Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Brazil

Internet Service Provider: Algar Telecom S/A

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackbotsspam
Jul 23 08:59:02 ws12vmsma01 sshd[38159]: Invalid user pibid from 201.48.1.243
Jul 23 08:59:05 ws12vmsma01 sshd[38159]: Failed password for invalid user pibid from 201.48.1.243 port 51050 ssh2
Jul 23 09:02:28 ws12vmsma01 sshd[40414]: Invalid user pibid from 201.48.1.243
...
2020-07-23 20:32:58
Comments on same subnet:
IP Type Details Datetime
201.48.115.236 attackbots
(sshd) Failed SSH login from 201.48.115.236 (BR/Brazil/mx1.biinternational.com.br): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct  4 13:34:12 optimus sshd[4541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.48.115.236  user=root
Oct  4 13:34:14 optimus sshd[4541]: Failed password for root from 201.48.115.236 port 40092 ssh2
Oct  4 13:37:45 optimus sshd[5472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.48.115.236  user=root
Oct  4 13:37:47 optimus sshd[5472]: Failed password for root from 201.48.115.236 port 32930 ssh2
Oct  4 13:41:20 optimus sshd[6447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.48.115.236  user=root
2020-10-05 02:50:00
201.48.115.236 attackspam
Invalid user long from 201.48.115.236 port 49936
2020-10-04 18:32:59
201.48.128.137 attack
445/tcp 445/tcp 445/tcp...
[2020-08-12/10-02]7pkt,1pt.(tcp)
2020-10-04 07:09:23
201.48.128.137 attackbots
445/tcp 445/tcp 445/tcp...
[2020-08-12/10-02]7pkt,1pt.(tcp)
2020-10-03 15:07:14
201.48.192.60 attackspambots
$f2bV_matches
2020-10-01 07:59:39
201.48.192.60 attackspam
Invalid user a from 201.48.192.60 port 53490
2020-10-01 00:31:30
201.48.192.60 attack
2020-09-26T17:14:04.239966shield sshd\[8187\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.48.192.60  user=root
2020-09-26T17:14:06.668775shield sshd\[8187\]: Failed password for root from 201.48.192.60 port 40629 ssh2
2020-09-26T17:18:29.235806shield sshd\[9096\]: Invalid user testuser from 201.48.192.60 port 44655
2020-09-26T17:18:29.248021shield sshd\[9096\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.48.192.60
2020-09-26T17:18:31.054699shield sshd\[9096\]: Failed password for invalid user testuser from 201.48.192.60 port 44655 ssh2
2020-09-27 01:37:26
201.48.192.60 attackspambots
SSH login attempts.
2020-09-26 17:30:20
201.48.115.236 attack
SSH Honeypot -> SSH Bruteforce / Login
2020-09-19 04:21:12
201.48.192.60 attack
Invalid user applmgr from 201.48.192.60 port 57240
2020-09-18 01:56:46
201.48.192.60 attackspam
2020-09-17T09:42:49.287193vps773228.ovh.net sshd[28838]: Failed password for root from 201.48.192.60 port 35650 ssh2
2020-09-17T09:47:37.138445vps773228.ovh.net sshd[28904]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.48.192.60  user=root
2020-09-17T09:47:38.804112vps773228.ovh.net sshd[28904]: Failed password for root from 201.48.192.60 port 41822 ssh2
2020-09-17T09:52:29.508858vps773228.ovh.net sshd[28965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.48.192.60  user=root
2020-09-17T09:52:31.927161vps773228.ovh.net sshd[28965]: Failed password for root from 201.48.192.60 port 47987 ssh2
...
2020-09-17 17:58:40
201.48.192.60 attackbotsspam
Invalid user applmgr from 201.48.192.60 port 57240
2020-09-17 09:11:04
201.48.115.236 attackspambots
Connection to SSH Honeypot - Detected by HoneypotDB
2020-09-12 21:07:06
201.48.115.236 attackspam
Sep 12 06:18:46 root sshd[20021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.48.115.236 
...
2020-09-12 13:10:11
201.48.115.236 attackspambots
Sep 11 21:05:18 sshgateway sshd\[11817\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.48.115.236  user=root
Sep 11 21:05:20 sshgateway sshd\[11817\]: Failed password for root from 201.48.115.236 port 57280 ssh2
Sep 11 21:12:15 sshgateway sshd\[12538\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.48.115.236  user=root
2020-09-12 04:58:49
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 201.48.1.243
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34588
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;201.48.1.243.			IN	A

;; AUTHORITY SECTION:
.			394	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020072300 1800 900 604800 86400

;; Query time: 84 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jul 23 20:32:50 CST 2020
;; MSG SIZE  rcvd: 116
Host info
243.1.48.201.in-addr.arpa domain name pointer 201-048-001-243.bdonline.com.br.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
243.1.48.201.in-addr.arpa	name = 201-048-001-243.bdonline.com.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
106.12.34.188 attackspambots
2019-10-27T20:59:51.861099abusebot-2.cloudsearch.cf sshd\[28559\]: Invalid user uc from 106.12.34.188 port 59092
2019-10-28 05:21:26
129.204.115.214 attack
Oct 27 21:29:26 sso sshd[21438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.115.214
Oct 27 21:29:27 sso sshd[21438]: Failed password for invalid user dun from 129.204.115.214 port 45198 ssh2
...
2019-10-28 04:57:08
118.25.189.236 attackbots
$f2bV_matches
2019-10-28 05:20:55
186.204.162.68 attackspam
2019-10-25T20:03:29.940252static.108.197.76.144.clients.your-server.de sshd[8898]: Invalid user den from 186.204.162.68
2019-10-25T20:03:29.942830static.108.197.76.144.clients.your-server.de sshd[8898]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.204.162.68
2019-10-25T20:03:32.221511static.108.197.76.144.clients.your-server.de sshd[8898]: Failed password for invalid user den from 186.204.162.68 port 57354 ssh2
2019-10-25T20:08:40.121647static.108.197.76.144.clients.your-server.de sshd[9398]: Invalid user beefy from 186.204.162.68
2019-10-25T20:08:40.124769static.108.197.76.144.clients.your-server.de sshd[9398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.204.162.68

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=186.204.162.68
2019-10-28 05:19:40
106.52.26.30 attack
Oct 27 11:01:22 kapalua sshd\[11136\]: Invalid user db2fenc1 from 106.52.26.30
Oct 27 11:01:22 kapalua sshd\[11136\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.26.30
Oct 27 11:01:24 kapalua sshd\[11136\]: Failed password for invalid user db2fenc1 from 106.52.26.30 port 50630 ssh2
Oct 27 11:05:29 kapalua sshd\[11478\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.26.30  user=root
Oct 27 11:05:32 kapalua sshd\[11478\]: Failed password for root from 106.52.26.30 port 58628 ssh2
2019-10-28 05:19:02
222.186.175.167 attackbots
SSH bruteforce
2019-10-28 05:09:51
93.29.187.145 attackspambots
Oct 27 21:14:31 venus sshd\[21779\]: Invalid user Admin@2016 from 93.29.187.145 port 57530
Oct 27 21:14:31 venus sshd\[21779\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.29.187.145
Oct 27 21:14:33 venus sshd\[21779\]: Failed password for invalid user Admin@2016 from 93.29.187.145 port 57530 ssh2
...
2019-10-28 05:24:10
189.232.100.142 attack
Triggered by Fail2Ban at Vostok web server
2019-10-28 05:01:46
183.240.157.3 attackbots
Jan 18 23:53:06 vtv3 sshd\[27835\]: Invalid user jenkins from 183.240.157.3 port 34224
Jan 18 23:53:06 vtv3 sshd\[27835\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.240.157.3
Jan 18 23:53:08 vtv3 sshd\[27835\]: Failed password for invalid user jenkins from 183.240.157.3 port 34224 ssh2
Jan 18 23:57:56 vtv3 sshd\[29481\]: Invalid user px from 183.240.157.3 port 33910
Jan 18 23:57:56 vtv3 sshd\[29481\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.240.157.3
Jan 24 12:53:51 vtv3 sshd\[19863\]: Invalid user centos from 183.240.157.3 port 60798
Jan 24 12:53:51 vtv3 sshd\[19863\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.240.157.3
Jan 24 12:53:53 vtv3 sshd\[19863\]: Failed password for invalid user centos from 183.240.157.3 port 60798 ssh2
Jan 24 12:59:25 vtv3 sshd\[21351\]: Invalid user wildfly from 183.240.157.3 port 34596
Jan 24 12:59:25 vtv3 sshd\[21351\]:
2019-10-28 05:05:45
103.235.236.146 attackspam
*Port Scan* detected from 103.235.236.146 (CN/China/-). 4 hits in the last 291 seconds
2019-10-28 05:23:40
58.84.149.255 attack
Automatic report - Port Scan Attack
2019-10-28 05:20:29
91.121.155.215 attackspambots
Wordpress bruteforce
2019-10-28 05:26:39
200.182.172.131 attackspambots
2019-10-27T21:00:36.423282abusebot-3.cloudsearch.cf sshd\[19885\]: Invalid user max from 200.182.172.131 port 48534
2019-10-28 05:01:11
50.77.31.130 attackbots
RDP Bruteforce
2019-10-28 05:08:21
52.231.153.23 attack
$f2bV_matches
2019-10-28 05:07:04

Recently Reported IPs

217.108.66.91 93.199.253.72 20.127.163.137 187.183.38.65
115.36.102.202 215.17.161.40 94.25.181.235 179.222.146.144
116.25.44.184 3.87.203.139 167.249.110.200 74.208.28.130
170.130.77.187 179.107.147.142 185.142.236.43 187.0.177.99
186.193.74.250 45.141.84.124 203.150.137.94 84.232.144.157