Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Saint Petersburg

Region: St. Petersburg

Country: Russia

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
80.249.145.99 attackspam
Invalid user mashad from 80.249.145.99 port 56516
2020-03-30 07:58:00
80.249.145.87 attack
Feb 27 18:14:25 lnxmysql61 sshd[22115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.249.145.87
2020-02-28 04:58:16
80.249.145.81 attackspam
Feb 27 16:46:58 vpn01 sshd[20893]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.249.145.81
Feb 27 16:47:00 vpn01 sshd[20893]: Failed password for invalid user pi from 80.249.145.81 port 59066 ssh2
...
2020-02-28 00:15:50
80.249.145.21 attackspambots
Feb 27 17:27:53 server sshd\[17144\]: Invalid user yangzishuang from 80.249.145.21
Feb 27 17:27:53 server sshd\[17144\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=gigantplat.ru 
Feb 27 17:27:55 server sshd\[17144\]: Failed password for invalid user yangzishuang from 80.249.145.21 port 58810 ssh2
Feb 27 17:59:16 server sshd\[22213\]: Invalid user speech-dispatcher from 80.249.145.21
Feb 27 17:59:16 server sshd\[22213\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=gigantplat.ru 
...
2020-02-27 23:21:06
80.249.145.56 attack
Nov 19 11:50:27 mecmail postfix/smtpd[8708]: NOQUEUE: reject: RCPT from qd76.4desconto-saude.us[80.249.145.56]: 554 5.7.1 Service unavailable; Client host [80.249.145.56] blocked using dnsbl.spfbl.net; https://matrix.spfbl.net/80.249.145.56; from= to= proto=ESMTP helo=
Nov 19 12:38:27 mecmail postfix/smtpd[19044]: NOQUEUE: reject: RCPT from qd76.4desconto-saude.us[80.249.145.56]: 554 5.7.1 Service unavailable; Client host [80.249.145.56] blocked using dnsbl.spfbl.net; https://matrix.spfbl.net/80.249.145.56; from= to= proto=ESMTP helo=
Nov 19 16:12:40 mecmail postfix/smtpd[28355]: NOQUEUE: reject: RCPT from qd76.4desconto-saude.us[80.249.145.56]: 554 5.7.1 Service unavailable; Client host [80.249.145.56] blocked using dnsbl.spfbl.net; https://matrix.spfbl.net/80.249.145.56; from=
2019-11-20 06:45:46
80.249.145.151 attack
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=80.249.145.151
2019-11-15 03:30:56
80.249.145.15 attack
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=80.249.145.15
2019-11-15 02:50:36
80.249.145.151 attackspambots
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=80.249.145.151
2019-11-08 07:26:59
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 80.249.145.212
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17484
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;80.249.145.212.			IN	A

;; AUTHORITY SECTION:
.			218	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023071300 1800 900 604800 86400

;; Query time: 87 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jul 13 22:02:45 CST 2023
;; MSG SIZE  rcvd: 107
Host info
212.145.249.80.in-addr.arpa domain name pointer d4brtnkgq6ken4q9.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
212.145.249.80.in-addr.arpa	name = d4brtnkgq6ken4q9.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
113.170.128.199 attackbotsspam
Unauthorized connection attempt from IP address 113.170.128.199 on Port 445(SMB)
2020-08-30 17:56:24
45.164.243.246 attackspam
Bruteforce detected by fail2ban
2020-08-30 18:07:21
179.27.60.34 attack
Aug 30 09:14:32 fhem-rasp sshd[30763]: Invalid user stas from 179.27.60.34 port 50889
...
2020-08-30 17:33:13
157.230.96.179 attack
Automatic report - XMLRPC Attack
2020-08-30 18:06:30
218.92.0.138 attackspam
Aug 30 10:26:04 rocket sshd[28234]: Failed password for root from 218.92.0.138 port 37630 ssh2
Aug 30 10:26:19 rocket sshd[28234]: error: maximum authentication attempts exceeded for root from 218.92.0.138 port 37630 ssh2 [preauth]
...
2020-08-30 17:29:23
103.225.139.142 attackspambots
Unauthorized IMAP connection attempt
2020-08-30 17:45:21
103.45.177.233 attackspam
Invalid user dm from 103.45.177.233 port 52894
2020-08-30 17:58:23
49.49.234.199 attackspambots
Unauthorized connection attempt from IP address 49.49.234.199 on Port 445(SMB)
2020-08-30 17:50:41
148.70.149.39 attackspambots
Invalid user drake from 148.70.149.39 port 33452
2020-08-30 18:01:25
14.177.232.31 attackspambots
Aug 30 05:44:49 tor-proxy-04 sshd\[6274\]: Invalid user nexthink from 14.177.232.31 port 35580
Aug 30 05:44:50 tor-proxy-04 sshd\[6274\]: Connection closed by 14.177.232.31 port 35580 \[preauth\]
Aug 30 05:44:51 tor-proxy-04 sshd\[6276\]: Invalid user misp from 14.177.232.31 port 36226
...
2020-08-30 18:02:42
121.123.189.203 attackspam
Aug 29 22:37:23 askasleikir sshd[3919]: Failed password for invalid user em from 121.123.189.203 port 47975 ssh2
Aug 29 22:34:17 askasleikir sshd[3907]: Failed password for invalid user test2 from 121.123.189.203 port 29296 ssh2
Aug 29 22:26:42 askasleikir sshd[3883]: Failed password for invalid user mouse from 121.123.189.203 port 13604 ssh2
2020-08-30 17:57:53
51.75.23.214 attackspambots
51.75.23.214 - - \[30/Aug/2020:11:55:43 +0200\] "POST /wp-login.php HTTP/1.0" 200 9866 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
51.75.23.214 - - \[30/Aug/2020:11:55:44 +0200\] "POST /wp-login.php HTTP/1.0" 200 9874 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
51.75.23.214 - - \[30/Aug/2020:11:55:46 +0200\] "POST /wp-login.php HTTP/1.0" 200 9862 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-08-30 18:06:09
212.129.25.123 attackbotsspam
WordPress wp-login brute force :: 212.129.25.123 0.100 - [30/Aug/2020:09:06:39  0000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 2411 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "HTTP/1.1"
2020-08-30 17:49:45
198.23.236.118 attackbots
SSH brute-force attempt
2020-08-30 17:30:28
218.92.0.165 attackspam
Aug 30 11:44:03 minden010 sshd[339]: Failed password for root from 218.92.0.165 port 10988 ssh2
Aug 30 11:44:06 minden010 sshd[339]: Failed password for root from 218.92.0.165 port 10988 ssh2
Aug 30 11:44:09 minden010 sshd[339]: Failed password for root from 218.92.0.165 port 10988 ssh2
Aug 30 11:44:12 minden010 sshd[339]: Failed password for root from 218.92.0.165 port 10988 ssh2
...
2020-08-30 17:55:00

Recently Reported IPs

25.99.24.39 23.203.31.37 213.109.84.251 113.214.177.163
79.124.58.194 45.76.33.195 129.180.39.136 217.160.104.123
223.5.171.62 27.108.101.233 102.121.95.153 128.63.253.28
140.23.12.23 128.63.253.79 5.182.96.236 156.248.123.29
136.226.234.198 69.213.153.63 185.250.237.80 106.206.56.75