Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Royal Leamington Spa

Region: England

Country: United Kingdom

Internet Service Provider: British Telecommunications PLC

Hostname: unknown

Organization: British Telecommunications PLC

Usage Type: unknown

Comments:
Type Details Datetime
attack
(sshd) Failed SSH login from 81.142.80.97 (GB/United Kingdom/host81-142-80-97.in-addr.btopenworld.com): 5 in the last 3600 secs
2020-06-16 00:51:43
attackspam
Feb  2 23:24:14 gitlab-ci sshd\[32075\]: Invalid user test from 81.142.80.97Feb  2 23:29:02 gitlab-ci sshd\[32138\]: Invalid user teamspeak from 81.142.80.97
...
2020-02-03 09:18:26
attack
Invalid user gssc from 81.142.80.97 port 1024
2020-01-14 00:50:02
attackbotsspam
Invalid user gssc from 81.142.80.97 port 1025
2020-01-11 15:41:40
attackspam
Dec 22 00:46:08 server sshd\[14905\]: Invalid user test from 81.142.80.97
Dec 22 00:46:08 server sshd\[14905\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host81-142-80-97.in-addr.btopenworld.com 
Dec 22 00:46:10 server sshd\[14905\]: Failed password for invalid user test from 81.142.80.97 port 34402 ssh2
Dec 22 10:56:39 server sshd\[21652\]: Invalid user test from 81.142.80.97
Dec 22 10:56:39 server sshd\[21652\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host81-142-80-97.in-addr.btopenworld.com 
...
2019-12-22 16:22:17
attackbots
Dec 21 16:11:07 localhost sshd\[30608\]: Invalid user test from 81.142.80.97 port 46351
Dec 21 16:11:07 localhost sshd\[30608\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.142.80.97
Dec 21 16:11:09 localhost sshd\[30608\]: Failed password for invalid user test from 81.142.80.97 port 46351 ssh2
...
2019-12-22 03:43:59
attack
Dec 16 21:50:56 XXXXXX sshd[57852]: Invalid user postgres from 81.142.80.97 port 37291
2019-12-17 06:12:20
attackspam
Sep  6 19:53:29 game-panel sshd[32709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.142.80.97
Sep  6 19:53:31 game-panel sshd[32709]: Failed password for invalid user ts3server from 81.142.80.97 port 42241 ssh2
Sep  6 19:55:36 game-panel sshd[321]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.142.80.97
2019-09-07 04:07:30
attackspam
Aug 27 23:00:46 dedicated sshd[28798]: Invalid user adminit from 81.142.80.97 port 57339
2019-08-28 07:26:56
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 81.142.80.97
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30512
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;81.142.80.97.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040402 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Fri Apr 05 09:27:35 +08 2019
;; MSG SIZE  rcvd: 116

Host info
97.80.142.81.in-addr.arpa domain name pointer host81-142-80-97.in-addr.btopenworld.com.
Nslookup info:
Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
97.80.142.81.in-addr.arpa	name = host81-142-80-97.in-addr.btopenworld.com.

Authoritative answers can be found from:

Related IP info:
Related comments:
IP Type Details Datetime
87.101.92.28 attackbots
Multiple attempts to login to our HIK camera DVD recorder
2020-06-08 18:11:47
69.94.158.91 attackbots
Jun  8 05:42:37 mail.srvfarm.net postfix/smtpd[671306]: NOQUEUE: reject: RCPT from unknown[69.94.158.91]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  8 05:43:10 mail.srvfarm.net postfix/smtpd[673032]: NOQUEUE: reject: RCPT from unknown[69.94.158.91]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  8 05:43:34 mail.srvfarm.net postfix/smtpd[673035]: NOQUEUE: reject: RCPT from unknown[69.94.158.91]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  8 05:46:47 mail.srvfarm.net postfix/smtpd[671463]: NOQUEUE: reject: RCPT from unknown[69.94.158.91]: 450 4.1.8 
2020-06-08 18:02:51
13.76.185.44 attackspam
Jun  8 05:57:01 hcbbdb sshd\[14129\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.76.185.44  user=root
Jun  8 05:57:03 hcbbdb sshd\[14129\]: Failed password for root from 13.76.185.44 port 55144 ssh2
Jun  8 06:00:52 hcbbdb sshd\[14487\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.76.185.44  user=root
Jun  8 06:00:54 hcbbdb sshd\[14487\]: Failed password for root from 13.76.185.44 port 59800 ssh2
Jun  8 06:04:46 hcbbdb sshd\[14970\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.76.185.44  user=root
2020-06-08 17:45:49
133.18.197.141 attackbots
Jun  8 05:47:53 cp sshd[30143]: Failed password for root from 133.18.197.141 port 35240 ssh2
Jun  8 05:47:53 cp sshd[30143]: Failed password for root from 133.18.197.141 port 35240 ssh2
2020-06-08 18:00:30
89.208.146.250 attackspambots
Brute forcing RDP port 3389
2020-06-08 17:49:41
79.120.119.227 attack
06/08/2020-02:01:50.690276 79.120.119.227 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-06-08 17:58:26
106.13.228.21 attackspambots
Jun  8 07:58:28 minden010 sshd[19858]: Failed password for root from 106.13.228.21 port 59222 ssh2
Jun  8 08:01:49 minden010 sshd[20248]: Failed password for root from 106.13.228.21 port 46546 ssh2
...
2020-06-08 17:46:31
200.187.165.160 attackspambots
Automatic report - Port Scan Attack
2020-06-08 17:52:03
94.219.146.20 attackspambots
SSH/22 MH Probe, BF, Hack -
2020-06-08 18:20:24
118.24.236.121 attackbots
Jun  7 23:48:03 Tower sshd[37341]: Connection from 118.24.236.121 port 39350 on 192.168.10.220 port 22 rdomain ""
Jun  7 23:48:05 Tower sshd[37341]: Failed password for root from 118.24.236.121 port 39350 ssh2
Jun  7 23:48:05 Tower sshd[37341]: Received disconnect from 118.24.236.121 port 39350:11: Bye Bye [preauth]
Jun  7 23:48:05 Tower sshd[37341]: Disconnected from authenticating user root 118.24.236.121 port 39350 [preauth]
2020-06-08 17:35:50
106.12.12.84 attackbots
Jun  8 09:28:09 ip-172-31-61-156 sshd[28428]: Failed password for root from 106.12.12.84 port 50944 ssh2
Jun  8 09:29:49 ip-172-31-61-156 sshd[28495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.12.84  user=root
Jun  8 09:29:51 ip-172-31-61-156 sshd[28495]: Failed password for root from 106.12.12.84 port 45840 ssh2
Jun  8 09:31:40 ip-172-31-61-156 sshd[28580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.12.84  user=root
Jun  8 09:31:41 ip-172-31-61-156 sshd[28580]: Failed password for root from 106.12.12.84 port 40740 ssh2
...
2020-06-08 17:44:52
37.187.108.159 attack
2020-06-08T05:54:01.817422shield sshd\[12997\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns326852.ip-37-187-108.eu  user=root
2020-06-08T05:54:03.696849shield sshd\[12997\]: Failed password for root from 37.187.108.159 port 34562 ssh2
2020-06-08T05:55:07.927372shield sshd\[13607\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns326852.ip-37-187-108.eu  user=root
2020-06-08T05:55:10.202807shield sshd\[13607\]: Failed password for root from 37.187.108.159 port 54616 ssh2
2020-06-08T05:56:11.274482shield sshd\[14008\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns326852.ip-37-187-108.eu  user=root
2020-06-08 17:49:55
13.75.168.251 attackbots
Jun  8 06:49:38 web01.agentur-b-2.de postfix/smtps/smtpd[1344490]: warning: unknown[13.75.168.251]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun  8 06:49:39 web01.agentur-b-2.de postfix/smtps/smtpd[1344491]: warning: unknown[13.75.168.251]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun  8 06:52:21 web01.agentur-b-2.de postfix/smtps/smtpd[1345014]: warning: unknown[13.75.168.251]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun  8 06:52:26 web01.agentur-b-2.de postfix/smtps/smtpd[1345018]: warning: unknown[13.75.168.251]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun  8 06:55:06 web01.agentur-b-2.de postfix/smtps/smtpd[1345018]: warning: unknown[13.75.168.251]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-06-08 18:03:43
98.220.134.161 attackbots
Jun  8 10:22:20 gestao sshd[12968]: Failed password for root from 98.220.134.161 port 39834 ssh2
Jun  8 10:25:55 gestao sshd[13056]: Failed password for root from 98.220.134.161 port 43312 ssh2
...
2020-06-08 17:46:15
200.187.127.8 attackbotsspam
Lines containing failures of 200.187.127.8
Jun  8 06:15:01 kopano sshd[28595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.187.127.8  user=r.r
Jun  8 06:15:03 kopano sshd[28595]: Failed password for r.r from 200.187.127.8 port 19914 ssh2
Jun  8 06:15:03 kopano sshd[28595]: Received disconnect from 200.187.127.8 port 19914:11: Bye Bye [preauth]
Jun  8 06:15:03 kopano sshd[28595]: Disconnected from authenticating user r.r 200.187.127.8 port 19914 [preauth]
Jun  8 06:21:39 kopano sshd[28936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.187.127.8  user=r.r
Jun  8 06:21:41 kopano sshd[28936]: Failed password for r.r from 200.187.127.8 port 56157 ssh2
Jun  8 06:21:42 kopano sshd[28936]: Received disconnect from 200.187.127.8 port 56157:11: Bye Bye [preauth]
Jun  8 06:21:42 kopano sshd[28936]: Disconnected from authenticating user r.r 200.187.127.8 port 56157 [preauth]
Jun  8 06:24:4........
------------------------------
2020-06-08 17:42:34

Recently Reported IPs

123.108.35.154 118.24.186.210 109.169.12.94 40.92.70.78
109.91.230.145 77.37.145.41 176.123.220.57 162.243.99.164
169.0.238.232 85.100.17.242 195.9.118.110 192.3.157.84
113.160.86.198 222.154.228.183 151.80.152.189 210.5.13.35
193.70.109.193 186.24.43.28 171.97.100.77 187.174.216.212