Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Nanjing

Region: Jiangsu

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '112.80.0.0 - 112.87.255.255'

% Abuse contact for '112.80.0.0 - 112.87.255.255' is 'hqs-ipabuse@chinaunicom.cn'

inetnum:        112.80.0.0 - 112.87.255.255
netname:        UNICOM-JS
descr:          China Unicom Jiangsu province network
descr:          China Unicom
country:        CN
admin-c:        CH1302-AP
tech-c:         LL58-AP
abuse-c:        AC1718-AP
status:         ALLOCATED PORTABLE
remarks:        service provider
remarks:        --------------------------------------------------------
remarks:        To report network abuse, please contact mnt-irt
remarks:        For troubleshooting, please contact tech-c and admin-c
remarks:        Report invalid contact via www.apnic.net/invalidcontact
remarks:        --------------------------------------------------------
mnt-by:         APNIC-HM
mnt-lower:      MAINT-CNCGROUP-JS
mnt-routes:     MAINT-CNCGROUP-RR
mnt-irt:        IRT-CU-CN
last-modified:  2025-01-22T13:12:40Z
source:         APNIC

irt:            IRT-CU-CN
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
e-mail:         hqs-ipabuse@chinaunicom.cn
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
auth:           # Filtered
mnt-by:         MAINT-CNCGROUP
last-modified:  2026-08-04T00:39:34Z
source:         APNIC

role:           ABUSE CUCN
country:        ZZ
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
phone:          +000000000
e-mail:         hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
nic-hdl:        AC1718-AP
remarks:        Generated from irt object IRT-CU-CN
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
mnt-by:         APNIC-ABUSE
last-modified:  2026-08-04T00:39:32Z
source:         APNIC

person:         ChinaUnicom Hostmaster
nic-hdl:        CH1302-AP
e-mail:         hqs-ipabuse@chinaunicom.cn
address:        No.21,Jin-Rong Street
address:        Beijing,100033
address:        P.R.China
phone:          +86-10-66259764
fax-no:         +86-10-66259764
country:        CN
mnt-by:         MAINT-CNCGROUP
last-modified:  2017-08-17T06:13:16Z
source:         APNIC

person:         Lan Li
nic-hdl:        LL58-AP
e-mail:         js-cu-ipmanage@chinaunicom.cn
address:        No. 65 Beijing West Road,Nanjing,China
phone:          +86257900060
fax-no:         +86252900280
country:        CN
mnt-by:         MAINT-NEW
last-modified:  2013-08-15T02:13:11Z
source:         APNIC

% Information related to '112.80.0.0/13AS4837'

route:          112.80.0.0/13
descr:          China Unicom CHINA169 Jiangsu Province Network
country:        CN
origin:         AS4837
mnt-by:         MAINT-CNCGROUP-RR
last-modified:  2008-12-31T01:00:07Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.86.225.38
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54267
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.86.225.38.			IN	A

;; AUTHORITY SECTION:
.			29	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026081402 1800 900 604800 86400

;; Query time: 5 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Aug 15 05:03:16 CST 2026
;; MSG SIZE  rcvd: 106
Host info
38.225.86.112.in-addr.arpa domain name pointer sogouspider-112-86-225-38.crawl.sogou.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
38.225.86.112.in-addr.arpa	name = sogouspider-112-86-225-38.crawl.sogou.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
218.92.0.212 attackbots
Jun 18 19:18:18 mail sshd[9496]: Failed password for root from 218.92.0.212 port 8959 ssh2
Jun 18 19:18:22 mail sshd[9496]: Failed password for root from 218.92.0.212 port 8959 ssh2
...
2020-06-20 23:07:05
183.80.89.40 attackbots
port scan and connect, tcp 23 (telnet)
2020-06-20 23:19:45
167.99.194.54 attack
2020-06-20T15:25:43+0200 Failed SSH Authentication/Brute Force Attack. (Server 9)
2020-06-20 23:10:59
106.12.87.149 attackbots
Jun 20 06:15:01 dignus sshd[15429]: Failed password for invalid user gsm from 106.12.87.149 port 45180 ssh2
Jun 20 06:19:14 dignus sshd[15757]: Invalid user macky from 106.12.87.149 port 40626
Jun 20 06:19:14 dignus sshd[15757]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.87.149
Jun 20 06:19:16 dignus sshd[15757]: Failed password for invalid user macky from 106.12.87.149 port 40626 ssh2
Jun 20 06:23:10 dignus sshd[16070]: Invalid user owen from 106.12.87.149 port 36062
...
2020-06-20 23:38:04
187.11.124.60 attackspam
Jun 20 17:02:21 vpn01 sshd[20834]: Failed password for root from 187.11.124.60 port 40626 ssh2
Jun 20 17:07:13 vpn01 sshd[20962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.11.124.60
...
2020-06-20 23:28:27
212.70.149.34 attack
2020-06-20 18:20:50 dovecot_login authenticator failed for \(User\) \[212.70.149.34\]: 535 Incorrect authentication data \(set_id=uh@org.ua\)2020-06-20 18:21:26 dovecot_login authenticator failed for \(User\) \[212.70.149.34\]: 535 Incorrect authentication data \(set_id=plm@org.ua\)2020-06-20 18:22:01 dovecot_login authenticator failed for \(User\) \[212.70.149.34\]: 535 Incorrect authentication data \(set_id=aster@org.ua\)
...
2020-06-20 23:35:23
223.240.109.231 attack
2020-06-20T13:58:44.437181shield sshd\[24869\]: Invalid user www from 223.240.109.231 port 38065
2020-06-20T13:58:44.440650shield sshd\[24869\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.240.109.231
2020-06-20T13:58:46.493400shield sshd\[24869\]: Failed password for invalid user www from 223.240.109.231 port 38065 ssh2
2020-06-20T14:03:25.257909shield sshd\[25634\]: Invalid user peru from 223.240.109.231 port 34736
2020-06-20T14:03:25.261499shield sshd\[25634\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.240.109.231
2020-06-20 23:32:57
122.238.159.122 attackbots
20/6/20@08:17:31: FAIL: Alarm-Intrusion address from=122.238.159.122
...
2020-06-20 23:23:12
74.82.47.42 attackbots
 UDP 74.82.47.42:63976 -> port 19, len 29
2020-06-20 23:16:10
185.220.101.173 attackbotsspam
handyreparatur-fulda.de:80 185.220.101.173 - - [20/Jun/2020:14:16:57 +0200] "POST /xmlrpc.php HTTP/1.0" 301 521 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.92 Safari/537.36"
www.handydirektreparatur.de 185.220.101.173 [20/Jun/2020:14:16:58 +0200] "POST /xmlrpc.php HTTP/1.0" 200 3595 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.92 Safari/537.36"
2020-06-20 23:46:15
218.92.0.219 attackspam
06/20/2020-11:36:05.121514 218.92.0.219 Protocol: 6 ET SCAN Potential SSH Scan
2020-06-20 23:48:55
217.32.243.5 attackbots
1592655417 - 06/20/2020 14:16:57 Host: 217.32.243.5/217.32.243.5 Port: 445 TCP Blocked
2020-06-20 23:47:24
101.32.1.249 attackbots
Jun 19 06:22:57 mail sshd[10271]: Failed password for root from 101.32.1.249 port 36620 ssh2
...
2020-06-20 23:18:25
193.112.219.176 attackbots
Jun 20 14:30:11 *** sshd[7884]: Invalid user debian from 193.112.219.176
2020-06-20 23:08:26
51.15.214.21 attackbotsspam
Jun 20 16:22:07 jane sshd[23125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.214.21 
Jun 20 16:22:10 jane sshd[23125]: Failed password for invalid user asshole from 51.15.214.21 port 51498 ssh2
...
2020-06-20 23:20:16

Recently Reported IPs

64.225.34.157 50.116.44.33 39.100.78.176 34.38.254.144
206.189.218.232 178.128.13.184 159.65.69.149 142.93.200.173
2606:4700:10::6816:2279 121.230.89.165 2606:4700:10::6814:8435 201.241.100.154
112.86.225.191 223.109.252.250 20.79.222.117 212.64.199.194
223.109.252.184 121.229.156.116 20.226.61.190 14.103.10.167