Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Brazil

Internet Service Provider: Algar Telecom S/A

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackbots
Unauthorized connection attempt detected from IP address 201.48.2.34 to port 23
2020-07-25 22:49:03
Comments on same subnet:
IP Type Details Datetime
201.48.26.193 attackbotsspam
Honeypot attack, port: 445, PTR: 201-048-026-193.static.ctbctelecom.com.br.
2020-09-04 23:52:24
201.48.26.193 attackbotsspam
Honeypot attack, port: 445, PTR: 201-048-026-193.static.ctbctelecom.com.br.
2020-09-04 15:20:42
201.48.26.193 attackbotsspam
Honeypot attack, port: 445, PTR: 201-048-026-193.static.ctbctelecom.com.br.
2020-09-04 07:43:57
201.48.220.169 attackspam
Brute force attempt
2020-08-19 22:44:29
201.48.220.89 attack
failed_logins
2020-08-19 13:22:18
201.48.220.123 attack
"SMTP brute force auth login attempt."
2020-08-13 21:20:41
201.48.247.23 attackspambots
Unauthorized connection attempt from IP address 201.48.247.23 on Port 445(SMB)
2020-07-11 02:07:22
201.48.220.173 attack
failed_logins
2020-07-09 12:28:52
201.48.206.146 attackbotsspam
Jun 18 16:13:31 vps sshd[544688]: Failed password for invalid user francois from 201.48.206.146 port 55996 ssh2
Jun 18 16:15:01 vps sshd[550324]: Invalid user webadmin from 201.48.206.146 port 33613
Jun 18 16:15:01 vps sshd[550324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.48.206.146
Jun 18 16:15:03 vps sshd[550324]: Failed password for invalid user webadmin from 201.48.206.146 port 33613 ssh2
Jun 18 16:16:30 vps sshd[560168]: Invalid user wim from 201.48.206.146 port 39465
...
2020-06-18 22:25:05
201.48.220.140 attackbots
Jun 18 05:37:28 mail.srvfarm.net postfix/smtpd[1343601]: warning: unknown[201.48.220.140]: SASL PLAIN authentication failed: 
Jun 18 05:37:29 mail.srvfarm.net postfix/smtpd[1343601]: lost connection after AUTH from unknown[201.48.220.140]
Jun 18 05:38:59 mail.srvfarm.net postfix/smtps/smtpd[1342632]: warning: unknown[201.48.220.140]: SASL PLAIN authentication failed: 
Jun 18 05:38:59 mail.srvfarm.net postfix/smtps/smtpd[1342632]: lost connection after AUTH from unknown[201.48.220.140]
Jun 18 05:39:32 mail.srvfarm.net postfix/smtps/smtpd[1342934]: warning: unknown[201.48.220.140]: SASL PLAIN authentication failed:
2020-06-18 16:30:47
201.48.220.69 attack
Jun 16 07:57:34 mail.srvfarm.net postfix/smtps/smtpd[1043914]: warning: unknown[201.48.220.69]: SASL PLAIN authentication failed: 
Jun 16 07:57:34 mail.srvfarm.net postfix/smtps/smtpd[1043914]: lost connection after AUTH from unknown[201.48.220.69]
Jun 16 07:59:09 mail.srvfarm.net postfix/smtps/smtpd[1035297]: warning: unknown[201.48.220.69]: SASL PLAIN authentication failed: 
Jun 16 07:59:10 mail.srvfarm.net postfix/smtps/smtpd[1035297]: lost connection after AUTH from unknown[201.48.220.69]
Jun 16 08:03:07 mail.srvfarm.net postfix/smtps/smtpd[1057615]: lost connection after CONNECT from unknown[201.48.220.69]
2020-06-16 15:28:41
201.48.206.146 attackbotsspam
$f2bV_matches
2020-06-15 02:38:56
201.48.206.146 attackspam
Jun 12 11:21:08 pve1 sshd[27272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.48.206.146 
Jun 12 11:21:10 pve1 sshd[27272]: Failed password for invalid user ubuntu from 201.48.206.146 port 33514 ssh2
...
2020-06-12 18:17:23
201.48.220.69 attackbots
Jun  8 05:20:07 mail.srvfarm.net postfix/smtpd[669637]: warning: unknown[201.48.220.69]: SASL PLAIN authentication failed: 
Jun  8 05:20:07 mail.srvfarm.net postfix/smtpd[669637]: lost connection after AUTH from unknown[201.48.220.69]
Jun  8 05:24:36 mail.srvfarm.net postfix/smtps/smtpd[672319]: warning: unknown[201.48.220.69]: SASL PLAIN authentication failed: 
Jun  8 05:24:37 mail.srvfarm.net postfix/smtps/smtpd[672319]: lost connection after AUTH from unknown[201.48.220.69]
Jun  8 05:27:10 mail.srvfarm.net postfix/smtpd[673236]: warning: unknown[201.48.220.69]: SASL PLAIN authentication failed:
2020-06-08 18:33:21
201.48.220.123 attackspambots
(BR/Brazil/-) SMTP Bruteforcing attempts
2020-06-05 17:45:11
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 201.48.2.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40363
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;201.48.2.34.			IN	A

;; AUTHORITY SECTION:
.			318	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020072500 1800 900 604800 86400

;; Query time: 74 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jul 25 22:48:54 CST 2020
;; MSG SIZE  rcvd: 115
Host info
34.2.48.201.in-addr.arpa domain name pointer 201-048-002-034.static.ctbctelecom.com.br.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
34.2.48.201.in-addr.arpa	name = 201-048-002-034.static.ctbctelecom.com.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
46.100.62.49 attackspambots
23/tcp
[2020-03-16]1pkt
2020-03-17 10:52:13
122.51.243.223 attackspambots
Mar 17 01:29:58 sigma sshd\[20781\]: Failed password for sys from 122.51.243.223 port 48962 ssh2Mar 17 01:40:16 sigma sshd\[20865\]: Invalid user infusion-stoked from 122.51.243.223
...
2020-03-17 10:51:28
122.152.220.161 attackbotsspam
Mar 17 03:19:04 lnxded64 sshd[23528]: Failed password for root from 122.152.220.161 port 40344 ssh2
Mar 17 03:19:04 lnxded64 sshd[23528]: Failed password for root from 122.152.220.161 port 40344 ssh2
2020-03-17 10:25:49
196.234.204.241 attack
8080/tcp
[2020-03-16]1pkt
2020-03-17 10:34:57
185.151.242.186 attackbots
Mar 16 23:48:06 src: 185.151.242.186 signature match: "MISC MS Terminal Server communication attempt" (sid: 100077) tcp port: 3389
2020-03-17 10:54:29
200.149.232.242 attackspambots
IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking.
2020-03-17 10:32:36
91.121.87.174 attackbots
2020-03-17T00:13:15.046111shield sshd\[9634\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3059087.ip-91-121-87.eu  user=root
2020-03-17T00:13:17.190949shield sshd\[9634\]: Failed password for root from 91.121.87.174 port 56682 ssh2
2020-03-17T00:15:51.540343shield sshd\[9980\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3059087.ip-91-121-87.eu  user=root
2020-03-17T00:15:53.434615shield sshd\[9980\]: Failed password for root from 91.121.87.174 port 57490 ssh2
2020-03-17T00:18:23.932084shield sshd\[10225\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3059087.ip-91-121-87.eu  user=root
2020-03-17 10:23:35
211.195.27.173 attackbots
81/tcp
[2020-03-16]1pkt
2020-03-17 10:54:13
111.255.35.68 attack
23/tcp
[2020-03-16]1pkt
2020-03-17 10:36:37
45.84.196.118 attackspam
Invalid user admin from 45.84.196.118 port 43329
2020-03-17 10:41:13
131.106.16.143 attack
6x Failed Password
2020-03-17 10:38:43
45.141.86.118 attackbots
RDP brute force attack detected by fail2ban
2020-03-17 10:49:33
185.176.27.250 attackbotsspam
Port scan on 14 port(s): 1268 4352 9883 12756 12786 24634 27340 32398 32406 41053 41530 48485 55199 57396
2020-03-17 10:42:43
162.243.132.52 attackbotsspam
8081/tcp 161/udp
[2020-03-14/16]2pkt
2020-03-17 10:19:52
190.13.173.67 attackspam
Mar 17 02:59:34 meumeu sshd[16371]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.13.173.67 
Mar 17 02:59:35 meumeu sshd[16371]: Failed password for invalid user dba from 190.13.173.67 port 52014 ssh2
Mar 17 03:04:38 meumeu sshd[17013]: Failed password for root from 190.13.173.67 port 33820 ssh2
...
2020-03-17 10:22:03

Recently Reported IPs

73.46.112.45 62.12.5.178 61.220.52.5 59.126.208.5
59.1.110.41 58.219.136.64 49.234.39.212 49.232.129.166
45.83.67.73 43.252.72.202 27.100.13.227 14.178.124.253
14.178.124.223 14.52.50.61 5.70.233.47 2.183.238.223
223.186.59.222 214.131.53.35 242.133.26.238 223.149.228.207