JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 201.66.81.109

201.66.81.109 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 0%: ?

ISP	V tal
Usage Type	Unknown
ASN	Unknown
Domain Name	vtal.com
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 201.66.81.109

Whois 201.66.81.109

IP Abuse Reports for 201.66.81.109:

This IP address has been reported a total of 53 times from 37 distinct sources. 201.66.81.109 was first reported on February 27th 2026, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-04-25 00:05:23 (4 months ago)	<jail> banned by fail2ban	Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2026-03-01 20:11:49 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2026-03-01 06:17:42 (6 months ago)	<jail> banned by fail2ban	Brute-Force Web App Attack
🇳🇱 Selckie	2026-03-01 04:42:42 (6 months ago)	fail2ban: SSH Brute-Force	SSH Brute-Force
🇹🇷 rtbh.com.tr	2026-02-28 20:11:48 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 bigscoots.com	2026-02-28 02:10:28 (6 months ago)	201.66.81.109 (BR/Brazil/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Por ... show more 201.66.81.109 (BR/Brazil/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 27 20:10:12 19079 sshd[12217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.242.203.160 user=root Feb 27 20:05:20 19079 sshd[11788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.242.203.160 user=root Feb 27 20:05:22 19079 sshd[11788]: Failed password for root from 43.242.203.160 port 34966 ssh2 Feb 27 20:09:47 19079 sshd[12142]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.66.81.109 user=root Feb 27 20:09:48 19079 sshd[12142]: Failed password for root from 201.66.81.109 port 54924 ssh2 IP Addresses Blocked: 43.242.203.160 (HK/Hong Kong/-) show less	Brute-Force SSH
🇩🇪 NetWatch	2026-02-28 02:08:49 (6 months ago)	The IP 201.66.81.109 tried multiple SSH_BRUTE_FORCE logins	Brute-Force
🇬🇧 andypiper	2026-02-28 02:00:25 (6 months ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
Anonymous	2026-02-28 01:25:10 (6 months ago)	2026-02-28T02:09:30.949619+01:00 host.nilsbossaller.de sshd[109392]: Disconnected from authenticatin ... show more 2026-02-28T02:09:30.949619+01:00 host.nilsbossaller.de sshd[109392]: Disconnected from authenticating user root 201.66.81.109 port 57000 [preauth] 2026-02-28T02:25:08.160186+01:00 host.nilsbossaller.de sshd[112766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.66.81.109 user=root 2026-02-28T02:25:10.240275+01:00 host.nilsbossaller.de sshd[112766]: Failed password for root from 201.66.81.109 port 55608 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-02-28 01:24:39 (6 months ago)	2026-02-28T01:11:07.414751front1.int sshd[229036]: Failed password for root from 201.66.81.109 port ... show more 2026-02-28T01:11:07.414751front1.int sshd[229036]: Failed password for root from 201.66.81.109 port 53730 ssh2 2026-02-28T01:19:11.647636front1.int sshd[9671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.66.81.109 user=root 2026-02-28T01:19:13.716780front1.int sshd[9671]: Failed password for root from 201.66.81.109 port 54318 ssh2 2026-02-28T01:24:35.571739front1.int sshd[26397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.66.81.109 user=root 2026-02-28T01:24:37.455273front1.int sshd[26397]: Failed password for root from 201.66.81.109 port 57008 ssh2 ... show less	Brute-Force SSH
🇫🇷 Asaman	2026-02-28 01:16:41 (6 months ago)	2026-02-28T02:05:17.454651+01:00 aligw01.aneirin.net sshd-session[8333]: Failed password for root fr ... show more 2026-02-28T02:05:17.454651+01:00 aligw01.aneirin.net sshd-session[8333]: Failed password for root from 201.66.81.109 port 56082 ssh2 2026-02-28T02:05:19.244494+01:00 aligw01.aneirin.net sshd-session[8333]: Disconnected from authenticating user root 201.66.81.109 port 56082 [preauth] 2026-02-28T02:16:41.077351+01:00 aligw01.aneirin.net sshd-session[8363]: Failed password for root from 201.66.81.109 port 57010 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-02-28 01:09:44 (6 months ago)	201.66.81.109 (BR/Brazil/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Por ... show more 201.66.81.109 (BR/Brazil/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 28 01:09:24 24350 sshd[2824]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.66.81.109 user=root Feb 28 00:50:36 24350 sshd[30870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.209.48 user=root Feb 28 00:48:18 24350 sshd[30394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.209.48 user=root Feb 28 00:48:21 24350 sshd[30394]: Failed password for root from 192.227.209.48 port 56150 ssh2 Feb 28 00:41:25 24350 sshd[28793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.209.48 user=root Feb 28 00:41:26 24350 sshd[28793]: Failed password for root from 192.227.209.48 port 47528 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-02-28 00:09:33 (6 months ago)	201.66.81.109 (BR/Brazil/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Por ... show more 201.66.81.109 (BR/Brazil/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 27 18:09:28 4470 sshd[22403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.66.81.109 user=root Feb 27 18:09:30 4470 sshd[22403]: Failed password for root from 201.66.81.109 port 55600 ssh2 Feb 27 18:06:53 4470 sshd[22152]: Failed password for root from 103.85.75.146 port 36804 ssh2 Feb 27 18:08:27 4470 sshd[22344]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.47.48.138 user=root Feb 27 18:08:29 4470 sshd[22344]: Failed password for root from 101.47.48.138 port 54520 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇩🇪 LoNET	2026-02-27 23:23:08 (6 months ago)	Report 2095978 with IP 3143539 for SSH brute-force attack by source 3138203 via ssh-honeypot/0.2.0+h ... show more Report 2095978 with IP 3143539 for SSH brute-force attack by source 3138203 via ssh-honeypot/0.2.0+http show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-02-27 23:21:43 (6 months ago)	(sshd) Failed SSH login from 201.66.81.109 (BR/Brazil/-): 5 in the last 3600 secs; Ports: ; Directi ... show more (sshd) Failed SSH login from 201.66.81.109 (BR/Brazil/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Feb 27 17:07:40 16118 sshd[9183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.66.81.109 user=root Feb 27 17:07:42 16118 sshd[9183]: Failed password for root from 201.66.81.109 port 55264 ssh2 Feb 27 17:16:10 16118 sshd[9897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.66.81.109 user=root Feb 27 17:16:12 16118 sshd[9897]: Failed password for root from 201.66.81.109 port 55356 ssh2 Feb 27 17:21:36 16118 sshd[10293]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.66.81.109 user=root show less	Brute-Force SSH

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.56.131.186

🇧🇪 34.22.140.135

🇺🇸 2607:f8b0:4864:20::845

🇲🇽 189.190.211.129

🇰🇬 158.181.23.166

🇵🇰 149.40.241.155

🇺🇸 147.185.132.126

🇩🇪 107.150.117.167

🇺🇸 100.12.5.68

🇺🇸 98.156.96.76

🇩🇪 45.135.193.204

🇬🇧 45.133.173.229

🇸🇬 43.134.85.158

🇨🇦 35.203.30.218

🇺🇸 35.196.194.80

🇳🇵 2407:1400:aa03:6018:c455:61aa:8911:7a47

🇧🇪 207.175.135.129

🇬🇧 185.216.145.170

🇫🇷 178.33.148.174

🇺🇸 173.254.211.184