City: Contagem
Region: Minas Gerais
Country: Brazil
Internet Service Provider: Algar Telecom
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 201.48.53.193 | attackspambots | Attempt to attack host OS, exploiting network vulnerabilities, on 01-10-2019 04:45:17. |
2019-10-01 20:11:21 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 201.48.53.19
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49742
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;201.48.53.19. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024121100 1800 900 604800 86400
;; Query time: 40 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Dec 11 14:03:55 CST 2024
;; MSG SIZE rcvd: 10519.53.48.201.in-addr.arpa domain name pointer 201-048-053-019.static.ctbc.com.br.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
19.53.48.201.in-addr.arpa name = 201-048-053-019.static.ctbc.com.br.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.13.38.59 | attackbotsspam | Sep 14 01:55:38 [host] sshd[17491]: Invalid user leisa from 106.13.38.59 Sep 14 01:55:38 [host] sshd[17491]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.38.59 Sep 14 01:55:40 [host] sshd[17491]: Failed password for invalid user leisa from 106.13.38.59 port 59124 ssh2 |
2019-09-14 07:59:48 |
| 129.213.153.229 | attackbots | Sep 13 14:19:36 hanapaa sshd\[18385\]: Invalid user saravanan from 129.213.153.229 Sep 13 14:19:36 hanapaa sshd\[18385\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.153.229 Sep 13 14:19:38 hanapaa sshd\[18385\]: Failed password for invalid user saravanan from 129.213.153.229 port 39017 ssh2 Sep 13 14:24:10 hanapaa sshd\[18797\]: Invalid user mprint from 129.213.153.229 Sep 13 14:24:10 hanapaa sshd\[18797\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.153.229 |
2019-09-14 08:31:13 |
| 111.231.204.127 | attackspambots | Sep 13 20:18:52 xtremcommunity sshd\[53710\]: Invalid user 111111 from 111.231.204.127 port 50662 Sep 13 20:18:52 xtremcommunity sshd\[53710\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.204.127 Sep 13 20:18:54 xtremcommunity sshd\[53710\]: Failed password for invalid user 111111 from 111.231.204.127 port 50662 ssh2 Sep 13 20:21:52 xtremcommunity sshd\[53762\]: Invalid user 123hadoop from 111.231.204.127 port 57186 Sep 13 20:21:52 xtremcommunity sshd\[53762\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.204.127 ... |
2019-09-14 08:28:25 |
| 193.169.255.140 | attackspambots | Sep 14 00:56:56 mail postfix/smtpd\[17265\]: warning: unknown\[193.169.255.140\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Sep 14 01:28:04 mail postfix/smtpd\[17782\]: warning: unknown\[193.169.255.140\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Sep 14 01:38:26 mail postfix/smtpd\[18100\]: warning: unknown\[193.169.255.140\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Sep 14 01:48:49 mail postfix/smtpd\[18252\]: warning: unknown\[193.169.255.140\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ |
2019-09-14 08:06:30 |
| 151.80.209.234 | attackbots | Rude login attack (6 tries in 1d) |
2019-09-14 08:03:03 |
| 5.189.207.160 | attack | Ein möglicherweise gefährlicher Request.Form-Wert wurde vom Client (mp$ContentZone$TxtMessage=" |
2019-09-14 08:29:34 |
| 185.53.162.136 | attack | Unauthorised access (Sep 14) SRC=185.53.162.136 LEN=40 TTL=245 ID=41977 TCP DPT=445 WINDOW=1024 SYN |
2019-09-14 08:00:04 |
| 184.64.13.67 | attackspambots | Sep 13 13:51:38 lcdev sshd\[29809\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=s010650e549cedc71.cg.shawcable.net user=root Sep 13 13:51:41 lcdev sshd\[29809\]: Failed password for root from 184.64.13.67 port 40894 ssh2 Sep 13 13:56:02 lcdev sshd\[30185\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=s010650e549cedc71.cg.shawcable.net user=root Sep 13 13:56:04 lcdev sshd\[30185\]: Failed password for root from 184.64.13.67 port 57440 ssh2 Sep 13 14:00:28 lcdev sshd\[30540\]: Invalid user utente from 184.64.13.67 |
2019-09-14 08:01:54 |
| 193.112.125.114 | attackspambots | Sep 13 20:02:40 ny01 sshd[25950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.125.114 Sep 13 20:02:42 ny01 sshd[25950]: Failed password for invalid user uftp123 from 193.112.125.114 port 19865 ssh2 Sep 13 20:06:36 ny01 sshd[26600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.125.114 |
2019-09-14 08:20:40 |
| 165.227.209.96 | attackspambots | Sep 14 01:57:26 vps647732 sshd[7914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.209.96 Sep 14 01:57:28 vps647732 sshd[7914]: Failed password for invalid user developer123 from 165.227.209.96 port 35702 ssh2 ... |
2019-09-14 07:59:12 |
| 94.23.62.187 | attackbotsspam | Sep 14 01:52:14 SilenceServices sshd[24926]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.23.62.187 Sep 14 01:52:15 SilenceServices sshd[24926]: Failed password for invalid user user from 94.23.62.187 port 48294 ssh2 Sep 14 01:56:36 SilenceServices sshd[26545]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.23.62.187 |
2019-09-14 08:04:25 |
| 101.108.135.27 | attack | Automatic report - Port Scan Attack |
2019-09-14 07:55:20 |
| 125.160.17.32 | attackbots | (sshd) Failed SSH login from 125.160.17.32 (ID/Indonesia/main.telkomhosting.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Sep 13 17:18:36 host sshd[19650]: Did not receive identification string from 125.160.17.32 port 6354 |
2019-09-14 08:15:48 |
| 88.200.214.215 | attackbots | Sep 13 23:18:22 lenivpn01 kernel: \[642297.783227\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=88.200.214.215 DST=195.201.121.15 LEN=58 TOS=0x00 PREC=0x00 TTL=52 ID=40777 PROTO=UDP SPT=48545 DPT=927 LEN=38 Sep 13 23:18:22 lenivpn01 kernel: \[642297.783805\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=88.200.214.215 DST=195.201.121.15 LEN=598 TOS=0x00 PREC=0x00 TTL=52 ID=40778 PROTO=UDP SPT=48545 DPT=927 LEN=578 Sep 13 23:18:22 lenivpn01 kernel: \[642297.823143\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=88.200.214.215 DST=195.201.121.15 LEN=48 TOS=0x00 PREC=0x00 TTL=52 ID=40779 PROTO=UDP SPT=48545 DPT=927 LEN=28 ... |
2019-09-14 08:22:13 |
| 117.50.99.9 | attackbotsspam | Sep 14 01:59:00 plex sshd[15682]: Invalid user weblogic from 117.50.99.9 port 40984 |
2019-09-14 08:01:12 |