112.80.137.246

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
112.80.137.153	attackspambots	Web Server Scan. RayID: 590c5cc7ee296e42, UA: Mozilla/4.049897920 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729), Country: CN	2020-05-21 04:11:37
112.80.137.72	attack	Unauthorized connection attempt detected from IP address 112.80.137.72 to port 22 [J]	2020-03-02 19:32:51
112.80.137.30	attackspam	Unauthorized connection attempt detected from IP address 112.80.137.30 to port 9991 [T]	2020-01-27 15:42:09
112.80.137.97	attackbotsspam	Unauthorized connection attempt detected from IP address 112.80.137.97 to port 8081 [T]	2020-01-10 08:56:25
112.80.137.144	attack	CN_APNIC-HM_<177>1578575004 [1:2013053:1] ET WEB_SERVER PyCurl Suspicious User Agent Inbound [Classification: Attempted Information Leak] [Priority: 2]: {TCP} 112.80.137.144:59730	2020-01-10 03:04:32
112.80.137.119	attackspam	Unauthorized connection attempt detected from IP address 112.80.137.119 to port 3128	2019-12-31 08:08:24
112.80.137.14	attackbots	HTTP/80/443 Probe, BF, WP, Hack -	2019-12-26 05:16:33
112.80.137.34	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 54101e30ae016e18 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: theme-suka.skk.moe \| User-Agent: Mozilla/5.051975669 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 \| CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:43:04
112.80.137.117	attack	The IP has triggered Cloudflare WAF. CF-Ray: 54147ae5dbc76bb4 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: d.skk.moe \| User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Mobile Safari/537.36 \| CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:04:43
112.80.137.189	attackspambots	The IP has triggered Cloudflare WAF. CF-Ray: 541570716d3c9641 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: d.skk.moe \| User-Agent: Mozilla/5.062334851 Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 \| CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 05:07:54
112.80.137.13	attackbots	The IP has triggered Cloudflare WAF. CF-Ray: 541062388e246c56 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: d.skk.moe \| User-Agent: Mozilla/5.051975669 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 \| CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 03:17:30
112.80.137.39	attackbotsspam	The IP has triggered Cloudflare WAF. CF-Ray: 54104ef0f857ed47 \| WAF_Rule_ID: 1025440 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: blog.skk.moe \| User-Agent: Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1 \| CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 01:34:56

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.80.137.246
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52859
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.80.137.246.			IN	A

;; AUTHORITY SECTION:
.			583	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021202 1800 900 604800 86400

;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 13:33:20 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 246.137.80.112.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 246.137.80.112.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
90.150.87.199	attackbots	Dec 6 16:08:22 flomail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=90.150.87.199, lip=10.140.194.78, TLS, session= Dec 6 16:16:21 flomail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=90.150.87.199, lip=10.140.194.78, TLS: Disconnected, session=	2019-12-07 03:07:13
138.197.5.191	attackspam	----- report ----- Dec 6 11:42:44 sshd: Connection from 138.197.5.191 port 37622 Dec 6 11:42:44 sshd: Invalid user uftp1 from 138.197.5.191 Dec 6 11:42:44 sshd: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.5.191 Dec 6 11:42:46 sshd: Failed password for invalid user uftp1 from 138.197.5.191 port 37622 ssh2 Dec 6 11:42:46 sshd: Received disconnect from 138.197.5.191: 11: Bye Bye [preauth] Dec 6 11:48:42 sshd: Connection from 138.197.5.191 port 46594 Dec 6 11:48:42 sshd: Invalid user root12346 from 138.197.5.191 Dec 6 11:48:42 sshd: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.5.191 Dec 6 11:48:44 sshd: Failed password for invalid user root12346 from 138.197.5.191 port 46594 ssh2 Dec 6 11:48:44 sshd: Received disconnect from 138.197.5.191: 11: Bye Bye [preauth]	2019-12-07 02:56:23
13.68.175.90	attackspam	SSH bruteforce	2019-12-07 03:13:52
186.107.160.181	attack	Seq 2995002506	2019-12-07 03:17:45
185.200.118.38	attack	Unauthorized connection attempt from IP address 185.200.118.38 on Port 3389(RDP)	2019-12-07 02:43:26
103.126.100.179	attackspambots	Dec 6 15:40:40 srv01 sshd[2339]: Invalid user cacti from 103.126.100.179 port 45414 Dec 6 15:40:40 srv01 sshd[2339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.126.100.179 Dec 6 15:40:40 srv01 sshd[2339]: Invalid user cacti from 103.126.100.179 port 45414 Dec 6 15:40:43 srv01 sshd[2339]: Failed password for invalid user cacti from 103.126.100.179 port 45414 ssh2 Dec 6 15:47:45 srv01 sshd[2840]: Invalid user hyte from 103.126.100.179 port 55152 ...	2019-12-07 02:57:17
112.85.42.171	attackspambots	Dec 6 15:46:09 firewall sshd[15744]: Failed password for root from 112.85.42.171 port 41864 ssh2 Dec 6 15:46:23 firewall sshd[15744]: error: maximum authentication attempts exceeded for root from 112.85.42.171 port 41864 ssh2 [preauth] Dec 6 15:46:23 firewall sshd[15744]: Disconnecting: Too many authentication failures [preauth] ...	2019-12-07 02:47:05
144.217.161.78	attackbotsspam	2019-12-06T16:52:51.538633abusebot-3.cloudsearch.cf sshd\[1940\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.ip-144-217-161.net user=root	2019-12-07 03:10:30
94.153.212.60	attackspambots	2019-12-06T15:47:38.306223abusebot-3.cloudsearch.cf sshd\[1501\]: Invalid user ts3 from 94.153.212.60 port 52144	2019-12-07 02:58:31
128.199.162.108	attack	2019-12-06T15:56:37.370424abusebot-8.cloudsearch.cf sshd\[16901\]: Invalid user passwd124 from 128.199.162.108 port 35468	2019-12-07 02:46:30
185.232.67.5	attackbotsspam	Dec 6 19:33:10 dedicated sshd[18864]: Invalid user admin from 185.232.67.5 port 58684	2019-12-07 03:01:14
114.67.79.2	attackspambots	Triggered by Fail2Ban at Vostok web server	2019-12-07 03:09:18
59.145.221.103	attack	Dec 6 19:26:05 vps691689 sshd[19600]: Failed password for root from 59.145.221.103 port 33870 ssh2 Dec 6 19:33:40 vps691689 sshd[19799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.145.221.103 ...	2019-12-07 02:50:09
77.31.235.151	attackspambots	77.31.235.151 - - \[06/Dec/2019:15:47:34 +0100\] "POST /wp-login.php HTTP/1.0" 200 4404 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 77.31.235.151 - - \[06/Dec/2019:15:47:36 +0100\] "POST /wp-login.php HTTP/1.0" 200 4236 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 77.31.235.151 - - \[06/Dec/2019:15:47:38 +0100\] "POST /wp-login.php HTTP/1.0" 200 4240 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2019-12-07 02:58:53
129.204.50.75	attack	Nov 17 15:48:29 vtv3 sshd[23997]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.50.75 Nov 17 15:48:31 vtv3 sshd[23997]: Failed password for invalid user graveline from 129.204.50.75 port 50224 ssh2 Nov 17 15:53:34 vtv3 sshd[25223]: Invalid user takuji from 129.204.50.75 port 57558 Nov 17 15:53:34 vtv3 sshd[25223]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.50.75 Nov 17 16:03:39 vtv3 sshd[27720]: Invalid user stacy from 129.204.50.75 port 44002 Nov 17 16:03:39 vtv3 sshd[27720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.50.75 Nov 17 16:03:41 vtv3 sshd[27720]: Failed password for invalid user stacy from 129.204.50.75 port 44002 ssh2 Nov 17 16:08:57 vtv3 sshd[28996]: Invalid user bbbbb from 129.204.50.75 port 51352 Nov 17 16:08:57 vtv3 sshd[28996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.50.75 Nov 17 16:	2019-12-07 02:55:43

Recently Reported IPs

112.80.137.182	112.80.137.41	112.80.137.171	112.80.137.190
112.80.137.45	112.80.137.51	112.80.137.60	112.80.137.48
112.80.137.54	112.80.137.86	112.80.138.103	112.80.138.105
112.80.137.69	112.80.138.130	112.80.137.78	112.80.138.141
112.80.138.138	112.80.138.117	112.80.138.151	112.80.138.191