201.68.214.197

Basic Info

City: São Paulo

Region: Sao Paulo

Country: Brazil

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 201.68.214.197
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9316
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;201.68.214.197.			IN	A

;; AUTHORITY SECTION:
.			569	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020021201 1800 900 604800 86400

;; Query time: 168 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 13 04:57:28 CST 2020
;; MSG SIZE  rcvd: 118

Host info

197.214.68.201.in-addr.arpa domain name pointer 201-68-214-197.dsl.telesp.net.br.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
197.214.68.201.in-addr.arpa	name = 201-68-214-197.dsl.telesp.net.br.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
78.124.108.212	attackspam	Unauthorized connection attempt detected from IP address 78.124.108.212 to port 85	2020-02-22 07:52:54
211.214.73.170	attackspambots	DATE:2020-02-21 22:27:03, IP:211.214.73.170, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-02-22 08:11:49
218.92.0.191	attack	Feb 22 01:02:32 dcd-gentoo sshd[15801]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Feb 22 01:02:34 dcd-gentoo sshd[15801]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Feb 22 01:02:32 dcd-gentoo sshd[15801]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Feb 22 01:02:34 dcd-gentoo sshd[15801]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Feb 22 01:02:32 dcd-gentoo sshd[15801]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Feb 22 01:02:34 dcd-gentoo sshd[15801]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Feb 22 01:02:34 dcd-gentoo sshd[15801]: Failed keyboard-interactive/pam for invalid user root from 218.92.0.191 port 55414 ssh2 ...	2020-02-22 08:19:32
212.237.57.82	attackbotsspam	Invalid user vmail from 212.237.57.82 port 37402	2020-02-22 08:16:28
180.150.187.159	attackspam	Feb 22 00:48:50 Ubuntu-1404-trusty-64-minimal sshd\[10994\]: Invalid user isl from 180.150.187.159 Feb 22 00:48:50 Ubuntu-1404-trusty-64-minimal sshd\[10994\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.150.187.159 Feb 22 00:48:52 Ubuntu-1404-trusty-64-minimal sshd\[10994\]: Failed password for invalid user isl from 180.150.187.159 port 50166 ssh2 Feb 22 00:56:18 Ubuntu-1404-trusty-64-minimal sshd\[14946\]: Invalid user l4d2 from 180.150.187.159 Feb 22 00:56:18 Ubuntu-1404-trusty-64-minimal sshd\[14946\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.150.187.159	2020-02-22 08:12:19
159.89.181.213	attack	Invalid user oracle from 159.89.181.213 port 48818	2020-02-22 08:05:30
185.147.212.8	attackspam	[2020-02-21 19:06:06] NOTICE[1148] chan_sip.c: Registration from '' failed for '185.147.212.8:52646' - Wrong password [2020-02-21 19:06:06] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-21T19:06:06.410-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="1470",SessionID="0x7fd82c10acc8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.212.8/52646",Challenge="6edaa18e",ReceivedChallenge="6edaa18e",ReceivedHash="2efbf583d88362443215193e28142107" [2020-02-21 19:06:32] NOTICE[1148] chan_sip.c: Registration from '' failed for '185.147.212.8:64246' - Wrong password [2020-02-21 19:06:32] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-21T19:06:32.790-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="2579",SessionID="0x7fd82cdc4bd8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.212.8 ...	2020-02-22 08:21:00
91.77.165.18	attackspam	SSH Brute-Forcing (server2)	2020-02-22 08:19:05
51.158.25.170	attackbotsspam	firewall-block, port(s): 55099/udp	2020-02-22 07:55:16
218.94.37.22	attackspam	port scan and connect, tcp 1433 (ms-sql-s)	2020-02-22 08:23:53
46.25.31.59	attack	02/21/2020-16:28:18.573292 46.25.31.59 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 45	2020-02-22 08:35:41
222.186.180.223	attackbotsspam	Feb 22 01:05:37 silence02 sshd[17528]: Failed password for root from 222.186.180.223 port 45306 ssh2 Feb 22 01:05:41 silence02 sshd[17528]: Failed password for root from 222.186.180.223 port 45306 ssh2 Feb 22 01:05:43 silence02 sshd[17528]: Failed password for root from 222.186.180.223 port 45306 ssh2 Feb 22 01:05:47 silence02 sshd[17528]: Failed password for root from 222.186.180.223 port 45306 ssh2	2020-02-22 08:09:17
45.143.222.185	attackspambots	Brute forcing email accounts	2020-02-22 07:54:53
222.186.175.202	attackbots	Scanned 40 times in the last 24 hours on port 22	2020-02-22 08:06:27
149.202.59.85	attackbots	$f2bV_matches	2020-02-22 08:05:55

Recently Reported IPs

118.47.41.83	149.126.38.82	3.173.220.60	93.30.3.174
194.168.11.235	87.207.221.129	35.161.170.208	103.5.63.10
52.116.93.102	131.203.112.131	97.115.84.60	118.42.49.180
175.45.102.173	86.18.246.145	60.250.246.222	125.231.33.112
101.106.219.121	32.239.120.219	125.88.87.116	119.225.211.122