City: Angra dos Reis
Region: Rio de Janeiro
Country: Brazil
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 168.194.164.174 | attack | WordPress brute force |
2020-08-25 05:51:07 |
| 168.194.164.202 | attackbotsspam | 23/tcp 23/tcp [2020-05-12/06-30]2pkt |
2020-07-01 15:36:14 |
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 168.194.0.0 - 168.194.255.255
CIDR: 168.194.0.0/16
NetName: LACNIC-ERX-168-194-0-0
NetHandle: NET-168-194-0-0-1
Parent: NET168 (NET-168-0-0-0-0)
NetType: Transferred to LACNIC
OriginAS:
Organization: Latin American and Caribbean IP address Regional Registry (LACNIC)
RegDate: 2010-11-03
Updated: 2010-11-17
Comment: This IP address range is under LACNIC responsibility
Comment: for further allocations to users in LACNIC region.
Comment: Please see http://www.lacnic.net/ for further details,
Comment: or check the WHOIS server located at http://whois.lacnic.net
Ref: https://rdap.arin.net/registry/ip/168.194.0.0
ResourceLink: http://lacnic.net/cgi-bin/lacnic/whois
ResourceLink: whois.lacnic.net
OrgName: Latin American and Caribbean IP address Regional Registry
OrgId: LACNIC
Address: Rambla Republica de Mexico 6125
City: Montevideo
StateProv:
PostalCode: 11400
Country: UY
RegDate: 2002-07-27
Updated: 2018-03-15
Ref: https://rdap.arin.net/registry/entity/LACNIC
ReferralServer: whois://whois.lacnic.net
ResourceLink: http://lacnic.net/cgi-bin/lacnic/whois
OrgTechHandle: LACNIC-ARIN
OrgTechName: LACNIC Whois Info
OrgTechPhone: +598-2604-2222
OrgTechEmail: whois-contact@lacnic.net
OrgTechRef: https://rdap.arin.net/registry/entity/LACNIC-ARIN
OrgAbuseHandle: LWI100-ARIN
OrgAbuseName: LACNIC Whois Info
OrgAbusePhone: +598-2604-2222
OrgAbuseEmail: abuse@lacnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/LWI100-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to whois.lacnic.net.
% IP Client: 124.223.158.242
% Copyright (c) Nic.br - Use of this data is governed by the Use and
% Privacy Policy at https://registro.br/upp . Distribution,
% commercialization, reproduction, and use for advertising or similar
% purposes are expressly prohibited.
% 2026-09-16T01:00:30-03:00 - 124.223.158.242
inetnum: 168.194.164.0/22
aut-num: AS265393
abuse-c: FASOA12
owner: FIRENET SERVI�OS DE TELECOMUNICA��ES LTDA
ownerid: 12.643.873/0001-00
responsible: LUCIANO JORGE
owner-c: FASOA12
tech-c: FASOA12
inetrev: 168.194.164.0/22
nserver: ns1.nexuslinkdatacenter.com.br [lame - not published]
nsstat: 20260914 UH
nslastaa: 20260102
nserver: ns2.nexuslinkdatacenter.com.br [lame - not published]
nsstat: 20260914 UH
nslastaa: 20240611
created: 20160804
changed: 20160804
nic-hdl-br: FASOA12
person: Fabio Soares
created: 20081124
changed: 20250524
% Security and mail abuse issues should also be addressed to cert.br,
% respectivelly to cert@cert.br and mail-abuse@cert.br
%
% whois.registro.br only accepts exact match queries for domains,
% registrants, contacts, tickets, providers, IPs, and ASNs.
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 168.194.164.3
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62889
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;168.194.164.3. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026091501 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 16 12:00:30 CST 2026
;; MSG SIZE rcvd: 106
Host 3.164.194.168.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 3.164.194.168.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 78.130.181.132 | attackbots | Jul 15 02:02:53 django sshd[98772]: reveeclipse mapping checking getaddrinfo for clients-pools.pl.cooolbox.bg [78.130.181.132] failed - POSSIBLE BREAK-IN ATTEMPT! Jul 15 02:02:53 django sshd[98772]: Invalid user kea from 78.130.181.132 Jul 15 02:02:53 django sshd[98772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.130.181.132 Jul 15 02:02:55 django sshd[98772]: Failed password for invalid user kea from 78.130.181.132 port 43648 ssh2 Jul 15 02:02:55 django sshd[98773]: Received disconnect from 78.130.181.132: 11: Bye Bye Jul 15 02:16:41 django sshd[100756]: reveeclipse mapping checking getaddrinfo for clients-pools.pl.cooolbox.bg [78.130.181.132] failed - POSSIBLE BREAK-IN ATTEMPT! Jul 15 02:16:41 django sshd[100756]: Invalid user dm from 78.130.181.132 Jul 15 02:16:41 django sshd[100756]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.130.181.132 Jul 15 02:16:43 django sshd[1007........ ------------------------------- |
2020-07-15 10:18:27 |
| 116.235.131.148 | attackbots | Jul 15 04:55:53 ift sshd\[12015\]: Invalid user mongodb from 116.235.131.148Jul 15 04:55:55 ift sshd\[12015\]: Failed password for invalid user mongodb from 116.235.131.148 port 51426 ssh2Jul 15 05:00:28 ift sshd\[12821\]: Invalid user rose from 116.235.131.148Jul 15 05:00:31 ift sshd\[12821\]: Failed password for invalid user rose from 116.235.131.148 port 44474 ssh2Jul 15 05:05:16 ift sshd\[13480\]: Invalid user shashank from 116.235.131.148 ... |
2020-07-15 10:10:51 |
| 40.87.28.15 | attackbotsspam | Jul 15 04:19:40 ns3164893 sshd[14791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.87.28.15 Jul 15 04:19:41 ns3164893 sshd[14791]: Failed password for invalid user admin from 40.87.28.15 port 54462 ssh2 ... |
2020-07-15 10:23:34 |
| 39.45.49.117 | attackspam | Jul 14 20:23:02 mellenthin postfix/smtpd[18810]: NOQUEUE: reject: RCPT from unknown[39.45.49.117]: 554 5.7.1 Service unavailable; Client host [39.45.49.117] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/39.45.49.117; from= |
2020-07-15 09:47:11 |
| 60.251.121.196 | attackbotsspam | "XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES: |
2020-07-15 09:52:47 |
| 47.92.111.243 | attackspambots | 400 BAD REQUEST |
2020-07-15 10:19:03 |
| 116.233.110.11 | attackbots | Jul 15 01:06:18 zn008 sshd[9363]: Invalid user aboss from 116.233.110.11 Jul 15 01:06:18 zn008 sshd[9363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.233.110.11 Jul 15 01:06:20 zn008 sshd[9363]: Failed password for invalid user aboss from 116.233.110.11 port 56322 ssh2 Jul 15 01:06:20 zn008 sshd[9363]: Received disconnect from 116.233.110.11: 11: Bye Bye [preauth] Jul 15 01:23:50 zn008 sshd[11108]: Invalid user kafka from 116.233.110.11 Jul 15 01:23:50 zn008 sshd[11108]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.233.110.11 Jul 15 01:23:52 zn008 sshd[11108]: Failed password for invalid user kafka from 116.233.110.11 port 49396 ssh2 Jul 15 01:23:52 zn008 sshd[11108]: Received disconnect from 116.233.110.11: 11: Bye Bye [preauth] Jul 15 01:27:41 zn008 sshd[11582]: Invalid user qjx from 116.233.110.11 Jul 15 01:27:41 zn008 sshd[11582]: pam_unix(sshd:auth): authentication fai........ ------------------------------- |
2020-07-15 10:15:59 |
| 159.203.219.38 | attackbots | Jul 15 04:02:12 home sshd[13352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.219.38 Jul 15 04:02:14 home sshd[13352]: Failed password for invalid user abhijit from 159.203.219.38 port 51321 ssh2 Jul 15 04:05:13 home sshd[13703]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.219.38 ... |
2020-07-15 10:15:34 |
| 31.135.107.61 | attackspambots | Port Scan detected! ... |
2020-07-15 09:48:52 |
| 129.45.101.114 | attackbotsspam | "XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES: |
2020-07-15 10:06:45 |
| 222.112.255.124 | attack | Jul 14 22:03:07 NPSTNNYC01T sshd[17698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.112.255.124 Jul 14 22:03:09 NPSTNNYC01T sshd[17698]: Failed password for invalid user cqc from 222.112.255.124 port 53320 ssh2 Jul 14 22:05:16 NPSTNNYC01T sshd[17859]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.112.255.124 ... |
2020-07-15 10:08:55 |
| 213.16.38.11 | attackspam | 5x Failed Password |
2020-07-15 09:58:11 |
| 49.0.64.223 | attack | Honeypot attack, port: 445, PTR: 49-0-64-0.24.fixed-public.tls1b-bcr.myaisfibre.com. |
2020-07-15 09:59:50 |
| 185.220.100.245 | attackspambots | 21 attempts against mh-misbehave-ban on sonic |
2020-07-15 10:15:02 |
| 49.233.208.45 | attackspam | Jul 9 13:27:26 server sshd[1949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.208.45 Jul 9 13:27:28 server sshd[1949]: Failed password for invalid user reno from 49.233.208.45 port 35304 ssh2 Jul 9 13:44:10 server sshd[2938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.208.45 Jul 9 13:44:11 server sshd[2938]: Failed password for invalid user ucpss from 49.233.208.45 port 38114 ssh2 |
2020-07-15 09:50:05 |