112.80.139.88 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
112.80.139.186	attackbotsspam	Unauthorized connection attempt detected from IP address 112.80.139.186 to port 8118 [J]	2020-03-02 16:46:43
112.80.139.72	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 5430ed179f239666 \| WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: ip.skk.moe \| User-Agent: Mozilla/4.054101423 Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1) \| CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 00:47:55
112.80.139.237	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 5415a92e09326bf6 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: d.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 4.3; en-us; SM-N900T Build/JSS15J) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30 \| CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:55:56
112.80.139.252	attackspambots	The IP has triggered Cloudflare WAF. CF-Ray: 5413c84ba8846d04 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: ip.skk.moe \| User-Agent: Mozilla/5.066704189 Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 Safari/537.36 \| CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 02:00:28
112.80.139.3	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5410ce0509096bc6 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.084743666 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 \| CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 00:41:24

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.80.139.88
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35914
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.80.139.88.			IN	A

;; AUTHORITY SECTION:
.			425	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022000 1800 900 604800 86400

;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 21 00:19:56 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 88.139.80.112.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 88.139.80.112.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
213.142.151.192	attackbotsspam	2020-02-12T04:59:25.880828beta postfix/smtpd[16876]: NOQUEUE: reject: RCPT from unknown[213.142.151.192]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [213.142.151.192]; from= to= proto=ESMTP helo= 2020-02-12T05:09:26.608028beta postfix/smtpd[17118]: NOQUEUE: reject: RCPT from unknown[213.142.151.192]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [213.142.151.192]; from= to= proto=ESMTP helo= 2020-02-12T05:19:27.741178beta postfix/smtpd[17279]: NOQUEUE: reject: RCPT from unknown[213.142.151.192]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [213.142.151.192]; from= to= proto=ESMTP helo= ...	2020-02-12 16:12:42
51.91.212.80	attack	11 Feb 2020 06:22:43 SRC=51.91.212.80 DPT=443 09:03:59 SRC=51.91.212.80 DPT=993 11:02:14 SRC=51.91.212.80 DPT=9998 14:02:22 SRC=51.91.212.80 DPT=8081 15:11:42 SRC=51.91.212.80 DPT=444 15:27:07 SRC=51.91.212.80 DPT=4433 17:32:44 SRC=51.91.212.80 DPT=8881 17:56:31 SRC=51.91.212.80 DPT=8881 18:18:55 SRC=51.91.212.80 DPT=8443 20:07:15 SRC=51.91.212.80 DPT=6443 20:18:45 SRC=51.91.212.80 DPT=6443 23:49:06 SRC=51.91.212.80 DPT=465 23:52:38 SRC=51.91.212.80 DPT=465	2020-02-12 16:15:26
90.79.154.39	attack	Feb 11 18:55:39 web1 sshd\[10246\]: Invalid user pi from 90.79.154.39 Feb 11 18:55:39 web1 sshd\[10247\]: Invalid user pi from 90.79.154.39 Feb 11 18:55:39 web1 sshd\[10246\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=90.79.154.39 Feb 11 18:55:39 web1 sshd\[10247\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=90.79.154.39 Feb 11 18:55:41 web1 sshd\[10246\]: Failed password for invalid user pi from 90.79.154.39 port 49348 ssh2 Feb 11 18:55:41 web1 sshd\[10247\]: Failed password for invalid user pi from 90.79.154.39 port 49346 ssh2	2020-02-12 15:41:58
122.51.251.224	attack	Feb 12 05:55:06 serwer sshd\[27111\]: Invalid user ivan from 122.51.251.224 port 48246 Feb 12 05:55:06 serwer sshd\[27111\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.251.224 Feb 12 05:55:07 serwer sshd\[27111\]: Failed password for invalid user ivan from 122.51.251.224 port 48246 ssh2 ...	2020-02-12 16:07:21
156.96.119.18	attackbotsspam	Brute forcing email accounts	2020-02-12 16:10:49
185.156.73.49	attackbots	Feb 12 08:30:27 debian-2gb-nbg1-2 kernel: \[3751857.864158\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.156.73.49 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=43794 PROTO=TCP SPT=53993 DPT=13389 WINDOW=1024 RES=0x00 SYN URGP=0	2020-02-12 15:37:05
123.25.43.128	attackspambots	Attempt to attack host OS, exploiting network vulnerabilities, on 12-02-2020 04:55:10.	2020-02-12 16:06:15
222.186.30.35	attackspam	SSH auth scanning - multiple failed logins	2020-02-12 15:46:46
119.29.247.187	attackbots	Feb 12 07:17:04 lnxmysql61 sshd[20828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.247.187	2020-02-12 15:43:05
218.92.0.173	attackspambots	pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.173 user=root Failed password for root from 218.92.0.173 port 48149 ssh2 Failed password for root from 218.92.0.173 port 48149 ssh2 Failed password for root from 218.92.0.173 port 48149 ssh2 Failed password for root from 218.92.0.173 port 48149 ssh2	2020-02-12 16:09:30
182.176.95.184	attackspambots	detected by Fail2Ban	2020-02-12 15:44:04
162.246.107.56	attackbotsspam	Feb 12 06:26:37 [host] sshd[13083]: Invalid user s Feb 12 06:26:37 [host] sshd[13083]: pam_unix(sshd: Feb 12 06:26:39 [host] sshd[13083]: Failed passwor	2020-02-12 15:54:41
175.208.70.30	attackspam	" "	2020-02-12 15:57:24
82.207.73.168	attackspambots	1581483311 - 02/12/2020 05:55:11 Host: 82.207.73.168/82.207.73.168 Port: 445 TCP Blocked	2020-02-12 16:05:23
156.96.63.238	attack	[2020-02-12 02:45:59] NOTICE[1148][C-0000845a] chan_sip.c: Call from '' (156.96.63.238:60391) to extension '000048221530247' rejected because extension not found in context 'public'. [2020-02-12 02:45:59] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-02-12T02:45:59.513-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="000048221530247",SessionID="0x7fd82c2348d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/156.96.63.238/60391",ACLName="no_extension_match" [2020-02-12 02:46:37] NOTICE[1148][C-0000845d] chan_sip.c: Call from '' (156.96.63.238:60598) to extension '0048221530247' rejected because extension not found in context 'public'. [2020-02-12 02:46:37] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-02-12T02:46:37.088-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="0048221530247",SessionID="0x7fd82c2348d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/15 ...	2020-02-12 15:57:48

Recently Reported IPs

112.80.139.43	112.80.139.95	112.80.41.196	112.81.126.70
112.81.137.159	112.82.231.176	112.83.19.95	112.84.186.243
112.84.186.248	112.84.227.119	112.85.116.165	112.85.12.247
112.85.22.218	34.91.147.212	112.85.22.230	112.85.64.222
112.85.65.255	112.86.217.134	112.87.99.246	112.91.153.85