Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Brazil

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 201.69.61.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62778
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;201.69.61.34.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021900 1800 900 604800 86400

;; Query time: 55 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 19 23:16:35 CST 2025
;; MSG SIZE  rcvd: 105
Host info
34.61.69.201.in-addr.arpa domain name pointer 201-69-61-34.dial-up.telesp.net.br.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
34.61.69.201.in-addr.arpa	name = 201-69-61-34.dial-up.telesp.net.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
133.130.89.210 attackbots
Dec  8 07:09:30 localhost sshd\[3317\]: Invalid user thanbalu from 133.130.89.210 port 42340
Dec  8 07:09:30 localhost sshd\[3317\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=133.130.89.210
Dec  8 07:09:32 localhost sshd\[3317\]: Failed password for invalid user thanbalu from 133.130.89.210 port 42340 ssh2
2019-12-08 14:22:09
112.85.42.171 attack
Dec  8 01:42:34 linuxvps sshd\[48392\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.171  user=root
Dec  8 01:42:36 linuxvps sshd\[48392\]: Failed password for root from 112.85.42.171 port 36151 ssh2
Dec  8 01:42:48 linuxvps sshd\[48392\]: Failed password for root from 112.85.42.171 port 36151 ssh2
Dec  8 01:42:52 linuxvps sshd\[48569\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.171  user=root
Dec  8 01:42:54 linuxvps sshd\[48569\]: Failed password for root from 112.85.42.171 port 8185 ssh2
2019-12-08 14:47:33
222.186.175.155 attackbots
Dec  8 03:21:56 firewall sshd[23066]: Failed password for root from 222.186.175.155 port 49022 ssh2
Dec  8 03:21:56 firewall sshd[23066]: error: maximum authentication attempts exceeded for root from 222.186.175.155 port 49022 ssh2 [preauth]
Dec  8 03:21:56 firewall sshd[23066]: Disconnecting: Too many authentication failures [preauth]
...
2019-12-08 14:25:37
149.56.141.197 attack
Dec  8 07:23:57 lnxded64 sshd[15944]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.56.141.197
Dec  8 07:23:59 lnxded64 sshd[15944]: Failed password for invalid user admin from 149.56.141.197 port 59934 ssh2
Dec  8 07:30:22 lnxded64 sshd[17488]: Failed password for root from 149.56.141.197 port 58692 ssh2
2019-12-08 14:44:15
185.200.118.80 attackspam
" "
2019-12-08 14:42:42
183.134.199.68 attackspam
Dec  7 20:33:05 sachi sshd\[27574\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.134.199.68  user=root
Dec  7 20:33:07 sachi sshd\[27574\]: Failed password for root from 183.134.199.68 port 45776 ssh2
Dec  7 20:40:34 sachi sshd\[28427\]: Invalid user gdm from 183.134.199.68
Dec  7 20:40:34 sachi sshd\[28427\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.134.199.68
Dec  7 20:40:35 sachi sshd\[28427\]: Failed password for invalid user gdm from 183.134.199.68 port 50178 ssh2
2019-12-08 15:06:32
104.248.4.117 attackbots
Dec  8 13:34:29 itv-usvr-01 sshd[7456]: Invalid user dahler from 104.248.4.117
Dec  8 13:34:29 itv-usvr-01 sshd[7456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.4.117
Dec  8 13:34:29 itv-usvr-01 sshd[7456]: Invalid user dahler from 104.248.4.117
Dec  8 13:34:30 itv-usvr-01 sshd[7456]: Failed password for invalid user dahler from 104.248.4.117 port 55692 ssh2
Dec  8 13:39:54 itv-usvr-01 sshd[7782]: Invalid user Irma from 104.248.4.117
2019-12-08 15:02:28
45.127.133.72 attackspambots
Dec  8 07:30:40 MK-Soft-VM6 sshd[1487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.127.133.72 
Dec  8 07:30:42 MK-Soft-VM6 sshd[1487]: Failed password for invalid user delhi7 from 45.127.133.72 port 56736 ssh2
...
2019-12-08 14:49:13
185.143.223.160 attackspambots
Triggered: repeated knocking on closed ports.
2019-12-08 14:52:47
159.203.143.58 attackspambots
Dec  8 08:30:00 sauna sshd[242508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.143.58
Dec  8 08:30:02 sauna sshd[242508]: Failed password for invalid user wwwrun1 from 159.203.143.58 port 56724 ssh2
...
2019-12-08 14:55:18
203.142.69.203 attack
Dec  8 08:20:46 sauna sshd[242127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.142.69.203
Dec  8 08:20:49 sauna sshd[242127]: Failed password for invalid user whcsw from 203.142.69.203 port 58489 ssh2
...
2019-12-08 14:23:27
114.237.188.143 attack
Dec  8 07:30:05 grey postfix/smtpd\[12398\]: NOQUEUE: reject: RCPT from unknown\[114.237.188.143\]: 554 5.7.1 Service unavailable\; Client host \[114.237.188.143\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[114.237.188.143\]\; from=\ to=\ proto=ESMTP helo=\
...
2019-12-08 14:46:06
113.255.45.65 attackspam
Honeypot attack, port: 5555, PTR: 65-45-255-113-on-nets.com.
2019-12-08 15:03:44
177.85.116.242 attackspambots
Dec  8 06:17:02 v22018086721571380 sshd[8816]: Failed password for invalid user oracle from 177.85.116.242 port 37433 ssh2
Dec  8 07:30:09 v22018086721571380 sshd[14561]: Failed password for invalid user elev from 177.85.116.242 port 29634 ssh2
2019-12-08 14:43:11
194.187.251.155 attack
Time:     Sun Dec  8 03:11:12 2019 -0300
IP:       194.187.251.155 (BE/Belgium/155.251.187.194.in-addr.arpa)
Failures: 5 (mod_security)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_MODSEC]

Log entries:

194.187.251.155 - - [08/Dec/2019:03:10:49 -0300] "GET /wp-login.php?registration=disabled HTTP/1.1" 200 1282 "https://brasilwork.com.br/" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:15.0) Gecko/20120427 Firefox/15.0a1"
194.187.251.155 - - [08/Dec/2019:03:10:51 -0300] "GET /wp-cron.php HTTP/1.1" 200 - "https://brasilwork.com.br/" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:15.0) Gecko/20120427 Firefox/15.0a1"
[Sun Dec 08 03:11:08.082212 2019] [:error] [pid 5036] [client 194.187.251.155:51532] [client 194.187.251.155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "122"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "br
2019-12-08 14:51:09

Recently Reported IPs

132.192.106.175 247.216.66.15 48.215.28.204 128.218.95.63
201.157.2.253 38.222.253.106 235.93.205.177 153.182.40.140
209.67.225.10 147.39.7.206 122.251.125.142 206.143.243.166
255.209.181.56 248.12.230.35 92.167.185.188 63.225.75.233
82.117.56.113 39.144.16.158 243.179.102.232 96.91.91.177