Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Netherlands

Internet Service Provider: Microsoft Corporation

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Aug 23 06:43:41 myvps sshd[18593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.80.69.199 
Aug 23 06:43:43 myvps sshd[18593]: Failed password for invalid user postgres from 13.80.69.199 port 48362 ssh2
Aug 23 14:22:21 myvps sshd[7543]: Failed password for root from 13.80.69.199 port 44730 ssh2
...
2020-08-23 23:34:22
attackspam
Aug 10 20:23:01 php1 sshd\[23503\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.80.69.199  user=root
Aug 10 20:23:03 php1 sshd\[23503\]: Failed password for root from 13.80.69.199 port 40446 ssh2
Aug 10 20:27:18 php1 sshd\[23954\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.80.69.199  user=root
Aug 10 20:27:20 php1 sshd\[23954\]: Failed password for root from 13.80.69.199 port 52416 ssh2
Aug 10 20:31:45 php1 sshd\[24395\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.80.69.199  user=root
2020-08-11 14:57:05
attack
Jul 27 08:25:18 Tower sshd[10764]: Connection from 13.80.69.199 port 40638 on 192.168.10.220 port 22 rdomain ""
Jul 27 08:25:19 Tower sshd[10764]: Invalid user deploy from 13.80.69.199 port 40638
Jul 27 08:25:19 Tower sshd[10764]: error: Could not get shadow information for NOUSER
Jul 27 08:25:19 Tower sshd[10764]: Failed password for invalid user deploy from 13.80.69.199 port 40638 ssh2
Jul 27 08:25:19 Tower sshd[10764]: Received disconnect from 13.80.69.199 port 40638:11: Bye Bye [preauth]
Jul 27 08:25:19 Tower sshd[10764]: Disconnected from invalid user deploy 13.80.69.199 port 40638 [preauth]
2020-07-27 20:25:43
attackspambots
Invalid user fatima from 13.80.69.199 port 50548
2020-07-24 12:17:48
attack
Jul 20 01:31:31 *hidden* sshd[13264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.80.69.199 Jul 20 01:31:33 *hidden* sshd[13264]: Failed password for invalid user padmaja from 13.80.69.199 port 34220 ssh2 Jul 20 01:37:12 *hidden* sshd[14282]: Invalid user appldev from 13.80.69.199 port 44588
2020-07-20 08:00:00
attackbots
Fail2Ban - SSH Bruteforce Attempt
2020-07-19 23:19:25
Comments on same subnet:
IP Type Details Datetime
13.80.69.39 attackspam
2020-04-19 16:38:40 server sshd[7065]: Failed password for invalid user admin from 13.80.69.39 port 11753 ssh2
2020-04-21 02:38:47
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.80.69.199
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30956
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;13.80.69.199.			IN	A

;; AUTHORITY SECTION:
.			563	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020071900 1800 900 604800 86400

;; Query time: 108 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jul 19 23:19:18 CST 2020
;; MSG SIZE  rcvd: 116
Host info
Host 199.69.80.13.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 199.69.80.13.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
119.235.102.65 attack
Unauthorized connection attempt detected from IP address 119.235.102.65 to port 2220 [J]
2020-01-30 00:47:21
200.104.9.64 attack
2019-09-17 00:30:34 1i9zVt-0000Bl-MB SMTP connection from pc-64-9-104-200.cm.vtr.net \[200.104.9.64\]:12645 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-09-17 00:31:56 1i9zXB-0000De-O6 SMTP connection from pc-64-9-104-200.cm.vtr.net \[200.104.9.64\]:12736 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-09-17 00:32:19 1i9zXb-0000EO-8u SMTP connection from pc-64-9-104-200.cm.vtr.net \[200.104.9.64\]:12821 I=\[193.107.88.166\]:25 closed by DROP in ACL
...
2020-01-30 01:02:56
200.116.190.150 attackspam
2019-06-21 21:18:54 1heP3k-0006B3-HH SMTP connection from cable200-116-190-150.epm.net.co \[200.116.190.150\]:17249 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-06-21 21:19:00 1heP3q-0006BG-Gu SMTP connection from cable200-116-190-150.epm.net.co \[200.116.190.150\]:43704 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-06-21 21:19:05 1heP3v-0006BP-Kf SMTP connection from cable200-116-190-150.epm.net.co \[200.116.190.150\]:61874 I=\[193.107.88.166\]:25 closed by DROP in ACL
...
2020-01-30 00:51:46
203.212.25.205 attackspam
Unauthorized connection attempt detected from IP address 203.212.25.205 to port 23 [J]
2020-01-30 00:43:53
35.183.68.118 attackspambots
Server penetration trying other domain names than server publicly serves (ex https://localhost)
2020-01-30 00:55:41
59.42.37.132 attackspambots
Jan 29 17:39:14 MK-Soft-VM8 sshd[20688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.42.37.132 
Jan 29 17:39:16 MK-Soft-VM8 sshd[20688]: Failed password for invalid user dvaraka from 59.42.37.132 port 3193 ssh2
...
2020-01-30 00:57:28
200.107.15.230 attackbots
2019-04-08 23:16:51 H=\(200.107.15.230.static.anycast.cnt-grms.ec\) \[200.107.15.230\]:34159 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-04-08 23:17:08 H=\(200.107.15.230.static.anycast.cnt-grms.ec\) \[200.107.15.230\]:34330 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-04-08 23:17:16 H=\(200.107.15.230.static.anycast.cnt-grms.ec\) \[200.107.15.230\]:34425 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
...
2020-01-30 00:57:51
152.32.251.49 attackspambots
Unauthorized connection attempt detected from IP address 152.32.251.49 to port 2220 [J]
2020-01-30 00:39:49
104.206.128.50 attackspambots
[MySQL inject/portscan] tcp/3306
*(RWIN=1024)(01291848)
2020-01-30 00:22:16
217.174.248.133 attack
445/tcp 445/tcp
[2020-01-02/29]2pkt
2020-01-30 00:52:49
77.82.148.234 attack
Unauthorized connection attempt detected from IP address 77.82.148.234 to port 23 [J]
2020-01-30 01:05:37
200.1.208.162 attack
2019-03-08 16:13:37 1h2HBo-0006au-4i SMTP connection from \(200-1-208-162-revzone.parbo.net\) \[200.1.208.162\]:19569 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-03-08 16:14:42 1h2HCr-0006cR-9f SMTP connection from \(200-1-208-162-revzone.parbo.net\) \[200.1.208.162\]:38307 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-03-08 16:15:16 1h2HDP-0006eQ-JJ SMTP connection from \(200-1-208-162-revzone.parbo.net\) \[200.1.208.162\]:35756 I=\[193.107.88.166\]:25 closed by DROP in ACL
...
2020-01-30 01:05:56
200.108.131.250 attackbotsspam
2019-06-21 19:36:05 1heNSE-0003l9-7v SMTP connection from \(\[200.108.131.250\]\) \[200.108.131.250\]:44537 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-06-21 19:36:16 1heNSP-0003lh-Ap SMTP connection from \(\[200.108.131.250\]\) \[200.108.131.250\]:44608 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-06-21 19:36:25 1heNSY-0003ls-9m SMTP connection from \(\[200.108.131.250\]\) \[200.108.131.250\]:44651 I=\[193.107.88.166\]:25 closed by DROP in ACL
...
2020-01-30 00:56:57
104.206.128.38 attackspam
[portscan] tcp/21 [FTP]
[portscan] tcp/3389 [MS RDP]
[scan/connect: 2 time(s)]
*(RWIN=1024,65535)(01291848)
2020-01-30 00:34:52
173.249.34.254 attack
29.01.2020 13:43:19 Connection to port 69 blocked by firewall
2020-01-30 00:31:43

Recently Reported IPs

64.130.12.241 126.34.207.231 105.233.68.106 83.54.139.54
22.207.202.116 52.137.3.210 195.54.166.50 185.244.27.166
82.2.56.25 61.134.102.202 235.32.107.49 36.74.83.98
253.64.124.20 193.234.200.251 116.58.227.56 42.58.205.102
126.33.88.17 13.233.188.4 185.81.94.50 113.55.118.203