City: unknown
Region: unknown
Country: China
Internet Service Provider: China Unicom
Hostname: unknown
Organization: unknown
Usage Type: unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '112.64.0.0 - 112.65.255.255'
% Abuse contact for '112.64.0.0 - 112.65.255.255' is 'zhaoyz3@chinaunicom.cn'
inetnum: 112.64.0.0 - 112.65.255.255
netname: UNICOM-SH
descr: CHINA UNICOM Shanghai network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: YR194-AP
abuse-c: AC1718-AP
status: ALLOCATED PORTABLE
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-SH
mnt-routes: MAINT-CNCGROUP-RR
mnt-irt: IRT-CU-CN
last-modified: 2025-01-22T13:19:36Z
source: APNIC
irt: IRT-CU-CN
address: No.21,Financial Street
address: Beijing,100033
address: P.R.China
e-mail: zhaoyz3@chinaunicom.cn
abuse-mailbox: zhaoyz3@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
auth: # Filtered
remarks: zhaoyz3@chinaunicom.cn is invalid
mnt-by: MAINT-CNCGROUP
last-modified: 2025-09-10T13:07:04Z
source: APNIC
role: ABUSE CUCN
country: ZZ
address: No.21,Financial Street
address: Beijing,100033
address: P.R.China
phone: +000000000
e-mail: zhaoyz3@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
nic-hdl: AC1718-AP
remarks: Generated from irt object IRT-CU-CN
remarks: zhaoyz3@chinaunicom.cn is invalid
abuse-mailbox: zhaoyz3@chinaunicom.cn
mnt-by: APNIC-ABUSE
last-modified: 2025-09-10T13:08:11Z
source: APNIC
person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: hqs-ipabuse@chinaunicom.cn
address: No.21,Jin-Rong Street
address: Beijing,100033
address: P.R.China
phone: +86-10-66259764
fax-no: +86-10-66259764
country: CN
mnt-by: MAINT-CNCGROUP
last-modified: 2017-08-17T06:13:16Z
source: APNIC
person: yanling ruan
nic-hdl: YR194-AP
e-mail: sh-ipmaster@chinaunicom.cn
address: No.900,Pudong Avenue,ShangHai,China
phone: +086-021-61201616
fax-no: +086-021-61201616
country: cn
mnt-by: MAINT-CNCGROUP-SH
last-modified: 2008-12-15T08:05:03Z
source: APNIC
% Information related to '112.64.0.0/15AS17621'
route: 112.64.0.0/15
descr: China Unicom CHINA169 Shanghai Province Network
descr: Addresses from APNIC
country: CN
origin: AS17621
mnt-by: MAINT-CNCGROUP-RR
last-modified: 2008-12-29T02:45:31Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.36-SNAPSHOT (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.65.212.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46278
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;112.65.212.48. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025091900 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 19 20:56:34 CST 2025
;; MSG SIZE rcvd: 106Host 48.212.65.112.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 48.212.65.112.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 217.17.240.59 | attack | 2020-09-13T16:55:16Z - RDP login failed multiple times. (217.17.240.59) |
2020-09-14 15:42:47 |
| 160.153.235.106 | attackspambots | Sep 14 00:56:15 pixelmemory sshd[2488519]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.153.235.106 Sep 14 00:56:15 pixelmemory sshd[2488519]: Invalid user admin from 160.153.235.106 port 43652 Sep 14 00:56:18 pixelmemory sshd[2488519]: Failed password for invalid user admin from 160.153.235.106 port 43652 ssh2 Sep 14 01:03:55 pixelmemory sshd[2495222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.153.235.106 user=root Sep 14 01:03:57 pixelmemory sshd[2495222]: Failed password for root from 160.153.235.106 port 57796 ssh2 ... |
2020-09-14 16:14:39 |
| 193.29.15.132 | attackspam | 2020-09-13 19:18:53.016041-0500 localhost screensharingd[16681]: Authentication: FAILED :: User Name: N/A :: Viewer Address: 193.29.15.132 :: Type: VNC DES |
2020-09-14 15:59:36 |
| 185.247.224.12 | attackbotsspam | Sep 14 01:15:51 vps46666688 sshd[29978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.247.224.12 Sep 14 01:15:53 vps46666688 sshd[29978]: Failed password for invalid user admin from 185.247.224.12 port 48002 ssh2 ... |
2020-09-14 16:01:42 |
| 200.194.31.243 | attackspam | Automatic report - Port Scan Attack |
2020-09-14 16:13:15 |
| 222.186.173.226 | attackbotsspam | 2020-09-14T10:48:58.454007afi-git.jinr.ru sshd[12408]: Failed password for root from 222.186.173.226 port 14672 ssh2 2020-09-14T10:49:01.332552afi-git.jinr.ru sshd[12408]: Failed password for root from 222.186.173.226 port 14672 ssh2 2020-09-14T10:49:04.620052afi-git.jinr.ru sshd[12408]: Failed password for root from 222.186.173.226 port 14672 ssh2 2020-09-14T10:49:04.620208afi-git.jinr.ru sshd[12408]: error: maximum authentication attempts exceeded for root from 222.186.173.226 port 14672 ssh2 [preauth] 2020-09-14T10:49:04.620222afi-git.jinr.ru sshd[12408]: Disconnecting: Too many authentication failures [preauth] ... |
2020-09-14 15:49:27 |
| 49.88.112.70 | attackbots | $f2bV_matches |
2020-09-14 16:11:30 |
| 89.248.168.217 | attackbotsspam | firewall-block, port(s): 6656/udp, 6886/udp, 8333/udp |
2020-09-14 16:03:20 |
| 222.186.42.57 | attackbots | Sep 14 08:07:36 email sshd\[13162\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.57 user=root Sep 14 08:07:37 email sshd\[13162\]: Failed password for root from 222.186.42.57 port 26614 ssh2 Sep 14 08:07:48 email sshd\[13194\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.57 user=root Sep 14 08:07:50 email sshd\[13194\]: Failed password for root from 222.186.42.57 port 50959 ssh2 Sep 14 08:08:27 email sshd\[13311\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.57 user=root ... |
2020-09-14 16:08:58 |
| 156.54.102.1 | attackspambots | Sep 14 04:01:56 vm0 sshd[13984]: Failed password for root from 156.54.102.1 port 34951 ssh2 Sep 14 08:02:11 vm0 sshd[17680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.54.102.1 ... |
2020-09-14 15:53:43 |
| 103.237.58.201 | attackbotsspam | Attempted Brute Force (dovecot) |
2020-09-14 15:48:54 |
| 185.164.138.21 | attackbots | Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-14T07:14:40Z and 2020-09-14T07:23:59Z |
2020-09-14 16:05:54 |
| 220.171.93.62 | attackspam | 2020-09-14T01:54:06.405348vps1033 sshd[31033]: Failed password for root from 220.171.93.62 port 54390 ssh2 2020-09-14T01:59:02.925852vps1033 sshd[8991]: Invalid user sylvestre from 220.171.93.62 port 37740 2020-09-14T01:59:02.929447vps1033 sshd[8991]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.171.93.62 2020-09-14T01:59:02.925852vps1033 sshd[8991]: Invalid user sylvestre from 220.171.93.62 port 37740 2020-09-14T01:59:04.682401vps1033 sshd[8991]: Failed password for invalid user sylvestre from 220.171.93.62 port 37740 ssh2 ... |
2020-09-14 16:04:17 |
| 61.177.172.142 | attackspam | 2020-09-14T09:44:51.630849ns386461 sshd\[4775\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.142 user=root 2020-09-14T09:44:54.194600ns386461 sshd\[4775\]: Failed password for root from 61.177.172.142 port 19596 ssh2 2020-09-14T09:44:57.554595ns386461 sshd\[4775\]: Failed password for root from 61.177.172.142 port 19596 ssh2 2020-09-14T09:45:00.996741ns386461 sshd\[4775\]: Failed password for root from 61.177.172.142 port 19596 ssh2 2020-09-14T09:45:04.654655ns386461 sshd\[4775\]: Failed password for root from 61.177.172.142 port 19596 ssh2 ... |
2020-09-14 15:45:36 |
| 186.90.177.238 | attack | 1600016080 - 09/13/2020 18:54:40 Host: 186.90.177.238/186.90.177.238 Port: 445 TCP Blocked |
2020-09-14 16:19:41 |