Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Italy

Internet Service Provider: Aruba S.p.A. - Cloud Services DC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
*Port Scan* detected from 80.211.98.67 (IT/Italy/Tuscany/Arezzo/host67-98-211-80.serverdedicati.aruba.it). 4 hits in the last 45 seconds
2020-08-10 05:48:51
attackspam
Aug  3 16:58:39 fhem-rasp sshd[30277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.98.67  user=root
Aug  3 16:58:40 fhem-rasp sshd[30277]: Failed password for root from 80.211.98.67 port 46462 ssh2
...
2020-08-04 01:18:06
attackbotsspam
Aug  2 00:33:02 piServer sshd[25798]: Failed password for root from 80.211.98.67 port 47968 ssh2
Aug  2 00:36:54 piServer sshd[26171]: Failed password for root from 80.211.98.67 port 58870 ssh2
...
2020-08-02 06:42:48
attack
2020-07-30T14:51:54.442629sd-86998 sshd[9170]: Invalid user dev from 80.211.98.67 port 41182
2020-07-30T14:51:54.448135sd-86998 sshd[9170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.98.67
2020-07-30T14:51:54.442629sd-86998 sshd[9170]: Invalid user dev from 80.211.98.67 port 41182
2020-07-30T14:51:56.936423sd-86998 sshd[9170]: Failed password for invalid user dev from 80.211.98.67 port 41182 ssh2
2020-07-30T14:55:41.277878sd-86998 sshd[10788]: Invalid user mudesheng from 80.211.98.67 port 52692
...
2020-07-30 21:13:26
attackbots
Jul 29 14:26:22 vmd36147 sshd[31522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.98.67
Jul 29 14:26:25 vmd36147 sshd[31522]: Failed password for invalid user chenys from 80.211.98.67 port 39154 ssh2
Jul 29 14:35:01 vmd36147 sshd[18616]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.98.67
...
2020-07-29 20:50:40
attackspambots
2020-07-27T16:48:45.3219501495-001 sshd[30823]: Invalid user zhangyuxiang from 80.211.98.67 port 41340
2020-07-27T16:48:47.2985461495-001 sshd[30823]: Failed password for invalid user zhangyuxiang from 80.211.98.67 port 41340 ssh2
2020-07-27T16:52:29.0626751495-001 sshd[31002]: Invalid user gek from 80.211.98.67 port 53774
2020-07-27T16:52:29.0693441495-001 sshd[31002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.98.67
2020-07-27T16:52:29.0626751495-001 sshd[31002]: Invalid user gek from 80.211.98.67 port 53774
2020-07-27T16:52:31.4546381495-001 sshd[31002]: Failed password for invalid user gek from 80.211.98.67 port 53774 ssh2
...
2020-07-28 05:13:43
attack
$f2bV_matches
2020-07-13 12:35:20
attackspam
ET CINS Active Threat Intelligence Poor Reputation IP group 70 - port: 13877 proto: TCP cat: Misc Attack
2020-07-05 21:57:07
attackbotsspam
prod6
...
2020-07-01 22:22:46
attackspambots
(sshd) Failed SSH login from 80.211.98.67 (IT/Italy/host67-98-211-80.serverdedicati.aruba.it): 12 in the last 3600 secs
2020-06-30 18:10:05
attack
firewall-block, port(s): 10373/tcp
2020-06-29 01:25:26
attackspam
Jun 24 10:14:33 NPSTNNYC01T sshd[16054]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.98.67
Jun 24 10:14:36 NPSTNNYC01T sshd[16054]: Failed password for invalid user rajesh from 80.211.98.67 port 54594 ssh2
Jun 24 10:22:22 NPSTNNYC01T sshd[16682]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.98.67
...
2020-06-24 22:23:45
attackspambots
Jun 15 17:49:04 dhoomketu sshd[766549]: Invalid user soporte from 80.211.98.67 port 58192
Jun 15 17:49:04 dhoomketu sshd[766549]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.98.67 
Jun 15 17:49:04 dhoomketu sshd[766549]: Invalid user soporte from 80.211.98.67 port 58192
Jun 15 17:49:05 dhoomketu sshd[766549]: Failed password for invalid user soporte from 80.211.98.67 port 58192 ssh2
Jun 15 17:52:23 dhoomketu sshd[766609]: Invalid user test1 from 80.211.98.67 port 58094
...
2020-06-15 23:48:47
attack
fail2ban -- 80.211.98.67
...
2020-06-04 22:26:22
attack
Jun  3 01:32:37 NPSTNNYC01T sshd[9573]: Failed password for root from 80.211.98.67 port 41610 ssh2
Jun  3 01:36:13 NPSTNNYC01T sshd[9847]: Failed password for root from 80.211.98.67 port 46452 ssh2
...
2020-06-03 17:11:13
attack
May 24 14:07:49 server sshd[13633]: Failed password for invalid user la from 80.211.98.67 port 39226 ssh2
May 24 14:11:06 server sshd[17106]: Failed password for invalid user jhm from 80.211.98.67 port 43298 ssh2
May 24 14:14:26 server sshd[20533]: Failed password for invalid user law from 80.211.98.67 port 47366 ssh2
2020-05-24 22:14:57
attack
SSH brute-force attempt
2020-05-13 09:00:08
attack
2020-05-08T05:51:03.692547vps773228.ovh.net sshd[13206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.98.67  user=root
2020-05-08T05:51:05.698349vps773228.ovh.net sshd[13206]: Failed password for root from 80.211.98.67 port 55540 ssh2
2020-05-08T05:54:36.423938vps773228.ovh.net sshd[13249]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.98.67  user=root
2020-05-08T05:54:39.002228vps773228.ovh.net sshd[13249]: Failed password for root from 80.211.98.67 port 36760 ssh2
2020-05-08T05:58:05.339479vps773228.ovh.net sshd[13314]: Invalid user kula from 80.211.98.67 port 46218
...
2020-05-08 12:52:51
attackspambots
Invalid user git from 80.211.98.67 port 48032
2020-05-03 03:39:58
attackbots
Apr 28 13:41:06 XXXXXX sshd[62472]: Invalid user alex from 80.211.98.67 port 49272
2020-04-29 02:36:03
attackspam
Apr 22 06:15:31 server4-pi sshd[26736]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.98.67 
Apr 22 06:15:32 server4-pi sshd[26736]: Failed password for invalid user rb from 80.211.98.67 port 44278 ssh2
2020-04-22 16:18:51
attack
Mar 25 00:10:15 web9 sshd\[6262\]: Invalid user jarod from 80.211.98.67
Mar 25 00:10:15 web9 sshd\[6262\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.98.67
Mar 25 00:10:17 web9 sshd\[6262\]: Failed password for invalid user jarod from 80.211.98.67 port 52936 ssh2
Mar 25 00:13:52 web9 sshd\[6794\]: Invalid user ho from 80.211.98.67
Mar 25 00:13:52 web9 sshd\[6794\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.98.67
2020-03-25 18:20:13
attackspam
Mar 24 23:53:18 santamaria sshd\[5613\]: Invalid user sql from 80.211.98.67
Mar 24 23:53:18 santamaria sshd\[5613\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.98.67
Mar 24 23:53:19 santamaria sshd\[5613\]: Failed password for invalid user sql from 80.211.98.67 port 53268 ssh2
...
2020-03-25 07:14:55
attackbotsspam
Mar 19 23:27:08 mout sshd[2193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.98.67  user=root
Mar 19 23:27:10 mout sshd[2193]: Failed password for root from 80.211.98.67 port 58734 ssh2
2020-03-20 06:43:08
attackspambots
2020-03-11T19:09:43.982907shield sshd\[17598\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.98.67  user=root
2020-03-11T19:09:46.189654shield sshd\[17598\]: Failed password for root from 80.211.98.67 port 34798 ssh2
2020-03-11T19:13:38.444299shield sshd\[18732\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.98.67  user=root
2020-03-11T19:13:39.908861shield sshd\[18732\]: Failed password for root from 80.211.98.67 port 51422 ssh2
2020-03-11T19:17:28.689470shield sshd\[19625\]: Invalid user log from 80.211.98.67 port 39810
2020-03-12 04:58:28
attack
Feb 18 01:25:29 [host] sshd[31533]: Invalid user s
Feb 18 01:25:29 [host] sshd[31533]: pam_unix(sshd:
Feb 18 01:25:31 [host] sshd[31533]: Failed passwor
2020-02-18 09:14:02
attack
Jan 20 13:40:32 kmh-sql-001-nbg01 sshd[21695]: Invalid user bjorn from 80.211.98.67 port 33106
Jan 20 13:40:32 kmh-sql-001-nbg01 sshd[21695]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.98.67
Jan 20 13:40:34 kmh-sql-001-nbg01 sshd[21695]: Failed password for invalid user bjorn from 80.211.98.67 port 33106 ssh2
Jan 20 13:40:34 kmh-sql-001-nbg01 sshd[21695]: Received disconnect from 80.211.98.67 port 33106:11: Bye Bye [preauth]
Jan 20 13:40:34 kmh-sql-001-nbg01 sshd[21695]: Disconnected from 80.211.98.67 port 33106 [preauth]
Jan 20 13:43:04 kmh-sql-001-nbg01 sshd[21908]: Invalid user joe from 80.211.98.67 port 57930
Jan 20 13:43:04 kmh-sql-001-nbg01 sshd[21908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.98.67


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=80.211.98.67
2020-01-20 22:08:16
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 80.211.98.67
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6396
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;80.211.98.67.			IN	A

;; AUTHORITY SECTION:
.			566	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012000 1800 900 604800 86400

;; Query time: 79 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 20 22:08:12 CST 2020
;; MSG SIZE  rcvd: 116
Host info
67.98.211.80.in-addr.arpa domain name pointer host67-98-211-80.serverdedicati.aruba.it.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
67.98.211.80.in-addr.arpa	name = host67-98-211-80.serverdedicati.aruba.it.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
140.143.142.190 attackspam
Invalid user nek from 140.143.142.190 port 49378
2020-03-31 17:11:36
106.51.113.15 attackbots
$f2bV_matches
2020-03-31 17:31:30
186.109.218.234 attack
Unauthorized connection attempt detected from IP address 186.109.218.234 to port 23
2020-03-31 17:38:10
104.236.22.133 attack
Mar 31 11:21:19 markkoudstaal sshd[24906]: Failed password for root from 104.236.22.133 port 35934 ssh2
Mar 31 11:24:31 markkoudstaal sshd[25402]: Failed password for root from 104.236.22.133 port 36670 ssh2
2020-03-31 17:33:15
71.6.199.23 attackbotsspam
Mar 31 10:48:16 mout postfix/smtpd[13822]: lost connection after STARTTLS from einstein.census.shodan.io[71.6.199.23]
2020-03-31 17:06:50
171.244.84.37 attackspam
20/3/30@23:52:26: FAIL: Alarm-Network address from=171.244.84.37
...
2020-03-31 17:24:04
212.33.250.241 attackspambots
$f2bV_matches
2020-03-31 17:17:09
213.82.114.206 attack
fail2ban
2020-03-31 17:15:31
89.248.168.202 attackspam
03/31/2020-03:54:47.603113 89.248.168.202 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2020-03-31 17:00:34
92.118.37.68 attack
Port scan: Attack repeated for 24 hours
2020-03-31 17:22:29
192.241.238.20 attack
US_DigitalOcean,_<177>1585631420 [1:2402000:5497] ET DROP Dshield Block Listed Source group 1 [Classification: Misc Attack] [Priority: 2]:  {TCP} 192.241.238.20:52370
2020-03-31 17:49:25
51.38.213.132 attack
ssh brute force
2020-03-31 17:16:16
216.194.122.27 attackspambots
Mar 31 09:20:27 dev0-dcde-rnet sshd[10202]: Failed password for root from 216.194.122.27 port 46782 ssh2
Mar 31 09:26:09 dev0-dcde-rnet sshd[10237]: Failed password for root from 216.194.122.27 port 44052 ssh2
2020-03-31 17:26:55
104.105.226.10 attack
Mar 31 05:52:24 debian-2gb-nbg1-2 kernel: \[7885799.411924\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=104.105.226.10 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=47 ID=0 DF PROTO=TCP SPT=443 DPT=41361 WINDOW=29200 RES=0x00 ACK SYN URGP=0
2020-03-31 17:25:02
77.247.108.119 attack
Mar 31 11:01:09 debian-2gb-nbg1-2 kernel: \[7904322.649825\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=77.247.108.119 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=32250 PROTO=TCP SPT=42028 DPT=5038 WINDOW=1024 RES=0x00 SYN URGP=0
2020-03-31 17:06:07

Recently Reported IPs

62.173.149.89 118.99.97.237 154.202.55.181 202.179.91.193
209.97.184.211 128.199.249.167 64.84.68.168 69.123.76.241
198.225.76.218 90.17.212.221 74.236.206.81 171.94.217.186
66.249.65.77 124.120.142.185 119.155.17.87 103.192.61.19
91.37.218.176 179.93.149.17 94.252.140.231 101.185.104.158