80.211.30.166 - IPInfo

Basic Info

City: Arezzo

Region: Tuscany

Country: Italy

Internet Service Provider: Aruba S.p.A. - Cloud Services DC

Hostname: unknown

Organization: Aruba S.p.A.

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	May 29 09:16:48 firewall sshd[2442]: Failed password for invalid user test from 80.211.30.166 port 45866 ssh2 May 29 09:20:41 firewall sshd[2585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.30.166 user=root May 29 09:20:43 firewall sshd[2585]: Failed password for root from 80.211.30.166 port 52494 ssh2 ...	2020-05-29 22:40:05
attackspambots	(sshd) Failed SSH login from 80.211.30.166 (IT/Italy/host166-30-211-80.serverdedicati.aruba.it): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 28 01:04:55 s1 sshd[11722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.30.166 user=root May 28 01:04:58 s1 sshd[11722]: Failed password for root from 80.211.30.166 port 44322 ssh2 May 28 01:18:27 s1 sshd[12033]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.30.166 user=root May 28 01:18:30 s1 sshd[12033]: Failed password for root from 80.211.30.166 port 39326 ssh2 May 28 01:21:55 s1 sshd[12214]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.30.166 user=root	2020-05-28 06:29:14
attackspambots	May 23 03:40:00 gw1 sshd[3820]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.30.166 May 23 03:40:01 gw1 sshd[3820]: Failed password for invalid user zdi from 80.211.30.166 port 50214 ssh2 ...	2020-05-23 06:45:10
attackbotsspam	Invalid user ubh from 80.211.30.166 port 37450	2020-05-22 03:40:52
attackspambots	Invalid user ubh from 80.211.30.166 port 37450	2020-05-21 15:30:20
attackspambots	Invalid user info from 80.211.30.166 port 44624	2020-05-15 07:38:46
attackspambots	prod3 ...	2020-04-27 08:44:58
attackbots	Apr 25 09:56:07 vserver sshd\[32308\]: Invalid user samba from 80.211.30.166Apr 25 09:56:09 vserver sshd\[32308\]: Failed password for invalid user samba from 80.211.30.166 port 46422 ssh2Apr 25 10:00:26 vserver sshd\[32339\]: Invalid user dani from 80.211.30.166Apr 25 10:00:27 vserver sshd\[32339\]: Failed password for invalid user dani from 80.211.30.166 port 58764 ssh2 ...	2020-04-25 16:31:55
attackbotsspam	Apr 15 08:11:44 sshd\[15989\]: Invalid user flw from 80.211.30.166Apr 15 08:11:46 sshd\[15989\]: Failed password for invalid user flw from 80.211.30.166 port 57660 ssh2 ...	2020-04-15 14:14:44
attackbotsspam	Apr 14 16:18:21 santamaria sshd\[391\]: Invalid user ftp from 80.211.30.166 Apr 14 16:18:21 santamaria sshd\[391\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.30.166 Apr 14 16:18:23 santamaria sshd\[391\]: Failed password for invalid user ftp from 80.211.30.166 port 38378 ssh2 ...	2020-04-14 22:30:02
attackbots	SSH Login Bruteforce	2020-04-12 14:51:09
attackbots	Mar 31 23:23:24 work-partkepr sshd\[5499\]: Invalid user username from 80.211.30.166 port 46842 Mar 31 23:23:24 work-partkepr sshd\[5499\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.30.166 ...	2020-04-01 08:02:58
attackspam	SSH Brute-Forcing (server1)	2020-03-30 17:18:56
attackspambots	Mar 25 10:30:31 XXX sshd[28675]: Invalid user www from 80.211.30.166 port 60510	2020-03-26 08:24:01
attackbotsspam	Invalid user direction from 80.211.30.166 port 32946	2020-03-24 16:55:21
attackbots	Mar 21 17:22:54 ourumov-web sshd\[3236\]: Invalid user tpgit from 80.211.30.166 port 39802 Mar 21 17:22:54 ourumov-web sshd\[3236\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.30.166 Mar 21 17:22:55 ourumov-web sshd\[3236\]: Failed password for invalid user tpgit from 80.211.30.166 port 39802 ssh2 ...	2020-03-22 00:42:37
attack	Mar 10 10:55:40 ns381471 sshd[4998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.30.166 Mar 10 10:55:42 ns381471 sshd[4998]: Failed password for invalid user mc from 80.211.30.166 port 40952 ssh2	2020-03-10 20:04:42
attackspambots	Feb 25 00:14:47 Ubuntu-1404-trusty-64-minimal sshd\[21054\]: Invalid user nicolas from 80.211.30.166 Feb 25 00:14:47 Ubuntu-1404-trusty-64-minimal sshd\[21054\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.30.166 Feb 25 00:14:49 Ubuntu-1404-trusty-64-minimal sshd\[21054\]: Failed password for invalid user nicolas from 80.211.30.166 port 54134 ssh2 Feb 25 00:21:58 Ubuntu-1404-trusty-64-minimal sshd\[25284\]: Invalid user omega from 80.211.30.166 Feb 25 00:21:58 Ubuntu-1404-trusty-64-minimal sshd\[25284\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.30.166	2020-02-25 11:26:08
attackspambots	Invalid user cpanelphpmyadmin from 80.211.30.166 port 38558	2020-02-22 19:16:56
attack	Unauthorized connection attempt detected from IP address 80.211.30.166 to port 2220 [J]	2020-01-16 03:07:40
attackbotsspam	3x Failed Password	2020-01-10 02:14:18
attack	Dec 20 17:27:39 * sshd[28775]: Failed password for invalid user borboen from 80.211.30.166 port 58716 ssh2 Dec 20 17:38:51 * sshd[28920]: Failed password for invalid user bbs from 80.211.30.166 port 42692 ssh2 Dec 20 17:44:00 * sshd[29203]: Failed password for invalid user shoun from 80.211.30.166 port 49878 ssh2 Dec 20 17:54:20 * sshd[29453]: Failed password for invalid user zuras from 80.211.30.166 port 35958 ssh2 Dec 20 17:59:38 * sshd[29546]: Failed password for invalid user server from 80.211.30.166 port 43320 ssh2 Dec 20 18:04:44 * sshd[29610]: Failed password for invalid user apache from 80.211.30.166 port 50476 ssh2 Dec 20 18:15:05 * sshd[29795]: Failed password for invalid user mysql from 80.211.30.166 port 36736 ssh2 Dec 20 18:20:08 * sshd[29853]: Failed password for invalid user chrony from 80.211.30.166 port 43730 ssh2 Dec 20 18:30:37 * sshd[29992]: Failed password for invalid user dayaneni from 80.211.30.166 port 58542 ssh2 Dec 20 18:35:44 * sshd[30058]: Failed password for in	2019-12-21 05:27:33
attackbotsspam	Dec 15 06:13:30 php1 sshd\[17899\]: Invalid user ubnt from 80.211.30.166 Dec 15 06:13:30 php1 sshd\[17899\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.30.166 Dec 15 06:13:32 php1 sshd\[17899\]: Failed password for invalid user ubnt from 80.211.30.166 port 59386 ssh2 Dec 15 06:19:14 php1 sshd\[18605\]: Invalid user vcsa from 80.211.30.166 Dec 15 06:19:14 php1 sshd\[18605\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.30.166	2019-12-16 00:32:33
attackspambots	Invalid user asterisk from 80.211.30.166 port 41090	2019-12-14 22:22:47
attackspam	2019-12-08T22:52:56.509631 sshd[20769]: Invalid user fax from 80.211.30.166 port 38800 2019-12-08T22:52:56.523296 sshd[20769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.30.166 2019-12-08T22:52:56.509631 sshd[20769]: Invalid user fax from 80.211.30.166 port 38800 2019-12-08T22:52:58.239711 sshd[20769]: Failed password for invalid user fax from 80.211.30.166 port 38800 ssh2 2019-12-08T23:00:20.390040 sshd[20938]: Invalid user fd from 80.211.30.166 port 48436 ...	2019-12-09 06:38:01
attackbots	Dec 5 11:39:26 TORMINT sshd\[18973\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.30.166 user=backup Dec 5 11:39:28 TORMINT sshd\[18973\]: Failed password for backup from 80.211.30.166 port 40388 ssh2 Dec 5 11:44:52 TORMINT sshd\[19466\]: Invalid user larry from 80.211.30.166 Dec 5 11:44:52 TORMINT sshd\[19466\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.30.166 ...	2019-12-06 00:50:30
attackbots	Dec 5 00:10:48 meumeu sshd[32459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.30.166 Dec 5 00:10:51 meumeu sshd[32459]: Failed password for invalid user pass555 from 80.211.30.166 port 48120 ssh2 Dec 5 00:16:34 meumeu sshd[1073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.30.166 ...	2019-12-05 07:17:18
attackbots	Nov 28 09:26:11 lnxmysql61 sshd[11525]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.30.166	2019-11-28 20:07:19
attackspambots	Nov 27 10:29:15 sbg01 sshd[8882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.30.166 Nov 27 10:29:17 sbg01 sshd[8882]: Failed password for invalid user shishakly from 80.211.30.166 port 58084 ssh2 Nov 27 10:35:32 sbg01 sshd[8892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.30.166	2019-11-27 18:28:33
attack	Nov 17 06:58:16 vmanager6029 sshd\[30374\]: Invalid user dilly from 80.211.30.166 port 60810 Nov 17 06:58:16 vmanager6029 sshd\[30374\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.30.166 Nov 17 06:58:18 vmanager6029 sshd\[30374\]: Failed password for invalid user dilly from 80.211.30.166 port 60810 ssh2	2019-11-17 14:04:37

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 80.211.30.166
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47236
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;80.211.30.166.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081401 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Aug 15 05:19:32 CST 2019
;; MSG SIZE  rcvd: 117

Host info

166.30.211.80.in-addr.arpa domain name pointer host166-30-211-80.serverdedicati.aruba.it.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
166.30.211.80.in-addr.arpa	name = host166-30-211-80.serverdedicati.aruba.it.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
185.117.144.126	attack	Unauthorized connection attempt from IP address 185.117.144.126 on Port 445(SMB)	2020-02-20 16:54:54
94.11.130.1	attack	Automatic report - Port Scan Attack	2020-02-20 17:29:48
58.212.139.229	attack	Feb 20 08:17:02 localhost sshd\[6987\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.212.139.229 user=root Feb 20 08:17:04 localhost sshd\[6987\]: Failed password for root from 58.212.139.229 port 37755 ssh2 Feb 20 08:24:02 localhost sshd\[7132\]: Invalid user ubuntu from 58.212.139.229 port 63806 Feb 20 08:24:02 localhost sshd\[7132\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.212.139.229 Feb 20 08:24:04 localhost sshd\[7132\]: Failed password for invalid user ubuntu from 58.212.139.229 port 63806 ssh2 ...	2020-02-20 17:01:53
103.24.75.50	attackbotsspam	Unauthorized connection attempt detected from IP address 103.24.75.50 to port 445	2020-02-20 17:01:32
162.62.17.159	attackspam	Honeypot attack, application: portmapper, PTR: PTR record not found	2020-02-20 16:56:40
45.183.193.1	attackbots	Feb 20 08:11:47 localhost sshd\[32085\]: Invalid user vmail from 45.183.193.1 port 49430 Feb 20 08:11:47 localhost sshd\[32085\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.183.193.1 Feb 20 08:11:50 localhost sshd\[32085\]: Failed password for invalid user vmail from 45.183.193.1 port 49430 ssh2	2020-02-20 17:03:32
58.213.123.195	attack	Feb 20 05:52:34 h2497892 dovecot: pop3-login: Disconnected \(no auth attempts in 0 secs\): user=\<\>, rip=58.213.123.195, lip=85.214.205.138, session=\ Feb 20 05:52:36 h2497892 dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=58.213.123.195, lip=85.214.205.138, session=\<5UxhrPqezbQ61XvD\> Feb 20 05:52:43 h2497892 dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=58.213.123.195, lip=85.214.205.138, session=\ ...	2020-02-20 17:18:55
216.10.242.28	attack	Feb 20 02:20:29 plusreed sshd[758]: Invalid user ts3 from 216.10.242.28 ...	2020-02-20 17:10:16
51.77.156.223	attack	Feb 20 09:52:24 silence02 sshd[22318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.156.223 Feb 20 09:52:26 silence02 sshd[22318]: Failed password for invalid user sinusbot from 51.77.156.223 port 42340 ssh2 Feb 20 09:55:57 silence02 sshd[22539]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.156.223	2020-02-20 16:58:42
37.49.231.163	attack	Feb 20 07:59:10 h2177944 kernel: \[5379815.660967\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=37.49.231.163 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=584 PROTO=TCP SPT=56342 DPT=5038 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 20 07:59:10 h2177944 kernel: \[5379815.660980\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=37.49.231.163 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=584 PROTO=TCP SPT=56342 DPT=5038 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 20 08:02:06 h2177944 kernel: \[5379991.755794\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=37.49.231.163 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=4140 PROTO=TCP SPT=56342 DPT=50802 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 20 08:02:06 h2177944 kernel: \[5379991.755808\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=37.49.231.163 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=4140 PROTO=TCP SPT=56342 DPT=50802 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 20 08:56:35 h2177944 kernel: \[5383260.169182\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=37.49.231.163 DST=85.214.117.9 LEN	2020-02-20 16:49:51
92.27.229.144	attackspambots	firewall-block, port(s): 23/tcp	2020-02-20 17:24:51
151.80.243.117	attack	Automatic report - XMLRPC Attack	2020-02-20 16:53:41
95.70.174.220	attack	20/2/19@23:52:45: FAIL: Alarm-Network address from=95.70.174.220 ...	2020-02-20 17:18:02
58.57.39.171	attackbots	firewall-block, port(s): 1433/tcp	2020-02-20 17:05:19
84.131.101.74	attack	Automatic report - Port Scan Attack	2020-02-20 16:58:24

Recently Reported IPs

190.153.81.230	175.71.53.196	127.36.151.214	199.121.25.141
205.172.44.51	206.237.50.247	89.169.119.42	67.215.219.46
140.137.2.91	0.206.35.82	89.76.190.82	39.161.91.238
63.61.237.249	65.98.111.218	149.13.134.13	67.161.205.96
89.204.79.52	49.166.104.218	37.160.227.145	73.235.183.137