Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Russian Federation

Internet Service Provider: OOO Network of Data-Centers Selectel

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
Feb 27 17:27:53 server sshd\[17144\]: Invalid user yangzishuang from 80.249.145.21
Feb 27 17:27:53 server sshd\[17144\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=gigantplat.ru 
Feb 27 17:27:55 server sshd\[17144\]: Failed password for invalid user yangzishuang from 80.249.145.21 port 58810 ssh2
Feb 27 17:59:16 server sshd\[22213\]: Invalid user speech-dispatcher from 80.249.145.21
Feb 27 17:59:16 server sshd\[22213\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=gigantplat.ru 
...
2020-02-27 23:21:06
Comments on same subnet:
IP Type Details Datetime
80.249.145.99 attackspam
Invalid user mashad from 80.249.145.99 port 56516
2020-03-30 07:58:00
80.249.145.87 attack
Feb 27 18:14:25 lnxmysql61 sshd[22115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.249.145.87
2020-02-28 04:58:16
80.249.145.81 attackspam
Feb 27 16:46:58 vpn01 sshd[20893]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.249.145.81
Feb 27 16:47:00 vpn01 sshd[20893]: Failed password for invalid user pi from 80.249.145.81 port 59066 ssh2
...
2020-02-28 00:15:50
80.249.145.56 attack
Nov 19 11:50:27 mecmail postfix/smtpd[8708]: NOQUEUE: reject: RCPT from qd76.4desconto-saude.us[80.249.145.56]: 554 5.7.1 Service unavailable; Client host [80.249.145.56] blocked using dnsbl.spfbl.net; https://matrix.spfbl.net/80.249.145.56; from= to= proto=ESMTP helo=
Nov 19 12:38:27 mecmail postfix/smtpd[19044]: NOQUEUE: reject: RCPT from qd76.4desconto-saude.us[80.249.145.56]: 554 5.7.1 Service unavailable; Client host [80.249.145.56] blocked using dnsbl.spfbl.net; https://matrix.spfbl.net/80.249.145.56; from= to= proto=ESMTP helo=
Nov 19 16:12:40 mecmail postfix/smtpd[28355]: NOQUEUE: reject: RCPT from qd76.4desconto-saude.us[80.249.145.56]: 554 5.7.1 Service unavailable; Client host [80.249.145.56] blocked using dnsbl.spfbl.net; https://matrix.spfbl.net/80.249.145.56; from=
2019-11-20 06:45:46
80.249.145.151 attack
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=80.249.145.151
2019-11-15 03:30:56
80.249.145.15 attack
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=80.249.145.15
2019-11-15 02:50:36
80.249.145.151 attackspambots
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=80.249.145.151
2019-11-08 07:26:59
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 80.249.145.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52473
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;80.249.145.21.			IN	A

;; AUTHORITY SECTION:
.			321	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020022700 1800 900 604800 86400

;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 27 23:20:59 CST 2020
;; MSG SIZE  rcvd: 117
Host info
21.145.249.80.in-addr.arpa domain name pointer gigantplat.ru.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
21.145.249.80.in-addr.arpa	name = gigantplat.ru.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
129.213.63.120 attack
Jul 12 03:17:34 eventyay sshd[25807]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.63.120
Jul 12 03:17:36 eventyay sshd[25807]: Failed password for invalid user zar from 129.213.63.120 port 42160 ssh2
Jul 12 03:22:34 eventyay sshd[27125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.63.120
...
2019-07-12 09:39:35
185.222.211.235 attackspambots
Jul 12 03:33:52 relay postfix/smtpd\[7907\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.235\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[185.222.211.2\]\>
Jul 12 03:33:52 relay postfix/smtpd\[7907\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.235\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[185.222.211.2\]\>
Jul 12 03:33:52 relay postfix/smtpd\[7907\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.235\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[185.222.211.2\]\>
Jul 12 03:33:52 relay postfix/smtpd\[7907\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.235\]: 554 5.7.1 \
2019-07-12 09:48:50
112.166.68.193 attack
Jul 12 03:27:14 meumeu sshd[21842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.166.68.193 
Jul 12 03:27:15 meumeu sshd[21842]: Failed password for invalid user proman from 112.166.68.193 port 38426 ssh2
Jul 12 03:33:18 meumeu sshd[23127]: Failed password for root from 112.166.68.193 port 39008 ssh2
...
2019-07-12 09:37:45
113.190.148.192 attackbotsspam
Lines containing failures of 113.190.148.192
Jul 12 01:51:01 shared11 sshd[31313]: Invalid user admin from 113.190.148.192 port 45130
Jul 12 01:51:01 shared11 sshd[31313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.190.148.192
Jul 12 01:51:03 shared11 sshd[31313]: Failed password for invalid user admin from 113.190.148.192 port 45130 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=113.190.148.192
2019-07-12 09:11:09
189.136.240.236 attack
scan z
2019-07-12 09:34:29
191.240.38.107 attackbotsspam
failed_logins
2019-07-12 09:57:33
60.242.84.187 attack
Multiple failed RDP login attempts
2019-07-12 09:43:19
159.65.175.37 attackbotsspam
2019-07-12T00:41:12.158361abusebot-5.cloudsearch.cf sshd\[14800\]: Invalid user ftpuser from 159.65.175.37 port 55898
2019-07-12 09:27:38
218.202.228.152 attack
Jul 12 03:39:10 rpi sshd[28562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.202.228.152 
Jul 12 03:39:13 rpi sshd[28562]: Failed password for invalid user albatros from 218.202.228.152 port 62437 ssh2
2019-07-12 09:45:49
35.187.85.70 attack
Caught in portsentry honeypot
2019-07-12 09:08:23
208.111.130.165 attackbots
Thu 11 18:47:56 38784/tcp
Thu 11 18:47:56 38784/tcp
Thu 11 18:48:03 38774/tcp
Thu 11 18:48:03 38774/tcp
Thu 11 18:48:32 38788/tcp
Thu 11 18:48:32 38788/tcp
Thu 11 18:49:55 38786/tcp
Thu 11 18:49:55 38786/tcp
Thu 11 19:04:05 38974/tcp
Thu 11 19:04:05 38974/...
2019-07-12 09:25:01
192.99.15.141 attackbotsspam
Drop:192.99.15.141  
GET: /?author=1
2019-07-12 09:16:37
187.35.138.189 attack
Unauthorized connection attempt from IP address 187.35.138.189 on Port 445(SMB)
2019-07-12 09:39:02
198.108.66.127 attackspam
Thu 11 18:51:01 623/tcp
2019-07-12 09:21:07
111.183.120.121 attackspambots
19/7/11@21:16:36: FAIL: Alarm-SSH address from=111.183.120.121
...
2019-07-12 09:28:28

Recently Reported IPs

80.249.145.120 176.61.137.75 112.104.29.107 181.192.55.79
171.229.213.55 192.241.223.237 176.32.34.171 14.136.134.20
185.82.246.155 171.226.19.134 109.75.35.156 49.166.121.67
216.245.221.82 154.73.185.71 54.37.224.163 25.133.2.233
49.111.69.49 163.224.145.50 190.52.213.79 68.16.203.16