201.68.0.5 - IPInfo

Basic Info

City: São Paulo

Region: Sao Paulo

Country: Brazil

Internet Service Provider: unknown

Hostname: unknown

Organization: TELEFÔNICA BRASIL S.A

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 201.68.0.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2423
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;201.68.0.5.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019071500 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Jul 16 00:40:07 CST 2019
;; MSG SIZE  rcvd: 114

Host info

5.0.68.201.in-addr.arpa domain name pointer 201-68-0-5.dsl.telesp.net.br.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
5.0.68.201.in-addr.arpa	name = 201-68-0-5.dsl.telesp.net.br.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
119.196.83.10	attack	detected by Fail2Ban	2019-10-30 06:58:22
14.162.144.39	attackspam	Unauthorized connection attempt from IP address 14.162.144.39 on Port 445(SMB)	2019-10-30 07:01:29
197.45.153.10	attackspambots	port scan and connect, tcp 23 (telnet)	2019-10-30 06:54:28
115.159.92.54	attackspam	SSH invalid-user multiple login try	2019-10-30 06:36:47
83.26.143.239	attack	Automatic report - Port Scan Attack	2019-10-30 07:03:35
180.155.22.77	attackbots	Unauthorized connection attempt from IP address 180.155.22.77 on Port 445(SMB)	2019-10-30 06:47:24
193.32.163.123	attackbotsspam	Oct 29 21:00:51 mc1 kernel: \[3665577.092661\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=193.32.163.123 DST=159.69.205.51 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=58591 DF PROTO=TCP SPT=34507 DPT=1080 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 29 21:00:53 mc1 kernel: \[3665579.096370\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=193.32.163.123 DST=159.69.205.51 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=58592 DF PROTO=TCP SPT=34507 DPT=1080 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 29 21:00:57 mc1 kernel: \[3665583.108327\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=193.32.163.123 DST=159.69.205.51 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=58593 DF PROTO=TCP SPT=34507 DPT=1080 WINDOW=29200 RES=0x00 SYN URGP=0 ...	2019-10-30 06:49:47
106.12.190.104	attackbots	Invalid user 123456 from 106.12.190.104 port 32820	2019-10-30 07:04:01
51.77.193.213	attackspam	Invalid user Software@2017 from 51.77.193.213 port 54780	2019-10-30 06:31:24
117.247.237.32	attackbotsspam	Unauthorized connection attempt from IP address 117.247.237.32 on Port 445(SMB)	2019-10-30 07:01:45
134.175.62.14	attackspambots	$f2bV_matches	2019-10-30 06:47:54
207.180.203.51	attackspam	Oct 29 18:19:02 Tower sshd[44819]: Connection from 207.180.203.51 port 60090 on 192.168.10.220 port 22 Oct 29 18:19:03 Tower sshd[44819]: Invalid user kevin from 207.180.203.51 port 60090 Oct 29 18:19:03 Tower sshd[44819]: error: Could not get shadow information for NOUSER Oct 29 18:19:03 Tower sshd[44819]: Failed password for invalid user kevin from 207.180.203.51 port 60090 ssh2 Oct 29 18:19:03 Tower sshd[44819]: Received disconnect from 207.180.203.51 port 60090:11: Bye Bye [preauth] Oct 29 18:19:03 Tower sshd[44819]: Disconnected from invalid user kevin 207.180.203.51 port 60090 [preauth]	2019-10-30 06:32:13
106.12.203.210	attackbotsspam	2019-10-29T22:06:40.522234abusebot-7.cloudsearch.cf sshd\[11586\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.203.210 user=root	2019-10-30 06:33:59
109.66.61.134	attackspam	port scan and connect, tcp 23 (telnet)	2019-10-30 06:55:23
23.95.82.42	attack	\[2019-10-29 18:57:02\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '23.95.82.42:63325' - Wrong password \[2019-10-29 18:57:02\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-29T18:57:02.566-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="7109",SessionID="0x7fdf2cc7a718",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/23.95.82.42/63325",Challenge="1991e04c",ReceivedChallenge="1991e04c",ReceivedHash="66e7cde5b1afbb6decaae33a09f327fb" \[2019-10-29 19:01:10\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '23.95.82.42:57069' - Wrong password \[2019-10-29 19:01:10\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-29T19:01:10.140-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="7110",SessionID="0x7fdf2cc27d48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/23.95.82.42/570	2019-10-30 07:02:42

Recently Reported IPs

85.94.101.199	81.120.146.101	175.168.223.254	106.80.130.1
74.40.161.86	161.143.138.76	204.94.131.40	102.176.210.159
52.47.242.151	148.70.50.40	97.200.242.38	57.54.204.224
125.84.189.160	202.33.15.99	118.89.67.241	79.78.120.25
135.22.181.187	216.128.136.85	141.149.207.95	137.194.83.251