City: Cascavel
Region: Parana
Country: Brazil
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.99.248.165
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6938
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;138.99.248.165. IN A
;; AUTHORITY SECTION:
. 285 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400
;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 08:01:47 CST 2022
;; MSG SIZE rcvd: 107Host 165.248.99.138.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 165.248.99.138.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 203.213.67.30 | attack | Aug 29 21:30:47 MK-Soft-VM5 sshd\[31550\]: Invalid user mick from 203.213.67.30 port 32826 Aug 29 21:30:47 MK-Soft-VM5 sshd\[31550\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.213.67.30 Aug 29 21:30:49 MK-Soft-VM5 sshd\[31550\]: Failed password for invalid user mick from 203.213.67.30 port 32826 ssh2 ... |
2019-08-30 08:42:33 |
| 222.45.16.245 | botsattack | 222.45.16.245 - - [30/Aug/2019:09:20:29 +0800] "POST /otsmobile/app/mgs/mgw.htm HTTP/1.1" 404 152 "-" "android" 222.45.16.245 - - [30/Aug/2019:09:20:28 +0800] "GET /otsmobile/app/mgs/mgw.htm?operationType=com.cars.otsmobile.queryLeftTicket&requestData=%5B%7B%22train_date%22%3A%2220190909%22%2C%22purpose_codes%22%3A%2200%22%2C%22from_station%22%3A%22PIJ%22%2C%22to_st ation%22%3A%22POJ%22%2C%22station_train_code%22%3A%22%22%2C%22start_time_begin%22%3A%220000%22%2C%22start_time_end%22%3A%222400%22%2C%22train_headers%22%3A%22QB%23%22%2C%22train_flag%22%3A%22%22%2C%22seat_type%22%3A%22%22%2C%22seatBack_Type%22%3A%22%22%2C% 22ticket_num%22%3A%22%22%2C%22dfpStr%22%3A%22%22%2C%22baseDTO%22%3A%7B%22check_code%22%3A%2295f49a995d3a27ce268a4c4c29bd8086%22%2C%22device_no%22%3A%22VXB5FpLAgeUDAF9qiX5olHvl%22%2C%22mobile_no%22%3A%22%22%2C%22os_type%22%3A%22a%22%2C%22time_str%22%3A%2220 190830092028%22%2C%22user_name%22%3A%22%22%2C%22version_no%22%3A%224.2.10%22%7D%7D%5D&ts=1567128028750&sign= HTTP/1.1" 404 152 "-" "Go-http-client/1.1" |
2019-08-30 09:22:47 |
| 194.15.36.33 | attackbots | "Fail2Ban detected SSH brute force attempt" |
2019-08-30 09:00:44 |
| 2.42.193.48 | attackbotsspam | 2019-08-30T00:48:18.808701abusebot-2.cloudsearch.cf sshd\[3804\]: Invalid user lxy from 2.42.193.48 port 50751 |
2019-08-30 09:17:45 |
| 51.77.52.216 | attack | Invalid user user from 51.77.52.216 port 45117 |
2019-08-30 09:26:52 |
| 187.108.236.173 | attackspambots | Aug 29 22:21:16 xeon postfix/smtpd[38077]: warning: unknown[187.108.236.173]: SASL PLAIN authentication failed: authentication failure |
2019-08-30 09:04:16 |
| 217.38.158.180 | attackspambots | Invalid user web1 from 217.38.158.180 port 50254 |
2019-08-30 09:25:05 |
| 202.88.241.107 | attackbots | Fail2Ban - SSH Bruteforce Attempt |
2019-08-30 09:09:56 |
| 213.148.213.99 | attackspambots | Aug 29 23:44:13 vps691689 sshd[9091]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.148.213.99 Aug 29 23:44:15 vps691689 sshd[9091]: Failed password for invalid user adelia from 213.148.213.99 port 45586 ssh2 ... |
2019-08-30 09:16:24 |
| 116.196.83.179 | attackbotsspam | Aug 30 01:21:20 heissa sshd\[26434\]: Invalid user mit from 116.196.83.179 port 52414 Aug 30 01:21:20 heissa sshd\[26434\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.83.179 Aug 30 01:21:22 heissa sshd\[26434\]: Failed password for invalid user mit from 116.196.83.179 port 52414 ssh2 Aug 30 01:25:46 heissa sshd\[26890\]: Invalid user berit from 116.196.83.179 port 44238 Aug 30 01:25:46 heissa sshd\[26890\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.83.179 |
2019-08-30 09:21:40 |
| 51.38.234.250 | attackspam | Aug 30 02:31:04 dev0-dcfr-rnet sshd[22489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.234.250 Aug 30 02:31:07 dev0-dcfr-rnet sshd[22489]: Failed password for invalid user tester from 51.38.234.250 port 60246 ssh2 Aug 30 02:34:50 dev0-dcfr-rnet sshd[22514]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.234.250 |
2019-08-30 09:22:50 |
| 51.255.109.168 | attackspam | Automatic report - Banned IP Access |
2019-08-30 08:52:41 |
| 204.8.156.142 | attackspam | Invalid user user from 204.8.156.142 port 40558 |
2019-08-30 09:10:58 |
| 189.252.170.66 | attackspambots | scan z |
2019-08-30 09:19:50 |
| 121.17.149.70 | attackspam | Unauthorised access (Aug 29) SRC=121.17.149.70 LEN=40 TTL=49 ID=16212 TCP DPT=8080 WINDOW=31574 SYN Unauthorised access (Aug 29) SRC=121.17.149.70 LEN=40 TTL=49 ID=49907 TCP DPT=8080 WINDOW=35813 SYN Unauthorised access (Aug 29) SRC=121.17.149.70 LEN=40 TTL=49 ID=23634 TCP DPT=8080 WINDOW=42999 SYN Unauthorised access (Aug 29) SRC=121.17.149.70 LEN=40 TTL=49 ID=39824 TCP DPT=8080 WINDOW=22791 SYN Unauthorised access (Aug 28) SRC=121.17.149.70 LEN=40 TTL=49 ID=47931 TCP DPT=8080 WINDOW=35813 SYN |
2019-08-30 08:44:28 |