80.211.239.52 - IPInfo

Basic Info

City: Dalmine

Region: Lombardy

Country: Italy

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
80.211.239.49	attackspambots	Aug 17 15:37:02 vm0 sshd[21545]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.239.49 Aug 17 15:37:03 vm0 sshd[21545]: Failed password for invalid user jht from 80.211.239.49 port 53392 ssh2 ...	2020-08-18 00:37:13
80.211.239.49	attackspam	Aug 11 13:51:19 rush sshd[15507]: Failed password for root from 80.211.239.49 port 56800 ssh2 Aug 11 13:53:32 rush sshd[15563]: Failed password for root from 80.211.239.49 port 57742 ssh2 ...	2020-08-12 01:36:37
80.211.239.49	attackspambots	Aug 1 23:28:46 eventyay sshd[6512]: Failed password for root from 80.211.239.49 port 35896 ssh2 Aug 1 23:30:46 eventyay sshd[6608]: Failed password for root from 80.211.239.49 port 34938 ssh2 ...	2020-08-02 05:51:06
80.211.239.49	attack	Jul 14 17:29:40 vps46666688 sshd[16490]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.239.49 Jul 14 17:29:42 vps46666688 sshd[16490]: Failed password for invalid user uftp from 80.211.239.49 port 56282 ssh2 ...	2020-07-15 05:30:57
80.211.239.49	attack	Jul 12 07:47:28 PorscheCustomer sshd[19963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.239.49 Jul 12 07:47:30 PorscheCustomer sshd[19963]: Failed password for invalid user fisher from 80.211.239.49 port 36276 ssh2 Jul 12 07:51:21 PorscheCustomer sshd[20069]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.239.49 ...	2020-07-12 17:15:29
80.211.239.242	attackbots	Hits on port : 22	2020-04-05 08:43:53
80.211.239.110	attackbots	Dec 6 18:17:42 mecmail postfix/smtpd[7348]: NOQUEUE: reject: RCPT from fj90.leadsbrz2.com[80.211.239.110]: 554 5.7.1 Service unavailable; Client host [80.211.239.110] blocked using dnsbl.spfbl.net; https://matrix.spfbl.net/80.211.239.110; from= to= proto=ESMTP helo= Dec 6 18:20:12 mecmail postfix/smtpd[21394]: NOQUEUE: reject: RCPT from fj90.leadsbrz2.com[80.211.239.110]: 554 5.7.1 Service unavailable; Client host [80.211.239.110] blocked using dnsbl.spfbl.net; https://matrix.spfbl.net/80.211.239.110; from= to= proto=ESMTP helo= Dec 6 19:24:07 mecmail postfix/smtpd[7266]: NOQUEUE: reject: RCPT from fj90.leadsbrz2.com[80.211.239.110]: 554 5.7.1 Service unavailable; Client host [80.211.239.110] blocked using dnsbl.spfbl.net; https://matrix.spfbl.net/80.211.239.110; from= to=	2019-12-07 18:40:45
80.211.239.42	attackspambots	Automatic report - XMLRPC Attack	2019-10-30 03:20:51
80.211.239.102	attack	Sep 28 07:57:53 sshgateway sshd\[24631\]: Invalid user ftpprod from 80.211.239.102 Sep 28 07:57:53 sshgateway sshd\[24631\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.239.102 Sep 28 07:57:55 sshgateway sshd\[24631\]: Failed password for invalid user ftpprod from 80.211.239.102 port 46936 ssh2	2019-09-28 17:40:47
80.211.239.102	attackspam	Sep 27 12:06:39 mail sshd\[2739\]: Failed password for invalid user xxx from 80.211.239.102 port 41456 ssh2 Sep 27 12:10:53 mail sshd\[3403\]: Invalid user jm from 80.211.239.102 port 53708 Sep 27 12:10:53 mail sshd\[3403\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.239.102 Sep 27 12:10:55 mail sshd\[3403\]: Failed password for invalid user jm from 80.211.239.102 port 53708 ssh2 Sep 27 12:15:04 mail sshd\[4065\]: Invalid user reis from 80.211.239.102 port 37730	2019-09-27 18:53:17
80.211.239.102	attack	Sep 22 11:02:56 ny01 sshd[4910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.239.102 Sep 22 11:02:57 ny01 sshd[4910]: Failed password for invalid user jayesh. from 80.211.239.102 port 57502 ssh2 Sep 22 11:07:22 ny01 sshd[5663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.239.102	2019-09-22 23:21:57
80.211.239.102	attackspam	Sep 11 22:42:58 legacy sshd[28649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.239.102 Sep 11 22:43:00 legacy sshd[28649]: Failed password for invalid user server from 80.211.239.102 port 48584 ssh2 Sep 11 22:49:11 legacy sshd[28806]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.239.102 ...	2019-09-12 05:04:15
80.211.239.102	attackbotsspam	Sep 10 19:23:30 ny01 sshd[18983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.239.102 Sep 10 19:23:32 ny01 sshd[18983]: Failed password for invalid user 1 from 80.211.239.102 port 54028 ssh2 Sep 10 19:29:34 ny01 sshd[20553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.239.102	2019-09-11 11:51:12
80.211.239.102	attackbotsspam	Aug 29 15:16:45 lcprod sshd\[26534\]: Invalid user nagios from 80.211.239.102 Aug 29 15:16:45 lcprod sshd\[26534\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.239.102 Aug 29 15:16:47 lcprod sshd\[26534\]: Failed password for invalid user nagios from 80.211.239.102 port 45966 ssh2 Aug 29 15:20:53 lcprod sshd\[26927\]: Invalid user honey from 80.211.239.102 Aug 29 15:20:53 lcprod sshd\[26927\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.239.102	2019-08-30 11:30:55
80.211.239.102	attack	Jul 30 14:03:01 server sshd\[19159\]: Invalid user www from 80.211.239.102 Jul 30 14:03:01 server sshd\[19159\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.239.102 Jul 30 14:03:03 server sshd\[19159\]: Failed password for invalid user www from 80.211.239.102 port 34186 ssh2 ...	2019-08-21 17:52:27

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 80.211.239.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4553
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;80.211.239.52.			IN	A

;; AUTHORITY SECTION:
.			485	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020060100 1800 900 604800 86400

;; Query time: 108 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jun 01 23:17:57 CST 2020
;; MSG SIZE  rcvd: 117

Host info

52.239.211.80.in-addr.arpa domain name pointer host52-239-211-80.serverdedicati.aruba.it.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
52.239.211.80.in-addr.arpa	name = host52-239-211-80.serverdedicati.aruba.it.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
212.64.60.187	attackbotsspam	$f2bV_matches	2020-06-07 17:02:48
103.210.204.97	attackspam	Port probing on unauthorized port 23	2020-06-07 17:19:20
84.54.92.89	attackbotsspam	Automatic report - Port Scan Attack	2020-06-07 17:01:01
51.178.133.137	attack	Fail2Ban Ban Triggered	2020-06-07 17:30:57
119.29.227.108	attackbotsspam	Jun 7 08:00:41 vpn01 sshd[8304]: Failed password for root from 119.29.227.108 port 46242 ssh2 ...	2020-06-07 17:20:00
51.79.84.48	attack	Jun 7 10:55:52 lnxmail61 sshd[13512]: Failed password for root from 51.79.84.48 port 56148 ssh2 Jun 7 10:55:52 lnxmail61 sshd[13512]: Failed password for root from 51.79.84.48 port 56148 ssh2	2020-06-07 17:08:25
111.198.54.173	attack	(sshd) Failed SSH login from 111.198.54.173 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 7 10:08:39 amsweb01 sshd[31056]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.198.54.173 user=root Jun 7 10:08:41 amsweb01 sshd[31056]: Failed password for root from 111.198.54.173 port 59288 ssh2 Jun 7 10:19:37 amsweb01 sshd[32477]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.198.54.173 user=root Jun 7 10:19:40 amsweb01 sshd[32477]: Failed password for root from 111.198.54.173 port 59894 ssh2 Jun 7 10:22:58 amsweb01 sshd[474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.198.54.173 user=root	2020-06-07 17:05:46
103.25.21.173	attack	2020-05-01T22:20:42.907096suse-nuc sshd[4432]: User root from 103.25.21.173 not allowed because listed in DenyUsers ...	2020-06-07 17:06:47
142.93.212.213	attack	Jun 7 07:01:04 piServer sshd[4487]: Failed password for root from 142.93.212.213 port 55254 ssh2 Jun 7 07:05:04 piServer sshd[4974]: Failed password for root from 142.93.212.213 port 59002 ssh2 ...	2020-06-07 17:20:31
89.38.144.118	attackbotsspam	" "	2020-06-07 17:35:16
222.186.190.14	attackspambots	06/07/2020-05:00:53.580759 222.186.190.14 Protocol: 6 ET SCAN Potential SSH Scan	2020-06-07 17:05:29
128.199.142.0	attackbotsspam	2020-06-07T05:00:02.021908abusebot-6.cloudsearch.cf sshd[23181]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.0 user=root 2020-06-07T05:00:03.890516abusebot-6.cloudsearch.cf sshd[23181]: Failed password for root from 128.199.142.0 port 42764 ssh2 2020-06-07T05:02:26.675457abusebot-6.cloudsearch.cf sshd[23319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.0 user=root 2020-06-07T05:02:28.784681abusebot-6.cloudsearch.cf sshd[23319]: Failed password for root from 128.199.142.0 port 51118 ssh2 2020-06-07T05:04:50.056305abusebot-6.cloudsearch.cf sshd[23441]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.0 user=root 2020-06-07T05:04:51.934706abusebot-6.cloudsearch.cf sshd[23441]: Failed password for root from 128.199.142.0 port 59466 ssh2 2020-06-07T05:07:16.860031abusebot-6.cloudsearch.cf sshd[23574]: pam_unix(sshd:auth): authe ...	2020-06-07 17:26:26
218.4.164.86	attack	Jun 7 11:01:05 eventyay sshd[14199]: Failed password for root from 218.4.164.86 port 52371 ssh2 Jun 7 11:05:03 eventyay sshd[14288]: Failed password for root from 218.4.164.86 port 50378 ssh2 ...	2020-06-07 17:16:19
95.179.127.82	attackspambots	Fail2Ban Ban Triggered HTTP SQL Injection Attempt	2020-06-07 17:15:28
184.105.139.77	attackspam	[portscan] udp/1900 [ssdp] *(RWIN=-)(06070941)	2020-06-07 17:21:48

Recently Reported IPs

1.250.14.143	85.87.36.208	139.62.236.234	77.66.42.124
36.81.213.116	122.32.24.82	203.163.249.252	191.235.249.135
114.119.164.186	3.176.195.161	135.248.227.213	125.224.239.28
27.65.192.34	114.119.160.80	146.23.107.111	91.158.45.160
14.64.98.34	219.9.132.105	23.155.3.202	194.27.233.203