This IP address has been reported a total of
697
times from
219 distinct
sources.
80.94.92.83 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Sustained automated full-port sweep of public infrastructure โ same source IP persisted for 2+ hours ...
show moreSustained automated full-port sweep of public infrastructure โ same source IP persisted for 2+ hours using two persistent source ports (56706 and 56722) probing 50+ sequential destination ports including 25002 10080 631 5236 6002 6881 556 8110 9754 139 1180 888 3780 5902 5904 5906 9002 9800 10001 and many others. Systematic scan pattern not random โ automated scanner sweeping all ports. Blocked at network perimeter ACL. Adjacent host 80.94.92.17 previously blocked as a host entry.
show less
Dec 27 20:27:15 localhost sshd[3791586]: Connection closed by 80.94.92.83 port 54286 [preauth]
Dec 2 ...
show moreDec 27 20:27:15 localhost sshd[3791586]: Connection closed by 80.94.92.83 port 54286 [preauth]
Dec 27 20:32:17 localhost sshd[3791595]: Invalid user Langoy from 80.94.92.83 port 46154
Dec 27 20:32:17 localhost sshd[3791596]: Invalid user langoy from 80.94.92.83 port 46164
...
show less
Fail2Ban report from jail 'sshd': 2025-12-27T19:29:11.507387+01:00 mail sshd[874444]: User root from ...
show moreFail2Ban report from jail 'sshd': 2025-12-27T19:29:11.507387+01:00 mail sshd[874444]: User root from 80.94.92.83 not allowed because not listed in AllowUsers
...
show less
Dec 26 19:00:13 Veslys sshd[3149624]: Invalid user tr from 80.94.92.83 port 60160
Dec 26 19:00:13 Ve ...
show moreDec 26 19:00:13 Veslys sshd[3149624]: Invalid user tr from 80.94.92.83 port 60160
Dec 26 19:00:13 Veslys sshd[3149620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.94.92.83 user=root
Dec 26 19:00:15 Veslys sshd[3149620]: Failed password for root from 80.94.92.83 port 36894 ssh2
...
show less
Dec 26 09:09:51 cerveny-vps sshd[3120777]: Invalid user cerveny-vps from 80.94.92.83 port 50980
Dec ...
show moreDec 26 09:09:51 cerveny-vps sshd[3120777]: Invalid user cerveny-vps from 80.94.92.83 port 50980
Dec 26 09:09:51 cerveny-vps sshd[3120779]: Invalid user cz from 80.94.92.83 port 50986
Dec 26 09:09:51 cerveny-vps sshd[3120779]: Invalid user cz from 80.94.92.83 port 50986
Dec 26 09:22:17 cerveny-vps sshd[3121454]: Invalid user cerveny-vps from 80.94.92.83 port 49620
Dec 26 09:22:17 cerveny-vps sshd[3121454]: Invalid user cerveny-vps from 80.94.92.83 port 49620
Dec 26 09:22:17 cerveny-vps sshd[3121456]: Invalid user cz from 80.94.92.83 port 49626
Dec 26 09:22:17 cerveny-vps sshd[3121456]: Invalid user cz from 80.94.92.83 port 49626
...
show less
2025-12-26T09:10:09.546886+01:00 ns1..de sshd-session[3835564]: Invalid user de from 80.94.92.83 por ...
show more2025-12-26T09:10:09.546886+01:00 ns1..de sshd-session[3835564]: Invalid user de from 80.94.92.83 port 49638
2025-12-26T09:10:09.549644+01:00 ns1..de sshd-session[3835563]: Invalid user syshorst from 80.94.92.83 port 49634
show less
Dec 26 09:03:02 mtb-server sshd[3487463]: Failed password for root from 80.94.92.83 port 42098 ssh2
...
show moreDec 26 09:03:02 mtb-server sshd[3487463]: Failed password for root from 80.94.92.83 port 42098 ssh2
Dec 26 09:03:01 mtb-server sshd[3487464]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.94.92.83
Dec 26 09:03:02 mtb-server sshd[3487464]: Failed password for invalid user wizbiz from 80.94.92.83 port 42110 ssh2
Dec 26 09:03:01 mtb-server sshd[3487467]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.94.92.83
Dec 26 09:03:02 mtb-server sshd[3487467]: Failed password for invalid user it from 80.94.92.83 port 42118 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 697 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ