Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Goyang-si

Region: Gyeonggi-do

Country: South Korea

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.161.80.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5679
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;112.161.80.142.			IN	A

;; AUTHORITY SECTION:
.			502	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020021301 1800 900 604800 86400

;; Query time: 384 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 14 04:18:39 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 142.80.161.112.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 142.80.161.112.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
194.247.27.65 attackspam
slow and persistent scanner
2019-11-01 23:12:39
132.145.80.60 attackspam
Port scan: Attack repeated for 24 hours
2019-11-01 23:36:03
46.225.128.202 attack
Sending SPAM email
2019-11-01 23:47:54
143.208.137.209 attackbotsspam
port scan and connect, tcp 1433 (ms-sql-s)
2019-11-01 23:28:01
150.255.84.83 attackbotsspam
SSH Scan
2019-11-01 23:54:16
123.110.50.108 attackbots
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/123.110.50.108/ 
 
 TW - 1H : (99)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : TW 
 NAME ASN : ASN131596 
 
 IP : 123.110.50.108 
 
 CIDR : 123.110.48.0/22 
 
 PREFIX COUNT : 343 
 
 UNIQUE IP COUNT : 351232 
 
 
 ATTACKS DETECTED ASN131596 :  
  1H - 2 
  3H - 2 
  6H - 2 
 12H - 2 
 24H - 2 
 
 DateTime : 2019-11-01 12:50:04 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-11-01 23:48:25
82.214.118.6 attackbots
82.214.118.6 - - \[01/Nov/2019:13:02:33 +0000\] "POST /wp-login.php HTTP/1.1" 200 4358 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
82.214.118.6 - - \[01/Nov/2019:13:02:34 +0000\] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
...
2019-11-01 23:24:06
142.93.238.162 attack
Nov  1 03:29:04 sachi sshd\[18434\]: Invalid user ftpuser from 142.93.238.162
Nov  1 03:29:04 sachi sshd\[18434\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.238.162
Nov  1 03:29:06 sachi sshd\[18434\]: Failed password for invalid user ftpuser from 142.93.238.162 port 33686 ssh2
Nov  1 03:32:57 sachi sshd\[18765\]: Invalid user www from 142.93.238.162
Nov  1 03:32:57 sachi sshd\[18765\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.238.162
2019-11-01 23:39:25
123.161.205.21 attack
firewall-block, port(s): 1433/tcp
2019-11-01 23:46:37
91.226.81.103 attackbotsspam
Lines containing failures of 91.226.81.103
Nov  1 12:38:15 shared09 postfix/smtpd[1136]: connect from vm-6726517f.netangels.ru[91.226.81.103]
Nov  1 12:38:15 shared09 policyd-spf[5822]: prepend Received-SPF: Pass (mailfrom) identhostnamey=mailfrom; client-ip=91.226.81.103; helo=hikareras.com; envelope-from=x@x
Nov x@x
Nov  1 12:38:15 shared09 postfix/smtpd[1136]: disconnect from vm-6726517f.netangels.ru[91.226.81.103] ehlo=1 mail=1 rcpt=0/1 data=0/1 quhostname=1 commands=3/5


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=91.226.81.103
2019-11-01 23:51:53
103.1.239.135 attack
xmlrpc attack
2019-11-01 23:43:55
49.73.61.26 attack
Nov  1 13:16:29 srv01 sshd[31539]: Invalid user gaurav from 49.73.61.26
Nov  1 13:16:29 srv01 sshd[31539]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.73.61.26
Nov  1 13:16:29 srv01 sshd[31539]: Invalid user gaurav from 49.73.61.26
Nov  1 13:16:31 srv01 sshd[31539]: Failed password for invalid user gaurav from 49.73.61.26 port 52210 ssh2
Nov  1 13:22:25 srv01 sshd[32034]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.73.61.26  user=root
Nov  1 13:22:27 srv01 sshd[32034]: Failed password for root from 49.73.61.26 port 43255 ssh2
...
2019-11-01 23:32:10
39.72.56.91 attackbotsspam
SSH Scan
2019-11-01 23:08:14
132.232.59.136 attack
Nov  1 11:50:31 anodpoucpklekan sshd[88435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.59.136  user=root
Nov  1 11:50:33 anodpoucpklekan sshd[88435]: Failed password for root from 132.232.59.136 port 33900 ssh2
...
2019-11-01 23:23:23
148.70.56.123 attackspambots
F2B jail: sshd. Time: 2019-11-01 16:19:22, Reported by: VKReport
2019-11-01 23:27:29

Recently Reported IPs

15.15.115.166 202.79.50.35 190.78.226.183 58.248.132.146
69.228.23.185 218.7.3.162 152.152.222.47 73.33.102.142
70.154.85.136 83.103.58.167 24.12.141.247 36.219.207.60
81.218.169.122 32.92.199.23 121.174.215.155 91.14.13.24
47.12.127.255 122.54.213.18 197.157.222.194 47.176.170.4