Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Russian Federation

Internet Service Provider: OOO Network of Data-Centers Selectel

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspam
Feb 27 16:46:58 vpn01 sshd[20893]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.249.145.81
Feb 27 16:47:00 vpn01 sshd[20893]: Failed password for invalid user pi from 80.249.145.81 port 59066 ssh2
...
2020-02-28 00:15:50
Comments on same subnet:
IP Type Details Datetime
80.249.145.99 attackspam
Invalid user mashad from 80.249.145.99 port 56516
2020-03-30 07:58:00
80.249.145.87 attack
Feb 27 18:14:25 lnxmysql61 sshd[22115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.249.145.87
2020-02-28 04:58:16
80.249.145.21 attackspambots
Feb 27 17:27:53 server sshd\[17144\]: Invalid user yangzishuang from 80.249.145.21
Feb 27 17:27:53 server sshd\[17144\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=gigantplat.ru 
Feb 27 17:27:55 server sshd\[17144\]: Failed password for invalid user yangzishuang from 80.249.145.21 port 58810 ssh2
Feb 27 17:59:16 server sshd\[22213\]: Invalid user speech-dispatcher from 80.249.145.21
Feb 27 17:59:16 server sshd\[22213\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=gigantplat.ru 
...
2020-02-27 23:21:06
80.249.145.56 attack
Nov 19 11:50:27 mecmail postfix/smtpd[8708]: NOQUEUE: reject: RCPT from qd76.4desconto-saude.us[80.249.145.56]: 554 5.7.1 Service unavailable; Client host [80.249.145.56] blocked using dnsbl.spfbl.net; https://matrix.spfbl.net/80.249.145.56; from= to= proto=ESMTP helo=
Nov 19 12:38:27 mecmail postfix/smtpd[19044]: NOQUEUE: reject: RCPT from qd76.4desconto-saude.us[80.249.145.56]: 554 5.7.1 Service unavailable; Client host [80.249.145.56] blocked using dnsbl.spfbl.net; https://matrix.spfbl.net/80.249.145.56; from= to= proto=ESMTP helo=
Nov 19 16:12:40 mecmail postfix/smtpd[28355]: NOQUEUE: reject: RCPT from qd76.4desconto-saude.us[80.249.145.56]: 554 5.7.1 Service unavailable; Client host [80.249.145.56] blocked using dnsbl.spfbl.net; https://matrix.spfbl.net/80.249.145.56; from=
2019-11-20 06:45:46
80.249.145.151 attack
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=80.249.145.151
2019-11-15 03:30:56
80.249.145.15 attack
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=80.249.145.15
2019-11-15 02:50:36
80.249.145.151 attackspambots
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=80.249.145.151
2019-11-08 07:26:59
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 80.249.145.81
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58810
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;80.249.145.81.			IN	A

;; AUTHORITY SECTION:
.			594	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020022700 1800 900 604800 86400

;; Query time: 91 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 28 00:15:43 CST 2020
;; MSG SIZE  rcvd: 117
Host info
81.145.249.80.in-addr.arpa domain name pointer bahk-tinkoff.ru.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
81.145.249.80.in-addr.arpa	name = bahk-tinkoff.ru.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
89.87.18.188 attackbots
Oct  2 22:33:20 vps647732 sshd[1867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.87.18.188
Oct  2 22:33:22 vps647732 sshd[1867]: Failed password for invalid user tit0nich from 89.87.18.188 port 50431 ssh2
...
2020-10-03 20:05:06
114.4.227.194 attack
2020-10-03T13:09:20.614817mail.standpoint.com.ua sshd[15978]: Invalid user yang from 114.4.227.194 port 57726
2020-10-03T13:09:20.617653mail.standpoint.com.ua sshd[15978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.4.227.194
2020-10-03T13:09:20.614817mail.standpoint.com.ua sshd[15978]: Invalid user yang from 114.4.227.194 port 57726
2020-10-03T13:09:22.371814mail.standpoint.com.ua sshd[15978]: Failed password for invalid user yang from 114.4.227.194 port 57726 ssh2
2020-10-03T13:13:42.416069mail.standpoint.com.ua sshd[16585]: Invalid user tor from 114.4.227.194 port 36896
...
2020-10-03 20:03:35
62.112.11.88 attack
Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-10-03T08:25:01Z and 2020-10-03T08:53:09Z
2020-10-03 20:17:15
103.142.34.34 attack
Oct  3 13:46:00 [host] sshd[3239]: Invalid user ub
Oct  3 13:46:00 [host] sshd[3239]: pam_unix(sshd:a
Oct  3 13:46:02 [host] sshd[3239]: Failed password
2020-10-03 20:00:02
101.227.82.219 attackbots
Oct  3 09:20:54 vlre-nyc-1 sshd\[18897\]: Invalid user git from 101.227.82.219
Oct  3 09:20:54 vlre-nyc-1 sshd\[18897\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.227.82.219
Oct  3 09:20:56 vlre-nyc-1 sshd\[18897\]: Failed password for invalid user git from 101.227.82.219 port 56048 ssh2
Oct  3 09:24:49 vlre-nyc-1 sshd\[18927\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.227.82.219  user=root
Oct  3 09:24:51 vlre-nyc-1 sshd\[18927\]: Failed password for root from 101.227.82.219 port 15477 ssh2
...
2020-10-03 20:05:49
178.80.54.189 attackspam
178.80.54.189 - - [02/Oct/2020:22:37:21 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
178.80.54.189 - - [02/Oct/2020:22:37:22 +0100] "POST /wp-login.php HTTP/1.1" 200 7644 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
178.80.54.189 - - [02/Oct/2020:22:38:22 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
...
2020-10-03 19:47:50
49.235.84.250 attack
sshd: Failed password for invalid user .... from 49.235.84.250 port 42370 ssh2
2020-10-03 19:52:59
51.77.66.35 attackspam
Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-10-03T10:15:22Z and 2020-10-03T11:15:42Z
2020-10-03 19:52:43
106.75.241.200 attackspam
Invalid user oracle from 106.75.241.200 port 58696
2020-10-03 19:48:22
119.93.42.153 attackspambots
Unauthorised access (Oct  2) SRC=119.93.42.153 LEN=52 PREC=0x20 TTL=119 ID=11395 DF TCP DPT=445 WINDOW=8192 SYN
2020-10-03 19:54:26
51.89.148.69 attackbotsspam
Invalid user guest1 from 51.89.148.69 port 57754
2020-10-03 19:41:03
118.70.170.120 attackbots
Invalid user mcguitaruser from 118.70.170.120 port 41760
2020-10-03 19:44:36
212.70.149.36 attackbotsspam
Oct  3 13:57:48 s1 postfix/submission/smtpd\[6789\]: warning: unknown\[212.70.149.36\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct  3 13:58:05 s1 postfix/submission/smtpd\[6789\]: warning: unknown\[212.70.149.36\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct  3 13:58:24 s1 postfix/submission/smtpd\[6789\]: warning: unknown\[212.70.149.36\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct  3 13:58:44 s1 postfix/submission/smtpd\[6789\]: warning: unknown\[212.70.149.36\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct  3 13:59:10 s1 postfix/submission/smtpd\[6789\]: warning: unknown\[212.70.149.36\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct  3 13:59:29 s1 postfix/submission/smtpd\[6789\]: warning: unknown\[212.70.149.36\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct  3 13:59:49 s1 postfix/submission/smtpd\[6789\]: warning: unknown\[212.70.149.36\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct  3 14:00:15 s1 postfix/submission/smtpd\[13467\]: warning: unknown\[212.70.
2020-10-03 20:04:39
167.114.96.156 attack
Oct  3 15:06:51 master sshd[31402]: Failed password for invalid user cert from 167.114.96.156 port 52406 ssh2
2020-10-03 20:10:28
51.83.69.142 attackspam
Oct  3 11:22:47 ip106 sshd[29187]: Failed password for root from 51.83.69.142 port 32798 ssh2
...
2020-10-03 19:44:08

Recently Reported IPs

208.161.129.230 102.19.108.62 139.26.165.183 89.87.149.25
36.1.245.82 139.28.165.183 237.190.204.15 152.107.119.197
230.222.230.104 223.238.38.89 250.213.181.226 10.136.2.199
146.94.175.76 126.76.18.133 96.17.17.114 19.216.190.53
149.211.152.151 113.152.239.17 27.175.168.97 14.212.28.196