AbuseIPDB » 80.71.149.145

80.71.149.145 was found in our database!

This IP was reported 1,472 times. Confidence of Abuse is 100%: ?

100%

ISP	Sefroyek Pardaz Engineering PJSC
Usage Type	Data Center/Web Hosting/Transit
Domain Name	shahrad.net
Country	Iran (Islamic Republic of)
City	Tehran, Tehran

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 80.71.149.145

Whois 80.71.149.145

IP Abuse Reports for 80.71.149.145:

This IP address has been reported a total of 1,472 times from 517 distinct sources. 80.71.149.145 was first reported on October 7th 2023, and the most recent report was 27 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
ak47suk1.my	2024-09-20 23:32:48 (27 minutes ago)	Sep 20 23:32:26 horseguai sshd[161505]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show moreSep 20 23:32:26 horseguai sshd[161505]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.71.149.145 Sep 20 23:32:28 horseguai sshd[161505]: Failed password for invalid user sysadmin from 80.71.149.145 port 36852 ssh2 Sep 20 23:32:36 horseguai sshd[161507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.71.149.145 user=root Sep 20 23:32:38 horseguai sshd[161507]: Failed password for root from 80.71.149.145 port 51096 ssh2 Sep 20 23:32:47 horseguai sshd[161515]: Invalid user portal from 80.71.149.145 port 34050 ... show less	Brute-Force SSH
quarba	2024-09-20 17:29:05 (6 hours ago)	Brute force SMTP login attempted	Brute-Force SSH
ghostwarriors	2024-09-20 16:20:30 (7 hours ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
cata77tm	2024-09-19 23:23:51 (1 day ago)	(sshd) Failed SSH login from 80.71.149.145 (-): 5 in the last 3600 secs; Ports: ; Direction: inout; ... show more(sshd) Failed SSH login from 80.71.149.145 (-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Sep 20 02:17:44 srv sshd[12268]: Invalid user mosquitto from 80.71.149.145 port 43678 Sep 20 02:17:46 srv sshd[12268]: Failed password for invalid user mosquitto from 80.71.149.145 port 43678 ssh2 Sep 20 02:23:36 srv sshd[12355]: Invalid user sysadmin from 80.71.149.145 port 53092 Sep 20 02:23:38 srv sshd[12355]: Failed password for invalid user sysadmin from 80.71.149.145 port 53092 ssh2 Sep 20 02:23:46 srv sshd[12359]: Invalid user ionadmin from 80.71.149.145 port 34780 show less	Port Scan
Hotwire	2024-09-19 05:18:17 (1 day ago)	Sep 19 07:15:15 h2buntu sshd[395360]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ... show moreSep 19 07:15:15 h2buntu sshd[395360]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.71.149.145 Sep 19 07:15:17 h2buntu sshd[395360]: Failed password for invalid user odoo from 80.71.149.145 port 55694 ssh2 Sep 19 07:18:17 h2buntu sshd[395762]: Invalid user websites from 80.71.149.145 port 58372 ... show less	Hacking Brute-Force SSH
musicwolf83	2024-09-19 03:17:50 (1 day ago)	2024-09-18T21:12:51.450244-06:00 yms sshd[3024089]: Invalid user shenxuan from 80.71.149.145 port 40 ... show more2024-09-18T21:12:51.450244-06:00 yms sshd[3024089]: Invalid user shenxuan from 80.71.149.145 port 40404 2024-09-18T21:12:51.723266-06:00 yms sshd[3024089]: Disconnected from invalid user shenxuan 80.71.149.145 port 40404 [preauth] 2024-09-18T21:17:49.261056-06:00 yms sshd[3154921]: Invalid user ror from 80.71.149.145 port 51594 ... show less	Port Scan Brute-Force SSH
rtbh.com.tr	2024-09-18 20:54:31 (2 days ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
_ArminS_	2024-09-18 17:06:59 (2 days ago)	Bad SSHAUTH 2024.09.18 19:06:58 blocked until 2024.09.25 19:06:58 by HoneyPot FI_Uusimaa ... show moreBad SSHAUTH 2024.09.18 19:06:58 blocked until 2024.09.25 19:06:58 by HoneyPot FI_Uusimaa01 show less	Hacking Brute-Force SSH
Rizzy	2024-09-18 01:10:20 (2 days ago)	Multiple failed SSH logins or Distributed SSH attack	Brute-Force SSH
rtbh.com.tr	2024-09-17 20:54:33 (3 days ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
iGor2024	2024-09-17 16:54:45 (3 days ago)	2024-09-17T23:54:28.584931 singularity2 sshd[26038]: Connection from 80.71.149.145 port 38544 on 10. ... show more2024-09-17T23:54:28.584931 singularity2 sshd[26038]: Connection from 80.71.149.145 port 38544 on 10.0.0.7 port 2222 rdomain "" 2024-09-17T23:54:28.890932 singularity2 sshd[26038]: Invalid user test from 80.71.149.145 port 38544 2024-09-17T23:54:28.956652 singularity2 sshd[26038]: Disconnected from invalid user test 80.71.149.145 port 38544 [preauth] 2024-09-17T23:54:43.786338 singularity2 sshd[26056]: Connection from 80.71.149.145 port 35828 on 10.0.0.7 port 2222 rdomain "" 2024-09-17T23:54:44.132666 singularity2 sshd[26056]: Invalid user es from 80.71.149.145 port 35828 ... show less	DNS Compromise DNS Poisoning Fraud Orders DDoS Attack FTP Brute-Force Ping of Death Phishing Fraud VoIP Open Proxy Web Spam Email Spam Blog Spam VPN IP Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
lp	2024-09-17 03:21:47 (3 days ago)	SSH Brute force: 1 attempts were recorded from 80.71.149.145 2024-09-17T04:35:52+02:00 Invalid ... show moreSSH Brute force: 1 attempts were recorded from 80.71.149.145 2024-09-17T04:35:52+02:00 Invalid user user from 80.71.149.145 port 52868 show less	Brute-Force SSH
mxpgmbh	2024-09-14 10:03:11 (6 days ago)	2024-09-14T12:02:47.231937+02:00 hz-vm-web-013 sshd[2346748]: Failed password for root from 80.71.14 ... show more2024-09-14T12:02:47.231937+02:00 hz-vm-web-013 sshd[2346748]: Failed password for root from 80.71.149.145 port 56898 ssh2 2024-09-14T12:02:56.993431+02:00 hz-vm-web-013 sshd[2347884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.71.149.145 user=root 2024-09-14T12:02:59.016041+02:00 hz-vm-web-013 sshd[2347884]: Failed password for root from 80.71.149.145 port 46670 ssh2 2024-09-14T12:03:08.790097+02:00 hz-vm-web-013 sshd[2348529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.71.149.145 user=root 2024-09-14T12:03:10.792650+02:00 hz-vm-web-013 sshd[2348529]: Failed password for root from 80.71.149.145 port 56728 ssh2 show less	Brute-Force SSH
damienbkx	2024-09-14 05:59:18 (6 days ago)	Sep 14 07:54:12 dbr01 sshd[1978273]: User root from 80.71.149.145 not allowed because not listed in ... show moreSep 14 07:54:12 dbr01 sshd[1978273]: User root from 80.71.149.145 not allowed because not listed in AllowUsers Sep 14 07:58:38 dbr01 sshd[1979411]: User root from 80.71.149.145 not allowed because not listed in AllowUsers Sep 14 07:58:54 dbr01 sshd[1979461]: User root from 80.71.149.145 not allowed because not listed in AllowUsers Sep 14 07:59:05 dbr01 sshd[1979493]: User root from 80.71.149.145 not allowed because not listed in AllowUsers Sep 14 07:59:17 dbr01 sshd[1979639]: User root from 80.71.149.145 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
iGor2024	2024-09-13 11:44:06 (1 week ago)	2024-09-13T18:43:43.942131 singularity2 sshd[296410]: Connection from 80.71.149.145 port 55346 on 10 ... show more2024-09-13T18:43:43.942131 singularity2 sshd[296410]: Connection from 80.71.149.145 port 55346 on 10.0.0.7 port 2222 rdomain "" 2024-09-13T18:43:44.295685 singularity2 sshd[296410]: Invalid user mcserver from 80.71.149.145 port 55346 2024-09-13T18:43:44.344593 singularity2 sshd[296410]: Disconnected from invalid user mcserver 80.71.149.145 port 55346 [preauth] 2024-09-13T18:44:04.934929 singularity2 sshd[296437]: Connection from 80.71.149.145 port 58866 on 10.0.0.7 port 2222 rdomain "" 2024-09-13T18:44:05.487614 singularity2 sshd[296437]: Invalid user oracle from 80.71.149.145 port 58866 ... show less	DNS Compromise DNS Poisoning Fraud Orders DDoS Attack FTP Brute-Force Ping of Death Phishing Fraud VoIP Open Proxy Web Spam Email Spam Blog Spam VPN IP Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted