AbuseIPDB » 201.95.16.160

201.95.16.160 was found in our database!

This IP was reported 304 times. Confidence of Abuse is 100%: ?

100%

ISP	Telefonica Brasil S.A
Usage Type	Mobile ISP
Hostname(s)	201-95-16-160.dsl.telesp.net.br
Domain Name	telefonica.com.br
Country	Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 201.95.16.160

Whois 201.95.16.160

IP Abuse Reports for 201.95.16.160:

This IP address has been reported a total of 304 times from 134 distinct sources. 201.95.16.160 was first reported on January 30th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
ipcop.net	21 Mar 2023	Feb 4 01:37:03 guac-host01.view.srvfarm.net sshd[3286473]: Disconnected from authenticating user ro ... show moreFeb 4 01:37:03 guac-host01.view.srvfarm.net sshd[3286473]: Disconnected from authenticating user root 201.95.16.160 port 10978 [preauth] Feb 4 01:39:28 guac-host01.view.srvfarm.net sshd[3286694]: Disconnected from authenticating user root 201.95.16.160 port 39169 [preauth] Feb 4 01:41:08 guac-host01.view.srvfarm.net sshd[3286794]: Disconnected from authenticating user root 201.95.16.160 port 62017 [preauth] Feb 4 01:42:50 guac-host01.view.srvfarm.net sshd[3286830]: Disconnected from authenticating user root 201.95.16.160 port 21601 [preauth] Feb 4 01:44:30 guac-host01.view.srvfarm.net sshd[3286895]: Disconnected from authenticating user root 201.95.16.160 port 44066 [preauth] show less	Brute-Force
ipcop.net	21 Mar 2023	Feb 4 01:37:03 guac-host01.view.srvfarm.net sshd[3286473]: Disconnected from authenticating user ro ... show moreFeb 4 01:37:03 guac-host01.view.srvfarm.net sshd[3286473]: Disconnected from authenticating user root 201.95.16.160 port 10978 [preauth] Feb 4 01:39:28 guac-host01.view.srvfarm.net sshd[3286694]: Disconnected from authenticating user root 201.95.16.160 port 39169 [preauth] Feb 4 01:41:08 guac-host01.view.srvfarm.net sshd[3286794]: Disconnected from authenticating user root 201.95.16.160 port 62017 [preauth] Feb 4 01:42:50 guac-host01.view.srvfarm.net sshd[3286830]: Disconnected from authenticating user root 201.95.16.160 port 21601 [preauth] Feb 4 01:44:30 guac-host01.view.srvfarm.net sshd[3286895]: Disconnected from authenticating user root 201.95.16.160 port 44066 [preauth] show less	Brute-Force
ipcop.net	21 Mar 2023	Feb 4 01:37:03 guac-host01.view.srvfarm.net sshd[3286473]: Disconnected from authenticating user ro ... show moreFeb 4 01:37:03 guac-host01.view.srvfarm.net sshd[3286473]: Disconnected from authenticating user root 201.95.16.160 port 10978 [preauth] Feb 4 01:39:28 guac-host01.view.srvfarm.net sshd[3286694]: Disconnected from authenticating user root 201.95.16.160 port 39169 [preauth] Feb 4 01:41:08 guac-host01.view.srvfarm.net sshd[3286794]: Disconnected from authenticating user root 201.95.16.160 port 62017 [preauth] Feb 4 01:42:50 guac-host01.view.srvfarm.net sshd[3286830]: Disconnected from authenticating user root 201.95.16.160 port 21601 [preauth] Feb 4 01:44:30 guac-host01.view.srvfarm.net sshd[3286895]: Disconnected from authenticating user root 201.95.16.160 port 44066 [preauth] show less	Brute-Force
ipcop.net	21 Mar 2023	Feb 4 01:37:03 guac-host01.view.srvfarm.net sshd[3286473]: Disconnected from authenticating user ro ... show moreFeb 4 01:37:03 guac-host01.view.srvfarm.net sshd[3286473]: Disconnected from authenticating user root 201.95.16.160 port 10978 [preauth] Feb 4 01:39:28 guac-host01.view.srvfarm.net sshd[3286694]: Disconnected from authenticating user root 201.95.16.160 port 39169 [preauth] Feb 4 01:41:08 guac-host01.view.srvfarm.net sshd[3286794]: Disconnected from authenticating user root 201.95.16.160 port 62017 [preauth] Feb 4 01:42:50 guac-host01.view.srvfarm.net sshd[3286830]: Disconnected from authenticating user root 201.95.16.160 port 21601 [preauth] Feb 4 01:44:30 guac-host01.view.srvfarm.net sshd[3286895]: Disconnected from authenticating user root 201.95.16.160 port 44066 [preauth] show less	Brute-Force
ipcop.net	21 Mar 2023	Feb 4 01:37:03 guac-host01.view.srvfarm.net sshd[3286473]: Disconnected from authenticating user ro ... show moreFeb 4 01:37:03 guac-host01.view.srvfarm.net sshd[3286473]: Disconnected from authenticating user root 201.95.16.160 port 10978 [preauth] Feb 4 01:39:28 guac-host01.view.srvfarm.net sshd[3286694]: Disconnected from authenticating user root 201.95.16.160 port 39169 [preauth] Feb 4 01:41:08 guac-host01.view.srvfarm.net sshd[3286794]: Disconnected from authenticating user root 201.95.16.160 port 62017 [preauth] Feb 4 01:42:50 guac-host01.view.srvfarm.net sshd[3286830]: Disconnected from authenticating user root 201.95.16.160 port 21601 [preauth] Feb 4 01:44:30 guac-host01.view.srvfarm.net sshd[3286895]: Disconnected from authenticating user root 201.95.16.160 port 44066 [preauth] show less	Brute-Force
ipcop.net	21 Mar 2023	Feb 4 01:37:03 guac-host01.view.srvfarm.net sshd[3286473]: Disconnected from authenticating user ro ... show moreFeb 4 01:37:03 guac-host01.view.srvfarm.net sshd[3286473]: Disconnected from authenticating user root 201.95.16.160 port 10978 [preauth] Feb 4 01:39:28 guac-host01.view.srvfarm.net sshd[3286694]: Disconnected from authenticating user root 201.95.16.160 port 39169 [preauth] Feb 4 01:41:08 guac-host01.view.srvfarm.net sshd[3286794]: Disconnected from authenticating user root 201.95.16.160 port 62017 [preauth] Feb 4 01:42:50 guac-host01.view.srvfarm.net sshd[3286830]: Disconnected from authenticating user root 201.95.16.160 port 21601 [preauth] Feb 4 01:44:30 guac-host01.view.srvfarm.net sshd[3286895]: Disconnected from authenticating user root 201.95.16.160 port 44066 [preauth] show less	Brute-Force
ipcop.net	18 Mar 2023	Jan 31 01:12:12 router01.3pack.de sshd[3906252]: Disconnected from authenticating user root 201.95.1 ... show moreJan 31 01:12:12 router01.3pack.de sshd[3906252]: Disconnected from authenticating user root 201.95.16.160 port 57921 [preauth] Jan 31 01:13:59 router01.3pack.de sshd[3906369]: Disconnected from authenticating user root 201.95.16.160 port 17377 [preauth] Jan 31 01:15:16 router01.3pack.de sshd[3906572]: Disconnected from authenticating user root 201.95.16.160 port 49985 [preauth] Jan 31 01:16:33 router01.3pack.de sshd[3906687]: Disconnected from authenticating user root 201.95.16.160 port 18306 [preauth] Jan 31 01:17:52 router01.3pack.de sshd[3906836]: Disconnected from authenticating user root 201.95.16.160 port 49473 [preauth] show less	Brute-Force
Shivakumar Gurumurthy	11 Feb 2023	2023-01-31 08:04:30,945 fail2ban.actions [336505]: NOTICE [sshd] Ban 201.95.16.160 202 ... show more2023-01-31 08:04:30,945 fail2ban.actions [336505]: NOTICE [sshd] Ban 201.95.16.160 2023-01-31 08:04:30,945 fail2ban.actions [336505]: NOTICE [sshd] Ban 201.95.16.160 2023-01-31 08:04:30,945 fail2ban.actions [336505]: NOTICE [sshd] Ban 201.95.16.160 ... show less	Brute-Force SSH
ThreatBook.io	05 Feb 2023	ThreatBook Intelligence: Brute Force,Dynamic IP more details on https://threatbook.io/ip/201.95.16.1 ... show moreThreatBook Intelligence: Brute Force,Dynamic IP more details on https://threatbook.io/ip/201.95.16.160 show less	SSH
itbyhf	05 Feb 2023	Feb 4 20:10:51 ns05-a-ns-xyz sshd[1139633]: pam_unix(sshd:auth): authentication failure; logname= u ... show moreFeb 4 20:10:51 ns05-a-ns-xyz sshd[1139633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.95.16.160 user=root Feb 4 20:10:53 ns05-a-ns-xyz sshd[1139633]: Failed password for root from 201.95.16.160 port 28577 ssh2 Feb 4 20:13:12 ns05-a-ns-xyz sshd[1139684]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.95.16.160 user=root Feb 4 20:13:14 ns05-a-ns-xyz sshd[1139684]: Failed password for root from 201.95.16.160 port 63777 ssh2 Feb 4 20:15:30 ns05-a-ns-xyz sshd[1139724]: Invalid user admin6 from 201.95.16.160 port 36611 ... show less	Brute-Force SSH
itbyhf	05 Feb 2023	Feb 4 19:46:19 ns05-a-ns-xyz sshd[1139075]: pam_unix(sshd:auth): authentication failure; logname= u ... show moreFeb 4 19:46:19 ns05-a-ns-xyz sshd[1139075]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.95.16.160 user=root Feb 4 19:46:22 ns05-a-ns-xyz sshd[1139075]: Failed password for root from 201.95.16.160 port 51297 ssh2 Feb 4 19:48:14 ns05-a-ns-xyz sshd[1139136]: Invalid user admin from 201.95.16.160 port 22657 Feb 4 19:48:14 ns05-a-ns-xyz sshd[1139136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.95.16.160 Feb 4 19:48:16 ns05-a-ns-xyz sshd[1139136]: Failed password for invalid user admin from 201.95.16.160 port 22657 ssh2 ... show less	Brute-Force SSH
Josimar Loch	04 Feb 2023	Feb 4 20:41:47 node1 sshd[10025]: Invalid user teste01 from 201.95.16.160 port 50497 Feb 4 2 ... show moreFeb 4 20:41:47 node1 sshd[10025]: Invalid user teste01 from 201.95.16.160 port 50497 Feb 4 20:48:05 node1 sshd[13828]: Invalid user ubuntu from 201.95.16.160 port 30401 ... show less	Brute-Force SSH
StopIt!	04 Feb 2023	Feb 4 23:24:12 master sshd[15988]: Failed password for invalid user admin from 201.95.16.160 port 8 ... show moreFeb 4 23:24:12 master sshd[15988]: Failed password for invalid user admin from 201.95.16.160 port 8161 ssh2 Feb 4 23:28:46 master sshd[16054]: Failed password for invalid user admin from 201.95.16.160 port 50529 ssh2 Feb 4 23:30:34 master sshd[16505]: Failed password for root from 201.95.16.160 port 26625 ssh2 Feb 4 23:32:17 master sshd[16539]: Failed password for root from 201.95.16.160 port 2146 ssh2 Feb 4 23:33:58 master sshd[16577]: Failed password for invalid user test from 201.95.16.160 port 40897 ssh2 Feb 4 23:35:42 master sshd[16611]: Failed password for invalid user webadmin from 201.95.16.160 port 16450 ssh2 Feb 4 23:37:28 master sshd[16649]: Failed password for invalid user ubuntu from 201.95.16.160 port 54817 ssh2 Feb 4 23:39:12 master sshd[16722]: Failed password for root from 201.95.16.160 port 30594 ssh2 Feb 4 23:40:59 master sshd[16795]: Failed password for invalid user ubuntu from 201.95.16.160 port 6369 ssh2 show less	Brute-Force SSH
Justin Catello	04 Feb 2023	201.95.16.160 (BR/Brazil/201-95-16-160.dsl.telesp.net.br), 5 distributed sshd attacks on account [ro ... show more201.95.16.160 (BR/Brazil/201-95-16-160.dsl.telesp.net.br), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 4 16:25:27 20871 sshd[9041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.201.173.228 user=root Feb 4 16:24:04 20871 sshd[8954]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.94.251.28 user=root Feb 4 16:24:05 20871 sshd[8954]: Failed password for root from 141.94.251.28 port 33204 ssh2 Feb 4 16:26:16 20871 sshd[9154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.95.16.160 user=root Feb 4 16:26:18 20871 sshd[9154]: Failed password for root from 201.95.16.160 port 7042 ssh2 IP Addresses Blocked: 84.201.173.228 (RU/Russia/-) 141.94.251.28 (FR/France/vps-df15bb36.vps.ovh.net) show less	Brute-Force SSH
VoxHost	04 Feb 2023	Feb 4 23:12:20 sd-111497 sshd[2187388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show moreFeb 4 23:12:20 sd-111497 sshd[2187388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.95.16.160 user=root Feb 4 23:12:22 sd-111497 sshd[2187388]: Failed password for root from 201.95.16.160 port 4065 ssh2 Feb 4 23:14:11 sd-111497 sshd[2187863]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.95.16.160 user=root Feb 4 23:14:13 sd-111497 sshd[2187863]: Failed password for root from 201.95.16.160 port 42849 ssh2 Feb 4 23:16:00 sd-111497 sshd[2188356]: Invalid user admin from 201.95.16.160 port 19650 ... show less	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩