JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 200.207.95.202

200.207.95.202 was found in our database!

This IP was reported 5,268 times. Confidence of Abuse is 0%: ?

ISP	TELEFÔNICA BRASIL S.A
Usage Type	Fixed Line ISP
ASN	AS27699
Hostname(s)	200-207-95-202.dsl.telesp.net.br
Domain Name	telefonica.com.br
Country	🇧🇷 Brazil
City	Sao Bernardo do Campo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 200.207.95.202

Whois 200.207.95.202

IP Abuse Reports for 200.207.95.202:

This IP address has been reported a total of 5,268 times from 757 distinct sources. 200.207.95.202 was first reported on June 1st 2021, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 JA	2023-07-12 14:00:37 (2 years ago)	ssh login attempt	Brute-Force SSH
🇮🇳 Parth Maniar	2023-01-20 11:30:32 (3 years ago)	SSH login attempts (SSH bruteforce attack). For more information, or to report interesting/incorrect ... show more SSH login attempts (SSH bruteforce attack). For more information, or to report interesting/incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
🇪🇸 saima.info	2023-01-17 15:00:00 (3 years ago)	Failed password for user root ssh2	Brute-Force Exploited Host SSH
🇩🇪 Shivakumar Gurumurthy	2022-12-17 13:33:46 (3 years ago)	2022-12-08 20:12:11,020 fail2ban.actions [336505]: NOTICE [sshd] Ban 200.207.95.202 2022-12- ... show more 2022-12-08 20:12:11,020 fail2ban.actions [336505]: NOTICE [sshd] Ban 200.207.95.202 2022-12-08 20:12:11,020 fail2ban.actions [336505]: NOTICE [sshd] Ban 200.207.95.202 2022-12-08 20:12:11,020 fail2ban.actions [336505]: NOTICE [sshd] Ban 200.207.95.202 ... show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2022-12-12 17:35:27 (3 years ago)	ThreatBook Intelligence: Scanner,Brute Force more details on https://threatbook.io/ip/200.207.95.202	Brute-Force
🇹🇷 ballibaba	2022-12-12 08:20:03 (3 years ago)	Detected SSH Brute Force by Mumcular Honeypot.	Brute-Force SSH
🇦🇹 ranklord	2022-12-12 07:15:59 (3 years ago)	F2B blocked SSH BF	Brute-Force SSH
🇩🇪 Filli Group	2022-12-12 06:43:55 (3 years ago)	2022-12-12T12:36:23.231168agent02.k3s.crazycraftland.net sshd[414870]: Invalid user minecraft from 2 ... show more 2022-12-12T12:36:23.231168agent02.k3s.crazycraftland.net sshd[414870]: Invalid user minecraft from 200.207.95.202 port 39572 2022-12-12T12:40:23.284740agent02.k3s.crazycraftland.net sshd[425806]: Invalid user cordoba from 200.207.95.202 port 44906 2022-12-12T12:43:54.336148agent02.k3s.crazycraftland.net sshd[435207]: Invalid user hs from 200.207.95.202 port 50214 ... show less	Brute-Force SSH
🇩🇪 iXNyNe	2022-12-12 06:35:18 (3 years ago)	Dec 12 04:31:06 vmi439163 sshd[3960367]: Disconnected from invalid user dev 200.207.95.202 port 6070 ... show more Dec 12 04:31:06 vmi439163 sshd[3960367]: Disconnected from invalid user dev 200.207.95.202 port 60700 [preauth] Dec 12 05:31:39 vmi439163 sshd[3970984]: Disconnected from authenticating user root 200.207.95.202 port 38032 [preauth] Dec 12 05:31:39 vmi439163 sshd[3970984]: Disconnected from authenticating user root 200.207.95.202 port 38032 [preauth] Dec 12 05:35:16 vmi439163 sshd[3971732]: Invalid user minecraft from 200.207.95.202 port 43340 Dec 12 05:35:16 vmi439163 sshd[3971732]: Disconnected from invalid user minecraft 200.207.95.202 port 43340 [preauth] ... show less	Brute-Force SSH
🇩🇪 Filli Group	2022-12-12 05:32:14 (3 years ago)	2022-12-12T11:20:23.380548agent02.k3s.crazycraftland.net sshd[205993]: Invalid user mamun from 200.2 ... show more 2022-12-12T11:20:23.380548agent02.k3s.crazycraftland.net sshd[205993]: Invalid user mamun from 200.207.95.202 port 42700 2022-12-12T11:28:33.442287agent02.k3s.crazycraftland.net sshd[229131]: Invalid user franbella from 200.207.95.202 port 51626 2022-12-12T11:32:13.994367agent02.k3s.crazycraftland.net sshd[238881]: Invalid user dev from 200.207.95.202 port 56938 ... show less	Brute-Force SSH
🇩🇪 iXNyNe	2022-12-12 05:31:08 (3 years ago)	Dec 12 04:15:30 vmi439163 sshd[3957284]: Invalid user mamun from 200.207.95.202 port 48540 Dec 12 04 ... show more Dec 12 04:15:30 vmi439163 sshd[3957284]: Invalid user mamun from 200.207.95.202 port 48540 Dec 12 04:15:30 vmi439163 sshd[3957284]: Disconnected from invalid user mamun 200.207.95.202 port 48540 [preauth] Dec 12 04:27:25 vmi439163 sshd[3959558]: Invalid user franbella from 200.207.95.202 port 21421 Dec 12 04:27:25 vmi439163 sshd[3959558]: Disconnected from invalid user franbella 200.207.95.202 port 21421 [preauth] Dec 12 04:31:05 vmi439163 sshd[3960367]: Invalid user dev from 200.207.95.202 port 60700 ... show less	Brute-Force SSH
🇳🇱 Roderic	2022-12-12 02:56:46 (3 years ago)	(sshd) Failed SSH login from 200.207.95.202 (BR/Brazil/200-207-95-202.dsl.telesp.net.br)	Brute-Force SSH
🇸🇬 Sofibox Cyberwatch	2022-12-12 02:34:20 (3 years ago)	[bad_ip: 200.207.95.202 [alert_level: High Risk [inbound(2)+outbound(0): 2 [target_port: 891 [class: ... show more [bad_ip: 200.207.95.202 [alert_level: High Risk [inbound(2)+outbound(0): 2 [target_port: 891 [class: Misc Attack [msg: ET 3CORESec Poor Reputation IP group 46 [csf_block_status: ip-already-blocked [blcheck_ip_score: 92.31% (14/182) [blcheck_domain: "bl.blocklist.de,dunk.dnsbl.tuxad.de,hartkore.dnsbl.tuxad.de,singular.ttk.pte.hu,bl.fmb.la,rbl.inter [blcheck_comment: "RBL scanner v0.7.8 @ github.com/sofibox/blcheck" [log_suspicious_score: 5.26% [mod_security_alert: false [has_cidr24_network: false(1) [(C) Arafat Ali @ arafatx.com show less	Hacking
🇩🇪 BarBonnetje	2022-12-12 02:14:49 (3 years ago)	Dec 12 08:11:16 legacy-managed-instances-01 sshd[3498081]: pam_unix(sshd:auth): authentication failu ... show more Dec 12 08:11:16 legacy-managed-instances-01 sshd[3498081]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.207.95.202 Dec 12 08:11:16 legacy-managed-instances-01 sshd[3498081]: Invalid user a from 200.207.95.202 port 46804 Dec 12 08:11:18 legacy-managed-instances-01 sshd[3498081]: Failed password for invalid user a from 200.207.95.202 port 46804 ssh2 Dec 12 08:14:47 legacy-managed-instances-01 sshd[3509124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.207.95.202 user=root Dec 12 08:14:48 legacy-managed-instances-01 sshd[3509124]: Failed password for root from 200.207.95.202 port 51048 ssh2 ... show less	Brute-Force SSH
🇸🇬 Sofibox Cyberwatch	2022-12-12 01:40:42 (3 years ago)	[bad_ip: 200.207.95.202 [alert_level: High Risk [inbound(1)+outbound(0): 1 [target_port: 891 [class: ... show more [bad_ip: 200.207.95.202 [alert_level: High Risk [inbound(1)+outbound(0): 1 [target_port: 891 [class: Misc Attack [msg: ET 3CORESec Poor Reputation IP group 46 [csf_block_status: ok-ip-block-success [blcheck_ip_score: 92.31% (14/182) [blcheck_domain: "bl.blocklist.de,dunk.dnsbl.tuxad.de,hartkore.dnsbl.tuxad.de,singular.ttk.pte.hu,bl.fmb.la,rbl.inter [blcheck_comment: "RBL scanner v0.7.8 @ github.com/sofibox/blcheck" [log_suspicious_score: nil% [mod_security_alert: false [has_cidr24_network: false(0) [(C) Arafat Ali @ arafatx.com show less	Hacking

Showing 1 to 15 of 5268 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 167.94.146.61

🇸🇬 152.42.160.174

🇮🇩 2001:448a:4090:2a02:589:4fbe:2943:69b7

🇩🇪 212.227.88.225

🇩🇪 194.88.98.114

🇮🇩 182.8.226.2

🇺🇸 147.185.132.49

🇩🇪 102.220.160.42

🇩🇪 64.188.83.134

🇨🇦 24.138.172.220

🇺🇸 20.168.106.243

🇨🇳 14.103.117.116

🇳🇱 5.255.100.26

🇺🇿 5.133.121.104

🇹🇼 198.235.24.42

🇧🇷 186.216.104.190

🇰🇷 180.182.229.194

🇺🇸 172.203.251.111

🇺🇸 162.216.150.166

🇫🇮 147.185.133.42