Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
112.80.137.153 attackspambots
Web Server Scan. RayID: 590c5cc7ee296e42, UA: Mozilla/4.049897920 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729), Country: CN
2020-05-21 04:11:37
112.80.137.72 attack
Unauthorized connection attempt detected from IP address 112.80.137.72 to port 22 [J]
2020-03-02 19:32:51
112.80.137.30 attackspam
Unauthorized connection attempt detected from IP address 112.80.137.30 to port 9991 [T]
2020-01-27 15:42:09
112.80.137.97 attackbotsspam
Unauthorized connection attempt detected from IP address 112.80.137.97 to port 8081 [T]
2020-01-10 08:56:25
112.80.137.144 attack
CN_APNIC-HM_<177>1578575004 [1:2013053:1] ET WEB_SERVER PyCurl Suspicious User Agent Inbound [Classification: Attempted Information Leak] [Priority: 2]:  {TCP} 112.80.137.144:59730
2020-01-10 03:04:32
112.80.137.119 attackspam
Unauthorized connection attempt detected from IP address 112.80.137.119 to port 3128
2019-12-31 08:08:24
112.80.137.14 attackbots
HTTP/80/443 Probe, BF, WP, Hack -
2019-12-26 05:16:33
112.80.137.34 attackspam
The IP has triggered Cloudflare WAF. CF-Ray: 54101e30ae016e18 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: theme-suka.skk.moe | User-Agent: Mozilla/5.051975669 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 | CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 06:43:04
112.80.137.117 attack
The IP has triggered Cloudflare WAF. CF-Ray: 54147ae5dbc76bb4 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: d.skk.moe | User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Mobile Safari/537.36 | CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 06:04:43
112.80.137.189 attackspambots
The IP has triggered Cloudflare WAF. CF-Ray: 541570716d3c9641 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: d.skk.moe | User-Agent: Mozilla/5.062334851 Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 | CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 05:07:54
112.80.137.13 attackbots
The IP has triggered Cloudflare WAF. CF-Ray: 541062388e246c56 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: d.skk.moe | User-Agent: Mozilla/5.051975669 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 | CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 03:17:30
112.80.137.39 attackbotsspam
The IP has triggered Cloudflare WAF. CF-Ray: 54104ef0f857ed47 | WAF_Rule_ID: 1025440 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: blog.skk.moe | User-Agent: Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1 | CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 01:34:56
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.80.137.35
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16114
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.80.137.35.			IN	A

;; AUTHORITY SECTION:
.			148	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021202 1800 900 604800 86400

;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 13:33:20 CST 2022
;; MSG SIZE  rcvd: 106
Host info
Host 35.137.80.112.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 35.137.80.112.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
27.254.130.67 attack
SSH Brute-Force attacks
2020-03-09 20:08:56
121.101.134.181 attack
Honeypot attack, port: 445, PTR: ip-181.134.101.terabit.net.id.
2020-03-09 20:32:13
167.56.140.237 attackspambots
Scan detected and blocked 2020.03.09 13:31:47
2020-03-09 20:42:56
121.69.135.162 attack
$f2bV_matches
2020-03-09 20:00:53
208.117.222.117 attackbots
DATE:2020-03-09 04:41:19, IP:208.117.222.117, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)
2020-03-09 20:02:15
34.68.174.128 attack
Automatic report - XMLRPC Attack
2020-03-09 20:26:31
104.244.76.189 attackbots
Mar  9 05:33:58 UTC__SANYALnet-Labs__lste sshd[27744]: Connection from 104.244.76.189 port 36598 on 192.168.1.10 port 22
Mar  9 05:33:59 UTC__SANYALnet-Labs__lste sshd[27744]: Invalid user admin from 104.244.76.189 port 36598
Mar  9 05:33:59 UTC__SANYALnet-Labs__lste sshd[27744]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.76.189
Mar  9 05:34:02 UTC__SANYALnet-Labs__lste sshd[27744]: Failed password for invalid user admin from 104.244.76.189 port 36598 ssh2
Mar  9 05:34:02 UTC__SANYALnet-Labs__lste sshd[27744]: Connection closed by 104.244.76.189 port 36598 [preauth]
Mar  9 05:34:48 UTC__SANYALnet-Labs__lste sshd[27906]: Connection from 104.244.76.189 port 56474 on 192.168.1.10 port 22
Mar  9 05:34:49 UTC__SANYALnet-Labs__lste sshd[27906]: Invalid user openelec from 104.244.76.189 port 56474
Mar  9 05:34:49 UTC__SANYALnet-Labs__lste sshd[27906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh........
-------------------------------
2020-03-09 20:25:09
185.94.111.1 attackspam
03/09/2020-08:24:31.694742 185.94.111.1 Protocol: 17 GPL RPC portmap listing UDP 111
2020-03-09 20:29:28
159.89.176.184 attackspambots
Lines containing failures of 159.89.176.184
Mar  9 04:45:15 shared05 sshd[8555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.176.184  user=r.r
Mar  9 04:45:18 shared05 sshd[8555]: Failed password for r.r from 159.89.176.184 port 45556 ssh2
Mar  9 04:45:18 shared05 sshd[8555]: Received disconnect from 159.89.176.184 port 45556:11: Bye Bye [preauth]
Mar  9 04:45:18 shared05 sshd[8555]: Disconnected from authenticating user r.r 159.89.176.184 port 45556 [preauth]
Mar  9 04:45:50 shared05 sshd[8678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.176.184  user=r.r


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=159.89.176.184
2020-03-09 20:16:50
197.251.195.97 attack
Mar  9 00:43:38 ws22vmsma01 sshd[69306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.251.195.97
Mar  9 00:43:40 ws22vmsma01 sshd[69306]: Failed password for invalid user admin from 197.251.195.97 port 58320 ssh2
...
2020-03-09 20:30:06
125.161.106.13 attackbots
Unauthorized connection attempt from IP address 125.161.106.13 on Port 445(SMB)
2020-03-09 20:40:23
46.101.43.224 attack
Mar  9 13:04:42 vmd17057 sshd[16599]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.43.224 
Mar  9 13:04:43 vmd17057 sshd[16599]: Failed password for invalid user weizeding from 46.101.43.224 port 41787 ssh2
...
2020-03-09 20:09:59
101.71.51.192 attackbotsspam
Mar  9 08:15:31 server sshd\[4368\]: Failed password for root from 101.71.51.192 port 43109 ssh2
Mar  9 14:37:02 server sshd\[11643\]: Invalid user vsftpd from 101.71.51.192
Mar  9 14:37:02 server sshd\[11643\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.71.51.192 
Mar  9 14:37:04 server sshd\[11643\]: Failed password for invalid user vsftpd from 101.71.51.192 port 46208 ssh2
Mar  9 14:51:37 server sshd\[14850\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.71.51.192  user=root
...
2020-03-09 20:19:37
5.202.104.45 attack
Port probing on unauthorized port 5555
2020-03-09 20:03:37
198.144.149.228 attackspambots
2020-03-08 22:43:49 H=(vv2.vvsedm.info) [198.144.149.228]:48074 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.2) (https://www.spamhaus.org/sbl/query/SBL464347)
2020-03-08 22:43:49 H=(vv2.vvsedm.info) [198.144.149.228]:48074 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.2) (https://www.spamhaus.org/sbl/query/SBL464347)
2020-03-08 22:43:49 H=(vv2.vvsedm.info) [198.144.149.228]:48074 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.2) (https://www.spamhaus.org/sbl/query/SBL464347)
...
2020-03-09 20:22:46

Recently Reported IPs

112.80.137.24 112.80.137.247 112.80.137.182 112.80.137.246
112.80.137.41 112.80.137.171 112.80.137.190 112.80.137.45
112.80.137.51 112.80.137.60 112.80.137.48 112.80.137.54
112.80.137.86 112.80.138.103 112.80.138.105 112.80.137.69
112.80.138.130 112.80.137.78 112.80.138.141 112.80.138.138