JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 201.66.157.139

201.66.157.139 was found in our database!

This IP was reported 112 times. Confidence of Abuse is 100%: ?

100%

ISP	V tal
Usage Type	Fixed Line ISP
ASN	AS8167
Domain Name	vtal.com
Country	🇧🇷 Brazil
City	Pelotas, Rio Grande do Sul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 201.66.157.139

Whois 201.66.157.139

IP Abuse Reports for 201.66.157.139:

This IP address has been reported a total of 112 times from 49 distinct sources. 201.66.157.139 was first reported on July 26th 2025, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 GoodOldTOS	2026-10-27 11:36:19 (4 hours ago)	Un-authorized connection to Telnet	Hacking
🇩🇪 Kitki30.com	2026-10-27 11:33:25 (4 hours ago)	Entered Telnet Tarpit (endlessh, server 3). Log: 2026-10-27T11:33:24.392Z ACCEPT host=::ffff:201.66. ... show more Entered Telnet Tarpit (endlessh, server 3). Log: 2026-10-27T11:33:24.392Z ACCEPT host=::ffff:201.66.157.139 port=11192 fd=291 n=651/1020 show less	IoT Targeted Port Scan Brute-Force
🇺🇸 RAP	2026-10-26 16:47:06 (23 hours ago)	2026-10-26 16:47:06 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇫🇷 security.rdmc.fr	2026-10-26 16:34:15 (23 hours ago)	Port Scan Attack proto:TCP src:11970 dst:23	Port Scan
🇦🇺 LiftUp Hosting	2026-10-26 11:27:36 (1 day ago)	Honeypot hit: Unauthorized connection attempt detected on 23/TELNET	Hacking Port Scan
🇺🇸 zensatori	2026-10-26 08:14:41 (1 day ago)	Cowrie honeypot (telnet): 1 login attempt(s) [root/ipcam]; commands: enable ; system ; shell ; sh ; ... show more Cowrie honeypot (telnet): 1 login attempt(s) [root/ipcam]; commands: enable ; system ; shell ; sh ; linuxshell ; ping ;sh ; /bin/busybox ; /bin/busybox hostname PBOC ; /bin/busybox echo > /tmp/.b && sh /tmp/.b && cd /tmp/ ; /bin/busybox echo > /var/.b && sh /var/.b && cd /var/ ; /bin/busybox echo > /var/run/.b && sh /var/run/.b && cd /var/run/ ; /bin/busybox echo > /var/tmp/.b && sh /var/tmp/.b && cd /var/tmp/ ; /bin/busybox echo > /dev/.b && sh /dev/.b && cd /dev/ ; /bin/busybox echo > /dev/shm/.b && sh /dev/shm/.b && cd /dev/shm/ ; /bin/busybox echo > /etc/.b && sh /etc/.b && cd /etc/ ; /bin/busybox echo > /mnt/.b && sh /mnt/.b && cd /mnt/ ; /bin/busybox echo > /usr/.b && sh /usr/.b && cd /usr/ ; /bin/busybox echo > /boot/.b && sh /boot/.b && cd /boot/ ; /bin/busybox echo > /home/.b && sh /home/.b && cd /home/ ; /bin/busybox ; /bin/busybox echo -ne "\x23\x21\x2F\x62\x69\x6E\x2F\x73\x68\x0A\x0A\x66\x6F\x72\x20\x70\x72\x6F\x63\x5F\x64\x69\x72\x20\x69\x6E\x20\x2F\x70\x72\x6F\x63" > .k ; show less	Brute-Force IoT Targeted
🇮🇹 CoreTech srl	2026-10-26 02:33:52 (1 day ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_unsafe_protocol	Hacking
🇫🇷 security.rdmc.fr	2026-10-25 20:39:35 (1 day ago)	Port Scan Attack proto:TCP src:10061 dst:23	Port Scan
🇺🇸 RAP	2026-10-25 17:23:10 (1 day ago)	2026-10-25 17:23:10 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇩🇪 RazorLabs.dev	2026-10-25 16:40:41 (1 day ago)	Automated report from fail2ban: unsolicited TCP connection attempt to port 23/2323 (telnet) on a hos ... show more Automated report from fail2ban: unsolicited TCP connection attempt to port 23/2323 (telnet) on a host running no telnet service, dropped by host firewall. show less	Port Scan Brute-Force IoT Targeted
🇧🇷 chronos	2026-10-25 14:14:23 (2 days ago)	Telnet: Connection attempt to the unencrypted remote login service, commonly probed by IoT botnets. ... show more Telnet: Connection attempt to the unencrypted remote login service, commonly probed by IoT botnets. \| Port: 23 \| Proto: TCP \| AS: AS8167 V tal \| Location: Brazil, Pelotas (~50km) show less	IoT Targeted Port Scan
🇨🇦 dpinse	2026-10-25 01:55:23 (2 days ago)	Honeypot [honeypot-ca-sensor1]: Unauthorized connection attempt detected on 23/TELNET	Hacking Port Scan
🇦🇺 FEWA	2026-10-24 23:54:32 (2 days ago)	Fail2Ban Ban Triggered	Hacking Brute-Force
🇫🇷 security.rdmc.fr	2026-10-24 19:29:22 (2 days ago)	Port Scan Attack proto:TCP src:10588 dst:23	Port Scan
🇪🇸 raiolanetworks.com	2026-10-24 16:38:39 (2 days ago)	Honeypot detection: SSH/Telnet brute-force. 2 events observed. Reported automatically from a honeypo ... show more Honeypot detection: SSH/Telnet brute-force. 2 events observed. Reported automatically from a honeypot sensor. show less	Brute-Force SSH

Showing 1 to 15 of 112 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 178.151.150.81

🇻🇳 117.4.254.98

🇳🇱 89.21.67.131

🇫🇮 13.140.90.233

🇺🇸 222.167.111.220

🇧🇷 168.195.198.146

🇦🇺 168.144.172.211

🇩🇪 151.243.11.203

🇦🇷 148.227.74.161

🇫🇮 147.185.133.220

🇨🇳 123.57.137.61

🇬🇧 87.236.176.55

🇮🇹 87.7.204.126

🇳🇱 45.148.10.157

🇰🇷 218.234.186.2

🇺🇾 186.55.66.122

🇬🇪 185.212.253.110

🇺🇸 162.216.149.157

🇩🇪 151.243.11.206

🇩🇪 149.34.246.34