Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Netherlands (the)

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
80.82.68.110 attack
Postfix attacker IP
2025-02-06 13:57:58
80.82.68.201 attackbots
B: WP plugin attack
2020-09-06 00:32:51
80.82.68.201 attack
B: WP plugin attack
2020-09-05 16:02:43
80.82.68.218 attack
Attempted connection to port 3389.
2020-09-04 00:01:03
80.82.68.218 attackbots
Attempted connection to port 3389.
2020-09-03 15:30:16
80.82.68.218 attackspambots
Attempted connection to port 3389.
2020-09-03 07:40:07
80.82.68.202 attackbotsspam
"Path Traversal Attack (/../) - Matched Data: /../ found within REQUEST_URI_RAW: /wp-content/plugins/abtest/abtest_admin.php?action=../../../wp-config.php"
2020-09-01 07:17:56
80.82.68.125 attackspambots
Unauthorized connection attempt detected from IP address 80.82.68.125 to port 3389 [T]
2020-08-14 00:14:21
80.82.68.226 attackspambots
[MK-VM6] Blocked by UFW
2020-07-12 23:10:23
80.82.68.202 attack
WordPress Arbitrary File Download and Directory Traversal Vulnerabilities , PTR: PTR record not found
2020-07-10 03:43:51
80.82.68.136 attack
Brute-Force reported by Fail2Ban
2020-07-08 18:11:08
80.82.68.136 attack
2020-07-06T22:45:18.727148abusebot-8.cloudsearch.cf sshd[19342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.82.68.136  user=root
2020-07-06T22:45:21.194015abusebot-8.cloudsearch.cf sshd[19342]: Failed password for root from 80.82.68.136 port 56374 ssh2
2020-07-06T22:45:22.869678abusebot-8.cloudsearch.cf sshd[19344]: Invalid user admin from 80.82.68.136 port 58148
2020-07-06T22:45:22.875892abusebot-8.cloudsearch.cf sshd[19344]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.82.68.136
2020-07-06T22:45:22.869678abusebot-8.cloudsearch.cf sshd[19344]: Invalid user admin from 80.82.68.136 port 58148
2020-07-06T22:45:25.227014abusebot-8.cloudsearch.cf sshd[19344]: Failed password for invalid user admin from 80.82.68.136 port 58148 ssh2
2020-07-06T22:45:26.833873abusebot-8.cloudsearch.cf sshd[19346]: Invalid user user from 80.82.68.136 port 59782
...
2020-07-07 06:51:25
80.82.68.31 attack
MAIL: User Login Brute Force Attempt
2020-07-05 20:24:02
80.82.68.16 attack
Scanning for exploits - /.env
2020-07-04 06:44:53
80.82.68.72 attackbotsspam
Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools
2020-07-04 06:29:02
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 80.82.68.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 403
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;80.82.68.142.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012400 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 24 13:56:21 CST 2025
;; MSG SIZE  rcvd: 105
Host info
Host 142.68.82.80.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 142.68.82.80.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
129.204.63.100 attackspam
$f2bV_matches
2020-08-10 02:12:19
190.210.230.60 attackbotsspam
2020-08-09T19:07:31.538842hostname sshd[51399]: Failed password for root from 190.210.230.60 port 43970 ssh2
...
2020-08-10 02:24:35
206.189.140.154 spam
Return-Path: 
Received: from meduim.com ([206.189.140.154]) by mx.kundenserver.de (mxeue009
 [212.227.15.41]) with ESMTP (Nemesis) id 1MduRq-1kdvRZ1U0M-00b7T2 for
 ; Tue, 04 Aug 2020 15:16:15 +0200
Received: by meduim.com (Postfix, from userid 33)
	id E35EB51FC7; Tue,  4 Aug 2020 13:15:01 +0000 (UTC)
Date: Tue, 4 Aug 2020 13:15:01 +0000
To: andreas@andur.de
From: =?utf-8?Q??= 
Subject: =?utf-8?Q?Sehr=20schlechte=20Nachrichten=20f=c3=bcr=20Sie?=
Message-ID: 
X-Priority: 3
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Envelope-To: 
X-Spam-Flag: NO
X-UI-Filterresults: notjunk:1;V03:K0:+S/S7V0xlF8=:XKtmlbI1P4AWYu9I/X/hrrBDcG

Ich grüße dich!

Ich habe schlechte Nachrichten für dich.
10.11.2019 - An diesem Tag habe ich mich in Ihr Betriebssystem gehackt und vollen Zugriff auf Ihr Konto erhalten.
2020-08-10 02:26:17
89.248.174.166 attackspam
 TCP (SYN) 89.248.174.166:43743 -> port 8080, len 44
2020-08-10 02:25:38
198.27.80.123 attackbots
198.27.80.123 - - [09/Aug/2020:20:13:10 +0200] "POST /wp-login.php HTTP/1.1" 200 5373 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36"
198.27.80.123 - - [09/Aug/2020:20:13:19 +0200] "POST /wp-login.php HTTP/1.1" 200 5373 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36"
198.27.80.123 - - [09/Aug/2020:20:13:19 +0200] "POST /wp-login.php HTTP/1.1" 200 5379 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36"
198.27.80.123 - - [09/Aug/2020:20:13:28 +0200] "POST /wp-login.php HTTP/1.1" 200 5373 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36"
198.27.80.123 - - [09/Aug/2020:20:13:29 +0200] "POST /wp-login.php HTTP/1.1" 200 5379 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safar
...
2020-08-10 02:25:11
112.91.81.99 attackspambots
Aug  9 18:53:34 lnxded63 sshd[16957]: Failed password for root from 112.91.81.99 port 48991 ssh2
Aug  9 18:58:34 lnxded63 sshd[17377]: Failed password for root from 112.91.81.99 port 60557 ssh2
2020-08-10 02:24:52
119.253.84.106 attack
[N10.H1.VM1] Port Scanner Detected Blocked by UFW
2020-08-10 02:01:45
146.88.240.4 attackbotsspam
09.08.2020 18:09:00 Recursive DNS scan
2020-08-10 02:22:40
13.235.14.48 attack
Aug  9 03:07:13 web1 sshd\[32023\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.235.14.48  user=root
Aug  9 03:07:14 web1 sshd\[32023\]: Failed password for root from 13.235.14.48 port 42366 ssh2
Aug  9 03:09:59 web1 sshd\[32286\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.235.14.48  user=root
Aug  9 03:10:02 web1 sshd\[32286\]: Failed password for root from 13.235.14.48 port 56012 ssh2
Aug  9 03:12:47 web1 sshd\[32480\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.235.14.48  user=root
2020-08-10 02:17:27
104.155.215.32 attackspam
Aug  9 18:53:15 fhem-rasp sshd[23573]: Failed password for root from 104.155.215.32 port 57618 ssh2
Aug  9 18:53:16 fhem-rasp sshd[23573]: Disconnected from authenticating user root 104.155.215.32 port 57618 [preauth]
...
2020-08-10 02:06:21
112.192.228.101 attackspam
Lines containing failures of 112.192.228.101
Aug  5 05:24:08 shared05 sshd[15602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.192.228.101  user=r.r
Aug  5 05:24:10 shared05 sshd[15602]: Failed password for r.r from 112.192.228.101 port 55794 ssh2
Aug  5 05:24:11 shared05 sshd[15602]: Received disconnect from 112.192.228.101 port 55794:11: Bye Bye [preauth]
Aug  5 05:24:11 shared05 sshd[15602]: Disconnected from authenticating user r.r 112.192.228.101 port 55794 [preauth]
Aug  5 05:32:25 shared05 sshd[19668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.192.228.101  user=r.r
Aug  5 05:32:27 shared05 sshd[19668]: Failed password for r.r from 112.192.228.101 port 37308 ssh2
Aug  5 05:32:28 shared05 sshd[19668]: Received disconnect from 112.192.228.101 port 37308:11: Bye Bye [preauth]
Aug  5 05:32:28 shared05 sshd[19668]: Disconnected from authenticating user r.r 112.192.228.101 p........
------------------------------
2020-08-10 02:23:05
66.85.30.117 attack
CF RAY ID: 5be567b6fc660394 IP Class: noRecord URI: /wp-login.php
2020-08-10 02:18:43
89.35.39.180 attackspambots
Attempting to access Wordpress login on a honeypot or private system.
2020-08-10 02:04:33
35.233.56.0 attackbots
MYH,DEF GET /wp-login.php
2020-08-10 02:11:05
103.119.30.193 attackbotsspam
2020-08-09T11:58:22.949441dmca.cloudsearch.cf sshd[12116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.119.30.193  user=root
2020-08-09T11:58:25.306725dmca.cloudsearch.cf sshd[12116]: Failed password for root from 103.119.30.193 port 34240 ssh2
2020-08-09T12:01:48.686154dmca.cloudsearch.cf sshd[12175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.119.30.193  user=root
2020-08-09T12:01:50.656993dmca.cloudsearch.cf sshd[12175]: Failed password for root from 103.119.30.193 port 40872 ssh2
2020-08-09T12:04:42.440568dmca.cloudsearch.cf sshd[12213]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.119.30.193  user=root
2020-08-09T12:04:44.296348dmca.cloudsearch.cf sshd[12213]: Failed password for root from 103.119.30.193 port 43096 ssh2
2020-08-09T12:07:31.215872dmca.cloudsearch.cf sshd[12308]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu
...
2020-08-10 02:23:39

Recently Reported IPs

209.140.157.139 213.99.122.162 80.246.135.27 5.18.80.32
228.191.47.75 85.6.101.49 96.222.187.215 79.23.41.189
195.157.41.163 65.97.99.169 57.30.0.28 116.181.189.49
63.68.38.21 9.117.148.68 41.190.176.200 21.69.70.88
173.225.88.20 190.83.139.130 245.231.76.188 99.239.121.20