JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

201.6.158.48

Neutral Activity

Abuse Confidence Score

0% Low Risk

107 reports

73 reporters · latest 5 months ago

ISP: Claro NXT Telecomunicacoes Ltda
Usage Type: Fixed Line ISP
ASN: AS28573
Hostname(s): c9069e30.virtua.com.br
Domain Name: claro.com.br
Country: 🇧🇷 Brazil
City: Sao Paulo, Sao Paulo

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

201.6.158.48 has been reported 107 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

107 from 73 distinct reporters

First reported

May 7th 2026

Most recent report

5 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-05-21 16:50:34 UTC · (5 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇨🇳 WMK965	2026-05-19 14:17:18 UTC · (5 months ago)	2026-05-19T22:15:34.953692+08:00 cn-node.965server.top sshd[199890]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.6.158.48 2026-05-19T22:15:36.606301+08:00 cn-node.965server.top sshd[199890]: Failed pass ... show more 2026-05-19T22:15:34.953692+08:00 cn-node.965server.top sshd[199890]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.6.158.48 2026-05-19T22:15:36.606301+08:00 cn-node.965server.top sshd[199890]: Failed password for invalid user claude from 201.6.158.48 port 41000 ssh2 2026-05-19T22:17:14.372175+08:00 cn-node.965server.top sshd[199923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.6.158.48 user=root 2026-05-19T22:17:17.088404+08:00 cn-node.965server.top sshd[199923]: Failed password for root from 201.6.158.48 port 37464 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-19 14:15:33 UTC · (5 months ago)	201.6.158.48 (BR/Brazil/c9069e30.virtua.com.br), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 19 09:11:29 14260 sshd[19516]: pam_unix(sshd:auth): authentication failure; ... show more 201.6.158.48 (BR/Brazil/c9069e30.virtua.com.br), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 19 09:11:29 14260 sshd[19516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.6.158.48 user=root May 19 09:11:31 14260 sshd[19516]: Failed password for root from 201.6.158.48 port 50322 ssh2 May 19 09:07:20 14260 sshd[19191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.255.141.221 user=root May 19 09:07:22 14260 sshd[19191]: Failed password for root from 143.255.141.221 port 41264 ssh2 May 19 09:15:28 14260 sshd[19855]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.255.141.221 user=root IP Addresses Blocked: show less	Brute-Force SSH
🇨🇭 ScanThe.Net	2026-05-19 14:10:36 UTC · (5 months ago)	ID: 3366116049 \| PORT: 9969 \| https://201-6-158-48.scanthe.net	Port Scan
🇺🇸 Szymekk	2026-05-19 13:22:50 UTC · (5 months ago)	Fail2Ban: SSH brute force attempt [srv05]	Brute-Force SSH
🇩🇪 sbajic	2026-05-19 11:47:49 UTC · (5 months ago)	2026-05-19T13:46:15.105301+02:00 gaia sshd[3566519]: Failed password for invalid user cdr from 201.6.158.48 port 39712 ssh2 2026-05-19T13:47:47.418883+02:00 gaia sshd[3567129]: Connection from 201.6.158.48 port 36152 on 23.88.28.109 port 22 rdomain " ... show more 2026-05-19T13:46:15.105301+02:00 gaia sshd[3566519]: Failed password for invalid user cdr from 201.6.158.48 port 39712 ssh2 2026-05-19T13:47:47.418883+02:00 gaia sshd[3567129]: Connection from 201.6.158.48 port 36152 on 23.88.28.109 port 22 rdomain "" 2026-05-19T13:47:48.354420+02:00 gaia sshd[3567129]: User root from 201.6.158.48 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇫🇷 terrae	2026-05-19 11:27:52 UTC · (5 months ago)	f2b report	Brute-Force SSH
🇸🇪 pils	2026-05-19 11:27:47 UTC · (5 months ago)	Failed SSH attempt from 201.6.158.48 (on Stockholm)	Brute-Force SSH
🇩🇪 sbajic	2026-05-19 11:22:58 UTC · (5 months ago)	2026-05-19T13:19:51.879585+02:00 gaia sshd[3556152]: Failed password for invalid user root from 201.6.158.48 port 47000 ssh2 2026-05-19T13:22:56.691982+02:00 gaia sshd[3557368]: Connection from 201.6.158.48 port 51104 on 23.88.28.109 port 22 rdomain ... show more 2026-05-19T13:19:51.879585+02:00 gaia sshd[3556152]: Failed password for invalid user root from 201.6.158.48 port 47000 ssh2 2026-05-19T13:22:56.691982+02:00 gaia sshd[3557368]: Connection from 201.6.158.48 port 51104 on 23.88.28.109 port 22 rdomain "" 2026-05-19T13:22:57.586819+02:00 gaia sshd[3557368]: Invalid user rancid from 201.6.158.48 port 51104 ... show less	Brute-Force SSH
🇵🇱 webadmin	2026-05-19 11:22:33 UTC · (5 months ago)	Fail2Ban Cluster BAN	Brute-Force Web App Attack
🇫🇷 eszfrigyes.com	2026-05-19 11:09:18 UTC · (5 months ago)	2026-05-19T13:09:17.673103+02:00 mail sshd[1422201]: Invalid user git from 201.6.158.48 port 50258 ...	Brute-Force SSH
🇫🇷 eszfrigyes.com	2026-05-19 10:37:00 UTC · (5 months ago)	2026-05-19T12:35:22.070249+02:00 mail sshd[1421669]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.6.158.48 user=root 2026-05-19T12:35:23.613688+02:00 mail sshd[1421669]: Failed password for root from 20 ... show more 2026-05-19T12:35:22.070249+02:00 mail sshd[1421669]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.6.158.48 user=root 2026-05-19T12:35:23.613688+02:00 mail sshd[1421669]: Failed password for root from 201.6.158.48 port 50206 ssh2 2026-05-19T12:36:58.992420+02:00 mail sshd[1421678]: Invalid user hsh from 201.6.158.48 port 48600 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-19 10:35:12 UTC · (5 months ago)	201.6.158.48 (BR/Brazil/c9069e30.virtua.com.br), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 19 05:34:53 14240 sshd[8682]: pam_unix(sshd:auth): authentication failure; ... show more 201.6.158.48 (BR/Brazil/c9069e30.virtua.com.br), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 19 05:34:53 14240 sshd[8682]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.226.199 user=root May 19 05:33:08 14240 sshd[8572]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.226.199 user=root May 19 05:33:09 14240 sshd[8572]: Failed password for root from 95.85.226.199 port 48788 ssh2 May 19 05:31:34 14240 sshd[8408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.6.158.48 user=root May 19 05:31:36 14240 sshd[8408]: Failed password for root from 201.6.158.48 port 33356 ssh2 IP Addresses Blocked: 95.85.226.199 (NL/The Netherlands/-) show less	Brute-Force SSH
🇩🇪 ipcop.net	2026-05-19 10:06:48 UTC · (5 months ago)	2026-05-19T12:01:54.658895+02:00 router02.imr-richtsfeld.de sshd[1574978]: Disconnected from authenticating user root 201.6.158.48 port 40232 [preauth] 2026-05-19T12:03:33.852229+02:00 router02.imr-richtsfeld.de sshd[1575929]: Disconnected from authe ... show more 2026-05-19T12:01:54.658895+02:00 router02.imr-richtsfeld.de sshd[1574978]: Disconnected from authenticating user root 201.6.158.48 port 40232 [preauth] 2026-05-19T12:03:33.852229+02:00 router02.imr-richtsfeld.de sshd[1575929]: Disconnected from authenticating user root 201.6.158.48 port 36804 [preauth] 2026-05-19T12:05:11.204488+02:00 router02.imr-richtsfeld.de sshd[1576774]: Disconnected from authenticating user root 201.6.158.48 port 33410 [preauth] 2026-05-19T12:06:46.815396+02:00 router02.imr-richtsfeld.de sshd[1577514]: Invalid user claude from 201.6.158.48 port 58180 2026-05-19T12:06:47.072937+02:00 router02.imr-richtsfeld.de sshd[1577514]: Disconnected from invalid user claude 201.6.158.48 port 58180 [preauth] show less	Brute-Force
🇫🇷 bulletz	2026-05-19 09:53:31 UTC · (5 months ago)	2026-05-19T11:52:01.167388+02:00 vps sshd[7415]: Failed password for root from 201.6.158.48 port 52988 ssh2 2026-05-19T11:53:28.818419+02:00 vps sshd[7444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.6 ... show more 2026-05-19T11:52:01.167388+02:00 vps sshd[7415]: Failed password for root from 201.6.158.48 port 52988 ssh2 2026-05-19T11:53:28.818419+02:00 vps sshd[7444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.6.158.48 user=root 2026-05-19T11:53:30.902723+02:00 vps sshd[7444]: Failed password for root from 201.6.158.48 port 49540 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 107 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇸🇮 102.220.160.148

🇵🇰 223.123.46.37

🇲🇽 189.163.22.148

🇫🇷 172.226.29.27

🇫🇮 170.168.240.32

🇺🇸 170.168.29.73

🇫🇮 157.22.101.102

🇺🇸 153.66.119.151

🇺🇸 129.121.137.135

🇳🇱 109.160.32.127

🇪🇸 84.236.143.66

🇰🇷 58.230.162.174

🇳🇱 45.148.10.151

🇬🇧 35.203.210.127

🇺🇸 216.244.66.198

🇺🇸 209.217.33.84

🇧🇪 207.175.218.17

🇺🇸 162.216.150.241

🇫🇮 104.245.240.42

🇧🇩 103.158.118.221