Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
112.80.139.186 attackbotsspam
Unauthorized connection attempt detected from IP address 112.80.139.186 to port 8118 [J]
2020-03-02 16:46:43
112.80.139.72 attackspam
The IP has triggered Cloudflare WAF. CF-Ray: 5430ed179f239666 | WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: ip.skk.moe | User-Agent: Mozilla/4.054101423 Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1) | CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-12 00:47:55
112.80.139.237 attackspam
The IP has triggered Cloudflare WAF. CF-Ray: 5415a92e09326bf6 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: d.skk.moe | User-Agent: Mozilla/5.0 (Linux; U; Android 4.3; en-us; SM-N900T Build/JSS15J) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30 | CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 06:55:56
112.80.139.252 attackspambots
The IP has triggered Cloudflare WAF. CF-Ray: 5413c84ba8846d04 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: ip.skk.moe | User-Agent: Mozilla/5.066704189 Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 Safari/537.36 | CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 02:00:28
112.80.139.3 attack
The IP has triggered Cloudflare WAF. CF-Ray: 5410ce0509096bc6 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/5.084743666 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 | CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 00:41:24
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.80.139.235
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21457
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.80.139.235.			IN	A

;; AUTHORITY SECTION:
.			124	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030700 1800 900 604800 86400

;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Mar 07 22:57:53 CST 2022
;; MSG SIZE  rcvd: 107
Host info
Host 235.139.80.112.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 235.139.80.112.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
41.225.16.156 attackspam
Aug 17 13:50:37 sip sshd[2869]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.225.16.156
Aug 17 13:50:39 sip sshd[2869]: Failed password for invalid user sss from 41.225.16.156 port 38846 ssh2
Aug 17 14:05:06 sip sshd[6638]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.225.16.156
2020-08-17 22:15:53
187.5.3.56 attackspam
SSH Brute Force
2020-08-17 22:12:16
218.92.0.148 attack
Aug 17 15:49:29 theomazars sshd[18602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.148  user=root
Aug 17 15:49:31 theomazars sshd[18602]: Failed password for root from 218.92.0.148 port 34598 ssh2
2020-08-17 22:00:56
14.29.80.126 attackspambots
2020-08-17 07:02:39.218883-0500  localhost sshd[66797]: Failed password for root from 14.29.80.126 port 43296 ssh2
2020-08-17 22:18:49
134.175.130.52 attackbots
Aug 17 11:59:37 rush sshd[31454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.130.52
Aug 17 11:59:40 rush sshd[31454]: Failed password for invalid user var from 134.175.130.52 port 40138 ssh2
Aug 17 12:04:58 rush sshd[31589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.130.52
...
2020-08-17 22:27:18
144.34.170.117 attackbots
Aug 17 08:05:13 Host-KEWR-E sshd[3363]: Disconnected from invalid user crh 144.34.170.117 port 49380 [preauth]
...
2020-08-17 22:10:06
189.63.21.166 attackspam
2020-08-17T14:06:34.410319shield sshd\[9757\]: Invalid user spider from 189.63.21.166 port 52786
2020-08-17T14:06:34.421147shield sshd\[9757\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.63.21.166
2020-08-17T14:06:36.477917shield sshd\[9757\]: Failed password for invalid user spider from 189.63.21.166 port 52786 ssh2
2020-08-17T14:12:19.966767shield sshd\[10497\]: Invalid user mysql from 189.63.21.166 port 44930
2020-08-17T14:12:19.978920shield sshd\[10497\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.63.21.166
2020-08-17 22:19:39
51.254.36.178 attackspambots
Auto Fail2Ban report, multiple SSH login attempts.
2020-08-17 22:37:02
178.184.121.223 attackspam
/ucp.php?mode=register&sid=7a88117083f7ed5a3b2fe5067ed08f8f
2020-08-17 22:33:34
45.115.62.131 attack
Aug 17 06:20:24 mockhub sshd[32718]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.115.62.131
Aug 17 06:20:26 mockhub sshd[32718]: Failed password for invalid user btc from 45.115.62.131 port 18082 ssh2
...
2020-08-17 22:04:53
60.186.36.19 attack
Aug 17 13:47:41 extapp sshd[828]: Invalid user admin from 60.186.36.19
Aug 17 13:47:43 extapp sshd[828]: Failed password for invalid user admin from 60.186.36.19 port 58543 ssh2
Aug 17 13:47:56 extapp sshd[833]: Invalid user admin from 60.186.36.19


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=60.186.36.19
2020-08-17 22:31:24
113.7.231.182 attackspam
(ftpd) Failed FTP login from 113.7.231.182 (CN/China/-): 10 in the last 3600 secs
2020-08-17 22:28:17
152.136.108.226 attackbotsspam
Aug 17 13:57:33 havingfunrightnow sshd[24570]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.108.226 
Aug 17 13:57:35 havingfunrightnow sshd[24570]: Failed password for invalid user lance from 152.136.108.226 port 46774 ssh2
Aug 17 14:05:18 havingfunrightnow sshd[24979]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.108.226 
...
2020-08-17 22:03:14
109.232.109.58 attackbots
Aug 17 13:59:04 vps647732 sshd[24489]: Failed password for root from 109.232.109.58 port 55418 ssh2
...
2020-08-17 22:00:09
134.209.176.160 attackspam
Bruteforce detected by fail2ban
2020-08-17 21:58:56

Recently Reported IPs

112.80.139.23 112.80.139.241 112.80.139.243 112.80.139.244
112.80.139.245 112.80.139.251 112.85.211.54 112.85.22.181
112.85.22.3 112.85.23.173 112.85.23.52 112.85.64.99
112.85.65.107 112.85.65.202 112.85.65.210 112.85.65.55
112.86.159.176 112.86.159.2 228.49.103.214 112.86.179.135