112.80.136.75 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
112.80.136.135	attackspam	Unauthorized connection attempt detected from IP address 112.80.136.135 to port 8088	2020-06-01 00:45:42
112.80.136.245	attack	Unauthorized connection attempt detected from IP address 112.80.136.245 to port 3389 [J]	2020-03-02 21:35:54
112.80.136.176	attack	Unauthorized connection attempt detected from IP address 112.80.136.176 to port 8081 [J]	2020-03-02 18:41:32
112.80.136.214	attackbotsspam	Unauthorized connection attempt detected from IP address 112.80.136.214 to port 9999 [T]	2020-01-10 09:22:18
112.80.136.219	attackspam	Unauthorized connection attempt detected from IP address 112.80.136.219 to port 8118	2020-01-02 21:21:29
112.80.136.25	attack	The IP has triggered Cloudflare WAF. CF-Ray: 543405f8ef3b6cfe \| WAF_Rule_ID: 1112824 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: blog.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 4.3; en-us; SM-N900T Build/JSS15J) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30 \| CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 03:33:44
112.80.136.8	attackspambots	The IP has triggered Cloudflare WAF. CF-Ray: 5415f75a7ae2288c \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.077692140 Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko \| CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 04:38:18

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.80.136.75
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24567
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.80.136.75.			IN	A

;; AUTHORITY SECTION:
.			192	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021202 1800 900 604800 86400

;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 13:33:13 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 75.136.80.112.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 75.136.80.112.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
110.49.71.246	attackspam	SSH invalid-user multiple login attempts	2020-10-04 12:13:55
122.51.86.120	attackspambots	Oct 4 02:46:51 OPSO sshd\[3575\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.86.120 user=root Oct 4 02:46:52 OPSO sshd\[3575\]: Failed password for root from 122.51.86.120 port 33334 ssh2 Oct 4 02:48:46 OPSO sshd\[3920\]: Invalid user gc from 122.51.86.120 port 36560 Oct 4 02:48:46 OPSO sshd\[3920\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.86.120 Oct 4 02:48:48 OPSO sshd\[3920\]: Failed password for invalid user gc from 122.51.86.120 port 36560 ssh2	2020-10-04 09:26:14
191.188.70.30	attackbotsspam	Oct 1 01:48:04 cumulus sshd[23947]: Invalid user mysql from 191.188.70.30 port 45734 Oct 1 01:48:04 cumulus sshd[23947]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.188.70.30 Oct 1 01:48:06 cumulus sshd[23947]: Failed password for invalid user mysql from 191.188.70.30 port 45734 ssh2 Oct 1 01:48:07 cumulus sshd[23947]: Received disconnect from 191.188.70.30 port 45734:11: Bye Bye [preauth] Oct 1 01:48:07 cumulus sshd[23947]: Disconnected from 191.188.70.30 port 45734 [preauth] Oct 1 01:58:22 cumulus sshd[24523]: Invalid user mysql from 191.188.70.30 port 44916 Oct 1 01:58:22 cumulus sshd[24523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.188.70.30 Oct 1 01:58:24 cumulus sshd[24523]: Failed password for invalid user mysql from 191.188.70.30 port 44916 ssh2 Oct 1 01:58:25 cumulus sshd[24523]: Received disconnect from 191.188.70.30 port 44916:11: Bye Bye [preauth] Oct ........ -------------------------------	2020-10-04 12:19:11
114.35.143.20	attackbotsspam	TCP (SYN) 114.35.143.20:18660 -> port 23, len 44	2020-10-04 09:26:43
196.43.196.30	attack	TCP (SYN) 196.43.196.30:52957 -> port 25244, len 44	2020-10-04 12:09:39
172.93.4.78	attackspam	Fail2Ban Ban Triggered	2020-10-04 12:26:21
103.6.143.110	attackspam	20 attempts against mh-misbehave-ban on leaf	2020-10-04 12:06:17
167.172.98.89	attackspambots	Oct 4 05:36:34 lnxweb61 sshd[8556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.98.89	2020-10-04 12:07:31
54.39.211.56	attackspambots	Lines containing failures of 54.39.211.56 Oct 3 22:26:48 v2hgb postfix/smtpd[26045]: connect from a.binkleyapples.com[54.39.211.56] Oct 3 22:26:48 v2hgb postfix/smtpd[26045]: Anonymous TLS connection established from a.binkleyapples.com[54.39.211.56]: TLSv1 whostnameh cipher ECDHE-RSA-AES256-SHA (256/256 bhostnames) Oct x@x Oct 3 22:26:49 v2hgb postfix/smtpd[26045]: disconnect from a.binkleyapples.com[54.39.211.56] ehlo=2 starttls=1 mail=1 rcpt=0/1 quhostname=1 commands=5/6 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=54.39.211.56	2020-10-04 12:12:24
207.204.110.66	attackbots	php WP PHPmyadamin ABUSE blocked for 12h	2020-10-04 12:33:22
61.177.172.104	attackbotsspam	Oct 4 01:01:31 vps46666688 sshd[5131]: Failed password for root from 61.177.172.104 port 39706 ssh2 Oct 4 01:01:44 vps46666688 sshd[5131]: error: maximum authentication attempts exceeded for root from 61.177.172.104 port 39706 ssh2 [preauth] ...	2020-10-04 12:11:58
213.32.78.219	attackbots	2020-10-04T02:41:36.125307mail.standpoint.com.ua sshd[25458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.32.78.219 2020-10-04T02:41:36.121974mail.standpoint.com.ua sshd[25458]: Invalid user dk from 213.32.78.219 port 51908 2020-10-04T02:41:38.151405mail.standpoint.com.ua sshd[25458]: Failed password for invalid user dk from 213.32.78.219 port 51908 ssh2 2020-10-04T02:44:56.448345mail.standpoint.com.ua sshd[25863]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.32.78.219 user=root 2020-10-04T02:44:58.930879mail.standpoint.com.ua sshd[25863]: Failed password for root from 213.32.78.219 port 58006 ssh2 ...	2020-10-04 12:25:15
51.178.51.152	attackbotsspam	Oct 4 00:07:10 localhost sshd\[28306\]: Invalid user arkserver from 51.178.51.152 Oct 4 00:07:10 localhost sshd\[28306\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.51.152 Oct 4 00:07:13 localhost sshd\[28306\]: Failed password for invalid user arkserver from 51.178.51.152 port 40714 ssh2 Oct 4 00:10:52 localhost sshd\[28587\]: Invalid user testuser2 from 51.178.51.152 Oct 4 00:10:53 localhost sshd\[28587\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.51.152 ...	2020-10-04 09:29:20
117.247.238.10	attack	SSH Invalid Login	2020-10-04 12:25:57
85.195.222.234	attackbots	SSH Invalid Login	2020-10-04 09:30:29

Recently Reported IPs

112.80.137.126	112.80.137.162	112.80.137.107	112.80.137.0
112.80.137.192	112.80.137.179	112.80.137.209	112.80.137.199
112.80.137.245	112.80.137.225	112.80.137.24	112.80.137.35
112.80.137.247	112.80.137.182	112.80.137.246	112.80.137.41
112.80.137.171	112.80.137.190	112.80.137.45	112.80.137.51