Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Arezzo

Region: Tuscany

Country: Italy

Internet Service Provider: Aruba S.p.A. - Cloud Services DC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
spamattack
hacking files like 
2021-01-04 15:28:21
attackbotsspam
Oct  5 21:33:41 v22019058497090703 sshd[18593]: Failed password for root from 80.211.45.81 port 40062 ssh2
Oct  5 21:37:43 v22019058497090703 sshd[18890]: Failed password for root from 80.211.45.81 port 51852 ssh2
Oct  5 21:41:46 v22019058497090703 sshd[19287]: Failed password for root from 80.211.45.81 port 35414 ssh2
...
2019-10-06 03:48:36
attackbots
Sep 29 08:18:43 h2177944 sshd\[11882\]: Invalid user linux from 80.211.45.81 port 39040
Sep 29 08:18:43 h2177944 sshd\[11882\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.45.81
Sep 29 08:18:45 h2177944 sshd\[11882\]: Failed password for invalid user linux from 80.211.45.81 port 39040 ssh2
Sep 29 08:22:33 h2177944 sshd\[12019\]: Invalid user chucky from 80.211.45.81 port 50318
...
2019-09-29 14:29:28
attackspambots
DATE:2019-09-28 14:29:27,IP:80.211.45.81,MATCHES:10,PORT:ssh
2019-09-29 02:29:49
Comments on same subnet:
IP Type Details Datetime
80.211.45.85 attackbotsspam
Brute-force attempt banned
2020-05-26 16:42:09
80.211.45.85 attack
Invalid user banner from 80.211.45.85 port 33238
2020-05-26 03:27:55
80.211.45.85 attackspambots
May 24 14:28:54 eventyay sshd[14332]: Failed password for root from 80.211.45.85 port 48756 ssh2
May 24 14:33:21 eventyay sshd[14448]: Failed password for root from 80.211.45.85 port 54108 ssh2
May 24 14:37:51 eventyay sshd[14560]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.45.85
...
2020-05-24 21:49:41
80.211.45.85 attack
Invalid user rtp from 80.211.45.85 port 54090
2020-05-23 13:22:54
80.211.45.85 attack
$f2bV_matches
2020-05-11 22:44:09
80.211.45.85 attackspam
May  2 09:51:45 ny01 sshd[10829]: Failed password for root from 80.211.45.85 port 33282 ssh2
May  2 09:54:35 ny01 sshd[11187]: Failed password for root from 80.211.45.85 port 48170 ssh2
2020-05-03 02:00:36
80.211.45.85 attack
May  1 07:02:10 web8 sshd\[13231\]: Invalid user ubuntu from 80.211.45.85
May  1 07:02:10 web8 sshd\[13231\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.45.85
May  1 07:02:13 web8 sshd\[13231\]: Failed password for invalid user ubuntu from 80.211.45.85 port 49758 ssh2
May  1 07:07:36 web8 sshd\[16090\]: Invalid user tms from 80.211.45.85
May  1 07:07:36 web8 sshd\[16090\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.45.85
2020-05-01 15:18:04
80.211.45.85 attack
Apr 24 12:04:10 ip-172-31-62-245 sshd\[28816\]: Invalid user kinerk from 80.211.45.85\
Apr 24 12:04:12 ip-172-31-62-245 sshd\[28816\]: Failed password for invalid user kinerk from 80.211.45.85 port 33622 ssh2\
Apr 24 12:06:45 ip-172-31-62-245 sshd\[28835\]: Invalid user boomi from 80.211.45.85\
Apr 24 12:06:46 ip-172-31-62-245 sshd\[28835\]: Failed password for invalid user boomi from 80.211.45.85 port 44982 ssh2\
Apr 24 12:09:17 ip-172-31-62-245 sshd\[28946\]: Invalid user ts3sleep from 80.211.45.85\
2020-04-24 21:30:25
80.211.45.85 attack
2020-04-21T16:45:56.797558amanda2.illicoweb.com sshd\[10873\]: Invalid user admin3 from 80.211.45.85 port 44272
2020-04-21T16:45:56.800958amanda2.illicoweb.com sshd\[10873\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.45.85
2020-04-21T16:45:59.057334amanda2.illicoweb.com sshd\[10873\]: Failed password for invalid user admin3 from 80.211.45.85 port 44272 ssh2
2020-04-21T16:53:49.015722amanda2.illicoweb.com sshd\[11392\]: Invalid user ftpuser1 from 80.211.45.85 port 38454
2020-04-21T16:53:49.018103amanda2.illicoweb.com sshd\[11392\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.45.85
...
2020-04-22 00:02:34
80.211.45.85 attackbots
$f2bV_matches
2020-04-20 20:48:38
80.211.45.85 attackspam
Apr 19 22:40:45 legacy sshd[19432]: Failed password for root from 80.211.45.85 port 42882 ssh2
Apr 19 22:46:17 legacy sshd[19878]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.45.85
Apr 19 22:46:19 legacy sshd[19878]: Failed password for invalid user oracle from 80.211.45.85 port 33090 ssh2
...
2020-04-20 07:52:58
80.211.45.85 attackspambots
Apr 19 06:39:02 vlre-nyc-1 sshd\[16531\]: Invalid user ftpuser1 from 80.211.45.85
Apr 19 06:39:02 vlre-nyc-1 sshd\[16531\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.45.85
Apr 19 06:39:04 vlre-nyc-1 sshd\[16531\]: Failed password for invalid user ftpuser1 from 80.211.45.85 port 37632 ssh2
Apr 19 06:44:25 vlre-nyc-1 sshd\[16731\]: Invalid user postgres from 80.211.45.85
Apr 19 06:44:25 vlre-nyc-1 sshd\[16731\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.45.85
...
2020-04-19 15:27:25
80.211.45.85 attackspambots
2020-04-16T04:31:58.471213abusebot-4.cloudsearch.cf sshd[32531]: Invalid user rui from 80.211.45.85 port 56400
2020-04-16T04:31:58.478832abusebot-4.cloudsearch.cf sshd[32531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.45.85
2020-04-16T04:31:58.471213abusebot-4.cloudsearch.cf sshd[32531]: Invalid user rui from 80.211.45.85 port 56400
2020-04-16T04:32:00.777544abusebot-4.cloudsearch.cf sshd[32531]: Failed password for invalid user rui from 80.211.45.85 port 56400 ssh2
2020-04-16T04:36:47.804223abusebot-4.cloudsearch.cf sshd[363]: Invalid user client from 80.211.45.85 port 34804
2020-04-16T04:36:47.812894abusebot-4.cloudsearch.cf sshd[363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.45.85
2020-04-16T04:36:47.804223abusebot-4.cloudsearch.cf sshd[363]: Invalid user client from 80.211.45.85 port 34804
2020-04-16T04:36:49.785582abusebot-4.cloudsearch.cf sshd[363]: Failed password for inval
...
2020-04-16 18:11:33
80.211.45.85 attack
SSH Brute Force
2020-04-14 03:19:03
80.211.45.85 attackbotsspam
SSH Brute-Force reported by Fail2Ban
2020-04-06 18:58:33
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 80.211.45.81
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58058
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;80.211.45.81.			IN	A

;; AUTHORITY SECTION:
.			526	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019092800 1800 900 604800 86400

;; Query time: 577 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Sep 29 02:29:44 CST 2019
;; MSG SIZE  rcvd: 116
Host info
81.45.211.80.in-addr.arpa domain name pointer host81-45-211-80.serverdedicati.aruba.it.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
81.45.211.80.in-addr.arpa	name = host81-45-211-80.serverdedicati.aruba.it.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
167.114.210.124 attackspam
Attempted connection to port 22.
2020-04-08 02:40:09
35.195.188.176 attackbots
Brute force SMTP login attempted.
...
2020-04-08 02:32:06
222.186.31.204 attackspam
Apr  7 20:14:14 plex sshd[7079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.204  user=root
Apr  7 20:14:16 plex sshd[7079]: Failed password for root from 222.186.31.204 port 61761 ssh2
2020-04-08 02:34:56
185.176.27.102 attackspam
Apr  7 20:51:27 debian-2gb-nbg1-2 kernel: \[8544507.453237\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.102 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=14798 PROTO=TCP SPT=45463 DPT=17600 WINDOW=1024 RES=0x00 SYN URGP=0
2020-04-08 03:04:59
158.69.50.47 attackbotsspam
158.69.50.47 - - [07/Apr/2020:22:24:42 +0400] "POST /GponForm/diag_Form?style/ HTTP/1.1" 502 157 "-" "curl/7.3.2"
...
2020-04-08 02:36:40
106.246.250.202 attack
Apr  7 22:37:56 itv-usvr-02 sshd[3980]: Invalid user linsoft from 106.246.250.202 port 61788
Apr  7 22:37:56 itv-usvr-02 sshd[3980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.246.250.202
Apr  7 22:37:56 itv-usvr-02 sshd[3980]: Invalid user linsoft from 106.246.250.202 port 61788
Apr  7 22:37:58 itv-usvr-02 sshd[3980]: Failed password for invalid user linsoft from 106.246.250.202 port 61788 ssh2
Apr  7 22:45:07 itv-usvr-02 sshd[4410]: Invalid user deploy from 106.246.250.202 port 48438
2020-04-08 02:50:12
217.73.142.18 attackbots
04/07/2020-08:47:11.711707 217.73.142.18 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433
2020-04-08 02:28:52
195.223.211.242 attackbots
(sshd) Failed SSH login from 195.223.211.242 (IT/Italy/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr  7 19:04:10 ubnt-55d23 sshd[18221]: Invalid user es from 195.223.211.242 port 56127
Apr  7 19:04:12 ubnt-55d23 sshd[18221]: Failed password for invalid user es from 195.223.211.242 port 56127 ssh2
2020-04-08 02:58:34
49.235.218.192 attackspambots
Apr  7 14:46:52 * sshd[13052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.218.192
Apr  7 14:46:55 * sshd[13052]: Failed password for invalid user admin from 49.235.218.192 port 37314 ssh2
2020-04-08 02:44:35
187.5.33.33 attackspam
Automatic report - Port Scan Attack
2020-04-08 02:50:42
14.167.123.113 attack
Apr  7 18:52:16 gw1 sshd[26841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.167.123.113
Apr  7 18:52:18 gw1 sshd[26841]: Failed password for invalid user user3 from 14.167.123.113 port 2879 ssh2
...
2020-04-08 02:57:34
139.59.94.24 attack
Apr  7 07:40:46 server1 sshd\[344\]: Failed password for invalid user user from 139.59.94.24 port 41758 ssh2
Apr  7 07:45:05 server1 sshd\[1656\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.94.24  user=ubuntu
Apr  7 07:45:07 server1 sshd\[1656\]: Failed password for ubuntu from 139.59.94.24 port 52016 ssh2
Apr  7 07:49:29 server1 sshd\[3016\]: Invalid user appuser from 139.59.94.24
Apr  7 07:49:29 server1 sshd\[3016\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.94.24 
...
2020-04-08 03:02:34
218.92.0.212 attackspam
Apr  7 20:33:06 eventyay sshd[12317]: Failed password for root from 218.92.0.212 port 29585 ssh2
Apr  7 20:33:10 eventyay sshd[12317]: Failed password for root from 218.92.0.212 port 29585 ssh2
Apr  7 20:33:13 eventyay sshd[12317]: Failed password for root from 218.92.0.212 port 29585 ssh2
Apr  7 20:33:19 eventyay sshd[12317]: error: maximum authentication attempts exceeded for root from 218.92.0.212 port 29585 ssh2 [preauth]
...
2020-04-08 02:49:11
181.49.118.185 attackbots
Apr  8 01:37:24 itv-usvr-01 sshd[28497]: Invalid user deploy from 181.49.118.185
Apr  8 01:37:24 itv-usvr-01 sshd[28497]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.49.118.185
Apr  8 01:37:24 itv-usvr-01 sshd[28497]: Invalid user deploy from 181.49.118.185
Apr  8 01:37:26 itv-usvr-01 sshd[28497]: Failed password for invalid user deploy from 181.49.118.185 port 52036 ssh2
Apr  8 01:41:25 itv-usvr-01 sshd[28821]: Invalid user mcserver from 181.49.118.185
2020-04-08 02:52:42
154.85.37.20 attackbotsspam
$f2bV_matches
2020-04-08 02:46:38

Recently Reported IPs

73.37.242.27 23.100.222.17 1.67.49.181 176.46.121.163
5.241.9.130 113.94.7.119 91.159.65.106 200.172.164.116
192.225.229.170 198.209.6.22 128.199.223.127 90.8.57.247
32.122.156.184 221.70.225.248 114.105.242.111 97.128.117.151
191.224.216.112 31.1.143.203 62.138.138.16 12.100.14.184