113.120.143.80

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
113.120.143.179	attack	Lines containing failures of 113.120.143.179 Jun 9 07:57:47 neweola postfix/smtpd[18694]: connect from unknown[113.120.143.179] Jun 9 07:57:50 neweola postfix/smtpd[18694]: NOQUEUE: reject: RCPT from unknown[113.120.143.179]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from=x@x helo= Jun 9 07:57:50 neweola postfix/smtpd[18694]: lost connection after RCPT from unknown[113.120.143.179] Jun 9 07:57:50 neweola postfix/smtpd[18694]: disconnect from unknown[113.120.143.179] ehlo=1 mail=1 rcpt=0/1 commands=2/3 Jun 9 07:57:51 neweola postfix/smtpd[18694]: connect from unknown[113.120.143.179] Jun 9 07:57:53 neweola postfix/smtpd[18694]: lost connection after AUTH from unknown[113.120.143.179] Jun 9 07:57:53 neweola postfix/smtpd[18694]: disconnect from unknown[113.120.143.179] ehlo=1 auth=0/1 commands=1/2 Jun 9 07:57:54 neweola postfix/smtpd[18694]: connect from unknown[113.120.143.179] Jun 9 07:57:57 neweola postfix/smtpd[18694]: lost conn........ ------------------------------	2020-06-10 01:22:36
113.120.143.42	attackbots	$f2bV_matches	2020-05-20 00:59:28

Type

Details

Datetime

113.120.143.179

attack

Lines containing failures of 113.120.143.179
Jun  9 07:57:47 neweola postfix/smtpd[18694]: connect from unknown[113.120.143.179]
Jun  9 07:57:50 neweola postfix/smtpd[18694]: NOQUEUE: reject: RCPT from unknown[113.120.143.179]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from=x@x helo=
Jun  9 07:57:50 neweola postfix/smtpd[18694]: lost connection after RCPT from unknown[113.120.143.179]
Jun  9 07:57:50 neweola postfix/smtpd[18694]: disconnect from unknown[113.120.143.179] ehlo=1 mail=1 rcpt=0/1 commands=2/3
Jun  9 07:57:51 neweola postfix/smtpd[18694]: connect from unknown[113.120.143.179]
Jun  9 07:57:53 neweola postfix/smtpd[18694]: lost connection after AUTH from unknown[113.120.143.179]
Jun  9 07:57:53 neweola postfix/smtpd[18694]: disconnect from unknown[113.120.143.179] ehlo=1 auth=0/1 commands=1/2
Jun  9 07:57:54 neweola postfix/smtpd[18694]: connect from unknown[113.120.143.179]
Jun  9 07:57:57 neweola postfix/smtpd[18694]: lost conn........
------------------------------

2020-06-10 01:22:36

113.120.143.42

attackbots

$f2bV_matches

2020-05-20 00:59:28

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 113.120.143.80
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51129
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;113.120.143.80.			IN	A

;; AUTHORITY SECTION:
.			523	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030302 1800 900 604800 86400

;; Query time: 28 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 12:23:23 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 80.143.120.113.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 80.143.120.113.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
125.212.233.50	attackspambots	SSH Invalid Login	2020-07-25 05:56:40
149.202.56.228	attackspam	Jul 24 18:57:07 ws12vmsma01 sshd[36254]: Invalid user test from 149.202.56.228 Jul 24 18:57:09 ws12vmsma01 sshd[36254]: Failed password for invalid user test from 149.202.56.228 port 47978 ssh2 Jul 24 19:01:01 ws12vmsma01 sshd[36849]: Invalid user le from 149.202.56.228 ...	2020-07-25 06:03:57
106.12.68.197	attackspam	Invalid user sdtdserver from 106.12.68.197 port 49068	2020-07-25 05:27:00
47.74.54.116	attackspam	24.07.2020 15:43:03 - RDP Login Fail Detected by https://www.elinox.de/RDP-Wächter	2020-07-25 05:51:17
109.193.84.31	attackspambots	Brute-force attempt banned	2020-07-25 05:30:49
51.178.138.1	attackspambots	2020-07-25T00:13:43.593041snf-827550 sshd[18503]: Invalid user lzhang from 51.178.138.1 port 46518 2020-07-25T00:13:44.914484snf-827550 sshd[18503]: Failed password for invalid user lzhang from 51.178.138.1 port 46518 ssh2 2020-07-25T00:21:27.333981snf-827550 sshd[18557]: Invalid user version from 51.178.138.1 port 39626 ...	2020-07-25 05:42:26
218.92.0.247	attackbots	2020-07-25T00:29:18.150305afi-git.jinr.ru sshd[2460]: Failed password for root from 218.92.0.247 port 30599 ssh2 2020-07-25T00:29:21.526278afi-git.jinr.ru sshd[2460]: Failed password for root from 218.92.0.247 port 30599 ssh2 2020-07-25T00:29:24.645126afi-git.jinr.ru sshd[2460]: Failed password for root from 218.92.0.247 port 30599 ssh2 2020-07-25T00:29:24.645274afi-git.jinr.ru sshd[2460]: error: maximum authentication attempts exceeded for root from 218.92.0.247 port 30599 ssh2 [preauth] 2020-07-25T00:29:24.645287afi-git.jinr.ru sshd[2460]: Disconnecting: Too many authentication failures [preauth] ...	2020-07-25 05:41:02
37.200.18.150	attack	Port Scan detected from 37.200.18.150 (NO/Norway/150.18.200.37.customer.cdi.no). 5 hits in the last 45 seconds	2020-07-25 05:29:53
193.122.163.81	attackspambots	SSH Invalid Login	2020-07-25 05:56:00
185.147.215.8	attackspam	[2020-07-24 17:57:25] NOTICE[1277] chan_sip.c: Registration from '' failed for '185.147.215.8:54561' - Wrong password [2020-07-24 17:57:25] SECURITY[1295] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-07-24T17:57:25.625-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9106",SessionID="0x7f1754694fe8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.8/54561",Challenge="6f33974a",ReceivedChallenge="6f33974a",ReceivedHash="84faf1b8d49b8d067d7f6ce3c3cc11fa" [2020-07-24 17:57:54] NOTICE[1277] chan_sip.c: Registration from '' failed for '185.147.215.8:64944' - Wrong password [2020-07-24 17:57:54] SECURITY[1295] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-07-24T17:57:54.522-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2278",SessionID="0x7f17545b1d48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.8 ...	2020-07-25 06:02:28
187.147.214.220	attack	Honeypot attack, port: 445, PTR: dsl-187-147-214-220-dyn.prod-infinitum.com.mx.	2020-07-25 05:34:05
59.47.229.130	attackspambots	Jul 24 17:32:18 vpn01 sshd[11147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.47.229.130 Jul 24 17:32:20 vpn01 sshd[11147]: Failed password for invalid user usuario from 59.47.229.130 port 16685 ssh2 ...	2020-07-25 05:25:21
59.152.237.118	attackbots	Invalid user lager from 59.152.237.118 port 55962	2020-07-25 05:47:09
193.228.108.122	attack	SSH Invalid Login	2020-07-25 05:48:29
186.64.122.183	attackbotsspam	Invalid user james from 186.64.122.183 port 46244	2020-07-25 05:40:11

Recently Reported IPs

110.77.221.130	110.77.221.14	110.77.221.142	110.77.221.146
110.77.221.136	110.77.221.144	110.77.221.134	110.77.221.148
110.77.221.150	110.77.221.152	110.77.221.141	110.77.229.25
110.77.228.35	113.120.143.83	113.120.143.84	113.120.143.86
110.77.235.107	110.77.235.76	110.77.235.80	110.77.240.92