Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Italy

Internet Service Provider: Aruba S.p.A. - Cloud Services DC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbots
Nov  6 09:25:37 lnxded63 sshd[22083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.48.46
2019-11-06 19:52:41
attackspam
2019-11-05T22:35:43.047036abusebot-6.cloudsearch.cf sshd\[23985\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.48.46  user=root
2019-11-06 08:41:59
attackspam
Nov  4 01:04:27 server sshd\[31336\]: Invalid user Sylvania from 80.211.48.46 port 53188
Nov  4 01:04:27 server sshd\[31336\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.48.46
Nov  4 01:04:29 server sshd\[31336\]: Failed password for invalid user Sylvania from 80.211.48.46 port 53188 ssh2
Nov  4 01:08:20 server sshd\[14789\]: Invalid user 1234 from 80.211.48.46 port 34882
Nov  4 01:08:20 server sshd\[14789\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.48.46
2019-11-04 07:24:42
attack
Oct 23 00:39:21 vps691689 sshd[28500]: Failed password for root from 80.211.48.46 port 47774 ssh2
Oct 23 00:42:59 vps691689 sshd[28554]: Failed password for root from 80.211.48.46 port 58842 ssh2
...
2019-10-23 07:09:51
attack
Invalid user transfer from 80.211.48.46 port 46732
2019-10-20 01:43:35
attackspambots
2019-10-18T19:52:30.353588abusebot-6.cloudsearch.cf sshd\[2855\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.48.46  user=root
2019-10-19 04:57:14
attackspambots
Oct 14 19:32:24 shadeyouvpn sshd[17655]: Address 80.211.48.46 maps to host46-48-211-80.serverdedicati.aruba.hostname, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Oct 14 19:32:24 shadeyouvpn sshd[17655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.48.46  user=r.r
Oct 14 19:32:26 shadeyouvpn sshd[17655]: Failed password for r.r from 80.211.48.46 port 42096 ssh2
Oct 14 19:32:26 shadeyouvpn sshd[17655]: Received disconnect from 80.211.48.46: 11: Bye Bye [preauth]
Oct 14 19:42:35 shadeyouvpn sshd[24560]: Address 80.211.48.46 maps to host46-48-211-80.serverdedicati.aruba.hostname, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Oct 14 19:42:35 shadeyouvpn sshd[24560]: Invalid user oo from 80.211.48.46
Oct 14 19:42:35 shadeyouvpn sshd[24560]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.48.46 
Oct 14 19:42:36 shadeyouvpn sshd[24........
-------------------------------
2019-10-15 16:14:46
attackspambots
Oct 14 02:08:57 ny01 sshd[6204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.48.46
Oct 14 02:08:59 ny01 sshd[6204]: Failed password for invalid user Web@12345 from 80.211.48.46 port 37906 ssh2
Oct 14 02:12:40 ny01 sshd[6535]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.48.46
2019-10-14 14:39:27
attackspam
Oct 11 21:00:03 web9 sshd\[10619\]: Invalid user Micro@123 from 80.211.48.46
Oct 11 21:00:03 web9 sshd\[10619\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.48.46
Oct 11 21:00:05 web9 sshd\[10619\]: Failed password for invalid user Micro@123 from 80.211.48.46 port 58146 ssh2
Oct 11 21:03:50 web9 sshd\[11173\]: Invalid user Root@2015 from 80.211.48.46
Oct 11 21:03:50 web9 sshd\[11173\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.48.46
2019-10-12 15:09:48
attackbots
Oct  7 19:34:41 server sshd[8586]: reveeclipse mapping checking getaddrinfo for host46-48-211-80.serverdedicati.aruba.hostname [80.211.48.46] failed - POSSIBLE BREAK-IN ATTEMPT!
Oct  7 19:34:41 server sshd[8586]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.48.46  user=r.r
Oct  7 19:34:44 server sshd[8586]: Failed password for r.r from 80.211.48.46 port 43278 ssh2
Oct  7 19:34:44 server sshd[8586]: Received disconnect from 80.211.48.46: 11: Bye Bye [preauth]
Oct  7 19:41:54 server sshd[9062]: reveeclipse mapping checking getaddrinfo for host46-48-211-80.serverdedicati.aruba.hostname [80.211.48.46] failed - POSSIBLE BREAK-IN ATTEMPT!
Oct  7 19:41:54 server sshd[9062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.48.46  user=r.r
Oct  7 19:41:56 server sshd[9062]: Failed password for r.r from 80.211.48.46 port 57098 ssh2
Oct  7 19:41:56 server sshd[9062]: Received disconnect........
-------------------------------
2019-10-11 17:31:19
attackbots
Oct  7 19:34:41 server sshd[8586]: reveeclipse mapping checking getaddrinfo for host46-48-211-80.serverdedicati.aruba.hostname [80.211.48.46] failed - POSSIBLE BREAK-IN ATTEMPT!
Oct  7 19:34:41 server sshd[8586]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.48.46  user=r.r
Oct  7 19:34:44 server sshd[8586]: Failed password for r.r from 80.211.48.46 port 43278 ssh2
Oct  7 19:34:44 server sshd[8586]: Received disconnect from 80.211.48.46: 11: Bye Bye [preauth]
Oct  7 19:41:54 server sshd[9062]: reveeclipse mapping checking getaddrinfo for host46-48-211-80.serverdedicati.aruba.hostname [80.211.48.46] failed - POSSIBLE BREAK-IN ATTEMPT!
Oct  7 19:41:54 server sshd[9062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.48.46  user=r.r
Oct  7 19:41:56 server sshd[9062]: Failed password for r.r from 80.211.48.46 port 57098 ssh2
Oct  7 19:41:56 server sshd[9062]: Received disconnect........
-------------------------------
2019-10-11 05:42:50
attackspam
Oct  7 19:34:41 server sshd[8586]: reveeclipse mapping checking getaddrinfo for host46-48-211-80.serverdedicati.aruba.hostname [80.211.48.46] failed - POSSIBLE BREAK-IN ATTEMPT!
Oct  7 19:34:41 server sshd[8586]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.48.46  user=r.r
Oct  7 19:34:44 server sshd[8586]: Failed password for r.r from 80.211.48.46 port 43278 ssh2
Oct  7 19:34:44 server sshd[8586]: Received disconnect from 80.211.48.46: 11: Bye Bye [preauth]
Oct  7 19:41:54 server sshd[9062]: reveeclipse mapping checking getaddrinfo for host46-48-211-80.serverdedicati.aruba.hostname [80.211.48.46] failed - POSSIBLE BREAK-IN ATTEMPT!
Oct  7 19:41:54 server sshd[9062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.48.46  user=r.r
Oct  7 19:41:56 server sshd[9062]: Failed password for r.r from 80.211.48.46 port 57098 ssh2
Oct  7 19:41:56 server sshd[9062]: Received disconnect........
-------------------------------
2019-10-09 18:21:47
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 80.211.48.46
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8644
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;80.211.48.46.			IN	A

;; AUTHORITY SECTION:
.			471	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019100900 1800 900 604800 86400

;; Query time: 82 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Oct 09 18:21:45 CST 2019
;; MSG SIZE  rcvd: 116
Host info
46.48.211.80.in-addr.arpa domain name pointer host46-48-211-80.serverdedicati.aruba.it.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
46.48.211.80.in-addr.arpa	name = host46-48-211-80.serverdedicati.aruba.it.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
148.72.212.161 attack
Aug 10 21:59:53 vps200512 sshd\[32182\]: Invalid user administrador from 148.72.212.161
Aug 10 21:59:53 vps200512 sshd\[32182\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.72.212.161
Aug 10 21:59:55 vps200512 sshd\[32182\]: Failed password for invalid user administrador from 148.72.212.161 port 32796 ssh2
Aug 10 22:04:54 vps200512 sshd\[32288\]: Invalid user rodger from 148.72.212.161
Aug 10 22:04:54 vps200512 sshd\[32288\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.72.212.161
2019-08-11 10:06:18
222.170.73.37 attackbots
Feb 24 04:58:45 motanud sshd\[21814\]: Invalid user ts from 222.170.73.37 port 35316
Feb 24 04:58:45 motanud sshd\[21814\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.170.73.37
Feb 24 04:58:47 motanud sshd\[21814\]: Failed password for invalid user ts from 222.170.73.37 port 35316 ssh2
2019-08-11 10:01:43
189.206.160.94 attackbots
Honeypot attack, port: 445, PTR: mail.gmundial.com.
2019-08-11 10:16:25
177.41.26.175 attackspam
Automatic report - Port Scan Attack
2019-08-11 09:46:52
209.97.174.145 attack
Aug 11 00:43:55 localhost sshd\[12506\]: Invalid user scan from 209.97.174.145
Aug 11 00:43:55 localhost sshd\[12506\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.174.145
Aug 11 00:43:58 localhost sshd\[12506\]: Failed password for invalid user scan from 209.97.174.145 port 35060 ssh2
Aug 11 00:48:47 localhost sshd\[12679\]: Invalid user fit from 209.97.174.145
Aug 11 00:48:47 localhost sshd\[12679\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.174.145
...
2019-08-11 09:47:08
35.184.149.129 attack
19/8/10@19:37:22: FAIL: IoT-Telnet address from=35.184.149.129
...
2019-08-11 10:23:21
112.186.77.106 attackbots
Aug 11 04:16:31 hosting sshd[5256]: Invalid user lasg from 112.186.77.106 port 54516
Aug 11 04:16:31 hosting sshd[5256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.186.77.106
Aug 11 04:16:31 hosting sshd[5256]: Invalid user lasg from 112.186.77.106 port 54516
Aug 11 04:16:33 hosting sshd[5256]: Failed password for invalid user lasg from 112.186.77.106 port 54516 ssh2
...
2019-08-11 09:41:17
61.63.109.1 attackspam
Honeypot attack, port: 5555, PTR: 61-63-109-1.nty.dynamic.tbcnet.net.tw.
2019-08-11 09:49:51
112.249.225.200 attack
23/tcp
[2019-08-10]1pkt
2019-08-11 10:01:16
118.25.98.75 attackbotsspam
Aug 11 04:36:25 www5 sshd\[32325\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.98.75  user=root
Aug 11 04:36:27 www5 sshd\[32325\]: Failed password for root from 118.25.98.75 port 40770 ssh2
Aug 11 04:40:49 www5 sshd\[32620\]: Invalid user jcaracappa from 118.25.98.75
...
2019-08-11 09:45:32
188.165.250.228 attackspam
fail2ban
2019-08-11 09:44:07
61.19.254.40 attack
Honeypot attack, port: 445, PTR: PTR record not found
2019-08-11 10:14:27
164.73.58.133 attackbotsspam
Aug 11 01:34:16 MK-Soft-Root1 sshd\[15570\]: Invalid user sysadmin from 164.73.58.133 port 48434
Aug 11 01:34:16 MK-Soft-Root1 sshd\[15570\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.73.58.133
Aug 11 01:34:18 MK-Soft-Root1 sshd\[15570\]: Failed password for invalid user sysadmin from 164.73.58.133 port 48434 ssh2
...
2019-08-11 10:24:05
68.183.83.141 attack
SSH Server BruteForce Attack
2019-08-11 09:51:05
88.247.108.120 attackspam
Aug 11 03:06:17 [host] sshd[25049]: Invalid user goran from 88.247.108.120
Aug 11 03:06:17 [host] sshd[25049]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.247.108.120
Aug 11 03:06:19 [host] sshd[25049]: Failed password for invalid user goran from 88.247.108.120 port 39269 ssh2
2019-08-11 09:37:56

Recently Reported IPs

18.85.88.63 202.89.243.67 255.73.131.141 57.55.161.0
181.26.190.187 224.67.63.148 115.72.22.27 241.239.92.149
253.211.24.98 21.0.197.19 56.64.134.67 148.250.165.178
109.3.103.67 47.49.242.124 109.152.105.155 52.15.45.44
43.138.202.230 45.136.109.251 141.228.81.221 134.209.177.176