Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Russian Federation

Internet Service Provider: OJSC Rostelecom

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackbots
Brute force attempt
2019-07-05 06:56:29
Comments on same subnet:
IP Type Details Datetime
80.68.231.70 attackspam
Honeypot attack, port: 445, PTR: ipv4-80-68-231-70.net.internetunion.pl.
2020-07-09 19:42:19
80.68.2.173 attack
Unauthorized connection attempt from IP address 80.68.2.173 on Port 445(SMB)
2020-06-16 02:32:43
80.68.2.100 attackbots
suspicious action Mon, 24 Feb 2020 01:50:40 -0300
2020-02-24 17:06:17
80.68.2.74 attackbots
spam
2020-01-24 17:49:40
80.68.2.100 attack
spam
2020-01-22 18:34:37
80.68.2.74 attackspambots
email spam
2019-12-17 20:44:32
80.68.2.194 attack
Unauthorised access (Nov 19) SRC=80.68.2.194 LEN=52 TTL=115 ID=1 DF TCP DPT=445 WINDOW=8192 SYN
2019-11-20 01:08:24
80.68.2.100 attackspam
postfix
2019-11-13 23:26:46
80.68.2.74 attack
postfix
2019-10-07 22:26:19
80.68.2.74 attack
SMTP/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -
2019-09-12 10:27:36
80.68.2.74 attack
SMTP Fraud Orders
2019-06-22 19:59:43
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 80.68.2.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19315
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;80.68.2.48.			IN	A

;; AUTHORITY SECTION:
.			1224	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019070401 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Jul 05 06:56:25 CST 2019
;; MSG SIZE  rcvd: 114
Host info
48.2.68.80.in-addr.arpa domain name pointer nas1-48.dialup.infotecstt.ru.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
48.2.68.80.in-addr.arpa	name = nas1-48.dialup.infotecstt.ru.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
125.129.22.165 attack
firewall-block, port(s): 23/tcp
2019-12-28 06:25:45
12.208.5.170 attack
400 BAD REQUEST
2019-12-28 06:06:40
106.15.46.65 attackbots
SIP/5060 Probe, BF, Hack -
2019-12-28 06:11:22
49.235.18.9 attack
Dec 27 22:24:04 MK-Soft-VM5 sshd[12225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.18.9 
Dec 27 22:24:07 MK-Soft-VM5 sshd[12225]: Failed password for invalid user conf from 49.235.18.9 port 52544 ssh2
...
2019-12-28 05:53:26
103.79.90.72 attackspam
Dec 27 16:29:52 vps691689 sshd[14006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.79.90.72
Dec 27 16:29:54 vps691689 sshd[14006]: Failed password for invalid user bamberg from 103.79.90.72 port 55799 ssh2
...
2019-12-28 06:16:54
206.81.0.199 attackspambots
3389BruteforceFW23
2019-12-28 06:17:42
91.242.77.232 attackspam
Unauthorized connection attempt detected from IP address 91.242.77.232 to port 445
2019-12-28 05:51:12
103.117.197.207 attackspam
Unauthorized connection attempt from IP address 103.117.197.207 on Port 445(SMB)
2019-12-28 06:08:50
162.144.123.107 attackspam
xmlrpc attack
2019-12-28 06:24:01
62.110.66.66 attack
Dec 27 16:07:38 localhost sshd\[16403\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.110.66.66  user=root
Dec 27 16:07:40 localhost sshd\[16403\]: Failed password for root from 62.110.66.66 port 57586 ssh2
Dec 27 16:11:27 localhost sshd\[16831\]: Invalid user jonathon from 62.110.66.66 port 59080
Dec 27 16:11:27 localhost sshd\[16831\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.110.66.66
2019-12-28 06:19:58
190.81.117.218 attackspambots
Dec 27 22:02:47 srv01 postfix/smtpd[434]: warning: unknown[190.81.117.218]: SASL LOGIN authentication failed: authentication failure
Dec 27 22:06:00 srv01 postfix/smtpd[684]: warning: unknown[190.81.117.218]: SASL LOGIN authentication failed: authentication failure
Dec 27 22:09:27 srv01 postfix/smtpd[855]: warning: unknown[190.81.117.218]: SASL LOGIN authentication failed: authentication failure
...
2019-12-28 05:51:53
104.140.188.26 attack
88/tcp 8444/tcp 3306/tcp...
[2019-10-27/12-27]43pkt,13pt.(tcp),1pt.(udp)
2019-12-28 06:15:44
187.0.160.130 attackbots
Invalid user sook from 187.0.160.130 port 34230
2019-12-28 05:52:05
177.81.208.40 attackbots
3x Failed Password
2019-12-28 06:21:24
69.172.254.131 attackbotsspam
Dec 24 12:20:09 reporting sshd[30957]: Invalid user home from 69.172.254.131
Dec 24 12:20:09 reporting sshd[30957]: Failed password for invalid user home from 69.172.254.131 port 51836 ssh2
Dec 24 12:24:03 reporting sshd[322]: User r.r from 69.172.254.131 not allowed because not listed in AllowUsers
Dec 24 12:24:03 reporting sshd[322]: Failed password for invalid user r.r from 69.172.254.131 port 34305 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=69.172.254.131
2019-12-28 06:03:55

Recently Reported IPs

38.132.108.187 5.202.94.22 182.122.93.117 109.28.157.54
171.129.100.252 69.171.206.254 61.216.138.93 181.42.113.14
94.231.121.71 162.223.232.96 112.35.26.43 95.81.127.188
26.122.18.136 103.85.85.219 124.109.32.51 78.35.188.106
156.199.185.181 248.172.66.239 231.220.139.140 188.162.43.94