City: unknown
Region: unknown
Country: China
Internet Service Provider: China Unicom
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 112.80.139.186 | attackbotsspam | Unauthorized connection attempt detected from IP address 112.80.139.186 to port 8118 [J] |
2020-03-02 16:46:43 |
| 112.80.139.72 | attackspam | The IP has triggered Cloudflare WAF. CF-Ray: 5430ed179f239666 | WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: ip.skk.moe | User-Agent: Mozilla/4.054101423 Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1) | CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-12 00:47:55 |
| 112.80.139.237 | attackspam | The IP has triggered Cloudflare WAF. CF-Ray: 5415a92e09326bf6 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: d.skk.moe | User-Agent: Mozilla/5.0 (Linux; U; Android 4.3; en-us; SM-N900T Build/JSS15J) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30 | CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-08 06:55:56 |
| 112.80.139.252 | attackspambots | The IP has triggered Cloudflare WAF. CF-Ray: 5413c84ba8846d04 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: ip.skk.moe | User-Agent: Mozilla/5.066704189 Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 Safari/537.36 | CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-08 02:00:28 |
| 112.80.139.3 | attack | The IP has triggered Cloudflare WAF. CF-Ray: 5410ce0509096bc6 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/5.084743666 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 | CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-08 00:41:24 |
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '112.80.0.0 - 112.87.255.255'
% Abuse contact for '112.80.0.0 - 112.87.255.255' is 'zhaoyz3@chinaunicom.cn'
inetnum: 112.80.0.0 - 112.87.255.255
netname: UNICOM-JS
descr: China Unicom Jiangsu province network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: LL58-AP
abuse-c: AC1718-AP
status: ALLOCATED PORTABLE
remarks: service provider
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-JS
mnt-routes: MAINT-CNCGROUP-RR
mnt-irt: IRT-CU-CN
last-modified: 2025-01-22T13:12:40Z
source: APNIC
irt: IRT-CU-CN
address: No.21,Financial Street
address: Beijing,100033
address: P.R.China
e-mail: zhaoyz3@chinaunicom.cn
abuse-mailbox: zhaoyz3@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
auth: # Filtered
remarks: zhaoyz3@chinaunicom.cn is invalid
mnt-by: MAINT-CNCGROUP
last-modified: 2025-10-03T06:12:01Z
source: APNIC
role: ABUSE CUCN
country: ZZ
address: No.21,Financial Street
address: Beijing,100033
address: P.R.China
phone: +000000000
e-mail: zhaoyz3@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
nic-hdl: AC1718-AP
remarks: Generated from irt object IRT-CU-CN
remarks: zhaoyz3@chinaunicom.cn is invalid
abuse-mailbox: zhaoyz3@chinaunicom.cn
mnt-by: APNIC-ABUSE
last-modified: 2025-09-10T13:08:11Z
source: APNIC
person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: hqs-ipabuse@chinaunicom.cn
address: No.21,Jin-Rong Street
address: Beijing,100033
address: P.R.China
phone: +86-10-66259764
fax-no: +86-10-66259764
country: CN
mnt-by: MAINT-CNCGROUP
last-modified: 2017-08-17T06:13:16Z
source: APNIC
person: Lan Li
nic-hdl: LL58-AP
e-mail: js-cu-ipmanage@chinaunicom.cn
address: No. 65 Beijing West Road,Nanjing,China
phone: +86257900060
fax-no: +86252900280
country: CN
mnt-by: MAINT-NEW
last-modified: 2013-08-15T02:13:11Z
source: APNIC
% Information related to '112.80.0.0/13AS4837'
route: 112.80.0.0/13
descr: China Unicom CHINA169 Jiangsu Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
last-modified: 2008-12-31T01:00:07Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.36-SNAPSHOT (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.80.139.230
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24325
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;112.80.139.230. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025100901 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 10 10:19:13 CST 2025
;; MSG SIZE rcvd: 107Host 230.139.80.112.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 230.139.80.112.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 101.95.162.58 | attack | prod6 ... |
2020-08-06 08:07:40 |
| 124.205.119.183 | attack | Aug 5 22:16:36 h2646465 sshd[23311]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.205.119.183 user=root Aug 5 22:16:38 h2646465 sshd[23311]: Failed password for root from 124.205.119.183 port 1228 ssh2 Aug 5 22:24:55 h2646465 sshd[24043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.205.119.183 user=root Aug 5 22:24:57 h2646465 sshd[24043]: Failed password for root from 124.205.119.183 port 2926 ssh2 Aug 5 22:29:11 h2646465 sshd[24643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.205.119.183 user=root Aug 5 22:29:13 h2646465 sshd[24643]: Failed password for root from 124.205.119.183 port 20680 ssh2 Aug 5 22:33:34 h2646465 sshd[25259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.205.119.183 user=root Aug 5 22:33:35 h2646465 sshd[25259]: Failed password for root from 124.205.119.183 port 11460 ssh2 Aug 5 22:37:5 |
2020-08-06 07:38:50 |
| 5.62.47.69 | attackbots | Brute forcing email accounts |
2020-08-06 07:51:57 |
| 50.236.62.30 | attackspambots | SSH brute-force attempt |
2020-08-06 07:36:58 |
| 95.85.30.24 | attackspambots | Aug 6 06:09:13 itv-usvr-01 sshd[3123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.30.24 user=root Aug 6 06:09:16 itv-usvr-01 sshd[3123]: Failed password for root from 95.85.30.24 port 54270 ssh2 Aug 6 06:13:29 itv-usvr-01 sshd[3392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.30.24 user=root Aug 6 06:13:31 itv-usvr-01 sshd[3392]: Failed password for root from 95.85.30.24 port 37270 ssh2 Aug 6 06:17:01 itv-usvr-01 sshd[3552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.30.24 user=root Aug 6 06:17:03 itv-usvr-01 sshd[3552]: Failed password for root from 95.85.30.24 port 48766 ssh2 |
2020-08-06 08:04:33 |
| 51.38.48.127 | attack | 2020-08-05T23:33:27.072614snf-827550 sshd[17529]: Failed password for root from 51.38.48.127 port 52452 ssh2 2020-08-05T23:37:40.987746snf-827550 sshd[17581]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=127.ip-51-38-48.eu user=root 2020-08-05T23:37:43.322473snf-827550 sshd[17581]: Failed password for root from 51.38.48.127 port 36134 ssh2 ... |
2020-08-06 07:43:51 |
| 127.0.0.1 | attackspambots | Test Connectivity |
2020-08-06 08:04:11 |
| 123.207.249.161 | attackbotsspam | SSH Brute Force |
2020-08-06 08:08:23 |
| 218.92.0.133 | attack | Aug 6 01:34:14 vpn01 sshd[23096]: Failed password for root from 218.92.0.133 port 52190 ssh2 Aug 6 01:34:17 vpn01 sshd[23096]: Failed password for root from 218.92.0.133 port 52190 ssh2 ... |
2020-08-06 07:34:46 |
| 142.93.34.237 | attackbotsspam | Aug 5 19:15:00 ws24vmsma01 sshd[64820]: Failed password for root from 142.93.34.237 port 44270 ssh2 ... |
2020-08-06 07:29:23 |
| 45.230.202.221 | attackspam | port 23 |
2020-08-06 07:45:03 |
| 212.64.95.187 | attackbotsspam | Aug 5 20:33:16 onepixel sshd[2168279]: Failed password for root from 212.64.95.187 port 54176 ssh2 Aug 5 20:35:22 onepixel sshd[2169474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.95.187 user=root Aug 5 20:35:24 onepixel sshd[2169474]: Failed password for root from 212.64.95.187 port 57802 ssh2 Aug 5 20:37:32 onepixel sshd[2170710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.95.187 user=root Aug 5 20:37:35 onepixel sshd[2170710]: Failed password for root from 212.64.95.187 port 33196 ssh2 |
2020-08-06 07:47:38 |
| 106.12.88.246 | attack | Aug 5 23:31:31 scw-6657dc sshd[29683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.88.246 user=root Aug 5 23:31:31 scw-6657dc sshd[29683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.88.246 user=root Aug 5 23:31:33 scw-6657dc sshd[29683]: Failed password for root from 106.12.88.246 port 49680 ssh2 ... |
2020-08-06 08:08:46 |
| 182.71.221.78 | attackbots | Aug 6 00:36:51 buvik sshd[11289]: Failed password for root from 182.71.221.78 port 40878 ssh2 Aug 6 00:41:05 buvik sshd[11953]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.71.221.78 user=root Aug 6 00:41:06 buvik sshd[11953]: Failed password for root from 182.71.221.78 port 48136 ssh2 ... |
2020-08-06 08:06:25 |
| 85.175.171.169 | attack | SSH Brute Force |
2020-08-06 07:54:46 |