Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Brazil

Internet Service Provider: WI - Provedor de Telecomunicacoes Ltda.

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackspambots
Jun  4 13:43:49 mail.srvfarm.net postfix/smtpd[2497905]: warning: 201-55-158-242.witelecom.com.br[201.55.158.242]: SASL PLAIN authentication failed: 
Jun  4 13:43:50 mail.srvfarm.net postfix/smtpd[2497905]: lost connection after AUTH from 201-55-158-242.witelecom.com.br[201.55.158.242]
Jun  4 13:51:32 mail.srvfarm.net postfix/smtpd[2502236]: warning: 201-55-158-242.witelecom.com.br[201.55.158.242]: SASL PLAIN authentication failed: 
Jun  4 13:51:32 mail.srvfarm.net postfix/smtpd[2502236]: lost connection after AUTH from 201-55-158-242.witelecom.com.br[201.55.158.242]
Jun  4 13:52:13 mail.srvfarm.net postfix/smtps/smtpd[2498108]: warning: 201-55-158-242.witelecom.com.br[201.55.158.242]: SASL PLAIN authentication failed:
2020-06-05 03:18:55
Comments on same subnet:
IP Type Details Datetime
201.55.158.55 attack
email brute force
2020-09-17 02:42:58
201.55.158.55 attackspambots
Sep 15 18:24:03 mail.srvfarm.net postfix/smtps/smtpd[2819938]: warning: 201-55-158-55.witelecom.com.br[201.55.158.55]: SASL PLAIN authentication failed: 
Sep 15 18:24:03 mail.srvfarm.net postfix/smtps/smtpd[2819938]: lost connection after AUTH from 201-55-158-55.witelecom.com.br[201.55.158.55]
Sep 15 18:26:53 mail.srvfarm.net postfix/smtps/smtpd[2805670]: warning: 201-55-158-55.witelecom.com.br[201.55.158.55]: SASL PLAIN authentication failed: 
Sep 15 18:26:54 mail.srvfarm.net postfix/smtps/smtpd[2805670]: lost connection after AUTH from 201-55-158-55.witelecom.com.br[201.55.158.55]
Sep 15 18:33:12 mail.srvfarm.net postfix/smtps/smtpd[2818213]: warning: 201-55-158-55.witelecom.com.br[201.55.158.55]: SASL PLAIN authentication failed:
2020-09-16 19:02:23
201.55.158.228 attackbotsspam
Sep 12 21:11:40 mail.srvfarm.net postfix/smtps/smtpd[610610]: warning: 201-55-158-228.witelecom.com.br[201.55.158.228]: SASL PLAIN authentication failed: 
Sep 12 21:11:40 mail.srvfarm.net postfix/smtps/smtpd[610610]: lost connection after AUTH from 201-55-158-228.witelecom.com.br[201.55.158.228]
Sep 12 21:17:02 mail.srvfarm.net postfix/smtps/smtpd[596783]: warning: 201-55-158-228.witelecom.com.br[201.55.158.228]: SASL PLAIN authentication failed: 
Sep 12 21:17:02 mail.srvfarm.net postfix/smtps/smtpd[596783]: lost connection after AUTH from 201-55-158-228.witelecom.com.br[201.55.158.228]
Sep 12 21:17:13 mail.srvfarm.net postfix/smtps/smtpd[597331]: warning: 201-55-158-228.witelecom.com.br[201.55.158.228]: SASL PLAIN authentication failed:
2020-09-14 01:32:43
201.55.158.228 attack
Sep 12 21:11:40 mail.srvfarm.net postfix/smtps/smtpd[610610]: warning: 201-55-158-228.witelecom.com.br[201.55.158.228]: SASL PLAIN authentication failed: 
Sep 12 21:11:40 mail.srvfarm.net postfix/smtps/smtpd[610610]: lost connection after AUTH from 201-55-158-228.witelecom.com.br[201.55.158.228]
Sep 12 21:17:02 mail.srvfarm.net postfix/smtps/smtpd[596783]: warning: 201-55-158-228.witelecom.com.br[201.55.158.228]: SASL PLAIN authentication failed: 
Sep 12 21:17:02 mail.srvfarm.net postfix/smtps/smtpd[596783]: lost connection after AUTH from 201-55-158-228.witelecom.com.br[201.55.158.228]
Sep 12 21:17:13 mail.srvfarm.net postfix/smtps/smtpd[597331]: warning: 201-55-158-228.witelecom.com.br[201.55.158.228]: SASL PLAIN authentication failed:
2020-09-13 17:26:14
201.55.158.225 attackbots
Aug 11 13:55:53 mail.srvfarm.net postfix/smtps/smtpd[2364251]: warning: 201-55-158-225.witelecom.com.br[201.55.158.225]: SASL PLAIN authentication failed: 
Aug 11 13:55:53 mail.srvfarm.net postfix/smtps/smtpd[2364251]: lost connection after AUTH from 201-55-158-225.witelecom.com.br[201.55.158.225]
Aug 11 13:56:01 mail.srvfarm.net postfix/smtps/smtpd[2366576]: warning: 201-55-158-225.witelecom.com.br[201.55.158.225]: SASL PLAIN authentication failed: 
Aug 11 13:56:01 mail.srvfarm.net postfix/smtps/smtpd[2366576]: lost connection after AUTH from 201-55-158-225.witelecom.com.br[201.55.158.225]
Aug 11 14:01:31 mail.srvfarm.net postfix/smtps/smtpd[2367144]: warning: 201-55-158-225.witelecom.com.br[201.55.158.225]: SASL PLAIN authentication failed:
2020-08-12 03:30:05
201.55.158.169 attackspam
Jun 18 05:12:42 mail.srvfarm.net postfix/smtps/smtpd[1338969]: warning: 201-55-158-169.witelecom.com.br[201.55.158.169]: SASL PLAIN authentication failed: 
Jun 18 05:12:42 mail.srvfarm.net postfix/smtps/smtpd[1338969]: lost connection after AUTH from 201-55-158-169.witelecom.com.br[201.55.158.169]
Jun 18 05:13:35 mail.srvfarm.net postfix/smtpd[1337038]: warning: 201-55-158-169.witelecom.com.br[201.55.158.169]: SASL PLAIN authentication failed: 
Jun 18 05:13:36 mail.srvfarm.net postfix/smtpd[1337038]: lost connection after AUTH from 201-55-158-169.witelecom.com.br[201.55.158.169]
Jun 18 05:19:08 mail.srvfarm.net postfix/smtpd[1339651]: warning: 201-55-158-169.witelecom.com.br[201.55.158.169]: SASL PLAIN authentication failed:
2020-06-18 16:41:12
201.55.158.113 attackbotsspam
(BR/Brazil/-) SMTP Bruteforcing attempts
2020-06-05 17:42:07
201.55.158.87 attack
(BR/Brazil/-) SMTP Bruteforcing attempts
2020-06-05 17:38:25
201.55.158.21 attack
May 20 17:46:49 mail.srvfarm.net postfix/smtps/smtpd[1512859]: warning: 201-55-158-21.witelecom.com.br[201.55.158.21]: SASL PLAIN authentication failed: 
May 20 17:46:50 mail.srvfarm.net postfix/smtps/smtpd[1512859]: lost connection after AUTH from 201-55-158-21.witelecom.com.br[201.55.158.21]
May 20 17:51:02 mail.srvfarm.net postfix/smtpd[1512862]: warning: 201-55-158-21.witelecom.com.br[201.55.158.21]: SASL PLAIN authentication failed: 
May 20 17:51:02 mail.srvfarm.net postfix/smtpd[1512862]: lost connection after AUTH from 201-55-158-21.witelecom.com.br[201.55.158.21]
May 20 17:54:07 mail.srvfarm.net postfix/smtps/smtpd[1510940]: warning: 201-55-158-21.witelecom.com.br[201.55.158.21]: SASL PLAIN authentication failed:
2020-05-21 00:51:00
201.55.158.46 attackbots
Brute forcing email accounts
2020-05-10 05:02:42
201.55.158.2 attackspambots
SpamScore above: 10.0
2020-03-25 10:05:05
201.55.158.155 attackbots
Sep  5 22:52:02 mailman postfix/smtpd[12837]: warning: 201-55-158-155.witelecom.com.br[201.55.158.155]: SASL PLAIN authentication failed: authentication failure
2019-09-06 17:55:04
201.55.158.171 attackspambots
Sep  5 14:11:06 mailman postfix/smtpd[29743]: warning: 201-55-158-171.witelecom.com.br[201.55.158.171]: SASL PLAIN authentication failed: authentication failure
2019-09-06 03:49:34
201.55.158.62 attackbotsspam
Excessive failed login attempts on port 25
2019-09-03 17:15:51
201.55.158.28 attackspambots
SASL PLAIN auth failed: ruser=...
2019-08-19 12:06:02
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 201.55.158.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30175
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;201.55.158.242.			IN	A

;; AUTHORITY SECTION:
.			439	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020060401 1800 900 604800 86400

;; Query time: 52 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jun 05 03:18:52 CST 2020
;; MSG SIZE  rcvd: 118
Host info
242.158.55.201.in-addr.arpa domain name pointer 201-55-158-242.witelecom.com.br.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
242.158.55.201.in-addr.arpa	name = 201-55-158-242.witelecom.com.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
77.72.124.246 attackbotsspam
suspicious action Thu, 20 Feb 2020 10:29:05 -0300
2020-02-20 23:15:23
116.206.40.57 attack
1582205366 - 02/20/2020 14:29:26 Host: 116.206.40.57/116.206.40.57 Port: 445 TCP Blocked
2020-02-20 23:00:42
49.234.179.127 attackspambots
Feb 20 15:21:55 markkoudstaal sshd[17668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.179.127
Feb 20 15:21:57 markkoudstaal sshd[17668]: Failed password for invalid user xutao from 49.234.179.127 port 58620 ssh2
Feb 20 15:24:43 markkoudstaal sshd[18110]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.179.127
2020-02-20 22:48:10
222.186.30.145 attack
Feb 20 20:31:52 areeb-Workstation sshd[5945]: Failed password for root from 222.186.30.145 port 36357 ssh2
Feb 20 20:32:02 areeb-Workstation sshd[5945]: Failed password for root from 222.186.30.145 port 36357 ssh2
...
2020-02-20 23:11:53
192.241.211.113 attack
1582205360 - 02/20/2020 20:29:20 Host: zg0213a-43.stretchoid.com/192.241.211.113 Port: 23 TCP Blocked
...
2020-02-20 23:05:40
187.103.81.29 attack
Port probing on unauthorized port 26
2020-02-20 22:48:48
140.143.58.46 attackspam
Feb 20 13:28:52 *** sshd[3773]: Invalid user michael from 140.143.58.46
2020-02-20 23:21:28
220.182.3.39 attack
Unauthorized access or intrusion attempt detected from Thor banned IP
2020-02-20 23:22:27
222.186.175.202 attack
Feb 20 04:58:14 web1 sshd\[15469\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.202  user=root
Feb 20 04:58:16 web1 sshd\[15469\]: Failed password for root from 222.186.175.202 port 59566 ssh2
Feb 20 04:58:19 web1 sshd\[15469\]: Failed password for root from 222.186.175.202 port 59566 ssh2
Feb 20 04:58:36 web1 sshd\[15477\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.202  user=root
Feb 20 04:58:39 web1 sshd\[15477\]: Failed password for root from 222.186.175.202 port 3830 ssh2
2020-02-20 23:05:02
54.161.195.179 attack
Feb 19 06:51:52 pl3server sshd[32256]: Invalid user admin from 54.161.195.179
Feb 19 06:51:52 pl3server sshd[32256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-54-161-195-179.compute-1.amazonaws.com
Feb 19 06:51:55 pl3server sshd[32256]: Failed password for invalid user admin from 54.161.195.179 port 56024 ssh2
Feb 19 06:51:55 pl3server sshd[32256]: Received disconnect from 54.161.195.179: 11: Bye Bye [preauth]
Feb 19 07:05:09 pl3server sshd[17175]: Invalid user rabbhostnamemq from 54.161.195.179
Feb 19 07:05:09 pl3server sshd[17175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-54-161-195-179.compute-1.amazonaws.com
Feb 19 07:05:10 pl3server sshd[17175]: Failed password for invalid user rabbhostnamemq from 54.161.195.179 port 43900 ssh2
Feb 19 07:05:10 pl3server sshd[17175]: Received disconnect from 54.161.195.179: 11: Bye Bye [preauth]
Feb 19 07:06:43 pl3server sshd[18957]:........
-------------------------------
2020-02-20 23:15:39
164.132.111.76 attackspam
Feb 20 04:21:39 web1 sshd\[12456\]: Invalid user rr from 164.132.111.76
Feb 20 04:21:39 web1 sshd\[12456\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.111.76
Feb 20 04:21:42 web1 sshd\[12456\]: Failed password for invalid user rr from 164.132.111.76 port 43926 ssh2
Feb 20 04:24:04 web1 sshd\[12684\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.111.76  user=gnats
Feb 20 04:24:06 web1 sshd\[12684\]: Failed password for gnats from 164.132.111.76 port 36680 ssh2
2020-02-20 23:22:41
89.144.47.246 attackspambots
Unauthorised access (Feb 20) SRC=89.144.47.246 LEN=40 TOS=0x08 PREC=0x20 TTL=243 ID=796 TCP DPT=3389 WINDOW=1024 SYN 
Unauthorised access (Feb 19) SRC=89.144.47.246 LEN=40 TTL=246 ID=61760 TCP DPT=3389 WINDOW=1024 SYN 
Unauthorised access (Feb 19) SRC=89.144.47.246 LEN=40 TTL=248 ID=12661 TCP DPT=3389 WINDOW=1024 SYN 
Unauthorised access (Feb 19) SRC=89.144.47.246 LEN=40 TOS=0x08 PREC=0x20 TTL=243 ID=33747 TCP DPT=3389 WINDOW=1024 SYN 
Unauthorised access (Feb 18) SRC=89.144.47.246 LEN=40 TTL=246 ID=52430 TCP DPT=3389 WINDOW=1024 SYN 
Unauthorised access (Feb 18) SRC=89.144.47.246 LEN=40 TTL=246 ID=42575 TCP DPT=3389 WINDOW=1024 SYN 
Unauthorised access (Feb 17) SRC=89.144.47.246 LEN=40 TOS=0x08 PREC=0x20 TTL=243 ID=44560 TCP DPT=3389 WINDOW=1024 SYN 
Unauthorised access (Feb 17) SRC=89.144.47.246 LEN=40 TOS=0x08 PREC=0x20 TTL=243 ID=28706 TCP DPT=3389 WINDOW=1024 SYN 
Unauthorised access (Feb 16) SRC=89.144.47.246 LEN=40 TOS=0x08 PREC=0x20 TTL=243 ID=23437 TCP DPT=3389 WINDOW=1024 SYN
2020-02-20 23:01:38
187.63.95.85 attackspam
Feb 20 12:28:56 olgosrv01 sshd[22640]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.63.95.85  user=gnats
Feb 20 12:28:58 olgosrv01 sshd[22640]: Failed password for gnats from 187.63.95.85 port 42926 ssh2
Feb 20 12:28:58 olgosrv01 sshd[22640]: Received disconnect from 187.63.95.85: 11: Bye Bye [preauth]
Feb 20 12:32:49 olgosrv01 sshd[22877]: Invalid user deploy from 187.63.95.85
Feb 20 12:32:49 olgosrv01 sshd[22877]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.63.95.85 
Feb 20 12:32:51 olgosrv01 sshd[22877]: Failed password for invalid user deploy from 187.63.95.85 port 53462 ssh2
Feb 20 12:32:52 olgosrv01 sshd[22877]: Received disconnect from 187.63.95.85: 11: Bye Bye [preauth]
Feb 20 12:36:39 olgosrv01 sshd[23094]: Invalid user m4 from 187.63.95.85
Feb 20 12:36:39 olgosrv01 sshd[23094]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=18........
-------------------------------
2020-02-20 23:25:41
18.233.131.167 attackbotsspam
Feb 20 15:32:08 [host] sshd[26341]: Invalid user c
Feb 20 15:32:08 [host] sshd[26341]: pam_unix(sshd:
Feb 20 15:32:10 [host] sshd[26341]: Failed passwor
2020-02-20 22:50:33
136.56.52.204 attackspambots
SSH brutforce
2020-02-20 22:59:15

Recently Reported IPs

177.44.16.237 177.11.115.176 177.8.197.0 177.8.196.108
41.255.35.182 170.231.94.164 124.69.165.190 138.122.97.12
131.196.93.70 128.127.90.23 125.64.94.130 103.129.64.57
94.74.181.131 91.187.118.183 89.107.154.75 88.199.41.6
69.94.158.116 63.82.48.233 45.236.74.226 45.226.20.180