This IP address has been reported a total of
219
times from
194 distinct
sources.
80.97.44.146 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 46
reports;
United States of America
with 32
reports;
France
with 24
reports.
The most common categories in these recent reports were:
Brute-Force
205
times;
SSH
195
times;
Port Scan
8
times;
Web App Attack
6
times;
Hacking
5
times;
Other
9
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-26T07:18:25.488583+00:00 server sshd-session[2861762]: Failed password for root from 80.97.4 ...
show more2026-10-26T07:18:25.488583+00:00 server sshd-session[2861762]: Failed password for root from 80.97.44.146 port 37916 ssh2
2026-10-26T07:19:58.910488+00:00 server sshd-session[2866458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.97.44.146 user=root
2026-10-26T07:20:00.750318+00:00 server sshd-session[2866458]: Failed password for root from 80.97.44.146 port 37168 ssh2
show less
2026-10-26T15:17:45.292562VM-6O8ZZ89Z sshd[10353]: Failed password for root from 80.97.44.146 port 5 ...
show more2026-10-26T15:17:45.292562VM-6O8ZZ89Z sshd[10353]: Failed password for root from 80.97.44.146 port 51524 ssh2
2026-10-26T15:19:16.348343VM-6O8ZZ89Z sshd[10390]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.97.44.146 user=root
2026-10-26T15:19:18.056781VM-6O8ZZ89Z sshd[10390]: Failed password for root from 80.97.44.146 port 36350 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-10-26T06:31:18.531081+00:00 de-fra2-rpki1 sshd[1595023]: Invalid user user from 80.97.44.146 po ...
show more2026-10-26T06:31:18.531081+00:00 de-fra2-rpki1 sshd[1595023]: Invalid user user from 80.97.44.146 port 48520
2026-10-26T06:32:50.093610+00:00 de-fra2-rpki1 sshd[1595043]: Invalid user axway from 80.97.44.146 port 55820
2026-10-26T06:34:16.987003+00:00 de-fra2-rpki1 sshd[1595051]: Invalid user httpd from 80.97.44.146 port 43220
...
show less
2026-10-26T07:34:06.870577+02:00 Linux01 sshd-session[39001]: Failed password for root from 80.97.44 ...
show more2026-10-26T07:34:06.870577+02:00 Linux01 sshd-session[39001]: Failed password for root from 80.97.44.146 port 56618 ssh2
2026-10-26T07:35:34.371724+02:00 Linux01 sshd-session[41665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.97.44.146 user=root
2026-10-26T07:35:35.632235+02:00 Linux01 sshd-session[41665]: Failed password for root from 80.97.44.146 port 57590 ssh2
2026-10-26T07:36:58.760112+02:00 Linux01 sshd-session[43762]: Invalid user temp from 80.97.44.146 port 53910
2026-10-26T07:36:58.769589+02:00 Linux01 sshd-session[43762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.97.44.146
2026-10-26T07:37:00.690189+02:00 Linux01 sshd-session[43762]: Failed password for invalid user temp from 80.97.44.146 port 53910 ssh2
2026-10-26T07:38:22.892831+02:00 Linux01 sshd-session[45961]: Invalid user pakchoi from 80.97.44.146 port 49526
2026-10-26T07:38:22.897711+02:00 Linux01 sshd-session[45961]: pam_
...
show less
2026-10-26T07:58:13.242044+03:00 fra.hmhomegate.net sshd-session[15813]: Invalid user charan from 80 ...
show more2026-10-26T07:58:13.242044+03:00 fra.hmhomegate.net sshd-session[15813]: Invalid user charan from 80.97.44.146 port 56702
2026-10-26T07:58:13.374290+03:00 fra.hmhomegate.net sshd-session[15813]: Disconnected from invalid user charan 80.97.44.146 port 56702 [preauth]
2026-10-26T08:00:20.335396+03:00 fra.hmhomegate.net sshd-session[15855]: Disconnected from authenticating user root 80.97.44.146 port 51138 [preauth]
2026-10-26T08:01:50.957201+03:00 fra.hmhomegate.net sshd-session[15898]: Invalid user citel from 80.97.44.146 port 60370
2026-10-26T08:01:51.081746+03:00 fra.hmhomegate.net sshd-session[15898]: Disconnected from invalid user citel 80.97.44.146 port 60370 [preauth]
...
show less
SSH brute-force attack detected.
Detection: Fail2Ban (sshd).
Service: SSH.
Ban duration: unknown.
Ti ...
show moreSSH brute-force attack detected.
Detection: Fail2Ban (sshd).
Service: SSH.
Ban duration: unknown.
Time (UTC): 2026-10-26T04:39:26Z. Evidence: 2026-10-26T04:35:13.131996+00:00 SERVER sshd-session[2537622]: Invalid user curl from REDACTED_IP port 55136 2026-10-26T04:38:05.067881+00:00 SERVER sshd-session[2539387]: Invalid user pakchoi from RE
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
[SOC-ALERT: SSH-HONEYPOT] Hostile probe intercepted on dormant TCP/22. Vector: Unsolicited TCP SYN / ...
show more[SOC-ALERT: SSH-HONEYPOT] Hostile probe intercepted on dormant TCP/22. Vector: Unsolicited TCP SYN / Port Scan targeting decoys (MITRE ATT&CK: T1046 Network Service Discovery). System architecture: Production SSH operates exclusively on a hardened non-standard port; port 22 is an active deception honeypot. Enforcement: Perimeter drop via Netfilter/NFTables, source IP quarantined. Automated threat intelligence telemetry.
show less
