Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Italy

Internet Service Provider: Aruba S.p.A. - Cloud Services DC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbotsspam
Aug  2 14:33:49 vps333114 sshd[10426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.54.146  user=root
Aug  2 14:33:52 vps333114 sshd[10426]: Failed password for root from 80.211.54.146 port 58847 ssh2
...
2020-08-02 21:17:59
attackspambots
Invalid user ftptest from 80.211.54.146 port 39052
2020-07-27 13:09:12
attack
Invalid user erno from 80.211.54.146 port 51877
2020-07-24 08:10:32
attack
Jul 22 21:33:16 ns382633 sshd\[19970\]: Invalid user testuser from 80.211.54.146 port 33223
Jul 22 21:33:16 ns382633 sshd\[19970\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.54.146
Jul 22 21:33:18 ns382633 sshd\[19970\]: Failed password for invalid user testuser from 80.211.54.146 port 33223 ssh2
Jul 22 21:39:44 ns382633 sshd\[21061\]: Invalid user pom from 80.211.54.146 port 46987
Jul 22 21:39:44 ns382633 sshd\[21061\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.54.146
2020-07-23 04:05:21
attack
Jul 21 14:50:21 XXX sshd[59702]: Invalid user web from 80.211.54.146 port 45343
2020-07-22 09:10:27
attackbotsspam
Jul 20 17:58:52 OPSO sshd\[21419\]: Invalid user test from 80.211.54.146 port 50699
Jul 20 17:58:52 OPSO sshd\[21419\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.54.146
Jul 20 17:58:55 OPSO sshd\[21419\]: Failed password for invalid user test from 80.211.54.146 port 50699 ssh2
Jul 20 18:03:39 OPSO sshd\[22835\]: Invalid user lili from 80.211.54.146 port 57610
Jul 20 18:03:39 OPSO sshd\[22835\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.54.146
2020-07-21 00:19:33
attackbotsspam
$f2bV_matches
2020-07-08 08:40:02
attack
Jul  3 20:18:34 plex-server sshd[710281]: Failed password for invalid user sqoop from 80.211.54.146 port 54541 ssh2
Jul  3 20:22:07 plex-server sshd[710611]: Invalid user lin from 80.211.54.146 port 54210
Jul  3 20:22:07 plex-server sshd[710611]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.54.146 
Jul  3 20:22:07 plex-server sshd[710611]: Invalid user lin from 80.211.54.146 port 54210
Jul  3 20:22:09 plex-server sshd[710611]: Failed password for invalid user lin from 80.211.54.146 port 54210 ssh2
...
2020-07-04 04:33:29
Comments on same subnet:
IP Type Details Datetime
80.211.54.154 attack
2019-06-28T10:42:04.317009abusebot-7.cloudsearch.cf sshd\[15504\]: Invalid user test from 80.211.54.154 port 34226
2019-06-28 19:10:34
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 80.211.54.146
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39435
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;80.211.54.146.			IN	A

;; AUTHORITY SECTION:
.			174	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020070301 1800 900 604800 86400

;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jul 04 04:33:26 CST 2020
;; MSG SIZE  rcvd: 117
Host info
146.54.211.80.in-addr.arpa domain name pointer host146-54-211-80.serverdedicati.aruba.it.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
146.54.211.80.in-addr.arpa	name = host146-54-211-80.serverdedicati.aruba.it.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
222.186.190.14 attackbotsspam
Aug  4 14:59:41 gw1 sshd[8508]: Failed password for root from 222.186.190.14 port 43184 ssh2
...
2020-08-04 18:02:34
176.110.42.161 attackspambots
2020-08-03 UTC: (38x) - root(38x)
2020-08-04 17:50:17
109.193.84.31 attackbots
Aug  4 09:27:43 powerpi2 sshd[2526]: Failed password for invalid user 72.198.120.244 from 109.193.84.31 port 35418 ssh2
Aug  4 09:28:02 powerpi2 sshd[2543]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.193.84.31  user=root
Aug  4 09:28:03 powerpi2 sshd[2543]: Failed password for root from 109.193.84.31 port 38118 ssh2
...
2020-08-04 18:06:48
66.70.142.231 attack
Aug  4 11:27:50 mail sshd[9781]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.70.142.231  user=root
Aug  4 11:27:52 mail sshd[9781]: Failed password for root from 66.70.142.231 port 49590 ssh2
...
2020-08-04 18:17:05
103.133.90.140 attackspambots
1900/udp
[2020-08-04]1pkt
2020-08-04 17:58:25
60.246.3.97 attackbotsspam
(imapd) Failed IMAP login from 60.246.3.97 (MO/Macao/nz3l97.bb60246.ctm.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Aug  4 13:57:27 ir1 dovecot[3110802]: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=60.246.3.97, lip=5.63.12.44, session=
2020-08-04 18:31:42
113.172.164.167 attackspam
Automatic report - Port Scan Attack
2020-08-04 18:23:38
115.126.214.50 attack
1596533261 - 08/04/2020 11:27:41 Host: 115.126.214.50/115.126.214.50 Port: 23 TCP Blocked
...
2020-08-04 18:26:45
218.92.0.189 attackbotsspam
08/04/2020-06:00:14.549679 218.92.0.189 Protocol: 6 ET SCAN Potential SSH Scan
2020-08-04 18:02:11
213.136.83.212 attack
2020-08-04T09:59:13.306503shield sshd\[29928\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=vmi410824.contaboserver.net  user=root
2020-08-04T09:59:15.497839shield sshd\[29928\]: Failed password for root from 213.136.83.212 port 60650 ssh2
2020-08-04T10:03:11.686824shield sshd\[30311\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=vmi410824.contaboserver.net  user=root
2020-08-04T10:03:14.212207shield sshd\[30311\]: Failed password for root from 213.136.83.212 port 43906 ssh2
2020-08-04T10:07:04.199531shield sshd\[30796\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=vmi410824.contaboserver.net  user=root
2020-08-04 18:18:22
111.161.74.117 attackbots
$f2bV_matches
2020-08-04 18:29:37
201.149.82.181 attack
Unauthorised access (Aug  4) SRC=201.149.82.181 LEN=40 TOS=0x08 PREC=0x40 TTL=230 ID=20631 TCP DPT=445 WINDOW=1024 SYN
2020-08-04 18:23:17
185.204.3.36 attackspambots
Aug  4 11:27:25 db sshd[2145]: User root from 185.204.3.36 not allowed because none of user's groups are listed in AllowGroups
...
2020-08-04 18:33:48
13.79.191.179 attack
Aug  4 11:23:08 ns382633 sshd\[31652\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.79.191.179  user=root
Aug  4 11:23:10 ns382633 sshd\[31652\]: Failed password for root from 13.79.191.179 port 57350 ssh2
Aug  4 11:29:58 ns382633 sshd\[32725\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.79.191.179  user=root
Aug  4 11:29:59 ns382633 sshd\[32725\]: Failed password for root from 13.79.191.179 port 46094 ssh2
Aug  4 11:33:31 ns382633 sshd\[1084\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.79.191.179  user=root
2020-08-04 18:19:12
111.229.4.247 attackbotsspam
Aug  4 11:25:12 sip sshd[1186535]: Failed password for root from 111.229.4.247 port 28622 ssh2
Aug  4 11:28:17 sip sshd[1186552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.4.247  user=root
Aug  4 11:28:19 sip sshd[1186552]: Failed password for root from 111.229.4.247 port 63934 ssh2
...
2020-08-04 17:54:20

Recently Reported IPs

82.188.189.235 183.158.95.225 177.191.215.231 253.205.98.52
71.30.200.220 113.119.164.9 194.143.250.145 106.54.194.35
179.188.7.127 84.167.151.25 45.129.181.124 14.181.181.173
57.211.19.152 192.35.169.46 225.114.182.209 69.109.202.6
112.63.239.184 6.218.16.66 111.19.141.240 187.239.35.23