Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Russian Federation

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
45.80.104.195 attackbots
Chat Spam
2020-08-18 08:30:32
45.80.104.119 attackbots
9.260.741,85-03/02 [bc18/m74] PostRequest-Spammer scoring: Lusaka01
2019-11-20 07:30:46
45.80.104.152 attack
Name: 'gekllokjwer'
Street: 'DXJXKCusGwzJU'
City: 'chOjdNXZYEVOMtMwe'
Zip: 'DeRgRoRKaO'
Message: 'Ñåìåé Ïÿòèãîðñê Àòûðàó, Êàçàõñòàí êóïèòü Ýêñòàçè (Mdma) Äçåðæèíñê Äåðáåíò Àõàíãàìà, Øðè-Ëàíêà êóïèòü Ñêîðîñòü ÑÊ êðèñòàëëû (ñîëü-Àëüôà-ÏÂÏ) Îáíèíñê Ìàãíèòîãîðñê
2019-10-22 05:11:19
45.80.104.101 attackbots
45.80.104.101 - - [20/Oct/2019:07:59:55 -0400] "GET /?page=..%2f..%2f..%2fetc%2fpasswd&action=view&manufacturerID=12&productID=973&linkID=15902 HTTP/1.1" 200 16395 "https://newportbrassfaucets.com/?page=..%2f..%2f..%2fetc%2fpasswd&action=view&manufacturerID=12&productID=973&linkID=15902" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
...
2019-10-21 01:15:22
45.80.104.109 attackspambots
45.80.104.109 - - [20/Oct/2019:08:03:33 -0400] "GET /?page=products&action=..%2f..%2fetc%2fpasswd%00&manufacturerID=12&productID=973&linkID=15902 HTTP/1.1" 200 17152 "https://newportbrassfaucets.com/?page=products&action=..%2f..%2fetc%2fpasswd%00&manufacturerID=12&productID=973&linkID=15902" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
...
2019-10-20 21:57:02
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.80.104.112
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47829
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;45.80.104.112.			IN	A

;; AUTHORITY SECTION:
.			349	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022071502 1800 900 604800 86400

;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jul 16 10:23:16 CST 2022
;; MSG SIZE  rcvd: 106
Host info
Host 112.104.80.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 112.104.80.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
192.144.218.46 attackspam
Automatic Fail2ban report - Trying login SSH
2020-07-18 15:12:21
49.88.112.115 attack
Jul 18 08:57:52 * sshd[4795]: Failed password for root from 49.88.112.115 port 55721 ssh2
Jul 18 08:57:54 * sshd[4795]: Failed password for root from 49.88.112.115 port 55721 ssh2
2020-07-18 15:31:48
112.85.42.187 attackbots
Jul 18 12:45:38 dhoomketu sshd[1623483]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.187  user=root
Jul 18 12:45:40 dhoomketu sshd[1623483]: Failed password for root from 112.85.42.187 port 25986 ssh2
Jul 18 12:45:38 dhoomketu sshd[1623483]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.187  user=root
Jul 18 12:45:40 dhoomketu sshd[1623483]: Failed password for root from 112.85.42.187 port 25986 ssh2
Jul 18 12:45:43 dhoomketu sshd[1623483]: Failed password for root from 112.85.42.187 port 25986 ssh2
...
2020-07-18 15:17:03
13.75.158.218 attack
Jul 18 09:28:40 jane sshd[20423]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.75.158.218 
Jul 18 09:28:42 jane sshd[20423]: Failed password for invalid user admin from 13.75.158.218 port 34888 ssh2
...
2020-07-18 15:47:08
5.15.43.37 attack
Automatic report - Port Scan Attack
2020-07-18 15:11:09
181.113.26.2 attackbotsspam
Unauthorized connection attempt detected from IP address 181.113.26.2 to port 23
2020-07-18 15:20:20
218.61.47.132 attack
$f2bV_matches
2020-07-18 15:25:26
23.94.251.244 attack
[Sat Jul 18 10:53:32.323823 2020] [:error] [pid 13494:tid 140632571827968] [client 23.94.251.244:56677] [client 23.94.251.244] ModSecurity: Access denied with code 403 (phase 1). Match of "within %{tx.allowed_http_versions}" against "REQUEST_PROTOCOL" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "972"] [id "920430"] [msg "HTTP protocol version is not allowed by policy"] [data "HTTP/1.0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/PROTOCOL_NOT_ALLOWED"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.10"] [hostname "172.217.9.36"] [uri "/"] [unique_id "XxJyPIR3ymUPPDBdPbJ3WgAAAng"]
...
2020-07-18 15:34:28
185.143.73.103 attackbots
2020-07-18 07:31:19 auth_plain authenticator failed for (User) [185.143.73.103]: 535 Incorrect authentication data (set_id=rankhigher@mail.csmailer.org)
2020-07-18 07:31:48 auth_plain authenticator failed for (User) [185.143.73.103]: 535 Incorrect authentication data (set_id=kilo@mail.csmailer.org)
2020-07-18 07:32:16 auth_plain authenticator failed for (User) [185.143.73.103]: 535 Incorrect authentication data (set_id=esx1@mail.csmailer.org)
2020-07-18 07:32:46 auth_plain authenticator failed for (User) [185.143.73.103]: 535 Incorrect authentication data (set_id=cep@mail.csmailer.org)
2020-07-18 07:33:13 auth_plain authenticator failed for (User) [185.143.73.103]: 535 Incorrect authentication data (set_id=mirror1@mail.csmailer.org)
...
2020-07-18 15:39:08
201.77.124.248 attackspambots
Invalid user parana from 201.77.124.248 port 61831
2020-07-18 15:43:46
52.251.59.211 attackbotsspam
Connection to SSH Honeypot - Detected by HoneypotDB
2020-07-18 15:13:09
188.122.240.7 attack
Jul 18 09:38:07 vpn01 sshd[25359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.122.240.7
Jul 18 09:38:09 vpn01 sshd[25359]: Failed password for invalid user xu from 188.122.240.7 port 44588 ssh2
...
2020-07-18 15:38:35
87.251.74.184 attackbotsspam
07/18/2020-01:46:28.262785 87.251.74.184 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-07-18 15:11:45
52.152.144.75 attack
<6 unauthorized SSH connections
2020-07-18 15:06:11
65.52.184.54 attack
<6 unauthorized SSH connections
2020-07-18 15:22:19

Recently Reported IPs

85.208.211.188 115.144.22.124 45.132.187.142 188.32.197.121
189.173.72.8 143.92.32.148 50.251.171.193 212.115.51.205
191.101.17.33 49.254.112.203 176.116.192.92 124.52.76.125
112.165.12.27 193.202.83.31 45.134.186.76 144.48.178.113
51.211.175.175 122.117.152.171 181.214.250.58 49.254.10.36