Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
112.80.136.135 attackspam
Unauthorized connection attempt detected from IP address 112.80.136.135 to port 8088
2020-06-01 00:45:42
112.80.136.245 attack
Unauthorized connection attempt detected from IP address 112.80.136.245 to port 3389 [J]
2020-03-02 21:35:54
112.80.136.176 attack
Unauthorized connection attempt detected from IP address 112.80.136.176 to port 8081 [J]
2020-03-02 18:41:32
112.80.136.214 attackbotsspam
Unauthorized connection attempt detected from IP address 112.80.136.214 to port 9999 [T]
2020-01-10 09:22:18
112.80.136.219 attackspam
Unauthorized connection attempt detected from IP address 112.80.136.219 to port 8118
2020-01-02 21:21:29
112.80.136.25 attack
The IP has triggered Cloudflare WAF. CF-Ray: 543405f8ef3b6cfe | WAF_Rule_ID: 1112824 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: blog.skk.moe | User-Agent: Mozilla/5.0 (Linux; U; Android 4.3; en-us; SM-N900T Build/JSS15J) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30 | CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-12 03:33:44
112.80.136.8 attackspambots
The IP has triggered Cloudflare WAF. CF-Ray: 5415f75a7ae2288c | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.077692140 Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko | CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 04:38:18
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.80.136.196
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39284
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.80.136.196.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 05:52:07 CST 2022
;; MSG SIZE  rcvd: 107
Host info
Host 196.136.80.112.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 196.136.80.112.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
186.193.136.126 attack
DATE:2020-03-23 16:41:52, IP:186.193.136.126, PORT:1433 - MSSQL brute force auth on a honeypot server (epe-dc)
2020-03-24 06:18:38
206.189.149.9 attack
Mar 23 21:01:45 srv206 sshd[15380]: Invalid user radio from 206.189.149.9
...
2020-03-24 05:47:06
40.71.177.99 attack
Mar 23 19:34:40 ns382633 sshd\[22017\]: Invalid user yf from 40.71.177.99 port 38220
Mar 23 19:34:40 ns382633 sshd\[22017\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.71.177.99
Mar 23 19:34:41 ns382633 sshd\[22017\]: Failed password for invalid user yf from 40.71.177.99 port 38220 ssh2
Mar 23 19:41:12 ns382633 sshd\[23549\]: Invalid user yelei from 40.71.177.99 port 47712
Mar 23 19:41:12 ns382633 sshd\[23549\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.71.177.99
2020-03-24 06:03:05
167.114.131.19 attackspam
Tried sshing with brute force.
2020-03-24 06:02:48
104.156.254.97 attackspambots
Unauthorized connection attempt from IP address 104.156.254.97 on Port 3389(RDP)
2020-03-24 06:03:24
45.141.86.130 attackspam
3389BruteforceStormFW22
2020-03-24 06:08:04
46.14.0.162 attackbotsspam
2020-03-23T21:12:37.016095randservbullet-proofcloud-66.localdomain sshd[6865]: Invalid user admin from 46.14.0.162 port 43726
2020-03-23T21:12:37.020980randservbullet-proofcloud-66.localdomain sshd[6865]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.0.14.46.static.wline.lns.sme.cust.swisscom.ch
2020-03-23T21:12:37.016095randservbullet-proofcloud-66.localdomain sshd[6865]: Invalid user admin from 46.14.0.162 port 43726
2020-03-23T21:12:39.133883randservbullet-proofcloud-66.localdomain sshd[6865]: Failed password for invalid user admin from 46.14.0.162 port 43726 ssh2
...
2020-03-24 05:48:14
14.170.216.67 attackbots
Mar 23 11:30:49 cumulus sshd[20445]: Invalid user admin from 14.170.216.67 port 48839
Mar 23 11:30:49 cumulus sshd[20445]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.170.216.67
Mar 23 11:30:50 cumulus sshd[20445]: Failed password for invalid user admin from 14.170.216.67 port 48839 ssh2
Mar 23 11:30:51 cumulus sshd[20445]: Connection closed by 14.170.216.67 port 48839 [preauth]
Mar 23 11:30:54 cumulus sshd[20447]: Invalid user admin from 14.170.216.67 port 48866
Mar 23 11:30:54 cumulus sshd[20447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.170.216.67
Mar 23 11:30:57 cumulus sshd[20447]: Failed password for invalid user admin from 14.170.216.67 port 48866 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=14.170.216.67
2020-03-24 06:13:13
175.194.127.36 attackbots
Automatic report - Port Scan Attack
2020-03-24 05:51:59
31.133.0.226 attackbots
2020-03-23T22:57:36.679681struts4.enskede.local sshd\[32458\]: Invalid user guri from 31.133.0.226 port 54220
2020-03-23T22:57:36.687182struts4.enskede.local sshd\[32458\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.133.0.226
2020-03-23T22:57:39.639350struts4.enskede.local sshd\[32458\]: Failed password for invalid user guri from 31.133.0.226 port 54220 ssh2
2020-03-23T23:04:08.644516struts4.enskede.local sshd\[32557\]: Invalid user id from 31.133.0.226 port 56986
2020-03-23T23:04:08.650745struts4.enskede.local sshd\[32557\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.133.0.226
...
2020-03-24 06:17:15
198.38.93.215 attack
Mar 23 16:24:54 tux postfix/smtpd[3020]: connect from direct.desiengine.com[198.38.93.215]
Mar 23 16:24:54 tux postfix/smtpd[3020]: Anonymous TLS connection established from direct.desiengine.com[198.38.93.215]: TLSv1.2 whostnameh cipher ECDHE-RSA-AES256-SHA384 (256/256 bhostnames)
Mar x@x
Mar 23 16:24:58 tux postfix/smtpd[3020]: disconnect from direct.desiengine.com[198.38.93.215]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=198.38.93.215
2020-03-24 05:47:34
152.32.102.134 attackbotsspam
20/3/23@11:42:03: FAIL: Alarm-Network address from=152.32.102.134
...
2020-03-24 06:11:14
159.192.99.3 attack
Mar 23 20:40:30 work-partkepr sshd\[16394\]: Invalid user readonly from 159.192.99.3 port 50530
Mar 23 20:40:30 work-partkepr sshd\[16394\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.192.99.3
...
2020-03-24 05:40:44
128.201.137.252 attackbots
Fail2Ban - FTP Abuse Attempt
2020-03-24 05:49:34
106.12.76.91 attack
Mar 23 19:03:04 odroid64 sshd\[25736\]: Invalid user kraft from 106.12.76.91
Mar 23 19:03:04 odroid64 sshd\[25736\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.76.91
...
2020-03-24 06:07:46

Recently Reported IPs

112.8.50.236 112.80.136.200 112.80.136.28 112.80.136.50
112.80.136.60 112.80.137.108 112.80.136.57 112.80.137.160
112.80.137.219 112.80.137.27 112.80.137.92 112.80.138.157
112.80.138.184 112.80.138.188 112.80.138.253 112.80.138.179
112.80.138.25 112.80.139.170 112.80.139.14 112.80.138.83