Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Panama

Internet Service Provider: FlyServers S.A.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
May 15 00:50:38 mail.srvfarm.net postfix/smtpd[1504621]: warning: unknown[141.98.80.48]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May 15 00:50:38 mail.srvfarm.net postfix/smtpd[1504621]: lost connection after AUTH from unknown[141.98.80.48]
May 15 00:50:42 mail.srvfarm.net postfix/smtpd[1503857]: lost connection after AUTH from unknown[141.98.80.48]
May 15 00:50:47 mail.srvfarm.net postfix/smtpd[1504619]: lost connection after AUTH from unknown[141.98.80.48]
May 15 00:50:48 mail.srvfarm.net postfix/smtpd[1504628]: lost connection after AUTH from unknown[141.98.80.48]
2020-05-15 07:10:27
attack
May 14 19:45:41 mail.srvfarm.net postfix/smtpd[1267165]: warning: unknown[141.98.80.48]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May 14 19:45:41 mail.srvfarm.net postfix/smtpd[1267165]: lost connection after AUTH from unknown[141.98.80.48]
May 14 19:45:47 mail.srvfarm.net postfix/smtpd[1266192]: warning: unknown[141.98.80.48]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May 14 19:45:47 mail.srvfarm.net postfix/smtpd[1266191]: warning: unknown[141.98.80.48]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May 14 19:45:47 mail.srvfarm.net postfix/smtpd[1266482]: warning: unknown[141.98.80.48]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-05-15 02:29:31
attackspam
May-14-20 09:44:37 [Worker_1] 141.98.80.48 [SMTP Error] 535 5.7.8 Error: authentication failed: PDkzODMyMTE2NTY1NjM0OTQuMTU4OTQ0OTQ3M0BqYW5lLnRoZS1raW5nZG9tLm5ldD4=
May-14-20 09:44:55 [Worker_1] 141.98.80.48 [SMTP Error] 535 5.7.8 Error: authentication failed: PDc2MzQ1ODg0MzE4MzMzMTYuMTU4OTQ0OTQ5MUBqYW5lLnRoZS1raW5nZG9tLm5ldD4=
May-14-20 09:50:15 [Worker_1] 141.98.80.48 [SMTP Error] 535 5.7.8 Error: authentication failed: PDM2MjUwOTg4Nzc3NDI5MDMuMTU4OTQ0OTgxMkBqYW5lLnRoZS1raW5nZG9tLm5ldD4=
May-14-20 09:50:32 [Worker_1] 141.98.80.48 [SMTP Error] 535 5.7.8 Error: authentication failed: PDMyNDUwOTI2NjE2NjY0NDguMTU4OTQ0OTgyOUBqYW5lLnRoZS1raW5nZG9tLm5ldD4=
May-14-20 10:29:54 [Worker_1] 141.98.80.48 [SMTP Error] 535 5.7.8 Error: authentication failed: PDQ0MzcwMDY3NTE1NTc5NjcuMTU4OTQ1MjE5MkBqYW5lLnRoZS1raW5nZG9tLm5ldD4=
...
2020-05-14 18:42:05
attackbotsspam
f2b trigger Multiple SASL failures
2020-05-14 05:21:47
attackspambots
May 11 18:45:05 relay postfix/smtpd\[15911\]: warning: unknown\[141.98.80.48\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May 11 18:45:22 relay postfix/smtpd\[8437\]: warning: unknown\[141.98.80.48\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May 11 19:02:50 relay postfix/smtpd\[22635\]: warning: unknown\[141.98.80.48\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May 11 19:03:08 relay postfix/smtpd\[15911\]: warning: unknown\[141.98.80.48\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May 11 19:04:03 relay postfix/smtpd\[15911\]: warning: unknown\[141.98.80.48\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May 11 19:04:03 relay postfix/smtpd\[22020\]: warning: unknown\[141.98.80.48\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-05-12 01:07:58
attack
May  9 22:38:40 relay postfix/smtpd\[11214\]: warning: unknown\[141.98.80.48\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May  9 22:38:58 relay postfix/smtpd\[11214\]: warning: unknown\[141.98.80.48\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May  9 22:39:20 relay postfix/smtpd\[11214\]: warning: unknown\[141.98.80.48\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May  9 22:39:38 relay postfix/smtpd\[11214\]: warning: unknown\[141.98.80.48\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May  9 22:47:40 relay postfix/smtpd\[11213\]: warning: unknown\[141.98.80.48\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-05-10 04:53:38
attackbotsspam
May  7 14:28:04 web01.agentur-b-2.de postfix/smtpd[209995]: warning: unknown[141.98.80.48]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May  7 14:28:04 web01.agentur-b-2.de postfix/smtpd[207257]: warning: unknown[141.98.80.48]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May  7 14:28:04 web01.agentur-b-2.de postfix/smtpd[209995]: lost connection after AUTH from unknown[141.98.80.48]
May  7 14:28:04 web01.agentur-b-2.de postfix/smtpd[207257]: lost connection after AUTH from unknown[141.98.80.48]
May  7 14:28:09 web01.agentur-b-2.de postfix/smtpd[206928]: lost connection after AUTH from unknown[141.98.80.48]
May  7 14:28:09 web01.agentur-b-2.de postfix/smtpd[209995]: lost connection after AUTH from unknown[141.98.80.48]
2020-05-07 20:42:18
attack
May  6 10:16:24 mail.srvfarm.net postfix/smtpd[237959]: warning: unknown[141.98.80.48]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May  6 10:16:24 mail.srvfarm.net postfix/smtpd[237959]: lost connection after AUTH from unknown[141.98.80.48]
May  6 10:16:29 mail.srvfarm.net postfix/smtpd[238454]: lost connection after AUTH from unknown[141.98.80.48]
May  6 10:16:34 mail.srvfarm.net postfix/smtpd[238457]: lost connection after AUTH from unknown[141.98.80.48]
May  6 10:16:38 mail.srvfarm.net postfix/smtpd[224026]: lost connection after AUTH from unknown[141.98.80.48]
2020-05-06 16:46:26
Comments on same subnet:
IP Type Details Datetime
141.98.80.73 attackbotsspam
Oct 13 20:36:42 mail postfix/smtpd\[2755\]: warning: unknown\[141.98.80.73\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Oct 13 21:07:45 mail postfix/smtpd\[3739\]: warning: unknown\[141.98.80.73\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Oct 13 21:08:05 mail postfix/smtpd\[3743\]: warning: unknown\[141.98.80.73\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Oct 13 21:08:21 mail postfix/smtpd\[3743\]: warning: unknown\[141.98.80.73\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
2020-10-14 03:24:10
141.98.80.73 attack
Oct 13 12:10:32 mail postfix/smtpd\[17486\]: warning: unknown\[141.98.80.73\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Oct 13 12:10:52 mail postfix/smtpd\[17603\]: warning: unknown\[141.98.80.73\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Oct 13 12:11:11 mail postfix/smtpd\[17486\]: warning: unknown\[141.98.80.73\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Oct 13 12:42:04 mail postfix/smtpd\[18268\]: warning: unknown\[141.98.80.73\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
2020-10-13 18:42:16
141.98.80.72 attackbotsspam
2020-10-11 20:00:28 dovecot_login authenticator failed for \(\[141.98.80.72\]\) \[141.98.80.72\]: 535 Incorrect authentication data \(set_id=ben@benjaminhauck.com\)
2020-10-11 20:00:36 dovecot_login authenticator failed for \(\[141.98.80.72\]\) \[141.98.80.72\]: 535 Incorrect authentication data
2020-10-11 20:00:45 dovecot_login authenticator failed for \(\[141.98.80.72\]\) \[141.98.80.72\]: 535 Incorrect authentication data
2020-10-11 20:00:51 dovecot_login authenticator failed for \(\[141.98.80.72\]\) \[141.98.80.72\]: 535 Incorrect authentication data
2020-10-11 20:01:03 dovecot_login authenticator failed for \(\[141.98.80.72\]\) \[141.98.80.72\]: 535 Incorrect authentication data
...
2020-10-12 02:02:30
141.98.80.22 attackbots
Fail2Ban Ban Triggered
2020-10-12 00:23:22
141.98.80.72 attackbotsspam
Brute Force attack - banned by Fail2Ban
2020-10-11 17:52:34
141.98.80.22 attackbotsspam
[H1.VM1] Blocked by UFW
2020-10-11 16:21:12
141.98.80.22 attackbots
port scan hacking
2020-10-11 09:40:14
141.98.80.22 attack
Tried to scan TCP Port but the Antivirus refused. More than 20 times within a few months.
2020-10-11 07:04:39
141.98.80.39 attackbotsspam
\x03 400 0 "-" "-"
2020-10-10 02:08:44
141.98.80.39 attack
Found on   Binary Defense     / proto=6  .  srcport=65528  .  dstport=53 DNS  .     (757)
2020-10-09 17:53:14
141.98.80.190 attackspambots
Exim brute force attack (multiple auth failures).
2020-10-09 07:22:48
141.98.80.22 attackspambots
UTC 10/08/2020 18:12:24 - 83 - Security Services - Alert - 141.98.80.22, 65534, X1 - xxx.xxx.xxx.xxx, 8651, X1 - tcp - TCP scanned port list, 8691, 8611, 8671, 8601, 8661, 8641, 8681, 8631, 8621, 8651 - Probable port scan detected
2020-10-09 05:32:34
141.98.80.190 attackbots
Oct  8 17:35:05 relay postfix/smtpd\[8860\]: warning: unknown\[141.98.80.190\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct  8 17:35:26 relay postfix/smtpd\[4144\]: warning: unknown\[141.98.80.190\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct  8 17:40:26 relay postfix/smtpd\[5072\]: warning: unknown\[141.98.80.190\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct  8 17:40:45 relay postfix/smtpd\[4145\]: warning: unknown\[141.98.80.190\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct  8 17:46:12 relay postfix/smtpd\[8861\]: warning: unknown\[141.98.80.190\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-10-08 23:51:58
141.98.80.22 attackbotsspam
scans 10 times in preceeding hours on the ports (in chronological order) 8601 8611 8621 8631 8641 8651 8661 8671 8681 8691
2020-10-08 21:47:16
141.98.80.22 attack
tcp port scan
2020-10-08 13:41:46
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 141.98.80.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32167
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;141.98.80.48.			IN	A

;; AUTHORITY SECTION:
.			1982	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019052200 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu May 23 01:56:32 CST 2019
;; MSG SIZE  rcvd: 116

Host info
Host 48.80.98.141.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 48.80.98.141.in-addr.arpa: NXDOMAIN

Related IP info:
Related comments:
IP Type Details Datetime
106.12.105.193 attackspambots
Nov 21 00:57:03 linuxvps sshd\[41406\]: Invalid user mccorquodale from 106.12.105.193
Nov 21 00:57:03 linuxvps sshd\[41406\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.105.193
Nov 21 00:57:05 linuxvps sshd\[41406\]: Failed password for invalid user mccorquodale from 106.12.105.193 port 45856 ssh2
Nov 21 01:02:18 linuxvps sshd\[44499\]: Invalid user yoder from 106.12.105.193
Nov 21 01:02:18 linuxvps sshd\[44499\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.105.193
2019-11-21 14:26:56
49.248.97.227 attackspambots
Nov 21 08:25:35 taivassalofi sshd[83039]: Failed password for lp from 49.248.97.227 port 52292 ssh2
...
2019-11-21 15:04:07
106.13.142.115 attackspam
Nov 21 07:30:12 MK-Soft-VM3 sshd[27663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.142.115 
Nov 21 07:30:14 MK-Soft-VM3 sshd[27663]: Failed password for invalid user cepeda from 106.13.142.115 port 47022 ssh2
...
2019-11-21 14:57:08
118.69.238.10 attack
[munged]::80 118.69.238.10 - - [21/Nov/2019:07:30:19 +0100] "POST /[munged]: HTTP/1.1" 200 2048 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2019-11-21 14:53:31
186.179.148.193 attackspambots
Autoban   186.179.148.193 AUTH/CONNECT
2019-11-21 14:27:18
58.65.136.170 attackspambots
IP blocked
2019-11-21 14:45:03
103.15.28.232 attackspam
DATE:2019-11-21 07:30:22,IP:103.15.28.232,MATCHES:11,PORT:ssh
2019-11-21 14:58:46
85.15.179.235 attackspambots
SpamReport
2019-11-21 15:00:03
106.12.55.39 attackbotsspam
Nov 21 09:06:07 sauna sshd[133645]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.55.39
Nov 21 09:06:09 sauna sshd[133645]: Failed password for invalid user meris from 106.12.55.39 port 46628 ssh2
...
2019-11-21 15:08:12
222.186.42.4 attack
Nov 21 06:21:57 marvibiene sshd[30403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.4  user=root
Nov 21 06:22:00 marvibiene sshd[30403]: Failed password for root from 222.186.42.4 port 46160 ssh2
Nov 21 06:22:03 marvibiene sshd[30403]: Failed password for root from 222.186.42.4 port 46160 ssh2
Nov 21 06:21:57 marvibiene sshd[30403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.4  user=root
Nov 21 06:22:00 marvibiene sshd[30403]: Failed password for root from 222.186.42.4 port 46160 ssh2
Nov 21 06:22:03 marvibiene sshd[30403]: Failed password for root from 222.186.42.4 port 46160 ssh2
...
2019-11-21 14:25:29
51.68.137.11 attackbotsspam
Attempted to connect 3 times to port 80 TCP
2019-11-21 15:05:11
83.103.98.211 attackspambots
2019-11-21T06:30:36.311712abusebot.cloudsearch.cf sshd\[27522\]: Invalid user 12345678 from 83.103.98.211 port 34030
2019-11-21 14:43:10
61.218.122.198 attackbotsspam
Nov 21 07:30:37 vpn01 sshd[30518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.218.122.198
Nov 21 07:30:39 vpn01 sshd[30518]: Failed password for invalid user paul from 61.218.122.198 port 48600 ssh2
...
2019-11-21 14:44:34
121.183.203.60 attack
ssh failed login
2019-11-21 15:14:21
139.198.191.86 attackspambots
SSH invalid-user multiple login try
2019-11-21 15:06:51

Recently Reported IPs

202.60.225.49 185.137.111.77 118.25.175.152 112.197.0.92
201.80.92.184 37.110.43.255 101.255.44.14 191.179.180.127
67.22.223.9 242.22.5.166 45.118.61.10 218.23.26.50
14.2.200.143 185.86.164.100 181.146.0.67 148.72.232.140
5.62.20.37 121.157.204.146 59.90.141.238 124.105.29.158