112.80.136.104

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
112.80.136.135	attackspam	Unauthorized connection attempt detected from IP address 112.80.136.135 to port 8088	2020-06-01 00:45:42
112.80.136.245	attack	Unauthorized connection attempt detected from IP address 112.80.136.245 to port 3389 [J]	2020-03-02 21:35:54
112.80.136.176	attack	Unauthorized connection attempt detected from IP address 112.80.136.176 to port 8081 [J]	2020-03-02 18:41:32
112.80.136.214	attackbotsspam	Unauthorized connection attempt detected from IP address 112.80.136.214 to port 9999 [T]	2020-01-10 09:22:18
112.80.136.219	attackspam	Unauthorized connection attempt detected from IP address 112.80.136.219 to port 8118	2020-01-02 21:21:29
112.80.136.25	attack	The IP has triggered Cloudflare WAF. CF-Ray: 543405f8ef3b6cfe \| WAF_Rule_ID: 1112824 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: blog.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 4.3; en-us; SM-N900T Build/JSS15J) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30 \| CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 03:33:44
112.80.136.8	attackspambots	The IP has triggered Cloudflare WAF. CF-Ray: 5415f75a7ae2288c \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.077692140 Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko \| CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 04:38:18

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.80.136.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59399
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.80.136.104.			IN	A

;; AUTHORITY SECTION:
.			199	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021202 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 13:33:06 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 104.136.80.112.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 104.136.80.112.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
122.51.227.65	attackspam	Jun 25 16:57:47 ns382633 sshd\[7805\]: Invalid user patrick from 122.51.227.65 port 59354 Jun 25 16:57:47 ns382633 sshd\[7805\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.227.65 Jun 25 16:57:50 ns382633 sshd\[7805\]: Failed password for invalid user patrick from 122.51.227.65 port 59354 ssh2 Jun 25 17:01:28 ns382633 sshd\[8630\]: Invalid user alex from 122.51.227.65 port 35742 Jun 25 17:01:28 ns382633 sshd\[8630\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.227.65	2020-06-26 02:32:39
104.192.82.99	attackbotsspam	$f2bV_matches	2020-06-26 02:37:01
40.71.171.254	attackbotsspam	Jun 25 12:07:27 scw-tender-jepsen sshd[20682]: Failed password for root from 40.71.171.254 port 51131 ssh2	2020-06-26 02:23:27
185.166.153.98	attack	lot of request like this : [2020-06-25 18:01:58] NOTICE[1094]: chan_sip.c:29029 handle_request_register: Registration from '"101" ' failed for '185.166.153.98:6144' - Wrong password [2020-06-25 18:01:58] NOTICE[1094]: chan_sip.c:29029 handle_request_register: Registration from '"101" ' failed for '185.166.153.98:6144' - Wrong password	2020-06-26 02:31:04
40.113.100.22	attack	Jun 25 12:32:16 mailman sshd[2778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.113.100.22 user=root Jun 25 12:32:18 mailman sshd[2778]: Failed password for root from 40.113.100.22 port 1600 ssh2 Jun 25 13:03:41 mailman sshd[3544]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.113.100.22 user=root	2020-06-26 02:06:36
137.117.92.108	attackbotsspam	Jun 25 19:53:34 mout sshd[9822]: Failed password for root from 137.117.92.108 port 9520 ssh2 Jun 25 19:53:32 mout sshd[9822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.117.92.108 user=root Jun 25 19:53:34 mout sshd[9822]: Failed password for root from 137.117.92.108 port 9520 ssh2	2020-06-26 02:05:11
112.85.42.200	attackbots	Jun 25 13:57:03 NPSTNNYC01T sshd[18087]: Failed password for root from 112.85.42.200 port 36013 ssh2 Jun 25 13:57:16 NPSTNNYC01T sshd[18087]: error: maximum authentication attempts exceeded for root from 112.85.42.200 port 36013 ssh2 [preauth] Jun 25 13:57:36 NPSTNNYC01T sshd[18124]: Failed password for root from 112.85.42.200 port 15547 ssh2 ...	2020-06-26 02:26:39
192.35.169.31	attackbotsspam	TCP (SYN) 192.35.169.31:34763 -> port 143, len 44	2020-06-26 02:08:40
165.22.69.147	attackbots	20 attempts against mh-ssh on echoip	2020-06-26 02:23:09
94.176.204.175	attackspam	(Jun 25) LEN=40 TTL=243 ID=63566 DF TCP DPT=23 WINDOW=14600 SYN (Jun 25) LEN=40 TTL=243 ID=33580 DF TCP DPT=23 WINDOW=14600 SYN (Jun 25) LEN=40 TTL=243 ID=25329 DF TCP DPT=23 WINDOW=14600 SYN (Jun 25) LEN=40 TTL=243 ID=47782 DF TCP DPT=23 WINDOW=14600 SYN (Jun 25) LEN=40 TTL=243 ID=55289 DF TCP DPT=23 WINDOW=14600 SYN (Jun 24) LEN=40 TTL=243 ID=12315 DF TCP DPT=23 WINDOW=14600 SYN (Jun 24) LEN=40 TTL=243 ID=38297 DF TCP DPT=23 WINDOW=14600 SYN (Jun 24) LEN=40 TTL=243 ID=6990 DF TCP DPT=23 WINDOW=14600 SYN (Jun 24) LEN=40 TTL=243 ID=5377 DF TCP DPT=23 WINDOW=14600 SYN (Jun 24) LEN=40 TTL=243 ID=15512 DF TCP DPT=23 WINDOW=14600 SYN (Jun 24) LEN=40 TTL=243 ID=36476 DF TCP DPT=23 WINDOW=14600 SYN (Jun 24) LEN=40 TTL=243 ID=62320 DF TCP DPT=23 WINDOW=14600 SYN (Jun 24) LEN=40 TTL=243 ID=53331 DF TCP DPT=23 WINDOW=14600 SYN (Jun 23) LEN=40 TTL=243 ID=39328 DF TCP DPT=23 WINDOW=14600 SYN (Jun 23) LEN=40 TTL=243 ID=30830 DF TCP DPT=23 WINDOW=14600 SY...	2020-06-26 02:07:52
51.210.107.217	attack	Bruteforce detected by fail2ban	2020-06-26 02:21:38
123.157.78.171	attackbotsspam	Invalid user public from 123.157.78.171 port 39168	2020-06-26 01:57:23
177.1.214.207	attack	Jun 26 01:02:53 web1 sshd[14662]: Invalid user pb from 177.1.214.207 port 42670 Jun 26 01:02:53 web1 sshd[14662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.1.214.207 Jun 26 01:02:53 web1 sshd[14662]: Invalid user pb from 177.1.214.207 port 42670 Jun 26 01:02:55 web1 sshd[14662]: Failed password for invalid user pb from 177.1.214.207 port 42670 ssh2 Jun 26 01:08:57 web1 sshd[16351]: Invalid user cac from 177.1.214.207 port 29228 Jun 26 01:08:57 web1 sshd[16351]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.1.214.207 Jun 26 01:08:57 web1 sshd[16351]: Invalid user cac from 177.1.214.207 port 29228 Jun 26 01:08:59 web1 sshd[16351]: Failed password for invalid user cac from 177.1.214.207 port 29228 ssh2 Jun 26 01:13:07 web1 sshd[17386]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.1.214.207 user=root Jun 26 01:13:09 web1 sshd[17386]: Failed passwor ...	2020-06-26 02:18:20
119.123.225.175	attack	Invalid user postgres from 119.123.225.175 port 47924	2020-06-26 02:16:54
95.70.128.210	attack	php WP PHPmyadamin ABUSE blocked for 12h	2020-06-26 02:20:56

Recently Reported IPs

112.78.133.49	112.80.136.148	112.80.136.143	112.80.127.113
112.78.128.242	112.8.32.85	112.80.136.153	112.80.136.155
112.80.136.181	112.80.136.204	112.80.136.197	112.8.41.166
112.80.136.203	112.8.220.28	112.80.136.218	112.80.136.212
112.80.136.202	112.80.136.210	112.80.136.211	112.80.136.234