEST |
2019-09-15 14:36:29 |
| 118.24.135.240 | attackbotsspam | Sep 15 02:07:57 xtremcommunity sshd\[100606\]: Invalid user sqlexec from 118.24.135.240 port 57982 Sep 15 02:07:57 xtremcommunity sshd\[100606\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.135.240 Sep 15 02:07:59 xtremcommunity sshd\[100606\]: Failed password for invalid user sqlexec from 118.24.135.240 port 57982 ssh2 Sep 15 02:12:05 xtremcommunity sshd\[100786\]: Invalid user monitoring from 118.24.135.240 port 44822 Sep 15 02:12:05 xtremcommunity sshd\[100786\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.135.240 ... |
2019-09-15 14:22:55 |
| 151.243.22.14 | attackspambots | " " |
2019-09-15 14:42:23 |