Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Contagem

Region: Minas Gerais

Country: Brazil

Internet Service Provider: Algar Telecom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
201.48.53.193 attackspambots
Attempt to attack host OS, exploiting network vulnerabilities, on 01-10-2019 04:45:17.
2019-10-01 20:11:21
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 201.48.53.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21855
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;201.48.53.12.			IN	A

;; AUTHORITY SECTION:
.			340	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022110303 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Nov 04 06:51:04 CST 2022
;; MSG SIZE  rcvd: 105
Host info
12.53.48.201.in-addr.arpa domain name pointer 201-048-053-012.static.ctbc.com.br.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
12.53.48.201.in-addr.arpa	name = 201-048-053-012.static.ctbc.com.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
185.66.130.79 attack
Unauthorised access (Aug  8) SRC=185.66.130.79 LEN=44 TTL=54 ID=51482 TCP DPT=23 WINDOW=52424 SYN 
Unauthorised access (Aug  8) SRC=185.66.130.79 LEN=44 TTL=54 ID=414 TCP DPT=23 WINDOW=52424 SYN 
Unauthorised access (Aug  5) SRC=185.66.130.79 LEN=44 TTL=53 ID=9207 TCP DPT=8080 WINDOW=11091 SYN
2019-08-08 14:04:38
23.254.230.144 attackbots
Aug  8 07:51:23 vps691689 sshd[1430]: Failed password for root from 23.254.230.144 port 33192 ssh2
Aug  8 07:55:53 vps691689 sshd[1468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.254.230.144
...
2019-08-08 13:56:14
193.151.107.207 attackbots
SSH/22 MH Probe, BF, Hack -
2019-08-08 14:12:12
180.155.200.98 attack
WordPress wp-login brute force :: 180.155.200.98 0.168 BYPASS [08/Aug/2019:12:20:43  1000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 3972 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2019-08-08 14:26:19
113.221.31.112 attack
FTP brute-force attack
2019-08-08 14:14:54
130.61.108.56 attack
Aug  8 06:34:36 srv-4 sshd\[24306\]: Invalid user SinusBot from 130.61.108.56
Aug  8 06:34:36 srv-4 sshd\[24306\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.61.108.56
Aug  8 06:34:37 srv-4 sshd\[24306\]: Failed password for invalid user SinusBot from 130.61.108.56 port 33754 ssh2
...
2019-08-08 14:18:29
194.243.6.150 attackbotsspam
Aug  8 04:21:40 ubuntu-2gb-nbg1-dc3-1 sshd[15805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.243.6.150
Aug  8 04:21:42 ubuntu-2gb-nbg1-dc3-1 sshd[15805]: Failed password for invalid user hp from 194.243.6.150 port 58226 ssh2
...
2019-08-08 13:52:32
103.78.183.105 attackbots
Aug  7 17:39:27 our-server-hostname postfix/smtpd[11800]: connect from unknown[103.78.183.105]
Aug x@x
Aug  7 17:39:30 our-server-hostname postfix/smtpd[11800]: lost connection after RCPT from unknown[103.78.183.105]
Aug  7 17:39:30 our-server-hostname postfix/smtpd[11800]: disconnect from unknown[103.78.183.105]
Aug  7 20:53:21 our-server-hostname postfix/smtpd[19544]: connect from unknown[103.78.183.105]
Aug x@x
Aug  7 20:53:27 our-server-hostname postfix/smtpd[19544]: lost connection after RCPT from unknown[103.78.183.105]
Aug  7 20:53:27 our-server-hostname postfix/smtpd[19544]: disconnect from unknown[103.78.183.105]
Aug  8 03:03:29 our-server-hostname postfix/smtpd[18258]: connect from unknown[103.78.183.105]
Aug x@x
Aug  8 03:03:33 our-server-hostname postfix/smtpd[18258]: lost connection after RCPT from unknown[103.78.183.105]
Aug  8 03:03:33 our-server-hostname postfix/smtpd[18258]: disconnect from unknown[103.78.183.105]
Aug  8 06:07:35 our-server-hostname pos........
-------------------------------
2019-08-08 14:20:32
58.71.62.21 attackspambots
Unauthorised access (Aug  8) SRC=58.71.62.21 LEN=52 TOS=0x08 PREC=0x20 TTL=105 ID=19386 DF TCP DPT=445 WINDOW=8192 SYN
2019-08-08 14:32:27
45.73.12.218 attackspambots
Aug  8 08:06:11 yabzik sshd[26253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.73.12.218
Aug  8 08:06:12 yabzik sshd[26253]: Failed password for invalid user alan from 45.73.12.218 port 33308 ssh2
Aug  8 08:10:55 yabzik sshd[27835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.73.12.218
2019-08-08 14:17:54
36.106.167.242 attackbots
Aug  8 04:13:22 m3061 sshd[16583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.106.167.242  user=r.r
Aug  8 04:13:24 m3061 sshd[16583]: Failed password for r.r from 36.106.167.242 port 40814 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=36.106.167.242
2019-08-08 13:43:45
149.28.27.190 attackbotsspam
Aug  8 06:02:43 yabzik sshd[18190]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.28.27.190
Aug  8 06:02:45 yabzik sshd[18190]: Failed password for invalid user flink from 149.28.27.190 port 48574 ssh2
Aug  8 06:07:50 yabzik sshd[19763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.28.27.190
2019-08-08 13:53:04
46.4.60.249 attackbotsspam
20 attempts against mh-misbehave-ban on hill.magehost.pro
2019-08-08 14:08:22
87.98.150.12 attack
Aug  8 03:21:43 ms-srv sshd[30441]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.98.150.12  user=root
Aug  8 03:21:46 ms-srv sshd[30441]: Failed password for invalid user root from 87.98.150.12 port 37466 ssh2
2019-08-08 13:51:35
144.217.89.55 attack
Aug  8 06:15:09 MK-Soft-VM6 sshd\[22861\]: Invalid user mainz from 144.217.89.55 port 50606
Aug  8 06:15:09 MK-Soft-VM6 sshd\[22861\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.89.55
Aug  8 06:15:11 MK-Soft-VM6 sshd\[22861\]: Failed password for invalid user mainz from 144.217.89.55 port 50606 ssh2
...
2019-08-08 14:39:29

Recently Reported IPs

168.226.217.79 15.76.231.48 2.251.219.235 219.178.239.176
103.226.20.9 178.247.69.42 116.195.132.2 89.162.226.35
123.153.163.123 56.62.102.15 95.145.159.99 130.27.13.201
59.207.124.173 68.211.22.103 145.12.253.70 147.213.64.86
68.45.172.117 8.107.64.185 166.74.107.67 48.98.40.70