112.80.138.231

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
112.80.138.90	attack	Unauthorized connection attempt detected from IP address 112.80.138.90 to port 1022 [T]	2020-05-20 10:22:53
112.80.138.255	attackbots	Unauthorized connection attempt detected from IP address 112.80.138.255 to port 3389 [J]	2020-03-02 21:35:30
112.80.138.109	attackspam	Unauthorized connection attempt detected from IP address 112.80.138.109 to port 80 [J]	2020-01-19 14:19:47
112.80.138.223	attackbots	Unauthorized connection attempt detected from IP address 112.80.138.223 to port 2095	2019-12-31 08:57:15

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.80.138.231
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40205
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.80.138.231.			IN	A

;; AUTHORITY SECTION:
.			514	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021301 1800 900 604800 86400

;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 14 06:39:52 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 231.138.80.112.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 231.138.80.112.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
187.0.211.99	attackbotsspam	Nov 11 13:28:59 vps01 sshd[21139]: Failed password for root from 187.0.211.99 port 38518 ssh2	2019-11-11 20:52:10
190.40.157.78	attackbotsspam	2019-11-11T09:26:28.999842abusebot-3.cloudsearch.cf sshd\[23402\]: Invalid user yoyo from 190.40.157.78 port 51034	2019-11-11 20:30:16
36.83.96.46	attackbots	Attempt to attack host OS, exploiting network vulnerabilities, on 11-11-2019 06:20:44.	2019-11-11 20:59:32
106.13.44.83	attackbots	Nov 11 12:16:55 hcbbdb sshd\[31267\]: Invalid user kik from 106.13.44.83 Nov 11 12:16:55 hcbbdb sshd\[31267\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.44.83 Nov 11 12:16:57 hcbbdb sshd\[31267\]: Failed password for invalid user kik from 106.13.44.83 port 35096 ssh2 Nov 11 12:21:48 hcbbdb sshd\[31820\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.44.83 user=root Nov 11 12:21:50 hcbbdb sshd\[31820\]: Failed password for root from 106.13.44.83 port 43306 ssh2	2019-11-11 20:38:28
128.199.200.225	attackbotsspam	xmlrpc attack	2019-11-11 20:33:07
223.223.147.76	attackbots	Attempt to attack host OS, exploiting network vulnerabilities, on 11-11-2019 06:20:42.	2019-11-11 21:02:07
125.89.255.2	attack	2019-11-11T10:16:23.555941centos sshd\[463\]: Invalid user alv from 125.89.255.2 port 47290 2019-11-11T10:16:23.563039centos sshd\[463\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.89.255.2 2019-11-11T10:16:25.801292centos sshd\[463\]: Failed password for invalid user alv from 125.89.255.2 port 47290 ssh2	2019-11-11 20:52:57
52.35.136.194	attackbotsspam	11/11/2019-13:36:02.775380 52.35.136.194 Protocol: 6 SURICATA TLS invalid record/traffic	2019-11-11 20:46:15
116.104.123.135	attack	Nov 11 07:21:32 dev sshd\[31377\]: Invalid user admin from 116.104.123.135 port 58976 Nov 11 07:21:32 dev sshd\[31377\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.104.123.135 Nov 11 07:21:34 dev sshd\[31377\]: Failed password for invalid user admin from 116.104.123.135 port 58976 ssh2	2019-11-11 20:26:20
82.209.229.231	attackspambots	failed_logins	2019-11-11 20:42:26
69.162.68.54	attackspam	leo_www	2019-11-11 20:26:54
223.205.244.163	attack	Attempt to attack host OS, exploiting network vulnerabilities, on 11-11-2019 06:20:42.	2019-11-11 21:02:43
185.162.235.107	attackspambots	Nov 11 13:37:19 mail postfix/smtpd[3336]: warning: unknown[185.162.235.107]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 11 13:41:27 mail postfix/smtpd[6727]: warning: unknown[185.162.235.107]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 11 13:41:31 mail postfix/smtpd[4764]: warning: unknown[185.162.235.107]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2019-11-11 20:50:02
185.53.88.33	attack	\[2019-11-11 07:33:36\] NOTICE\[2601\] chan_sip.c: Registration from '"301" \' failed for '185.53.88.33:5555' - Wrong password \[2019-11-11 07:33:36\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-11T07:33:36.047-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="301",SessionID="0x7fdf2cd1cd48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.33/5555",Challenge="252dd832",ReceivedChallenge="252dd832",ReceivedHash="5c05f295ff87283d7723ca45ab771680" \[2019-11-11 07:33:36\] NOTICE\[2601\] chan_sip.c: Registration from '"301" \' failed for '185.53.88.33:5555' - Wrong password \[2019-11-11 07:33:36\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-11T07:33:36.168-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="301",SessionID="0x7fdf2c665838",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.	2019-11-11 20:54:51
14.225.17.9	attack	Nov 11 04:23:25 Tower sshd[44109]: Connection from 14.225.17.9 port 42538 on 192.168.10.220 port 22 Nov 11 04:23:27 Tower sshd[44109]: Invalid user rowie from 14.225.17.9 port 42538 Nov 11 04:23:27 Tower sshd[44109]: error: Could not get shadow information for NOUSER Nov 11 04:23:27 Tower sshd[44109]: Failed password for invalid user rowie from 14.225.17.9 port 42538 ssh2 Nov 11 04:23:27 Tower sshd[44109]: Received disconnect from 14.225.17.9 port 42538:11: Bye Bye [preauth] Nov 11 04:23:27 Tower sshd[44109]: Disconnected from invalid user rowie 14.225.17.9 port 42538 [preauth]	2019-11-11 20:36:38

Recently Reported IPs

112.80.138.170	112.80.138.235	112.80.138.240	112.80.138.242
112.80.138.3	112.80.138.50	112.80.138.66	112.80.138.92
112.80.139.104	112.80.139.107	112.80.139.148	112.80.139.154
112.80.139.164	112.80.139.17	112.80.139.191	112.80.139.203
112.80.139.225	112.80.139.124	112.80.139.234	112.80.139.247