City: Paulinia
Region: Sao Paulo
Country: Brazil
Internet Service Provider: unknown
Hostname: unknown
Organization: TELEFÔNICA BRASIL S.A
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 201.42.194.66 | attackbots | Unauthorized connection attempt from IP address 201.42.194.66 on Port 445(SMB) |
2020-08-25 05:31:44 |
| 201.42.19.230 | attack | 1576823337 - 12/20/2019 07:28:57 Host: 201.42.19.230/201.42.19.230 Port: 445 TCP Blocked |
2019-12-20 16:21:56 |
| 201.42.194.14 | attackbotsspam | Oct 2 07:11:47 taivassalofi sshd[113257]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.42.194.14 Oct 2 07:11:49 taivassalofi sshd[113257]: Failed password for invalid user carter from 201.42.194.14 port 33925 ssh2 ... |
2019-10-02 12:57:20 |
| 201.42.194.14 | attack | Sep 28 12:20:36 auw2 sshd\[7400\]: Invalid user aguiar from 201.42.194.14 Sep 28 12:20:36 auw2 sshd\[7400\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201-42-194-14.dsl.telesp.net.br Sep 28 12:20:38 auw2 sshd\[7400\]: Failed password for invalid user aguiar from 201.42.194.14 port 39243 ssh2 Sep 28 12:25:19 auw2 sshd\[7815\]: Invalid user nimda123 from 201.42.194.14 Sep 28 12:25:19 auw2 sshd\[7815\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201-42-194-14.dsl.telesp.net.br |
2019-09-29 06:34:50 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 201.42.19.3
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60427
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;201.42.19.3. IN A
;; AUTHORITY SECTION:
. 3183 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019040801 1800 900 604800 86400
;; Query time: 0 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Tue Apr 09 02:37:29 +08 2019
;; MSG SIZE rcvd: 115
3.19.42.201.in-addr.arpa domain name pointer 201-42-19-3.dsl.telesp.net.br.
Server: 67.207.67.3
Address: 67.207.67.3#53
Non-authoritative answer:
3.19.42.201.in-addr.arpa name = 201-42-19-3.dsl.telesp.net.br.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 85.209.41.238 | attackbots | Persistent port scanning [31 denied] |
2020-10-11 21:04:25 |
| 174.219.130.141 | attack | Brute forcing email accounts |
2020-10-11 21:19:46 |
| 147.50.135.171 | attack | Oct 11 09:48:49 jumpserver sshd[55294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.50.135.171 user=root Oct 11 09:48:51 jumpserver sshd[55294]: Failed password for root from 147.50.135.171 port 57980 ssh2 Oct 11 09:53:13 jumpserver sshd[55363]: Invalid user almir from 147.50.135.171 port 34228 ... |
2020-10-11 21:02:55 |
| 45.55.36.216 | attackbotsspam | Oct 11 02:03:43 v22019038103785759 sshd\[10274\]: Invalid user testwww from 45.55.36.216 port 53922 Oct 11 02:03:44 v22019038103785759 sshd\[10274\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.36.216 Oct 11 02:03:46 v22019038103785759 sshd\[10274\]: Failed password for invalid user testwww from 45.55.36.216 port 53922 ssh2 Oct 11 02:10:21 v22019038103785759 sshd\[10990\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.36.216 user=root Oct 11 02:10:23 v22019038103785759 sshd\[10990\]: Failed password for root from 45.55.36.216 port 46678 ssh2 ... |
2020-10-11 21:17:43 |
| 177.124.1.199 | attackbotsspam | Attempts against non-existent wp-login |
2020-10-11 20:48:51 |
| 119.45.213.69 | attackbotsspam | SSH login attempts. |
2020-10-11 21:01:18 |
| 61.133.232.253 | attack | SSH login attempts. |
2020-10-11 21:01:50 |
| 203.251.11.118 | attackbotsspam | 2020-10-11T09:32:11.076946server.espacesoutien.com sshd[32223]: Failed password for invalid user sales from 203.251.11.118 port 34104 ssh2 2020-10-11T09:36:12.046147server.espacesoutien.com sshd[448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.251.11.118 user=root 2020-10-11T09:36:13.270465server.espacesoutien.com sshd[448]: Failed password for root from 203.251.11.118 port 39548 ssh2 2020-10-11T09:40:10.615287server.espacesoutien.com sshd[1231]: Invalid user james from 203.251.11.118 port 45006 ... |
2020-10-11 21:18:13 |
| 122.51.206.41 | attackspambots | Oct 11 13:49:40 abendstille sshd\[28748\]: Invalid user mask from 122.51.206.41 Oct 11 13:49:40 abendstille sshd\[28748\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.206.41 Oct 11 13:49:43 abendstille sshd\[28748\]: Failed password for invalid user mask from 122.51.206.41 port 52232 ssh2 Oct 11 13:54:20 abendstille sshd\[1375\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.206.41 user=root Oct 11 13:54:22 abendstille sshd\[1375\]: Failed password for root from 122.51.206.41 port 48010 ssh2 ... |
2020-10-11 21:20:03 |
| 104.248.147.78 | attack | 2020-10-11T07:22:50.363081mail.broermann.family sshd[18309]: Invalid user rene from 104.248.147.78 port 37094 2020-10-11T07:22:50.371345mail.broermann.family sshd[18309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.147.78 2020-10-11T07:22:50.363081mail.broermann.family sshd[18309]: Invalid user rene from 104.248.147.78 port 37094 2020-10-11T07:22:52.626989mail.broermann.family sshd[18309]: Failed password for invalid user rene from 104.248.147.78 port 37094 ssh2 2020-10-11T07:23:37.777799mail.broermann.family sshd[18381]: Invalid user ftpuser1 from 104.248.147.78 port 45758 ... |
2020-10-11 20:54:08 |
| 218.92.0.176 | attackbots | Oct 11 15:08:09 melroy-server sshd[8204]: Failed password for root from 218.92.0.176 port 5674 ssh2 Oct 11 15:08:13 melroy-server sshd[8204]: Failed password for root from 218.92.0.176 port 5674 ssh2 ... |
2020-10-11 21:08:52 |
| 84.236.107.134 | attack | 2020-10-11 21:05:59 | |
| 158.177.123.152 | attackbotsspam | xmlrpc attack |
2020-10-11 20:49:53 |
| 192.99.8.102 | attackspambots | IP automatically blocked since in honeypot trapped or permanently ditributing referer spam |
2020-10-11 20:55:11 |
| 24.202.168.233 | attackbots | Fail2Ban Ban Triggered HTTP SQL Injection Attempt |
2020-10-11 21:20:52 |