Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Arezzo

Region: Tuscany

Country: Italy

Internet Service Provider: Aruba S.p.A. - Cloud Services DC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspam
Jun 11 22:41:52 PorscheCustomer sshd[15783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.162.38
Jun 11 22:41:54 PorscheCustomer sshd[15783]: Failed password for invalid user castillo from 80.211.162.38 port 60158 ssh2
Jun 11 22:43:02 PorscheCustomer sshd[15810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.162.38
...
2020-06-12 04:58:09
attackspambots
Jun 11 08:05:26 buvik sshd[19198]: Failed password for invalid user oracle from 80.211.162.38 port 39354 ssh2
Jun 11 08:08:59 buvik sshd[19573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.162.38  user=root
Jun 11 08:09:02 buvik sshd[19573]: Failed password for root from 80.211.162.38 port 41228 ssh2
...
2020-06-11 17:39:03
attack
Failed password for invalid user ubnt from 80.211.162.38 port 46568 ssh2
2020-06-09 07:33:24
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 80.211.162.38
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 636
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;80.211.162.38.			IN	A

;; AUTHORITY SECTION:
.			409	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020060803 1800 900 604800 86400

;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jun 09 07:33:21 CST 2020
;; MSG SIZE  rcvd: 117
Host info
38.162.211.80.in-addr.arpa domain name pointer host38-162-211-80.serverdedicati.aruba.it.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
38.162.211.80.in-addr.arpa	name = host38-162-211-80.serverdedicati.aruba.it.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
211.253.24.250 attackspambots
Time:     Mon Sep 14 07:30:05 2020 +0000
IP:       211.253.24.250 (KR/South Korea/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep 14 07:23:56 ca-29-ams1 sshd[1336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.253.24.250  user=root
Sep 14 07:23:58 ca-29-ams1 sshd[1336]: Failed password for root from 211.253.24.250 port 38466 ssh2
Sep 14 07:27:42 ca-29-ams1 sshd[1876]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.253.24.250  user=root
Sep 14 07:27:43 ca-29-ams1 sshd[1876]: Failed password for root from 211.253.24.250 port 58589 ssh2
Sep 14 07:30:04 ca-29-ams1 sshd[2262]: Invalid user tommy from 211.253.24.250 port 40764
2020-09-14 15:52:12
60.219.171.134 attackbotsspam
Port scan denied
2020-09-14 15:50:20
156.54.102.1 attackspambots
Sep 14 04:01:56 vm0 sshd[13984]: Failed password for root from 156.54.102.1 port 34951 ssh2
Sep 14 08:02:11 vm0 sshd[17680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.54.102.1
...
2020-09-14 15:53:43
203.115.29.76 attackspam
1600016120 - 09/13/2020 18:55:20 Host: 203.115.29.76/203.115.29.76 Port: 445 TCP Blocked
2020-09-14 15:40:15
159.203.165.156 attackbots
Sep 14 05:46:16 email sshd\[20245\]: Invalid user super from 159.203.165.156
Sep 14 05:46:16 email sshd\[20245\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.165.156
Sep 14 05:46:18 email sshd\[20245\]: Failed password for invalid user super from 159.203.165.156 port 49390 ssh2
Sep 14 05:50:39 email sshd\[20979\]: Invalid user shannon from 159.203.165.156
Sep 14 05:50:39 email sshd\[20979\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.165.156
...
2020-09-14 15:27:44
104.45.88.60 attackbots
104.45.88.60 (IE/Ireland/-), 6 distributed sshd attacks on account [admin] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 14 01:08:31 server4 sshd[24595]: Invalid user admin from 159.89.115.108
Sep 14 01:06:03 server4 sshd[23307]: Invalid user admin from 119.96.120.113
Sep 14 01:06:06 server4 sshd[23307]: Failed password for invalid user admin from 119.96.120.113 port 35696 ssh2
Sep 14 01:17:51 server4 sshd[29062]: Invalid user admin from 104.45.88.60
Sep 14 01:08:33 server4 sshd[24595]: Failed password for invalid user admin from 159.89.115.108 port 43200 ssh2
Sep 14 00:46:57 server4 sshd[13693]: Invalid user admin from 45.55.53.46

IP Addresses Blocked:

159.89.115.108 (CA/Canada/-)
119.96.120.113 (CN/China/-)
2020-09-14 15:54:09
61.177.172.142 attackspam
2020-09-14T09:44:51.630849ns386461 sshd\[4775\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.142  user=root
2020-09-14T09:44:54.194600ns386461 sshd\[4775\]: Failed password for root from 61.177.172.142 port 19596 ssh2
2020-09-14T09:44:57.554595ns386461 sshd\[4775\]: Failed password for root from 61.177.172.142 port 19596 ssh2
2020-09-14T09:45:00.996741ns386461 sshd\[4775\]: Failed password for root from 61.177.172.142 port 19596 ssh2
2020-09-14T09:45:04.654655ns386461 sshd\[4775\]: Failed password for root from 61.177.172.142 port 19596 ssh2
...
2020-09-14 15:45:36
58.240.196.6 attackspam
B: Abusive ssh attack
2020-09-14 15:35:05
95.27.62.232 attack
Icarus honeypot on github
2020-09-14 15:41:17
218.92.0.168 attackbotsspam
Sep 14 09:21:38 vm0 sshd[18503]: Failed password for root from 218.92.0.168 port 27792 ssh2
Sep 14 09:21:52 vm0 sshd[18503]: error: maximum authentication attempts exceeded for root from 218.92.0.168 port 27792 ssh2 [preauth]
...
2020-09-14 15:24:31
114.96.69.146 attack
114.96.69.146 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 14 03:05:50 jbs1 sshd[4113]: Failed password for root from 51.83.185.192 port 48550 ssh2
Sep 14 03:10:15 jbs1 sshd[5653]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.96.69.146  user=root
Sep 14 03:06:06 jbs1 sshd[4269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.95.124.103  user=root
Sep 14 03:06:08 jbs1 sshd[4269]: Failed password for root from 187.95.124.103 port 42723 ssh2
Sep 14 03:09:44 jbs1 sshd[5470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.249.74  user=root
Sep 14 03:09:46 jbs1 sshd[5470]: Failed password for root from 180.76.249.74 port 57246 ssh2

IP Addresses Blocked:

51.83.185.192 (FR/France/-)
2020-09-14 15:25:34
149.202.161.57 attackbotsspam
Brute-Force,SSH
2020-09-14 15:22:57
51.38.32.230 attackspambots
$f2bV_matches
2020-09-14 15:29:32
192.42.116.16 attackbots
SSH bruteforce
2020-09-14 15:33:25
49.232.166.190 attackbots
Sep 14 08:21:42 ourumov-web sshd\[29979\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.166.190  user=root
Sep 14 08:21:43 ourumov-web sshd\[29979\]: Failed password for root from 49.232.166.190 port 35872 ssh2
Sep 14 08:29:39 ourumov-web sshd\[30502\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.166.190  user=root
...
2020-09-14 15:17:21

Recently Reported IPs

65.37.118.184 176.96.170.125 210.162.141.190 100.205.36.135
120.34.124.0 46.38.145.251 73.181.119.68 75.65.136.173
180.210.185.162 221.209.79.214 189.35.174.230 62.160.100.145
78.111.85.101 185.234.216.63 1.233.178.64 59.31.74.82
40.109.140.118 93.80.137.251 66.146.179.142 31.154.133.227