Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Nanjing

Region: Jiangsu

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '112.80.0.0 - 112.87.255.255'

% Abuse contact for '112.80.0.0 - 112.87.255.255' is 'hqs-ipabuse@chinaunicom.cn'

inetnum:        112.80.0.0 - 112.87.255.255
netname:        UNICOM-JS
descr:          China Unicom Jiangsu province network
descr:          China Unicom
country:        CN
admin-c:        CH1302-AP
tech-c:         LL58-AP
abuse-c:        AC1718-AP
status:         ALLOCATED PORTABLE
remarks:        service provider
remarks:        --------------------------------------------------------
remarks:        To report network abuse, please contact mnt-irt
remarks:        For troubleshooting, please contact tech-c and admin-c
remarks:        Report invalid contact via www.apnic.net/invalidcontact
remarks:        --------------------------------------------------------
mnt-by:         APNIC-HM
mnt-lower:      MAINT-CNCGROUP-JS
mnt-routes:     MAINT-CNCGROUP-RR
mnt-irt:        IRT-CU-CN
last-modified:  2025-01-22T13:12:40Z
source:         APNIC

irt:            IRT-CU-CN
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
e-mail:         hqs-ipabuse@chinaunicom.cn
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
auth:           # Filtered
mnt-by:         MAINT-CNCGROUP
last-modified:  2026-08-04T00:39:34Z
source:         APNIC

role:           ABUSE CUCN
country:        ZZ
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
phone:          +000000000
e-mail:         hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
nic-hdl:        AC1718-AP
remarks:        Generated from irt object IRT-CU-CN
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
mnt-by:         APNIC-ABUSE
last-modified:  2026-08-04T00:39:32Z
source:         APNIC

person:         ChinaUnicom Hostmaster
nic-hdl:        CH1302-AP
e-mail:         hqs-ipabuse@chinaunicom.cn
address:        No.21,Jin-Rong Street
address:        Beijing,100033
address:        P.R.China
phone:          +86-10-66259764
fax-no:         +86-10-66259764
country:        CN
mnt-by:         MAINT-CNCGROUP
last-modified:  2017-08-17T06:13:16Z
source:         APNIC

person:         Lan Li
nic-hdl:        LL58-AP
e-mail:         js-cu-ipmanage@chinaunicom.cn
address:        No. 65 Beijing West Road,Nanjing,China
phone:          +86257900060
fax-no:         +86252900280
country:        CN
mnt-by:         MAINT-NEW
last-modified:  2013-08-15T02:13:11Z
source:         APNIC

% Information related to '112.80.0.0/13AS4837'

route:          112.80.0.0/13
descr:          China Unicom CHINA169 Jiangsu Province Network
country:        CN
origin:         AS4837
mnt-by:         MAINT-CNCGROUP-RR
last-modified:  2008-12-31T01:00:07Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.86.225.239
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32375
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.86.225.239.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026080400 1800 900 604800 86400

;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Aug 04 22:51:05 CST 2026
;; MSG SIZE  rcvd: 107
Host info
239.225.86.112.in-addr.arpa domain name pointer sogouspider-112-86-225-239.crawl.sogou.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
239.225.86.112.in-addr.arpa	name = sogouspider-112-86-225-239.crawl.sogou.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
190.195.13.138 attackbotsspam
Sep 27 23:11:48 saschabauer sshd[27725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.195.13.138
Sep 27 23:11:50 saschabauer sshd[27725]: Failed password for invalid user bariton from 190.195.13.138 port 33344 ssh2
2019-09-28 05:22:23
35.233.101.146 attack
Sep 27 23:08:00 v22019058497090703 sshd[11096]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.233.101.146
Sep 27 23:08:02 v22019058497090703 sshd[11096]: Failed password for invalid user qz from 35.233.101.146 port 54956 ssh2
Sep 27 23:11:56 v22019058497090703 sshd[11476]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.233.101.146
...
2019-09-28 05:16:57
222.186.175.212 attack
2019-09-25 15:30:15 -> 2019-09-27 09:07:55 : 50 login attempts (222.186.175.212)
2019-09-28 05:29:34
202.73.9.76 attackspambots
Sep 27 23:07:59 vps691689 sshd[27150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.73.9.76
Sep 27 23:08:01 vps691689 sshd[27150]: Failed password for invalid user 12345 from 202.73.9.76 port 43615 ssh2
Sep 27 23:11:53 vps691689 sshd[27242]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.73.9.76
...
2019-09-28 05:18:13
123.206.51.192 attack
Sep 27 21:06:19 hcbbdb sshd\[28682\]: Invalid user oracle from 123.206.51.192
Sep 27 21:06:19 hcbbdb sshd\[28682\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.51.192
Sep 27 21:06:22 hcbbdb sshd\[28682\]: Failed password for invalid user oracle from 123.206.51.192 port 34996 ssh2
Sep 27 21:10:53 hcbbdb sshd\[29202\]: Invalid user sinusbot from 123.206.51.192
Sep 27 21:10:54 hcbbdb sshd\[29202\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.51.192
2019-09-28 05:11:42
124.16.139.243 attack
Jul 31 10:53:03 vtv3 sshd\[9564\]: Invalid user nodeserver from 124.16.139.243 port 46074
Jul 31 10:53:03 vtv3 sshd\[9564\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.16.139.243
Jul 31 10:53:05 vtv3 sshd\[9564\]: Failed password for invalid user nodeserver from 124.16.139.243 port 46074 ssh2
Jul 31 10:55:32 vtv3 sshd\[11018\]: Invalid user login from 124.16.139.243 port 58490
Jul 31 10:55:32 vtv3 sshd\[11018\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.16.139.243
Jul 31 11:07:22 vtv3 sshd\[16712\]: Invalid user b1 from 124.16.139.243 port 35170
Jul 31 11:07:22 vtv3 sshd\[16712\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.16.139.243
Jul 31 11:07:24 vtv3 sshd\[16712\]: Failed password for invalid user b1 from 124.16.139.243 port 35170 ssh2
Jul 31 11:09:48 vtv3 sshd\[17641\]: Invalid user confluence from 124.16.139.243 port 47564
Jul 31 11:09:48 vtv3 sshd\
2019-09-28 05:06:27
103.121.17.35 attackspambots
Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:05:21.
2019-09-28 05:04:16
31.6.128.115 attackspam
REQUESTED PAGE: /wp-login.php
2019-09-28 05:21:05
27.106.45.6 attack
Sep 27 10:58:30 aiointranet sshd\[26823\]: Invalid user is from 27.106.45.6
Sep 27 10:58:30 aiointranet sshd\[26823\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.106.45.6
Sep 27 10:58:32 aiointranet sshd\[26823\]: Failed password for invalid user is from 27.106.45.6 port 41663 ssh2
Sep 27 11:02:56 aiointranet sshd\[27225\]: Invalid user felix from 27.106.45.6
Sep 27 11:02:56 aiointranet sshd\[27225\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.106.45.6
2019-09-28 05:10:00
40.112.255.39 attackbots
Sep 27 16:28:33 thevastnessof sshd[32286]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.112.255.39
...
2019-09-28 04:56:53
103.207.11.10 attackspam
Sep 27 17:10:41 plusreed sshd[23936]: Invalid user jordan from 103.207.11.10
...
2019-09-28 05:28:37
176.215.77.245 attackspambots
2019-09-28T04:11:41.858887enmeeting.mahidol.ac.th sshd\[13185\]: Invalid user oj from 176.215.77.245 port 50966
2019-09-28T04:11:41.874081enmeeting.mahidol.ac.th sshd\[13185\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.215.77.245
2019-09-28T04:11:43.655839enmeeting.mahidol.ac.th sshd\[13185\]: Failed password for invalid user oj from 176.215.77.245 port 50966 ssh2
...
2019-09-28 05:28:13
119.28.84.97 attack
Sep 27 21:11:49 lnxded63 sshd[23309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.84.97
2019-09-28 05:08:38
183.56.161.252 attackbotsspam
RDP Brute-Force (Grieskirchen RZ1)
2019-09-28 05:22:53
153.36.242.143 attack
Sep 27 23:12:06 MK-Soft-VM5 sshd[2643]: Failed password for root from 153.36.242.143 port 55006 ssh2
Sep 27 23:12:08 MK-Soft-VM5 sshd[2643]: Failed password for root from 153.36.242.143 port 55006 ssh2
...
2019-09-28 05:14:26

Recently Reported IPs

121.229.156.92 112.86.225.106 2606:4700:10::6816:1684 174.138.73.157
203.101.186.126 167.172.106.184 111.33.71.238 107.173.106.110
2606:4700:10::ac43:1672 4.184.238.149 34.175.6.83 2606:4700:10::6816:2970
35.203.210.200 204.76.203.12 51.210.110.78 51.210.110.182
2606:4700:10::6814:5475 91.196.152.120 2606:4700:10::6816:2223 109.167.82.85