City: Xi’an
Region: Shaanxi
Country: China
Internet Service Provider: China Unicom
Hostname: unknown
Organization: unknown
Usage Type: unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '113.200.0.0 - 113.201.255.255'
% Abuse contact for '113.200.0.0 - 113.201.255.255' is 'hqs-ipabuse@chinaunicom.cn'
inetnum: 113.200.0.0 - 113.201.255.255
netname: CNCGROUP-SN
descr: China Unicom Shannxi Province Network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: CH679-AP
abuse-c: AC1718-AP
status: ALLOCATED PORTABLE
remarks: service provider
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-SN
mnt-routes: MAINT-CNCGROUP-RR
mnt-irt: IRT-CU-CN
last-modified: 2025-01-22T13:11:41Z
source: APNIC
irt: IRT-CU-CN
address: No.21,Financial Street
address: Beijing,100033
address: P.R.China
e-mail: hqs-ipabuse@chinaunicom.cn
abuse-mailbox: hqs-ipabuse@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
auth: # Filtered
remarks: hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
mnt-by: MAINT-CNCGROUP
last-modified: 2026-08-19T00:57:22Z
source: APNIC
role: ABUSE CUCN
country: ZZ
address: No.21,Financial Street
address: Beijing,100033
address: P.R.China
phone: +000000000
e-mail: hqs-ipabuse@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
nic-hdl: AC1718-AP
remarks: Generated from irt object IRT-CU-CN
remarks: hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
abuse-mailbox: hqs-ipabuse@chinaunicom.cn
mnt-by: APNIC-ABUSE
last-modified: 2026-08-20T03:22:23Z
source: APNIC
person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: hqs-ipabuse@chinaunicom.cn
address: No.21,Jin-Rong Street
address: Beijing,100033
address: P.R.China
phone: +86-10-66259764
fax-no: +86-10-66259764
country: CN
mnt-by: MAINT-CNCGROUP
last-modified: 2017-08-17T06:13:16Z
source: APNIC
person: CNCGroup-SN Hostmaster
nic-hdl: CH679-AP
e-mail: quyj@china-netcom.com
address: China Network Communication ,SVT
address: NO.2 GuangDe Road, High Tec Zone
address: Xi'an, Shannxi, China
phone: +86-29-88192060
fax-no: +86-29-88192037
country: CN
mnt-by: MAINT-CNCGROUP-SN
last-modified: 2008-09-04T07:35:34Z
source: APNIC
% Information related to '113.200.0.0/15AS4837'
route: 113.200.0.0/15
descr: CNC Group CHINA169 Shannxi Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
last-modified: 2008-12-10T04:26:01Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 113.201.204.186
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9112
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;113.201.204.186. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026100101 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 02 06:01:09 CST 2026
;; MSG SIZE rcvd: 108Host 186.204.201.113.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 186.204.201.113.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 191.35.229.95 | attack | Attempt to attack host OS, exploiting network vulnerabilities, on 28-03-2020 12:45:15. |
2020-03-28 21:17:17 |
| 192.186.0.222 | attackspambots | Attempted connection to port 445. |
2020-03-28 21:01:53 |
| 178.216.200.251 | attack | Mar 28 13:58:44 eventyay sshd[6648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.216.200.251 Mar 28 13:58:47 eventyay sshd[6648]: Failed password for invalid user iav from 178.216.200.251 port 54510 ssh2 Mar 28 14:03:03 eventyay sshd[6868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.216.200.251 ... |
2020-03-28 21:18:30 |
| 118.189.184.169 | attackbots | 20/3/28@08:45:20: FAIL: Alarm-SSH address from=118.189.184.169 ... |
2020-03-28 21:03:03 |
| 101.224.39.190 | attackspam | Honeypot attack, port: 445, PTR: PTR record not found |
2020-03-28 20:47:06 |
| 203.128.30.2 | attackspam | Unauthorized connection attempt from IP address 203.128.30.2 on Port 445(SMB) |
2020-03-28 20:38:51 |
| 202.78.195.116 | attackspambots | Honeypot attack, port: 445, PTR: ip-78-195-116.dtp.net.id. |
2020-03-28 20:49:49 |
| 123.231.243.90 | attackbots | Unauthorized connection attempt from IP address 123.231.243.90 on Port 445(SMB) |
2020-03-28 20:43:02 |
| 197.28.65.109 | attack | Attempted connection to port 445. |
2020-03-28 20:57:41 |
| 150.109.62.183 | attackbotsspam | Mar 28 07:02:49 server1 sshd\[30408\]: Invalid user qax from 150.109.62.183 Mar 28 07:02:49 server1 sshd\[30408\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.62.183 Mar 28 07:02:51 server1 sshd\[30408\]: Failed password for invalid user qax from 150.109.62.183 port 56280 ssh2 Mar 28 07:09:35 server1 sshd\[32411\]: Invalid user xym from 150.109.62.183 Mar 28 07:09:35 server1 sshd\[32411\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.62.183 ... |
2020-03-28 21:19:43 |
| 123.206.36.174 | attack | 2020-03-28T06:31:41.001240linuxbox-skyline sshd[39500]: Invalid user jso from 123.206.36.174 port 60740 ... |
2020-03-28 20:33:52 |
| 216.8.239.29 | attack | Unauthorized connection attempt from IP address 216.8.239.29 on Port 445(SMB) |
2020-03-28 20:34:53 |
| 116.55.243.113 | attackbotsspam | Attempted connection to port 1433. |
2020-03-28 21:09:04 |
| 14.177.161.206 | attackspambots | Unauthorized connection attempt from IP address 14.177.161.206 on Port 445(SMB) |
2020-03-28 20:38:30 |
| 198.181.37.245 | attack | fail2ban/Mar 28 03:36:44 h1962932 sshd[27722]: Invalid user qvf from 198.181.37.245 port 58430 Mar 28 03:36:44 h1962932 sshd[27722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.181.37.245 Mar 28 03:36:44 h1962932 sshd[27722]: Invalid user qvf from 198.181.37.245 port 58430 Mar 28 03:36:46 h1962932 sshd[27722]: Failed password for invalid user qvf from 198.181.37.245 port 58430 ssh2 Mar 28 03:46:39 h1962932 sshd[28032]: Invalid user jenkins from 198.181.37.245 port 40332 |
2020-03-28 20:33:22 |