117.70.170.147

Basic Info

City: Shanghai

Region: Shanghai

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '117.64.0.0 - 117.71.255.255'

% Abuse contact for '117.64.0.0 - 117.71.255.255' is 'anti-spam@chinatelecom.cn'

inetnum:        117.64.0.0 - 117.71.255.255
netname:        CHINANET-AH
descr:          CHINANET anhui province network
descr:          China Telecom
descr:          No.31,jingrong street
descr:          Beijing 100032
country:        CN
admin-c:        JW89-AP
tech-c:         JW89-AP
abuse-c:        AC1573-AP
status:         ALLOCATED PORTABLE
remarks:        service provider
remarks:        --------------------------------------------------------
remarks:        To report network abuse, please contact mnt-irt
remarks:        For troubleshooting, please contact tech-c and admin-c
remarks:        Report invalid contact via www.apnic.net/invalidcontact
remarks:        --------------------------------------------------------
mnt-by:         APNIC-HM
mnt-lower:      MAINT-CHINANET-AH
mnt-routes:     MAINT-CHINANET-AH
mnt-irt:        IRT-CHINANET-CN
last-modified:  2021-06-15T08:05:24Z
source:         APNIC

irt:            IRT-CHINANET-CN
address:        No.31 ,jingrong street,beijing
address:        100032
e-mail:         anti-spam@chinatelecom.cn
abuse-mailbox:  anti-spam@chinatelecom.cn
admin-c:        CH93-AP
tech-c:         CH93-AP
auth:           # Filtered
remarks:        anti-spam@chinatelecom.cn was validated on 2025-04-24
mnt-by:         MAINT-CHINANET
last-modified:  2025-09-04T00:59:42Z
source:         APNIC

role:           ABUSE CHINANETCN
country:        ZZ
address:        No.31 ,jingrong street,beijing
address:        100032
phone:          +000000000
e-mail:         anti-spam@chinatelecom.cn
admin-c:        CH93-AP
tech-c:         CH93-AP
nic-hdl:        AC1573-AP
remarks:        Generated from irt object IRT-CHINANET-CN
remarks:        anti-spam@chinatelecom.cn was validated on 2025-04-24
abuse-mailbox:  anti-spam@chinatelecom.cn
mnt-by:         APNIC-ABUSE
last-modified:  2025-04-24T03:21:54Z
source:         APNIC

person:         Jinneng Wang
address:        17/F, Postal Building No.120 Changjiang
address:        Middle Road, Hefei, Anhui, China
country:        CN
phone:          +86-551-2659073
fax-no:         +86-551-2659287
e-mail:         ahdata@189.cn
nic-hdl:        JW89-AP
mnt-by:         MAINT-CHINANET-AH
last-modified:  2014-02-21T01:19:43Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.36-SNAPSHOT (WHOIS-AU5)

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.70.170.147
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15996
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;117.70.170.147.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025100600 1800 900 604800 86400

;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Oct 06 17:33:51 CST 2025
;; MSG SIZE  rcvd: 107

Host info

Host 147.170.70.117.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 147.170.70.117.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
104.236.175.127	attackbots	Sep 10 18:28:26 vps200512 sshd\[11264\]: Invalid user userftp from 104.236.175.127 Sep 10 18:28:26 vps200512 sshd\[11264\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.175.127 Sep 10 18:28:28 vps200512 sshd\[11264\]: Failed password for invalid user userftp from 104.236.175.127 port 55640 ssh2 Sep 10 18:35:15 vps200512 sshd\[11377\]: Invalid user arma3server from 104.236.175.127 Sep 10 18:35:15 vps200512 sshd\[11377\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.175.127	2019-09-11 06:49:52
192.227.252.3	attack	Sep 10 12:09:29 web9 sshd\[20343\]: Invalid user sysadmin from 192.227.252.3 Sep 10 12:09:29 web9 sshd\[20343\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.3 Sep 10 12:09:30 web9 sshd\[20343\]: Failed password for invalid user sysadmin from 192.227.252.3 port 48258 ssh2 Sep 10 12:15:42 web9 sshd\[21676\]: Invalid user suporte from 192.227.252.3 Sep 10 12:15:42 web9 sshd\[21676\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.3	2019-09-11 06:17:36
104.248.183.0	attackspambots	Sep 10 12:45:48 friendsofhawaii sshd\[2701\]: Invalid user testing from 104.248.183.0 Sep 10 12:45:48 friendsofhawaii sshd\[2701\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.183.0 Sep 10 12:45:50 friendsofhawaii sshd\[2701\]: Failed password for invalid user testing from 104.248.183.0 port 43816 ssh2 Sep 10 12:51:54 friendsofhawaii sshd\[3261\]: Invalid user webadmin from 104.248.183.0 Sep 10 12:51:54 friendsofhawaii sshd\[3261\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.183.0	2019-09-11 06:53:00
5.188.86.114	attackspam	Sep 10 23:39:48 h2177944 kernel: \[1028109.645291\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=5.188.86.114 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=51922 PROTO=TCP SPT=50044 DPT=3030 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 10 23:51:52 h2177944 kernel: \[1028833.428688\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=5.188.86.114 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=62732 PROTO=TCP SPT=50044 DPT=3073 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 11 00:04:20 h2177944 kernel: \[1029581.949213\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=5.188.86.114 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=39943 PROTO=TCP SPT=50044 DPT=3000 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 11 00:25:08 h2177944 kernel: \[1030829.375930\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=5.188.86.114 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=57639 PROTO=TCP SPT=50044 DPT=3249 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 11 00:26:48 h2177944 kernel: \[1030929.371832\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=5.188.86.114 DST=85.214.117.9 LEN=	2019-09-11 06:31:36
92.222.84.34	attackspam	$f2bV_matches	2019-09-11 06:20:29
185.228.80.27	attack	May 7 12:35:31 mercury smtpd[978]: 05503ee1e153a7fa smtp event=failed-command address=185.228.80.27 host=185.228.80.27 command="RCPT TO:" result="550 Invalid recipient" ...	2019-09-11 06:13:31
178.128.87.28	attackbotsspam	Sep 10 22:25:52 unicornsoft sshd\[18834\]: Invalid user ftpadmin from 178.128.87.28 Sep 10 22:25:52 unicornsoft sshd\[18834\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.87.28 Sep 10 22:25:54 unicornsoft sshd\[18834\]: Failed password for invalid user ftpadmin from 178.128.87.28 port 57656 ssh2	2019-09-11 06:30:36
183.103.61.243	attack	Sep 11 00:17:28 minden010 sshd[25035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.103.61.243 Sep 11 00:17:30 minden010 sshd[25035]: Failed password for invalid user itadmin from 183.103.61.243 port 36598 ssh2 Sep 11 00:24:31 minden010 sshd[27420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.103.61.243 ...	2019-09-11 06:36:30
80.211.136.203	attackbots	Sep 10 12:41:18 auw2 sshd\[12006\]: Invalid user hadoopuser from 80.211.136.203 Sep 10 12:41:18 auw2 sshd\[12006\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.136.203 Sep 10 12:41:20 auw2 sshd\[12006\]: Failed password for invalid user hadoopuser from 80.211.136.203 port 47848 ssh2 Sep 10 12:46:33 auw2 sshd\[12506\]: Invalid user csadmin from 80.211.136.203 Sep 10 12:46:33 auw2 sshd\[12506\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.136.203	2019-09-11 06:53:59
14.187.94.133	attackspam	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-10 18:13:03,453 INFO [amun_request_handler] PortScan Detected on Port: 445 (14.187.94.133)	2019-09-11 06:24:48
218.98.40.152	attackbotsspam	Sep 11 00:34:17 root sshd[27232]: Failed password for root from 218.98.40.152 port 38900 ssh2 Sep 11 00:34:22 root sshd[27232]: Failed password for root from 218.98.40.152 port 38900 ssh2 Sep 11 00:34:24 root sshd[27232]: Failed password for root from 218.98.40.152 port 38900 ssh2 ...	2019-09-11 06:34:36
117.237.218.81	attack	[Tue Aug 20 07:54:18.243497 2019] [access_compat:error] [pid 16841] [client 117.237.218.81:29240] AH01797: client denied by server configuration: /var/www/html/josh/wp-login.php ...	2019-09-11 06:12:38
183.131.22.206	attack	Sep 10 12:16:18 kapalua sshd\[19050\]: Invalid user odoo from 183.131.22.206 Sep 10 12:16:18 kapalua sshd\[19050\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.131.22.206 Sep 10 12:16:20 kapalua sshd\[19050\]: Failed password for invalid user odoo from 183.131.22.206 port 58338 ssh2 Sep 10 12:21:51 kapalua sshd\[19627\]: Invalid user test from 183.131.22.206 Sep 10 12:21:51 kapalua sshd\[19627\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.131.22.206	2019-09-11 06:33:03
115.72.48.228	attackbots	Unauthorized connection attempt from IP address 115.72.48.228 on Port 445(SMB)	2019-09-11 06:09:49
185.211.245.198	attackspambots	Sep 11 00:25:26 mail postfix/smtpd\[7841\]: warning: unknown\[185.211.245.198\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 11 00:25:34 mail postfix/smtpd\[7841\]: warning: unknown\[185.211.245.198\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 11 00:30:58 mail postfix/smtpd\[8006\]: warning: unknown\[185.211.245.198\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2019-09-11 06:43:52

Recently Reported IPs

223.101.138.55	121.230.9.190	117.148.73.86	112.42.75.127
23.82.106.243	120.35.189.4	66.132.153.135	103.170.179.158
54.194.174.1	20.65.136.10	14.212.127.137	172.219.129.210
165.154.227.241	167.99.57.50	120.208.194.41	103.14.165.121
34.172.224.250	64.227.40.172	71.6.232.29	192.155.91.55