203.80.2.138 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Hong Kong

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
203.80.21.38	attack	870. On Jul 16 2020 experienced a Brute Force SSH login attempt -> 2 unique times by 203.80.21.38.	2020-07-17 07:52:36
203.80.21.38	attackspambots	Fail2Ban	2020-06-30 00:23:16
203.80.21.38	attack	Jun 28 14:04:08 scw-6657dc sshd[21154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.80.21.38 user=root Jun 28 14:04:08 scw-6657dc sshd[21154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.80.21.38 user=root Jun 28 14:04:09 scw-6657dc sshd[21154]: Failed password for root from 203.80.21.38 port 39508 ssh2 ...	2020-06-28 22:48:56
203.80.244.154	attackspam	Automatic report - Port Scan Attack	2019-10-07 20:18:40

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 203.80.2.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2026
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;203.80.2.138.			IN	A

;; AUTHORITY SECTION:
.			228	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 19 00:48:32 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 138.2.80.203.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 138.2.80.203.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
110.229.221.89	attackspam	$f2bV_matches	2020-10-08 06:09:58
149.56.0.110	attackspambots	C1,DEF GET /w00tw00t.at.ISC.SANS.DFind:)	2020-10-08 06:05:49
222.90.93.109	attack	Lines containing failures of 222.90.93.109 Oct 6 09:34:57 kmh-vmh-003-fsn07 sshd[30943]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.90.93.109 user=r.r Oct 6 09:35:00 kmh-vmh-003-fsn07 sshd[30943]: Failed password for r.r from 222.90.93.109 port 37480 ssh2 Oct 6 09:35:01 kmh-vmh-003-fsn07 sshd[30943]: Received disconnect from 222.90.93.109 port 37480:11: Bye Bye [preauth] Oct 6 09:35:01 kmh-vmh-003-fsn07 sshd[30943]: Disconnected from authenticating user r.r 222.90.93.109 port 37480 [preauth] Oct 6 09:40:00 kmh-vmh-003-fsn07 sshd[31680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.90.93.109 user=r.r Oct 6 09:40:02 kmh-vmh-003-fsn07 sshd[31680]: Failed password for r.r from 222.90.93.109 port 34944 ssh2 Oct 6 09:40:03 kmh-vmh-003-fsn07 sshd[31680]: Received disconnect from 222.90.93.109 port 34944:11: Bye Bye [preauth] Oct 6 09:40:03 kmh-vmh-003-fsn07 sshd[31680]: Dis........ ------------------------------	2020-10-08 05:59:44
36.110.42.163	attackbots	Port Scan ...	2020-10-08 06:07:09
180.76.181.152	attack	$f2bV_matches	2020-10-08 06:00:28
103.207.7.222	attackbotsspam	Autoban 103.207.7.222 AUTH/CONNECT	2020-10-08 06:14:27
119.96.86.193	attackbotsspam	TCP (SYN) 119.96.86.193:59567 -> port 23, len 44	2020-10-08 06:01:09
65.52.228.155	attackspam	Icarus honeypot on github	2020-10-08 06:13:51
138.197.66.68	attackbotsspam	$f2bV_matches	2020-10-08 05:54:27
165.232.35.209	attackbotsspam	hzb4 165.232.35.209 [07/Oct/2020:09:46:33 "-" "POST /wp-login.php 200 1970 165.232.35.209 [07/Oct/2020:17:02:06 "-" "GET /wp-login.php 200 3011 165.232.35.209 [07/Oct/2020:17:02:08 "-" "POST /wp-login.php 200 3843	2020-10-08 06:11:31
116.228.233.91	attackspam	SSH brutforce	2020-10-08 06:03:38
14.143.190.178	attackspam	20/10/6@16:43:54: FAIL: Alarm-Network address from=14.143.190.178 20/10/6@16:43:54: FAIL: Alarm-Network address from=14.143.190.178 ...	2020-10-08 05:44:19
193.24.202.155	attackbotsspam	(smtpauth) Failed SMTP AUTH login from 193.24.202.155 (PL/Poland/193-24-202-155.susi.pl): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-10-07 19:53:17 plain authenticator failed for ([193.24.202.155]) [193.24.202.155]: 535 Incorrect authentication data (set_id=info)	2020-10-08 06:08:16
185.234.216.64	attackbots	2020-10-07T15:13:14.779358linuxbox-skyline auth[38979]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=scan rhost=185.234.216.64 ...	2020-10-08 06:00:06
91.201.246.83	attackspam	1602017035 - 10/06/2020 22:43:55 Host: 91.201.246.83/91.201.246.83 Port: 445 TCP Blocked	2020-10-08 05:43:47

Recently Reported IPs

203.80.2.83	203.8.128.199	203.8.222.102	203.81.218.200
203.79.20.7	203.80.58.8	203.80.170.91	203.81.240.173
203.81.242.122	203.81.22.43	203.81.84.138	203.82.37.18
203.81.242.23	203.81.88.219	203.81.91.100	203.82.24.114
203.82.43.234	203.82.45.52	203.82.46.187	203.82.48.218