City: Suzano
Region: Sao Paulo
Country: Brazil
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% IP Client: 124.223.158.242
% Copyright (c) Nic.br - Use of this data is governed by the Use and
% Privacy Policy at https://registro.br/upp . Distribution,
% commercialization, reproduction, and use for advertising or similar
% purposes are expressly prohibited.
% 2026-11-02T02:35:24-03:00 - 124.223.158.242
inetnum: 177.96.0.0/14
aut-num: AS18881
abuse-c: CSTBR
owner: TELEF�NICA BRASIL S.A
ownerid: 02.558.157/0001-62
responsible: Diretoria de Planejamento e Tecnologia
owner-c: ARITE
tech-c: GVO6
inetrev: 177.96.0.0/15
nserver: dns1.gvt.net.br
nsstat: 20261031 AA
nslastaa: 20261031
nserver: dns2.gvt.net.br
nsstat: 20261031 AA
nslastaa: 20261031
nserver: dns3.gvt.net.br
nsstat: 20261031 AA
nslastaa: 20261031
created: 20110922
changed: 20160909
nic-hdl-br: ARITE
person: Administra��o Rede IP Telesp
created: 20080407
changed: 20230629
nic-hdl-br: CSTBR
person: CSIRT TELEFONICA BR
created: 20180713
changed: 20180713
nic-hdl-br: GVO6
person: GVT Operacao
created: 20010613
changed: 20220331
% Security and mail abuse issues should also be addressed to cert.br,
% respectivelly to cert@cert.br and mail-abuse@cert.br
%
% whois.registro.br only accepts exact match queries for domains,
% registrants, contacts, tickets, providers, IPs, and ASNs.
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 177.96.106.81
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37786
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;177.96.106.81. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026110102 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Nov 02 13:35:24 CST 2026
;; MSG SIZE rcvd: 106
81.106.96.177.in-addr.arpa domain name pointer 177.96.106.81.dynamic.adsl.gvt.net.br.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
81.106.96.177.in-addr.arpa name = 177.96.106.81.dynamic.adsl.gvt.net.br.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 63.80.184.134 | attackbots | Nov 17 07:43:59 smtp postfix/smtpd[56286]: NOQUEUE: reject: RCPT from partly.sapuxfiori.com[63.80.184.134]: 554 5.7.1 Service unavailable; Client host [63.80.184.134] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= |
2019-11-17 14:44:16 |
| 60.220.230.21 | attack | Nov 17 01:49:42 plusreed sshd[16182]: Invalid user ratuschny from 60.220.230.21 ... |
2019-11-17 15:01:56 |
| 177.16.146.55 | attackbotsspam | Automatic report - Port Scan Attack |
2019-11-17 15:09:13 |
| 220.92.16.86 | attackbots | Invalid user deploy from 220.92.16.86 port 52640 |
2019-11-17 14:17:04 |
| 193.91.125.249 | attackbotsspam | Automatic report - Banned IP Access |
2019-11-17 14:21:33 |
| 14.106.107.122 | attackspambots | badbot |
2019-11-17 14:19:07 |
| 222.186.175.155 | attack | Nov 17 08:06:22 v22018086721571380 sshd[12171]: error: maximum authentication attempts exceeded for root from 222.186.175.155 port 56682 ssh2 [preauth] |
2019-11-17 15:09:43 |
| 45.76.14.192 | attack | notenschluessel-fulda.de 45.76.14.192 [17/Nov/2019:07:29:41 +0100] "POST /wp-login.php HTTP/1.1" 200 6506 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" notenschluessel-fulda.de 45.76.14.192 [17/Nov/2019:07:29:42 +0100] "POST /wp-login.php HTTP/1.1" 200 6466 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-11-17 14:57:45 |
| 189.163.157.56 | attack | Automatic report - Port Scan Attack |
2019-11-17 14:18:25 |
| 50.116.123.103 | attack | 5x Failed Password |
2019-11-17 14:48:31 |
| 49.235.42.19 | attack | Nov 17 11:37:37 vibhu-HP-Z238-Microtower-Workstation sshd\[23232\]: Invalid user tropeano from 49.235.42.19 Nov 17 11:37:37 vibhu-HP-Z238-Microtower-Workstation sshd\[23232\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.42.19 Nov 17 11:37:39 vibhu-HP-Z238-Microtower-Workstation sshd\[23232\]: Failed password for invalid user tropeano from 49.235.42.19 port 41080 ssh2 Nov 17 11:42:31 vibhu-HP-Z238-Microtower-Workstation sshd\[23623\]: Invalid user dresden from 49.235.42.19 Nov 17 11:42:31 vibhu-HP-Z238-Microtower-Workstation sshd\[23623\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.42.19 ... |
2019-11-17 14:16:28 |
| 104.236.124.45 | attack | Nov 17 08:56:44 microserver sshd[981]: Invalid user andie from 104.236.124.45 port 34925 Nov 17 08:56:44 microserver sshd[981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.124.45 Nov 17 08:56:46 microserver sshd[981]: Failed password for invalid user andie from 104.236.124.45 port 34925 ssh2 Nov 17 09:04:23 microserver sshd[1822]: Invalid user moehl from 104.236.124.45 port 44684 Nov 17 09:04:23 microserver sshd[1822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.124.45 Nov 17 09:19:09 microserver sshd[3796]: Invalid user tason from 104.236.124.45 port 35844 Nov 17 09:19:09 microserver sshd[3796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.124.45 Nov 17 09:19:11 microserver sshd[3796]: Failed password for invalid user tason from 104.236.124.45 port 35844 ssh2 Nov 17 09:26:27 microserver sshd[4977]: Invalid user rohrmann from 104.236.124.45 port 44600 Nov 1 |
2019-11-17 15:09:59 |
| 101.78.209.39 | attackbotsspam | Nov 16 21:00:29 hpm sshd\[29651\]: Invalid user webmaster from 101.78.209.39 Nov 16 21:00:29 hpm sshd\[29651\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.78.209.39 Nov 16 21:00:31 hpm sshd\[29651\]: Failed password for invalid user webmaster from 101.78.209.39 port 36911 ssh2 Nov 16 21:04:26 hpm sshd\[29977\]: Invalid user tarnutzer from 101.78.209.39 Nov 16 21:04:26 hpm sshd\[29977\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.78.209.39 |
2019-11-17 15:08:54 |
| 78.187.11.158 | attack | Automatic report - Banned IP Access |
2019-11-17 14:47:46 |
| 88.247.250.201 | attackspam | Nov 17 07:46:44 vps666546 sshd\[22247\]: Invalid user mysql from 88.247.250.201 port 64199 Nov 17 07:46:44 vps666546 sshd\[22247\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.247.250.201 Nov 17 07:46:46 vps666546 sshd\[22247\]: Failed password for invalid user mysql from 88.247.250.201 port 64199 ssh2 Nov 17 07:50:53 vps666546 sshd\[22339\]: Invalid user motwani from 88.247.250.201 port 25898 Nov 17 07:50:53 vps666546 sshd\[22339\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.247.250.201 ... |
2019-11-17 14:58:25 |