City: Matosinhos Municipality
Region: Porto
Country: Portugal
Internet Service Provider: Nos Comunicacoes S.A.
Hostname: unknown
Organization: unknown
Usage Type: Mobile ISP
| Type | Details | Datetime |
|---|---|---|
| attack | spam FO |
2019-11-09 14:14:53 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 89.180.1.71
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13036
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;89.180.1.71. IN A
;; AUTHORITY SECTION:
. 311 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019110900 1800 900 604800 86400
;; Query time: 117 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Nov 09 14:14:50 CST 2019
;; MSG SIZE rcvd: 115Host 71.1.180.89.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
71.1.180.89.in-addr.arpa name = 89-180-1-71.net.novis.pt.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 139.199.74.92 | attackspambots | Unauthorized connection attempt detected from IP address 139.199.74.92 to port 2220 [J] |
2020-01-12 00:13:20 |
| 200.50.67.105 | attackspam | Jan 11 15:11:15 vmanager6029 sshd\[12078\]: Invalid user 123456 from 200.50.67.105 port 43518 Jan 11 15:11:15 vmanager6029 sshd\[12078\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.50.67.105 Jan 11 15:11:17 vmanager6029 sshd\[12078\]: Failed password for invalid user 123456 from 200.50.67.105 port 43518 ssh2 |
2020-01-12 00:38:09 |
| 139.59.41.154 | attackbotsspam | $f2bV_matches |
2020-01-11 23:58:29 |
| 138.99.6.65 | attackspam | $f2bV_matches |
2020-01-12 00:29:56 |
| 138.68.82.194 | attack | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.194 user=root Failed password for root from 138.68.82.194 port 44468 ssh2 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.194 user=root Failed password for root from 138.68.82.194 port 48272 ssh2 Invalid user allison from 138.68.82.194 port 52086 |
2020-01-12 00:31:02 |
| 207.97.174.134 | attackspam | MONDIAL RELAY - COLIS |
2020-01-12 00:14:09 |
| 119.82.253.63 | attackbots | 119.82.253.63 - - [11/Jan/2020:14:09:39 +0100] "GET /awstats.pl?config=www.google.com%2Fmaps%2Fplace%2FJNT%2BPlumbing%2BServices%2F%40-33.90851%2C18.5967213%2C17z%2Fdata%3D%213m1%214b1%214m5%213m4%211s0x0%3A0xc3fd6cbe35064038%218m2%213d-33.90851%214d18.59891&lang=en&output=main HTTP/1.0" 404 280 "https://oraux.pnzone.net/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.1 (KHTML, like Gecko) Chrome/24.0.1309.0 Safari/537.17" |
2020-01-12 00:26:12 |
| 94.158.37.24 | attackbots | "Fail2Ban detected SSH brute force attempt" |
2020-01-12 00:28:47 |
| 67.205.57.217 | attackspambots | Automatic report - XMLRPC Attack |
2020-01-12 00:07:54 |
| 138.219.228.96 | attack | $f2bV_matches |
2020-01-12 00:37:09 |
| 106.52.254.33 | attackspambots | ssh intrusion attempt |
2020-01-12 00:23:08 |
| 139.199.248.153 | attackbots | $f2bV_matches |
2020-01-12 00:15:39 |
| 138.197.98.251 | attack | $f2bV_matches |
2020-01-12 00:38:32 |
| 118.25.111.130 | attackbots | [Aegis] @ 2020-01-11 14:09:43 0000 -> Attempted Administrator Privilege Gain: ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack |
2020-01-12 00:02:39 |
| 139.199.248.156 | attack | $f2bV_matches |
2020-01-12 00:15:05 |