201.48.34.202 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Brazil

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
201.48.34.195	attackspambots	20 attempts against mh-ssh on cloud	2020-08-31 12:14:24
201.48.34.195	attackbots	Aug 10 14:31:10 rush sshd[32767]: Failed password for root from 201.48.34.195 port 59264 ssh2 Aug 10 14:33:44 rush sshd[335]: Failed password for root from 201.48.34.195 port 46468 ssh2 ...	2020-08-11 03:17:02
201.48.34.195	attackspambots	Aug 7 08:35:42 hidden sshd[54990]: Failed password for hidden from 201.48.34.195 port 59790 ssh2 Aug 7 08:40:47 hidden sshd[55151]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.48.34.195 user=root Aug 7 08:40:50 hidden sshd[55151]: Failed password for hidden from 201.48.34.195 port 33459 ssh2	2020-08-09 04:08:16
201.48.34.195	attackspambots	"$f2bV_matches"	2020-07-27 04:39:46
201.48.34.195	attack	Invalid user admin from 201.48.34.195 port 46126	2020-07-26 13:55:39
201.48.34.195	attack	Jul 20 19:05:43 ny01 sshd[1128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.48.34.195 Jul 20 19:05:45 ny01 sshd[1128]: Failed password for invalid user appluat from 201.48.34.195 port 40979 ssh2 Jul 20 19:10:07 ny01 sshd[1666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.48.34.195	2020-07-21 08:40:15
201.48.34.195	attack	Jul 18 10:15:53 OPSO sshd\[32233\]: Invalid user lch from 201.48.34.195 port 57675 Jul 18 10:15:53 OPSO sshd\[32233\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.48.34.195 Jul 18 10:15:55 OPSO sshd\[32233\]: Failed password for invalid user lch from 201.48.34.195 port 57675 ssh2 Jul 18 10:21:46 OPSO sshd\[678\]: Invalid user raimundo from 201.48.34.195 port 36875 Jul 18 10:21:46 OPSO sshd\[678\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.48.34.195	2020-07-18 16:30:52
201.48.34.195	attackbotsspam	bruteforce detected	2020-07-09 01:09:38
201.48.34.195	attackspam	Jun 23 09:33:49 IngegnereFirenze sshd[14527]: Failed password for invalid user bkup from 201.48.34.195 port 46971 ssh2 ...	2020-06-23 18:49:16
201.48.34.195	attackspam	prod11 ...	2020-06-08 23:25:38
201.48.34.195	attackbots	detected by Fail2Ban	2020-06-07 21:22:56
201.48.34.195	attackbotsspam	Jun 3 17:22:30 gw1 sshd[18696]: Failed password for root from 201.48.34.195 port 45002 ssh2 ...	2020-06-03 21:54:05
201.48.34.195	attack	May 25 03:52:03 vps46666688 sshd[26869]: Failed password for root from 201.48.34.195 port 54733 ssh2 ...	2020-05-25 15:18:23
201.48.34.195	attack	(sshd) Failed SSH login from 201.48.34.195 (BR/Brazil/201-048-034-195.static.ctbctelecom.com.br): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 23 09:13:16 amsweb01 sshd[11104]: Invalid user fhy from 201.48.34.195 port 58164 May 23 09:13:18 amsweb01 sshd[11104]: Failed password for invalid user fhy from 201.48.34.195 port 58164 ssh2 May 23 09:26:02 amsweb01 sshd[12660]: Invalid user bob from 201.48.34.195 port 45124 May 23 09:26:04 amsweb01 sshd[12660]: Failed password for invalid user bob from 201.48.34.195 port 45124 ssh2 May 23 09:31:16 amsweb01 sshd[13401]: Invalid user souken from 201.48.34.195 port 47873	2020-05-23 17:26:24
201.48.34.195	attackspam	SSH Brute-Force attacks	2020-05-07 04:46:16

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 201.48.34.202
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27279
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;201.48.34.202.			IN	A

;; AUTHORITY SECTION:
.			528	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400

;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 20:29:13 CST 2022
;; MSG SIZE  rcvd: 106

Host info

202.34.48.201.in-addr.arpa domain name pointer 201-048-034-202.static.ctbctelecom.com.br.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
202.34.48.201.in-addr.arpa	name = 201-048-034-202.static.ctbctelecom.com.br.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
39.73.14.174	attackbotsspam	DATE:2020-10-08 22:41:23, IP:39.73.14.174, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-10-10 01:51:27
186.225.225.117	attackspam	1602189837 - 10/08/2020 22:43:57 Host: 186.225.225.117/186.225.225.117 Port: 445 TCP Blocked	2020-10-10 02:05:17
112.199.98.42	attackbots	2020-10-09T20:01:13.251104lavrinenko.info sshd[8968]: Failed password for invalid user webportal from 112.199.98.42 port 44154 ssh2 2020-10-09T20:06:04.458589lavrinenko.info sshd[9097]: Invalid user testftp from 112.199.98.42 port 57524 2020-10-09T20:06:04.464260lavrinenko.info sshd[9097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.199.98.42 2020-10-09T20:06:04.458589lavrinenko.info sshd[9097]: Invalid user testftp from 112.199.98.42 port 57524 2020-10-09T20:06:06.459430lavrinenko.info sshd[9097]: Failed password for invalid user testftp from 112.199.98.42 port 57524 ssh2 ...	2020-10-10 02:02:08
139.59.46.167	attackspam	Oct 9 18:04:57 cho sshd[306173]: Failed password for root from 139.59.46.167 port 47238 ssh2 Oct 9 18:09:02 cho sshd[306376]: Invalid user vagrant from 139.59.46.167 port 51624 Oct 9 18:09:02 cho sshd[306376]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.46.167 Oct 9 18:09:02 cho sshd[306376]: Invalid user vagrant from 139.59.46.167 port 51624 Oct 9 18:09:03 cho sshd[306376]: Failed password for invalid user vagrant from 139.59.46.167 port 51624 ssh2 ...	2020-10-10 02:06:29
193.32.163.108	attack	Port scan denied	2020-10-10 02:07:52
138.68.100.102	attackbotsspam	Lines containing failures of 138.68.100.102 Oct 8 08:42:23 newdogma sshd[22234]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.100.102 user=r.r Oct 8 08:42:25 newdogma sshd[22234]: Failed password for r.r from 138.68.100.102 port 36538 ssh2 Oct 8 08:42:26 newdogma sshd[22234]: Received disconnect from 138.68.100.102 port 36538:11: Bye Bye [preauth] Oct 8 08:42:26 newdogma sshd[22234]: Disconnected from authenticating user r.r 138.68.100.102 port 36538 [preauth] Oct 8 08:58:51 newdogma sshd[22800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.100.102 user=r.r Oct 8 08:58:53 newdogma sshd[22800]: Failed password for r.r from 138.68.100.102 port 37066 ssh2 Oct 8 08:58:55 newdogma sshd[22800]: Received disconnect from 138.68.100.102 port 37066:11: Bye Bye [preauth] Oct 8 08:58:55 newdogma sshd[22800]: Disconnected from authenticating user r.r 138.68.100.102 port 37066........ ------------------------------	2020-10-10 02:09:51
69.147.221.84	attackbotsspam	Tried our host z.	2020-10-10 01:55:42
146.59.158.59	attackbotsspam	TCP (SYN) 146.59.158.59:55329 -> port 22, len 44	2020-10-10 02:15:15
118.89.241.126	attackspambots	Bruteforce detected by fail2ban	2020-10-10 02:00:43
218.92.0.250	attackbots	2020-10-09T21:09:22.725618snf-827550 sshd[19369]: Failed password for root from 218.92.0.250 port 57071 ssh2 2020-10-09T21:09:26.090608snf-827550 sshd[19369]: Failed password for root from 218.92.0.250 port 57071 ssh2 2020-10-09T21:09:29.870494snf-827550 sshd[19369]: Failed password for root from 218.92.0.250 port 57071 ssh2 ...	2020-10-10 02:11:26
107.174.26.66	attackbots	Oct 9 20:23:41 pkdns2 sshd\[38464\]: Address 107.174.26.66 maps to airywork.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Oct 9 20:23:41 pkdns2 sshd\[38464\]: Invalid user ubnt from 107.174.26.66Oct 9 20:23:43 pkdns2 sshd\[38464\]: Failed password for invalid user ubnt from 107.174.26.66 port 43538 ssh2Oct 9 20:23:44 pkdns2 sshd\[38466\]: Address 107.174.26.66 maps to airywork.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Oct 9 20:23:44 pkdns2 sshd\[38466\]: Invalid user admin from 107.174.26.66Oct 9 20:23:45 pkdns2 sshd\[38466\]: Failed password for invalid user admin from 107.174.26.66 port 35666 ssh2Oct 9 20:23:46 pkdns2 sshd\[38468\]: Address 107.174.26.66 maps to airywork.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! ...	2020-10-10 01:43:16
82.67.91.74	attackspam	(cxs) cxs mod_security triggered by 82.67.91.74 (FR/France/rob76-1_migr-82-67-91-74.fbx.proxad.net): 1 in the last 3600 secs	2020-10-10 01:42:22
49.88.112.68	attackspam	Oct 9 08:07:28 dcd-gentoo sshd[25069]: User root from 49.88.112.68 not allowed because none of user's groups are listed in AllowGroups Oct 9 08:07:31 dcd-gentoo sshd[25069]: error: PAM: Authentication failure for illegal user root from 49.88.112.68 Oct 9 08:07:31 dcd-gentoo sshd[25069]: Failed keyboard-interactive/pam for invalid user root from 49.88.112.68 port 43887 ssh2 ...	2020-10-10 01:53:59
178.162.198.111	attackspam	$f2bV_matches	2020-10-10 01:44:02
141.98.80.39	attackbotsspam	\x03 400 0 "-" "-"	2020-10-10 02:08:44

Recently Reported IPs

47.106.213.25	193.202.9.97	201.150.178.157	171.5.117.151
27.220.34.108	151.242.144.94	159.223.187.222	45.112.251.50
46.251.56.56	14.99.33.182	198.12.118.59	60.254.78.45
106.104.88.138	193.68.19.207	84.47.140.221	187.167.221.39
116.98.94.35	41.218.224.127	47.51.51.190	179.57.163.126