Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Switzerland

Internet Service Provider: UPC Schweiz GmbH

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackbotsspam
Automatic report - Banned IP Access
2020-06-01 02:53:05
attackspam
Automatic report - Banned IP Access
2020-05-05 03:02:29
attackbotsspam
Automatic report - Port Scan Attack
2019-10-05 07:32:00
attackspam
IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/80.218.89.85/ 
 DE - 1H : (143)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : DE 
 NAME ASN : ASN6830 
 
 IP : 80.218.89.85 
 
 CIDR : 80.218.0.0/16 
 
 PREFIX COUNT : 755 
 
 UNIQUE IP COUNT : 12137216 
 
 
 WYKRYTE ATAKI Z ASN6830 :  
  1H - 3 
  3H - 6 
  6H - 12 
 12H - 21 
 24H - 25 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-09-24 04:36:37
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 80.218.89.85
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7771
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;80.218.89.85.			IN	A

;; AUTHORITY SECTION:
.			533	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019092301 1800 900 604800 86400

;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Sep 24 04:36:34 CST 2019
;; MSG SIZE  rcvd: 116
Host info
85.89.218.80.in-addr.arpa domain name pointer 80-218-89-85.dclient.hispeed.ch.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
85.89.218.80.in-addr.arpa	name = 80-218-89-85.dclient.hispeed.ch.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
139.155.90.141 attackbots
Lines containing failures of 139.155.90.141
Jun  1 04:25:23 kmh-vmh-001-fsn03 sshd[23898]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.90.141  user=r.r
Jun  1 04:25:26 kmh-vmh-001-fsn03 sshd[23898]: Failed password for r.r from 139.155.90.141 port 50852 ssh2
Jun  1 04:25:27 kmh-vmh-001-fsn03 sshd[23898]: Received disconnect from 139.155.90.141 port 50852:11: Bye Bye [preauth]
Jun  1 04:25:27 kmh-vmh-001-fsn03 sshd[23898]: Disconnected from authenticating user r.r 139.155.90.141 port 50852 [preauth]
Jun  1 04:39:30 kmh-vmh-001-fsn03 sshd[4574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.90.141  user=r.r
Jun  1 04:39:32 kmh-vmh-001-fsn03 sshd[4574]: Failed password for r.r from 139.155.90.141 port 44014 ssh2
Jun  1 04:39:34 kmh-vmh-001-fsn03 sshd[4574]: Received disconnect from 139.155.90.141 port 44014:11: Bye Bye [preauth]
Jun  1 04:39:34 kmh-vmh-001-fsn03 sshd[4574]:........
------------------------------
2020-06-06 14:57:01
195.54.160.159 attack
firewall-block, port(s): 33380/tcp, 33391/tcp
2020-06-06 14:55:55
102.166.248.135 attackspam
Desperate, stupid bot, doesn't take NO for an answer. Kenya again.
2020-06-06 14:58:50
139.59.116.115 attackspam
Jun  6 09:44:40 gw1 sshd[22153]: Failed password for root from 139.59.116.115 port 52644 ssh2
...
2020-06-06 15:03:54
31.222.5.76 attackspambots
 TCP (SYN) 31.222.5.76:38449 -> port 80, len 44
2020-06-06 14:15:03
189.63.8.60 attack
Jun  6 07:52:47 vps639187 sshd\[8472\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.63.8.60  user=root
Jun  6 07:52:49 vps639187 sshd\[8472\]: Failed password for root from 189.63.8.60 port 58534 ssh2
Jun  6 07:57:13 vps639187 sshd\[8541\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.63.8.60  user=root
...
2020-06-06 14:28:22
195.54.160.254 attackspambots
06/06/2020-01:16:56.218291 195.54.160.254 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-06-06 14:48:47
46.38.145.252 attackbots
Jun  6 08:46:44 relay postfix/smtpd\[13145\]: warning: unknown\[46.38.145.252\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun  6 08:47:05 relay postfix/smtpd\[14718\]: warning: unknown\[46.38.145.252\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun  6 08:48:14 relay postfix/smtpd\[11339\]: warning: unknown\[46.38.145.252\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun  6 08:48:35 relay postfix/smtpd\[5589\]: warning: unknown\[46.38.145.252\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun  6 08:49:44 relay postfix/smtpd\[13024\]: warning: unknown\[46.38.145.252\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-06-06 14:50:59
45.67.235.67 attack
From bounces01@planodisponivel.live Sat Jun 06 01:17:55 2020
Received: from nochost-mx4.planodisponivel.live ([45.67.235.67]:46792)
2020-06-06 15:04:58
195.54.166.138 attackspambots
firewall-block, port(s): 11891/tcp, 11896/tcp, 12893/tcp, 12898/tcp
2020-06-06 14:36:43
188.122.18.14 attackspambots
 TCP (SYN) 188.122.18.14:53305 -> port 80, len 44
2020-06-06 15:05:21
212.1.110.3 attackspambots
 TCP (SYN) 212.1.110.3:1744 -> port 80, len 44
2020-06-06 14:19:05
195.54.161.41 attack
06/06/2020-02:34:22.323010 195.54.161.41 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-06-06 14:37:08
217.12.49.164 attackspambots
 TCP (SYN) 217.12.49.164:14741 -> port 80, len 44
2020-06-06 14:17:28
195.54.166.45 attackbots
Ports scanned 17 times since 2020-05-31T00:07:48Z
2020-06-06 14:29:41

Recently Reported IPs

36.232.182.141 31.135.182.92 36.224.248.149 14.167.220.25
37.155.33.215 173.225.102.97 113.172.188.149 122.160.96.58
43.229.90.196 192.12.112.102 113.184.26.137 31.200.193.33
77.37.231.85 37.130.156.36 1.170.82.41 236.144.193.22
71.40.80.50 137.242.166.230 93.210.47.181 156.198.181.22