80.82.69.71 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United Kingdom

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
80.82.69.130	attackbots	scans 3 times in preceeding hours on the ports (in chronological order) 30030 30074 30027 resulting in total of 33 scans from 80.82.64.0/20 block.	2020-05-22 01:32:15
80.82.69.130	attackbots	May 20 09:49:40 debian-2gb-nbg1-2 kernel: \[12219807.374803\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=80.82.69.130 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=57727 PROTO=TCP SPT=50683 DPT=30034 WINDOW=1024 RES=0x00 SYN URGP=0	2020-05-20 16:17:46
80.82.69.130	attackbots	TCP ports : 30143 / 30157	2020-05-17 05:01:38
80.82.69.130	attackspam	Multiport scan : 21 ports scanned 25018 25020 25033 25046 25050 25054 25059 25077 25081 25085 25088 25092 25100 25104 25111 25121 25127 25149 25166 25176 25190	2020-05-12 08:41:28
80.82.69.130	attackbotsspam	TCP (SYN) 80.82.69.130:54845 -> port 25098, len 44	2020-05-11 02:11:49
80.82.69.130	attackbots	ET CINS Active Threat Intelligence Poor Reputation IP group 67 - port: 25133 proto: TCP cat: Misc Attack	2020-05-09 22:35:39
80.82.69.130	attack	05/06/2020-12:53:14.669050 80.82.69.130 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-05-07 03:04:46
80.82.69.130	attackbots	firewall-block, port(s): 25020/tcp, 25050/tcp, 25092/tcp, 25097/tcp, 25099/tcp, 25126/tcp, 25178/tcp	2020-05-06 14:33:23
80.82.69.130	attack	[MK-Root1] Blocked by UFW	2020-05-03 05:20:41
80.82.69.130	attackspam	Port scan(s) denied	2020-05-01 21:26:00
80.82.69.130	attackbotsspam	Scanning for open ports and vulnerable services: 34909,34912,34914,34925,34933,34943,34952,34957,34961,34964,34977,34978,34982,34985,34988,34989,34990	2020-04-30 15:00:47
80.82.69.130	attackspambots	Apr 27 00:14:52 debian-2gb-nbg1-2 kernel: \[10198225.924146\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=80.82.69.130 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=16347 PROTO=TCP SPT=52921 DPT=34916 WINDOW=1024 RES=0x00 SYN URGP=0	2020-04-27 06:19:42
80.82.69.130	attackspambots	04/25/2020-10:43:36.973333 80.82.69.130 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-04-25 22:49:41
80.82.69.129	attackspambots	" "	2020-04-21 04:41:24
80.82.69.249	attackbotsspam	Tried sshing with brute force.	2020-04-05 17:47:02

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 80.82.69.71
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30148
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;80.82.69.71.			IN	A

;; AUTHORITY SECTION:
.			596	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022063000 1800 900 604800 86400

;; Query time: 22 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jun 30 23:52:21 CST 2022
;; MSG SIZE  rcvd: 104

Host info

Host 71.69.82.80.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 71.69.82.80.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
177.21.15.122	attackbotsspam	php WP PHPmyadamin ABUSE blocked for 12h	2019-07-23 22:45:39
125.63.116.106	attack	Jul 23 10:48:12 vps200512 sshd\[1818\]: Invalid user fe from 125.63.116.106 Jul 23 10:48:12 vps200512 sshd\[1818\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.63.116.106 Jul 23 10:48:14 vps200512 sshd\[1818\]: Failed password for invalid user fe from 125.63.116.106 port 50990 ssh2 Jul 23 10:53:46 vps200512 sshd\[1880\]: Invalid user paul from 125.63.116.106 Jul 23 10:53:46 vps200512 sshd\[1880\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.63.116.106	2019-07-23 23:01:57
119.148.18.54	attackbots	WordPress wp-login brute force :: 119.148.18.54 0.052 BYPASS [23/Jul/2019:19:15:26 1000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 4630 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2019-07-23 22:23:48
134.209.45.126	attackspambots	Invalid user admin from 134.209.45.126 port 55926	2019-07-23 23:33:03
124.204.54.61	attack	Jul 23 09:29:04 vps200512 sshd\[32488\]: Invalid user gaetan from 124.204.54.61 Jul 23 09:29:04 vps200512 sshd\[32488\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.204.54.61 Jul 23 09:29:06 vps200512 sshd\[32488\]: Failed password for invalid user gaetan from 124.204.54.61 port 52424 ssh2 Jul 23 09:33:57 vps200512 sshd\[32605\]: Invalid user nicolas from 124.204.54.61 Jul 23 09:33:57 vps200512 sshd\[32605\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.204.54.61	2019-07-23 23:04:17
217.138.50.154	attackbotsspam	Jul 23 17:06:44 SilenceServices sshd[7554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.138.50.154 Jul 23 17:06:46 SilenceServices sshd[7554]: Failed password for invalid user annie from 217.138.50.154 port 48508 ssh2 Jul 23 17:16:08 SilenceServices sshd[14605]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.138.50.154	2019-07-23 23:35:45
123.97.128.229	attack	port scan and connect, tcp 23 (telnet)	2019-07-23 22:50:57
200.116.129.73	attackspam	Jul 23 10:30:07 debian sshd\[21641\]: Invalid user admin from 200.116.129.73 port 54948 Jul 23 10:30:07 debian sshd\[21641\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.116.129.73 Jul 23 10:30:08 debian sshd\[21641\]: Failed password for invalid user admin from 200.116.129.73 port 54948 ssh2 ...	2019-07-23 22:42:38
181.229.35.23	attackbotsspam	Jul 23 20:08:13 webhost01 sshd[26659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.229.35.23 Jul 23 20:08:14 webhost01 sshd[26659]: Failed password for invalid user spark from 181.229.35.23 port 35657 ssh2 ...	2019-07-23 22:55:55
45.55.167.217	attack	Jul 23 11:09:34 vps200512 sshd\[2200\]: Invalid user valda from 45.55.167.217 Jul 23 11:09:34 vps200512 sshd\[2200\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.167.217 Jul 23 11:09:37 vps200512 sshd\[2200\]: Failed password for invalid user valda from 45.55.167.217 port 33147 ssh2 Jul 23 11:14:10 vps200512 sshd\[2259\]: Invalid user homekit from 45.55.167.217 Jul 23 11:14:10 vps200512 sshd\[2259\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.167.217	2019-07-23 23:24:37
5.167.15.76	attackspambots	" "	2019-07-23 22:27:47
185.222.211.237	attack	Jul 23 15:46:09 relay postfix/smtpd\[16906\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.237\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\ Jul 23 15:46:09 relay postfix/smtpd\[16906\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.237\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\ Jul 23 15:46:09 relay postfix/smtpd\[16906\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.237\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\ Jul 23 15:46:09 relay postfix/smtpd\[16906\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.237\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ ...	2019-07-23 23:08:31
183.103.35.206	attackbotsspam	Jul 23 10:20:55 ns341937 sshd[30039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.103.35.206 Jul 23 10:20:56 ns341937 sshd[30039]: Failed password for invalid user steam from 183.103.35.206 port 45540 ssh2 Jul 23 11:13:57 ns341937 sshd[7758]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.103.35.206 ...	2019-07-23 23:25:40
185.199.8.69	attack	This IP address was blacklisted for the following reason: /de/jobs/kfz-mechatroniker-m-w-d-kfz-mechaniker-m-w-d/&%20or%20(1,2)=(select*from(select%20name_const(CHAR(121,108,122,108,110,74,84,121,100),1),name_const(CHAR(121,108,122,108,110,74,84,121,100),1))a)%20--%20and%201%3D1 @ 2019-03-07T12:08:37+01:00.	2019-07-23 22:43:06
130.61.16.253	attack	RDPBruteVem	2019-07-23 22:26:18

Recently Reported IPs

80.82.64.234	137.226.206.61	94.102.63.37	137.226.255.152
180.76.163.53	94.102.58.214	94.102.59.21	180.76.98.238
180.76.86.1	180.76.140.104	180.76.106.74	180.76.95.84
180.76.140.27	64.134.24.7	180.76.79.131	111.206.198.217
180.76.79.102	48.96.24.20	180.76.81.120	180.76.125.90