Log in to view charts and search reports for this IP.
Log In
Reports Activity
Example preview
Report Categories (Last 60 Days)
Example preview
Top Reporter Countries (Last 60 Days)
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 81.70.80.191
This IP address has been reported a total of
157
times from
119 distinct
sources.
81.70.80.191 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 31
reports;
United States of America
with 22
reports;
France
with 12
reports.
The most common categories in these recent reports were:
Brute-Force
119
times;
SSH
116
times;
Port Scan
10
times;
Hacking
7
times;
Web App Attack
4
times;
Other
8
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-27T11:50:34.916323+02:00 sun sshd[4123949]: pam_unix(sshd:auth): authentication failure; log ...
show more2026-09-27T11:50:34.916323+02:00 sun sshd[4123949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.70.80.191 user=root
2026-09-27T11:50:37.632666+02:00 sun sshd[4123949]: Failed password for root from 81.70.80.191 port 42070 ssh2
2026-09-27T11:52:47.788365+02:00 sun sshd[4123988]: Invalid user dbbackup from 81.70.80.191 port 45728
...
show less
2026-09-25T03:53:33.147779+00:00 ktj-nc sshd[825176]: Disconnected from authenticating user root 81. ...
show more2026-09-25T03:53:33.147779+00:00 ktj-nc sshd[825176]: Disconnected from authenticating user root 81.70.80.191 port 48246 [preauth]
2026-09-25T03:56:53.566472+00:00 ktj-nc sshd[825180]: Connection closed by 81.70.80.191 port 55564 [preauth]
...
show less
2026-09-25T06:56:26.026395+03:00 gc1 sshd[2625654]: Invalid user ftpuser from 81.70.80.191 port 3546 ...
show more2026-09-25T06:56:26.026395+03:00 gc1 sshd[2625654]: Invalid user ftpuser from 81.70.80.191 port 35466
2026-09-25T06:56:26.029468+03:00 gc1 sshd[2625654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.70.80.191
2026-09-25T06:56:28.001949+03:00 gc1 sshd[2625654]: Failed password for invalid user ftpuser from 81.70.80.191 port 35466 ssh2
...
show less
Failed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 15/100 (low) ...
show moreFailed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 15/100 (low) | Phase: reconnaissance (low-volume probing)
Failed auth: 6 (0 bad password, 6 invalid user) | 0 success | 12 total SSH log events | seen on 1 sensor(s)
Origin: China (CN) | AS45090 Shenzhen Tencent Computer Systems Company Limited | 81.70.80.0/24
First seen: 2026-09-25 03:08:42 UTC | Last seen: 2026-09-25 03:16:13 UTC
Source: Linux OpenSSH journalctl telemetry, multi-sensor CERT honeypot.
show less
[DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact,ndpi_unidirectional_traffic,tcp_no_da ...
show more[DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact,ndpi_unidirectional_traffic,tcp_no_data_exchanged,connection_failed
show less
Log Entry: 2026-09-24T02:03:26315+00:00 abuse sshd[1384983]: Invalid user peter from 81.70.80.191 p ...
show moreLog Entry: 2026-09-24T02:03:26315+00:00 abuse sshd[1384983]: Invalid user peter from 81.70.80.191 port 39504
Log Entry: 2026-09-24T02:09:25332+00:00 abuse sshd[1385505]: Invalid user ociispth from 81.70.80.191 port 57014
Log Entry: 2026-09-24T02:11:24921+00:00 abuse sshd[1385661]: Invalid user me from 81.70.80.191 port 57114
Log Entry: ...
show less
Botnet credential harvesting via SSH. 3 attempts using leaked credential lists (root/123456, admin/a ...
show moreBotnet credential harvesting via SSH. 3 attempts using leaked credential lists (root/123456, admin/admin).
show less
