This IP address has been reported a total of
15
times from
14 distinct
sources.
113.80.94.31 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 5
reports;
United States of America
with 5
reports;
Czechia
with 2
reports.
The most common categories in these recent reports were:
SSH
14
times;
Brute-Force
13
times;
Port Scan
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-04T11:20:36.382776-04:00 debianOptiplex sshd[2822486]: Invalid user user from 113.80.94.31 p ...
show more2026-10-04T11:20:36.382776-04:00 debianOptiplex sshd[2822486]: Invalid user user from 113.80.94.31 port 54010
2026-10-04T11:20:39.726373-04:00 debianOptiplex sshd[2822488]: Invalid user user from 113.80.94.31 port 54864
2026-10-04T11:20:44.021042-04:00 debianOptiplex sshd[2822492]: Invalid user user from 113.80.94.31 port 56316
2026-10-04T11:20:46.337627-04:00 debianOptiplex sshd[2822513]: Invalid user user from 113.80.94.31 port 56746
2026-10-04T11:20:50.359452-04:00 debianOptiplex sshd[2822516]: Invalid user user from 113.80.94.31 port 57414
...
show less
2026-10-04T13:43:22.289254+02:00 ubuntu sshd[1778408]: Invalid user user from 113.80.94.31 port 4203 ...
show more2026-10-04T13:43:22.289254+02:00 ubuntu sshd[1778408]: Invalid user user from 113.80.94.31 port 42030
2026-10-04T13:43:24.339923+02:00 ubuntu sshd[1778413]: Invalid user user from 113.80.94.31 port 42546
2026-10-04T13:43:26.219045+02:00 ubuntu sshd[1778438]: Invalid user user from 113.80.94.31 port 43078
2026-10-04T13:43:27.547416+02:00 ubuntu sshd[1778443]: Invalid user user from 113.80.94.31 port 43544
2026-10-04T13:43:28.737522+02:00 ubuntu sshd[1778593]: Invalid user user from 113.80.94.31 port 43902
2026-10-04T13:43:30.059099+02:00 ubuntu sshd[1778614]: Invalid user user from 113.80.94.31 port 44206
2026-10-04T13:43:32.018458+02:00 ubuntu sshd[1778619]: Invalid user user from 113.80.94.31 port 44528
...
show less
2026-10-03T23:27:04.445473-06:00 peterbilt sshd[1725021]: pam_unix(sshd:auth): authentication failur ...
show more2026-10-03T23:27:04.445473-06:00 peterbilt sshd[1725021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.80.94.31 user=root
2026-10-03T23:27:06.567398-06:00 peterbilt sshd[1725021]: Failed password for invalid user root from 113.80.94.31 port 56570 ssh2
2026-10-03T23:27:07.843672-06:00 peterbilt sshd[1725023]: User root from 113.80.94.31 not allowed because none of user's groups are listed in AllowGroups
...
show less
SSH Brute force: 175 attempts were recorded from 113.80.94.31
2026-10-04T03:06:58+02:00 Connection c ...
show moreSSH Brute force: 175 attempts were recorded from 113.80.94.31
2026-10-04T03:06:58+02:00 Connection closed by authenticating user root 113.80.94.31 port 41068 [preauth]
2026-10-04T03:07:02+02:00 Connection closed by authenticating user root 113.80.94.31 port 42214 [preauth]
2026-10-04T03:07:05+02:00 Connection closed by authenticating user root 113.80.94.31 port 43462 [preauth]
2026-10-04T03:07:09+02:00 Connection closed by authenticating user root 113.80.94.31 port 44550 [preauth]
2026-10-04T03:07:13+02:00 Connection closed by authenticating user root 113.80.94.31 port 45802 [preauth]
2026-10-04T03:07:16+02:00 Connection closed by authenticating user root 113.80.94.31 port 47204 [preauth]
2026-10-04T03:07:20+02:00 Connection closed by authenticating user root 113.80.94.31 port 48382 [preauth]
2026-10-04T03:07:24+02:00 Connection closed by authenticating user root 113.80.94.31 port 49724
show less
This IP was detected by CrowdSec triggering crowdsecurity/ssh-bf. Ip: 113.80.94.31 - ASN: 4134 (Chin ...
show moreThis IP was detected by CrowdSec triggering crowdsecurity/ssh-bf. Ip: 113.80.94.31 - ASN: 4134 (Chinanet) - Maliciousness Score is 50 %
show less
SSH
Brute-Force
Anonymous
Fail2ban (sshd jail): 2 failed SSH attempts from 113.80.94.31.
SSH Brute force: 138 attempts were recorded from 113.80.94.31
2026-10-02T01:36:46+02:00 Connection c ...
show moreSSH Brute force: 138 attempts were recorded from 113.80.94.31
2026-10-02T01:36:46+02:00 Connection closed by authenticating user root 113.80.94.31 port 47492 [preauth]
2026-10-02T01:36:51+02:00 Connection closed by authenticating user root 113.80.94.31 port 49706 [preauth]
2026-10-02T01:36:56+02:00 Connection closed by authenticating user root 113.80.94.31 port 51924 [preauth]
2026-10-02T01:37:00+02:00 Connection closed by authenticating user root 113.80.94.31 port 53822 [preauth]
2026-10-02T01:37:05+02:00 Connection closed by authenticating user root 113.80.94.31 port 56062 [preauth]
2026-10-02T01:37:10+02:00 Connection closed by authenticating user root 113.80.94.31 port 58084 [preauth]
2026-10-02T01:37:14+02:00 Connection closed by authenticating user root 113.80.94.31 port 60332 [preauth]
2026-10-02T01:37:19+02:00 Connection closed by authenticating user root 113.80.94.31 port 34198
show less
Brute-Force
SSH
Anonymous
denied SSH access attempt. destination port 22.
Port Scan
Brute-Force
SSH
Anonymous
Oct 2 01:29:16 qin sshd[1362203]: Failed password for [redacted] from 113.80.94.31 port 43662 ssh2
...
show moreOct 2 01:29:16 qin sshd[1362203]: Failed password for [redacted] from 113.80.94.31 port 43662 ssh2
Oct 2 01:29:20 qin sshd[1362278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.80.94.31 user=[redacted]
Oct 2 01:29:22 qin sshd[1362278]: Failed password for [redacted] from 113.80.94.31 port 46048 ssh2
Oct 2 01:29:25 qin sshd[1362282]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.80.94.31 user=[redacted]
Oct 2 01:29:28 qin sshd[1362282]: Failed password for [redacted] from 113.80.94.31 port 48698 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 15 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
