City: Jaboticabal
Region: Sao Paulo
Country: Brazil
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.99.48.112
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10068
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;138.99.48.112. IN A
;; AUTHORITY SECTION:
. 246 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023052700 1800 900 604800 86400
;; Query time: 74 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 27 16:16:14 CST 2023
;; MSG SIZE rcvd: 106112.48.99.138.in-addr.arpa domain name pointer 138-99-48-112.customer.invistanet.com.br.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
112.48.99.138.in-addr.arpa name = 138-99-48-112.customer.invistanet.com.br.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.34.14.143 | attack | [ThuMay1414:25:33.1508512020][:error][pid11267:tid47500696602368][client45.34.14.143:56566][client45.34.14.143]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\(\?:/index\\\\\\\\.php/admin/catalog_category/save\|\(\?:/admin/stats\|/css/gallery-css\)\\\\\\\\.php\\\\\\\\\?1=1\|/admin\\\\\\\\.php\\\\\\\\\?tile=mail\$\|/catalog_category/save/key/\|/\\\\\\\\\?op=admin_settings\|\^/\\\\\\\\\?openpage=\|\^/admin/extra\|\^/node/[0-9] /edit\\\\\\\\\?destination=admin/content\|\^/administ..."against"REQUEST_URI"required.[file"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf"][line"321"][id"340145"][rev"43"][msg"Atomicorp.comWAFRules:AttackBlocked-SQLinjectionprobe"][data"1=1"][severity"CRITICAL"][tag"SQLi"][hostname"ilgiornaledelticino.ch"][uri"/category/economia/page/28/"][unique_id"Xr04vcg5N4JJXz9Qe5ah1QAAgRI"][ThuMay1414:25:43.6130822020][:error][pid11382:tid47500711311104][client45.34.14.143:56587][client45.34.14.143]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\(\?:/ |
2020-05-14 23:47:26 |
| 217.23.67.98 | attackbotsspam | " " |
2020-05-14 23:17:40 |
| 212.64.16.31 | attackbots | May 14 14:20:31 dev0-dcde-rnet sshd[10895]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.16.31 May 14 14:20:33 dev0-dcde-rnet sshd[10895]: Failed password for invalid user ftpuser from 212.64.16.31 port 40644 ssh2 May 14 14:25:42 dev0-dcde-rnet sshd[10942]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.16.31 |
2020-05-14 23:50:46 |
| 45.143.223.32 | attackbots | Fail2Ban Ban Triggered |
2020-05-14 23:09:08 |
| 189.57.73.18 | attack | May 14 15:51:58 xeon sshd[11834]: Failed password for invalid user admin from 189.57.73.18 port 6305 ssh2 |
2020-05-14 23:06:52 |
| 222.186.175.167 | attack | May 14 17:32:09 legacy sshd[355]: Failed password for root from 222.186.175.167 port 3026 ssh2 May 14 17:32:15 legacy sshd[355]: Failed password for root from 222.186.175.167 port 3026 ssh2 May 14 17:32:26 legacy sshd[355]: error: maximum authentication attempts exceeded for root from 222.186.175.167 port 3026 ssh2 [preauth] ... |
2020-05-14 23:41:08 |
| 118.25.96.30 | attack | May 14 14:07:29 124388 sshd[18329]: Invalid user gma from 118.25.96.30 port 59189 May 14 14:07:29 124388 sshd[18329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.96.30 May 14 14:07:29 124388 sshd[18329]: Invalid user gma from 118.25.96.30 port 59189 May 14 14:07:31 124388 sshd[18329]: Failed password for invalid user gma from 118.25.96.30 port 59189 ssh2 May 14 14:11:16 124388 sshd[18398]: Invalid user admin from 118.25.96.30 port 39530 |
2020-05-14 23:44:24 |
| 220.134.3.173 | attack | scan z |
2020-05-14 23:07:44 |
| 14.177.47.94 | attackspambots | May 12 18:48:42 our-server-hostname sshd[24589]: Address 14.177.47.94 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! May 12 18:48:42 our-server-hostname sshd[24589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.177.47.94 user=r.r May 12 18:48:44 our-server-hostname sshd[24589]: Failed password for r.r from 14.177.47.94 port 56886 ssh2 May 12 18:57:20 our-server-hostname sshd[26108]: Address 14.177.47.94 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! May 12 18:57:20 our-server-hostname sshd[26108]: Invalid user legend from 14.177.47.94 May 12 18:57:20 our-server-hostname sshd[26108]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.177.47.94 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=14.177.47.94 |
2020-05-14 23:32:36 |
| 31.184.199.114 | attackspam | May 14 17:06:32 prod4 sshd\[29839\]: Invalid user 22 from 31.184.199.114 May 14 17:06:34 prod4 sshd\[29839\]: Failed password for invalid user 22 from 31.184.199.114 port 20653 ssh2 May 14 17:06:54 prod4 sshd\[29887\]: Invalid user 22 from 31.184.199.114 ... |
2020-05-14 23:21:13 |
| 222.174.150.50 | attackbotsspam | SMB Server BruteForce Attack |
2020-05-14 23:12:57 |
| 51.68.109.87 | attackbotsspam | May 14 17:53:39 lukav-desktop sshd\[20524\]: Invalid user postgres from 51.68.109.87 May 14 17:53:39 lukav-desktop sshd\[20524\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.109.87 May 14 17:53:42 lukav-desktop sshd\[20524\]: Failed password for invalid user postgres from 51.68.109.87 port 56820 ssh2 May 14 17:57:29 lukav-desktop sshd\[20568\]: Invalid user oracle from 51.68.109.87 May 14 17:57:29 lukav-desktop sshd\[20568\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.109.87 |
2020-05-14 23:13:21 |
| 118.27.9.229 | attackspam | May 14 15:26:45 legacy sshd[26824]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.27.9.229 May 14 15:26:47 legacy sshd[26824]: Failed password for invalid user jason4 from 118.27.9.229 port 34424 ssh2 May 14 15:30:47 legacy sshd[27046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.27.9.229 ... |
2020-05-14 23:03:52 |
| 173.212.213.46 | attackspam | [portscan] Port scan |
2020-05-14 23:43:50 |
| 118.165.69.212 | attack | scan z |
2020-05-14 23:36:10 |