Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
112.80.136.135 attackspam
Unauthorized connection attempt detected from IP address 112.80.136.135 to port 8088
2020-06-01 00:45:42
112.80.136.245 attack
Unauthorized connection attempt detected from IP address 112.80.136.245 to port 3389 [J]
2020-03-02 21:35:54
112.80.136.176 attack
Unauthorized connection attempt detected from IP address 112.80.136.176 to port 8081 [J]
2020-03-02 18:41:32
112.80.136.214 attackbotsspam
Unauthorized connection attempt detected from IP address 112.80.136.214 to port 9999 [T]
2020-01-10 09:22:18
112.80.136.219 attackspam
Unauthorized connection attempt detected from IP address 112.80.136.219 to port 8118
2020-01-02 21:21:29
112.80.136.25 attack
The IP has triggered Cloudflare WAF. CF-Ray: 543405f8ef3b6cfe | WAF_Rule_ID: 1112824 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: blog.skk.moe | User-Agent: Mozilla/5.0 (Linux; U; Android 4.3; en-us; SM-N900T Build/JSS15J) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30 | CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-12 03:33:44
112.80.136.8 attackspambots
The IP has triggered Cloudflare WAF. CF-Ray: 5415f75a7ae2288c | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.077692140 Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko | CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 04:38:18
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.80.136.204
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31001
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.80.136.204.			IN	A

;; AUTHORITY SECTION:
.			164	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021202 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 13:33:09 CST 2022
;; MSG SIZE  rcvd: 107
Host info
Host 204.136.80.112.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 204.136.80.112.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
157.245.137.211 attackspambots
Jul 11 19:19:11 ny01 sshd[22132]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.137.211
Jul 11 19:19:13 ny01 sshd[22132]: Failed password for invalid user adele from 157.245.137.211 port 52348 ssh2
Jul 11 19:22:00 ny01 sshd[22511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.137.211
2020-07-12 07:28:48
64.202.184.249 attackbots
64.202.184.249 - - [11/Jul/2020:22:04:27 +0200] "GET /wp-login.php HTTP/1.1" 200 5738 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
64.202.184.249 - - [11/Jul/2020:22:04:28 +0200] "POST /wp-login.php HTTP/1.1" 200 5989 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
64.202.184.249 - - [11/Jul/2020:22:04:30 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-07-12 07:45:06
201.187.99.212 attack
 TCP (SYN) 201.187.99.212:9370 -> port 80, len 44
2020-07-12 07:22:41
104.219.151.119 attackspambots
port scan and connect, tcp 23 (telnet)
2020-07-12 07:54:09
145.239.92.26 attackbotsspam
Jul 11 20:17:49 vps46666688 sshd[3648]: Failed password for root from 145.239.92.26 port 36273 ssh2
Jul 11 20:18:01 vps46666688 sshd[3648]: error: maximum authentication attempts exceeded for root from 145.239.92.26 port 36273 ssh2 [preauth]
...
2020-07-12 07:24:05
92.63.196.28 attackspam
07/11/2020-17:57:42.729809 92.63.196.28 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-07-12 07:38:22
49.234.21.36 attackspambots
2020-07-11T23:19:26.549637server.espacesoutien.com sshd[31680]: Invalid user kernelsys from 49.234.21.36 port 59492
2020-07-11T23:19:26.565680server.espacesoutien.com sshd[31680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.21.36
2020-07-11T23:19:26.549637server.espacesoutien.com sshd[31680]: Invalid user kernelsys from 49.234.21.36 port 59492
2020-07-11T23:19:28.927738server.espacesoutien.com sshd[31680]: Failed password for invalid user kernelsys from 49.234.21.36 port 59492 ssh2
...
2020-07-12 07:44:27
125.137.191.215 attackbotsspam
Invalid user lz from 125.137.191.215 port 40302
2020-07-12 07:29:52
122.51.234.86 attackspam
Invalid user user from 122.51.234.86 port 37768
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.234.86
Invalid user user from 122.51.234.86 port 37768
Failed password for invalid user user from 122.51.234.86 port 37768 ssh2
Invalid user xgues from 122.51.234.86 port 33098
2020-07-12 07:51:30
218.92.0.199 attackbots
2020-07-12T00:52:10.017025rem.lavrinenko.info sshd[28192]: refused connect from 218.92.0.199 (218.92.0.199)
2020-07-12T00:53:42.373196rem.lavrinenko.info sshd[28194]: refused connect from 218.92.0.199 (218.92.0.199)
2020-07-12T00:55:27.102277rem.lavrinenko.info sshd[28196]: refused connect from 218.92.0.199 (218.92.0.199)
2020-07-12T00:57:08.312464rem.lavrinenko.info sshd[28200]: refused connect from 218.92.0.199 (218.92.0.199)
2020-07-12T00:58:43.479174rem.lavrinenko.info sshd[28202]: refused connect from 218.92.0.199 (218.92.0.199)
...
2020-07-12 07:52:27
185.143.72.34 attack
Jul 12 01:33:03 srv01 postfix/smtpd\[22349\]: warning: unknown\[185.143.72.34\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 12 01:33:41 srv01 postfix/smtpd\[29106\]: warning: unknown\[185.143.72.34\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 12 01:34:28 srv01 postfix/smtpd\[20066\]: warning: unknown\[185.143.72.34\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 12 01:35:10 srv01 postfix/smtpd\[26921\]: warning: unknown\[185.143.72.34\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 12 01:35:53 srv01 postfix/smtpd\[26921\]: warning: unknown\[185.143.72.34\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-07-12 07:39:45
111.229.4.186 attack
SSH Invalid Login
2020-07-12 07:37:02
128.199.129.68 attackbotsspam
Invalid user sunliang from 128.199.129.68 port 58130
2020-07-12 07:15:45
222.186.180.223 attackspambots
Jul 12 01:48:15 sshgateway sshd\[9625\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.223  user=root
Jul 12 01:48:17 sshgateway sshd\[9625\]: Failed password for root from 222.186.180.223 port 33012 ssh2
Jul 12 01:48:31 sshgateway sshd\[9625\]: error: maximum authentication attempts exceeded for root from 222.186.180.223 port 33012 ssh2 \[preauth\]
2020-07-12 07:49:20
114.255.222.198 attack
SSH Invalid Login
2020-07-12 07:42:58

Recently Reported IPs

112.80.136.181 112.80.136.197 112.8.41.166 112.80.136.203
112.8.220.28 112.80.136.218 112.80.136.212 112.80.136.202
112.80.136.210 112.80.136.211 112.80.136.234 112.80.136.213
112.80.136.229 112.80.136.45 112.80.136.236 112.80.136.243
112.80.136.79 112.80.136.81 112.80.136.83 112.80.137.103