80.20.125.243 - IPInfo

Basic Info

City: Chiavari

Region: Liguria

Country: Italy

Internet Service Provider: Comune di Portovenere

Hostname: unknown

Organization: Telecom Italia

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	$f2bV_matches	2020-03-16 20:00:16
attack	Jan 1 10:15:34 server sshd\[24795\]: Failed password for invalid user unix from 80.20.125.243 port 60520 ssh2 Jan 2 01:48:12 server sshd\[13888\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host243-125-static.20-80-b.business.telecomitalia.it user=root Jan 2 01:48:15 server sshd\[13888\]: Failed password for root from 80.20.125.243 port 38696 ssh2 Jan 2 01:54:37 server sshd\[14949\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host243-125-static.20-80-b.business.telecomitalia.it user=dbus Jan 2 01:54:40 server sshd\[14949\]: Failed password for dbus from 80.20.125.243 port 33330 ssh2 ...	2020-01-02 06:59:31
attack	Dec 26 19:37:42 lnxded64 sshd[6614]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.20.125.243 Dec 26 19:37:44 lnxded64 sshd[6614]: Failed password for invalid user ftpuser from 80.20.125.243 port 34743 ssh2 Dec 26 19:41:54 lnxded64 sshd[7716]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.20.125.243	2019-12-27 02:48:01
attack	Unauthorized SSH login attempts	2019-12-04 22:55:15
attack	Dec 3 05:49:56 vps666546 sshd\[21249\]: Invalid user jjjjj from 80.20.125.243 port 41426 Dec 3 05:49:56 vps666546 sshd\[21249\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.20.125.243 Dec 3 05:49:58 vps666546 sshd\[21249\]: Failed password for invalid user jjjjj from 80.20.125.243 port 41426 ssh2 Dec 3 05:56:47 vps666546 sshd\[21511\]: Invalid user password from 80.20.125.243 port 46989 Dec 3 05:56:47 vps666546 sshd\[21511\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.20.125.243 ...	2019-12-03 13:03:43
attack	2019-12-01T10:37:46.4127561495-001 sshd\[5414\]: Invalid user from 80.20.125.243 port 58444 2019-12-01T10:37:46.4198961495-001 sshd\[5414\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host243-125-static.20-80-b.business.telecomitalia.it 2019-12-01T10:37:48.0679841495-001 sshd\[5414\]: Failed password for invalid user from 80.20.125.243 port 58444 ssh2 2019-12-01T10:41:25.2895061495-001 sshd\[5549\]: Invalid user itac2010 from 80.20.125.243 port 47441 2019-12-01T10:41:25.2927201495-001 sshd\[5549\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host243-125-static.20-80-b.business.telecomitalia.it 2019-12-01T10:41:27.0055971495-001 sshd\[5549\]: Failed password for invalid user itac2010 from 80.20.125.243 port 47441 ssh2 ...	2019-12-02 00:08:06
attackbots	Invalid user schiller from 80.20.125.243 port 52228 pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.20.125.243 Failed password for invalid user schiller from 80.20.125.243 port 52228 ssh2 Invalid user barb from 80.20.125.243 port 42678 pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.20.125.243	2019-11-25 18:09:11
attackbots	Nov 18 23:44:42 ns382633 sshd\[21340\]: Invalid user os from 80.20.125.243 port 51689 Nov 18 23:44:42 ns382633 sshd\[21340\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.20.125.243 Nov 18 23:44:44 ns382633 sshd\[21340\]: Failed password for invalid user os from 80.20.125.243 port 51689 ssh2 Nov 18 23:52:02 ns382633 sshd\[22786\]: Invalid user norini from 80.20.125.243 port 50895 Nov 18 23:52:02 ns382633 sshd\[22786\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.20.125.243	2019-11-19 08:52:19
attack	Nov 17 16:37:23 MK-Soft-VM4 sshd[28828]: Failed password for root from 80.20.125.243 port 43735 ssh2 ...	2019-11-18 04:54:18
attackspambots	Invalid user slview from 80.20.125.243 port 37549	2019-11-11 05:46:30
attackspambots	2019-11-10 08:22:46,851 fail2ban.actions \[14488\]: NOTICE \[sshd\] Ban 80.20.125.243 2019-11-10 08:58:31,853 fail2ban.actions \[14488\]: NOTICE \[sshd\] Ban 80.20.125.243 2019-11-10 09:30:53,425 fail2ban.actions \[14488\]: NOTICE \[sshd\] Ban 80.20.125.243 2019-11-10 10:02:52,531 fail2ban.actions \[14488\]: NOTICE \[sshd\] Ban 80.20.125.243 2019-11-10 10:40:22,578 fail2ban.actions \[14488\]: NOTICE \[sshd\] Ban 80.20.125.243 ...	2019-11-10 17:57:11
attackspambots	Oct 26 08:50:20 hosting sshd[5099]: Invalid user arjun from 80.20.125.243 port 38110 ...	2019-10-26 16:46:42
attackbotsspam	Invalid user jboss from 80.20.125.243 port 46142	2019-10-24 22:21:22
attackspambots	Oct 19 16:19:56 dedicated sshd[32427]: Invalid user test from 80.20.125.243 port 36577	2019-10-20 00:06:56
attack	Oct 4 04:38:56 kapalua sshd\[27215\]: Invalid user P@rola!23 from 80.20.125.243 Oct 4 04:38:56 kapalua sshd\[27215\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host243-125-static.20-80-b.business.telecomitalia.it Oct 4 04:38:58 kapalua sshd\[27215\]: Failed password for invalid user P@rola!23 from 80.20.125.243 port 47727 ssh2 Oct 4 04:43:46 kapalua sshd\[27949\]: Invalid user Qwerty\#111 from 80.20.125.243 Oct 4 04:43:46 kapalua sshd\[27949\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host243-125-static.20-80-b.business.telecomitalia.it	2019-10-05 00:47:51
attackbots	Sep 20 19:57:00 sachi sshd\[26091\]: Invalid user anna from 80.20.125.243 Sep 20 19:57:00 sachi sshd\[26091\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host243-125-static.20-80-b.business.telecomitalia.it Sep 20 19:57:02 sachi sshd\[26091\]: Failed password for invalid user anna from 80.20.125.243 port 43762 ssh2 Sep 20 20:01:56 sachi sshd\[26485\]: Invalid user anto from 80.20.125.243 Sep 20 20:01:56 sachi sshd\[26485\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host243-125-static.20-80-b.business.telecomitalia.it	2019-09-21 14:11:27

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 80.20.125.243
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33172
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;80.20.125.243.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040501 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sat Apr 06 02:23:44 +08 2019
;; MSG SIZE  rcvd: 117

Host info

243.125.20.80.in-addr.arpa domain name pointer host243-125-static.20-80-b.business.telecomitalia.it.

Nslookup info:

Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
243.125.20.80.in-addr.arpa	name = host243-125-static.20-80-b.business.telecomitalia.it.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
217.112.142.97	attack	2020-09-10 1kGRvY-0000PW-Fg H=righteous.yarkaci.com $righteous.hrajplus.com$ \[217.112.142.97\] rejected REMOVED : REJECTED - You seem to be a spammer! 2020-09-11 1kGleA-0002Z6-4n H=righteous.yarkaci.com $righteous.hrajplus.com$ \[217.112.142.97\] rejected REMOVED : REJECTED - You seem to be a spammer! 2020-09-11 H=righteous.yarkaci.com $righteous.hrajplus.com$ \[217.112.142.97\] F=\ rejected RCPT \: Mail not accepted. 217.112.142.97 is listed at a DNSBL.	2020-09-13 03:11:51
89.35.39.180	attackbots	WordPress login Brute force / Web App Attack on client site.	2020-09-13 03:23:59
147.135.133.88	attackspam	Sep 12 19:14:14 onepixel sshd[3632053]: Failed password for root from 147.135.133.88 port 55959 ssh2 Sep 12 19:15:54 onepixel sshd[3632336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.135.133.88 user=root Sep 12 19:15:57 onepixel sshd[3632336]: Failed password for root from 147.135.133.88 port 42971 ssh2 Sep 12 19:17:38 onepixel sshd[3632620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.135.133.88 user=root Sep 12 19:17:40 onepixel sshd[3632620]: Failed password for root from 147.135.133.88 port 58212 ssh2	2020-09-13 03:25:41
91.134.135.95	attackbotsspam	2020-09-12T11:07:27.057081mail.thespaminator.com sshd[3509]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.ip-91-134-135.eu user=root 2020-09-12T11:07:29.066570mail.thespaminator.com sshd[3509]: Failed password for root from 91.134.135.95 port 36002 ssh2 ...	2020-09-13 03:27:15
125.141.139.29	attackbotsspam	2020-09-12T10:06:54.694366ionos.janbro.de sshd[82217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.141.139.29 user=root 2020-09-12T10:06:56.888282ionos.janbro.de sshd[82217]: Failed password for root from 125.141.139.29 port 43360 ssh2 2020-09-12T10:09:32.600535ionos.janbro.de sshd[82245]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.141.139.29 user=root 2020-09-12T10:09:34.483495ionos.janbro.de sshd[82245]: Failed password for root from 125.141.139.29 port 46372 ssh2 2020-09-12T10:12:12.122563ionos.janbro.de sshd[82258]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.141.139.29 user=root 2020-09-12T10:12:13.970426ionos.janbro.de sshd[82258]: Failed password for root from 125.141.139.29 port 49388 ssh2 2020-09-12T10:14:38.177068ionos.janbro.de sshd[82263]: Invalid user test from 125.141.139.29 port 52408 2020-09-12T10:14:38.186130ionos.janbro.de ...	2020-09-13 03:14:46
88.150.240.193	attackbots	C1,WP GET /daisuki/wp-includes/wlwmanifest.xml	2020-09-13 03:30:26
120.192.21.233	attackspambots	Invalid user test1 from 120.192.21.233 port 58715	2020-09-13 03:23:44
222.173.38.41	attack	445/tcp 445/tcp [2020-08-13/09-12]2pkt	2020-09-13 03:29:58
78.169.5.219	attack	1599842918 - 09/11/2020 18:48:38 Host: 78.169.5.219/78.169.5.219 Port: 445 TCP Blocked	2020-09-13 03:26:30
203.95.212.41	attackbotsspam	$f2bV_matches	2020-09-13 03:24:27
129.226.174.26	attackspam	Brute-force attempt banned	2020-09-13 03:37:19
189.93.54.4	attackspam	(sshd) Failed SSH login from 189.93.54.4 (BR/Brazil/189-93-54-4.3g.claro.net.br): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 11 12:47:20 internal2 sshd[17822]: Invalid user ubnt from 189.93.54.4 port 26653 Sep 11 12:48:13 internal2 sshd[18556]: Invalid user admin from 189.93.54.4 port 26682 Sep 11 12:48:15 internal2 sshd[18576]: Invalid user admin from 189.93.54.4 port 26683	2020-09-13 03:33:05
115.98.202.138	attackbots	Port Scan: TCP/23	2020-09-13 03:25:08
64.183.249.110	attackspam	Sep 11 18:48:10 sshgateway sshd\[26558\]: Invalid user support from 64.183.249.110 Sep 11 18:48:10 sshgateway sshd\[26558\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=rrcs-64-183-249-110.sw.biz.rr.com Sep 11 18:48:12 sshgateway sshd\[26558\]: Failed password for invalid user support from 64.183.249.110 port 62691 ssh2	2020-09-13 03:34:56
157.245.172.192	attackbotsspam	Invalid user admin from 157.245.172.192 port 40198	2020-09-13 03:20:45

Recently Reported IPs

88.35.5.195	37.202.66.112	156.208.246.89	5.55.57.40
2.235.236.254	90.151.95.218	132.232.36.226	185.163.111.228
52.38.144.216	86.108.1.215	115.59.2.159	217.61.112.65
120.237.46.74	80.234.108.5	93.170.113.246	37.187.100.54
197.40.173.58	92.207.253.226	197.59.236.140	211.23.58.30