City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '113.136.0.0 - 113.143.255.255'
% Abuse contact for '113.136.0.0 - 113.143.255.255' is 'anti-spam@chinatelecom.cn'
inetnum: 113.136.0.0 - 113.143.255.255
netname: CHINANET-SN
descr: CHINANET SHAANXI PROVINCE NETWORK
descr: China Telecom
descr: No.56,gaoxin street
descr: Beijing 100032
country: CN
admin-c: XC9-AP
tech-c: XC9-AP
abuse-c: AC1573-AP
status: ALLOCATED PORTABLE
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-SHAANXI
mnt-routes: MAINT-CHINANET-SHAANXI
mnt-irt: IRT-CHINANET-CN
last-modified: 2021-06-15T08:06:14Z
source: APNIC
irt: IRT-CHINANET-CN
address: No.31 ,jingrong street,beijing
address: 100032
e-mail: anti-spam@chinatelecom.cn
abuse-mailbox: anti-spam@chinatelecom.cn
admin-c: CH93-AP
tech-c: CH93-AP
auth: # Filtered
remarks: anti-spam@chinatelecom.cn was validated on 2025-04-24
mnt-by: MAINT-CHINANET
last-modified: 2025-09-04T00:59:42Z
source: APNIC
role: ABUSE CHINANETCN
country: ZZ
address: No.31 ,jingrong street,beijing
address: 100032
phone: +000000000
e-mail: anti-spam@chinatelecom.cn
admin-c: CH93-AP
tech-c: CH93-AP
nic-hdl: AC1573-AP
remarks: Generated from irt object IRT-CHINANET-CN
remarks: anti-spam@chinatelecom.cn was validated on 2025-04-24
abuse-mailbox: anti-spam@chinatelecom.cn
mnt-by: APNIC-ABUSE
last-modified: 2025-04-24T03:21:54Z
source: APNIC
person: Xianghong Cao
address: Shanxi provice data communication Bureau
address: 185# zhuque Road
address: Xi'an city, Shanxi provice 710061
country: CN
phone: +8629-523-3633
fax-no: +8629-522-8093
e-mail: sxic@public.xa.sn.cn
nic-hdl: XC9-AP
mnt-by: MAINT-CHINANET
last-modified: 2017-03-17T01:44:04Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.36-SNAPSHOT (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 113.141.86.87
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32412
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;113.141.86.87. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025101701 1800 900 604800 86400
;; Query time: 39 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 18 11:30:36 CST 2025
;; MSG SIZE rcvd: 106Host 87.86.141.113.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 87.86.141.113.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 213.87.122.7 | attackspambots | Chat Spam |
2019-11-10 07:40:09 |
| 190.199.106.15 | attackspam | firewall-block, port(s): 23/tcp |
2019-11-10 07:43:25 |
| 202.29.56.202 | attackbotsspam | Nov 9 18:08:02 plusreed sshd[29909]: Invalid user info2 from 202.29.56.202 ... |
2019-11-10 07:14:14 |
| 34.90.24.81 | attack | Port scan |
2019-11-10 07:42:53 |
| 159.65.148.115 | attackbotsspam | Nov 9 19:54:04 OneL sshd\[25192\]: Invalid user NeXT from 159.65.148.115 port 59040 Nov 9 19:54:04 OneL sshd\[25192\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.148.115 Nov 9 19:54:06 OneL sshd\[25192\]: Failed password for invalid user NeXT from 159.65.148.115 port 59040 ssh2 Nov 9 19:59:01 OneL sshd\[25258\]: Invalid user 123456xg from 159.65.148.115 port 38984 Nov 9 19:59:01 OneL sshd\[25258\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.148.115 ... |
2019-11-10 07:11:23 |
| 14.139.62.139 | attackbots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/14.139.62.139/ IN - 1H : (64) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : IN NAME ASN : ASN55824 IP : 14.139.62.139 CIDR : 14.139.62.0/24 PREFIX COUNT : 191 UNIQUE IP COUNT : 72960 ATTACKS DETECTED ASN55824 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-11-09 17:10:33 INFO : Port MAX SCAN Scan Detected and Blocked by ADMIN - data recovery |
2019-11-10 07:26:11 |
| 202.157.176.95 | attackspambots | Nov 9 23:49:36 vps647732 sshd[27641]: Failed password for root from 202.157.176.95 port 55916 ssh2 Nov 9 23:54:51 vps647732 sshd[27700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.157.176.95 ... |
2019-11-10 07:23:43 |
| 49.88.112.71 | attackbots | 2019-11-09T23:07:22.452776shield sshd\[14749\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.71 user=root 2019-11-09T23:07:24.700784shield sshd\[14749\]: Failed password for root from 49.88.112.71 port 54884 ssh2 2019-11-09T23:07:27.133810shield sshd\[14749\]: Failed password for root from 49.88.112.71 port 54884 ssh2 2019-11-09T23:07:29.979070shield sshd\[14749\]: Failed password for root from 49.88.112.71 port 54884 ssh2 2019-11-09T23:07:50.102129shield sshd\[14780\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.71 user=root |
2019-11-10 07:17:28 |
| 202.169.62.187 | attackbots | SSH Brute Force, server-1 sshd[1011]: Failed password for root from 202.169.62.187 port 57314 ssh2 |
2019-11-10 07:41:16 |
| 80.26.35.18 | attack | Nov 9 06:59:12 hpm sshd\[2502\]: Invalid user ftpuserpass from 80.26.35.18 Nov 9 06:59:12 hpm sshd\[2502\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.red-80-26-35.staticip.rima-tde.net Nov 9 06:59:14 hpm sshd\[2502\]: Failed password for invalid user ftpuserpass from 80.26.35.18 port 57558 ssh2 Nov 9 07:03:15 hpm sshd\[2850\]: Invalid user passw0rd from 80.26.35.18 Nov 9 07:03:15 hpm sshd\[2850\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.red-80-26-35.staticip.rima-tde.net |
2019-11-10 07:30:22 |
| 192.145.239.47 | attack | www.fahrschule-mihm.de 192.145.239.47 \[09/Nov/2019:17:10:32 +0100\] "POST /wp-login.php HTTP/1.1" 200 5756 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" www.fahrschule-mihm.de 192.145.239.47 \[09/Nov/2019:17:10:34 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 4105 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-11-10 07:26:28 |
| 163.172.105.58 | attackspambots | Bruteforcing port 3389 (Remote Desktop) - Exceed maximum 10 attempts/hour |
2019-11-10 07:48:05 |
| 196.52.43.57 | attack | " " |
2019-11-10 07:11:52 |
| 112.197.0.125 | attack | Nov 9 19:32:35 vps647732 sshd[24918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.197.0.125 Nov 9 19:32:36 vps647732 sshd[24918]: Failed password for invalid user boot from 112.197.0.125 port 4135 ssh2 ... |
2019-11-10 07:22:14 |
| 182.19.211.134 | attackspam | MultiHost/MultiPort Probe, Scan, Hack - |
2019-11-10 07:43:49 |