City: unknown
Region: unknown
Country: China
Internet Service Provider: China Unicom
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 139.209.130.86 | attackspam | prod6 ... |
2020-07-16 04:16:40 |
| 139.209.130.95 | attack | prod6 ... |
2020-07-02 02:52:10 |
| 139.209.131.233 | attackbots | Seq 2995002506 |
2019-10-22 04:27:54 |
| 139.209.135.101 | attack | firewall-block, port(s): 23/tcp |
2019-07-10 00:44:28 |
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 139.209.0.0 - 139.209.255.255
CIDR: 139.209.0.0/16
NetName: APNIC-ERX-139-209-0-0
NetHandle: NET-139-209-0-0-1
Parent: NET139 (NET-139-0-0-0-0)
NetType: Early Registrations, Transferred to APNIC
OriginAS:
Organization: Asia Pacific Network Information Centre (APNIC)
RegDate: 2010-11-03
Updated: 2010-11-17
Comment: This IP address range is not registered in the ARIN database.
Comment: This range was transferred to the APNIC Whois Database as
Comment: part of the ERX (Early Registration Transfer) project.
Comment: For details, refer to the APNIC Whois Database via
Comment: WHOIS.APNIC.NET or http://wq.apnic.net/apnic-bin/whois.pl
Comment:
Comment: ** IMPORTANT NOTE: APNIC is the Regional Internet Registry
Comment: for the Asia Pacific region. APNIC does not operate networks
Comment: using this IP address range and is not able to investigate
Comment: spam or abuse reports relating to these addresses. For more
Comment: help, refer to http://www.apnic.net/apnic-info/whois_search2/abuse-and-spamming
Ref: https://rdap.arin.net/registry/ip/139.209.0.0
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
ResourceLink: whois.apnic.net
OrgName: Asia Pacific Network Information Centre
OrgId: APNIC
Address: PO Box 3646
City: South Brisbane
StateProv: QLD
PostalCode: 4101
Country: AU
RegDate:
Updated: 2012-01-24
Ref: https://rdap.arin.net/registry/entity/APNIC
ReferralServer: whois://whois.apnic.net
ResourceLink: http://wq.apnic.net/whois-search/static/search.html
OrgAbuseHandle: AWC12-ARIN
OrgAbuseName: APNIC Whois Contact
OrgAbusePhone: +61 7 3858 3188
OrgAbuseEmail: search-apnic-not-arin@apnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3188
OrgTechEmail: search-apnic-not-arin@apnic.net
OrgTechRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to whois.apnic.net.
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '139.208.0.0 - 139.215.255.255'
% Abuse contact for '139.208.0.0 - 139.215.255.255' is 'zhaoyz3@chinaunicom.cn'
inetnum: 139.208.0.0 - 139.215.255.255
netname: UNICOM-JL
descr: China Unicom Jilin province network
descr: China Unicom
descr: No.21,Jin-Rong Street,
descr: Beijing 100033
country: CN
admin-c: CH1302-AP
tech-c: WT92-AP
abuse-c: AC1718-AP
status: ALLOCATED PORTABLE
remarks: service provider
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP
mnt-lower: MAINT-CNCGROUP-JL
mnt-routes: MAINT-CNCGROUP-RR
mnt-irt: IRT-CU-CN
last-modified: 2023-10-21T03:41:22Z
source: APNIC
irt: IRT-CU-CN
address: No.21,Financial Street
address: Beijing,100033
address: P.R.China
e-mail: zhaoyz3@chinaunicom.cn
abuse-mailbox: zhaoyz3@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
auth: # Filtered
remarks: zhaoyz3@chinaunicom.cn was validated on 2025-10-17
mnt-by: MAINT-CNCGROUP
last-modified: 2025-11-18T00:26:20Z
source: APNIC
role: ABUSE CUCN
country: ZZ
address: No.21,Financial Street
address: Beijing,100033
address: P.R.China
phone: +000000000
e-mail: zhaoyz3@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
nic-hdl: AC1718-AP
remarks: Generated from irt object IRT-CU-CN
remarks: zhaoyz3@chinaunicom.cn was validated on 2025-10-17
abuse-mailbox: zhaoyz3@chinaunicom.cn
mnt-by: APNIC-ABUSE
last-modified: 2025-10-17T02:26:56Z
source: APNIC
person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: hqs-ipabuse@chinaunicom.cn
address: No.21,Jin-Rong Street
address: Beijing,100033
address: P.R.China
phone: +86-10-66259764
fax-no: +86-10-66259764
country: CN
mnt-by: MAINT-CNCGROUP
last-modified: 2017-08-17T06:13:16Z
source: APNIC
person: Wang Tiegang
nic-hdl: WT92-AP
e-mail: jls-ipmaster@chinaunicom.cn
address: NO.3535,Renmin Street, ChangChun ,
address: Jilin province , 130021 , P.R. China
phone: +86-0431-87022560
fax-no: +86-0431-87022420
country: CN
mnt-by: MAINT-CNCGROUP-JL
last-modified: 2020-07-03T00:43:16Z
source: APNIC
% Information related to '139.208.0.0/13AS4837'
route: 139.208.0.0/13
descr: China Unicom Jilin Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
last-modified: 2011-03-23T06:06:01Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.36-SNAPSHOT (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.209.13.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38599
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;139.209.13.21. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026032601 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 27 05:11:17 CST 2026
;; MSG SIZE rcvd: 10621.13.209.139.in-addr.arpa domain name pointer 21.13.209.139.adsl-pool.jlccptt.net.cn.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
21.13.209.139.in-addr.arpa name = 21.13.209.139.adsl-pool.jlccptt.net.cn.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 5.196.72.11 | attack | $f2bV_matches |
2020-06-06 07:50:57 |
| 99.84.112.109 | attackspam | ET INFO TLS Handshake Failure - port: 59150 proto: TCP cat: Potentially Bad Traffic |
2020-06-06 07:57:23 |
| 71.6.199.23 | attackbotsspam | Unauthorized connection attempt detected from IP address 71.6.199.23 to port 9306 |
2020-06-06 08:05:24 |
| 41.89.198.249 | attackbotsspam | ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic |
2020-06-06 08:10:14 |
| 91.207.175.154 | attackbots | ET CINS Active Threat Intelligence Poor Reputation IP group 88 - port: 11211 proto: TCP cat: Misc Attack |
2020-06-06 08:01:58 |
| 68.183.16.217 | attackspam | ET CINS Active Threat Intelligence Poor Reputation IP group 66 - port: 19370 proto: TCP cat: Misc Attack |
2020-06-06 08:06:31 |
| 78.152.161.133 | attackbots |
|
2020-06-06 08:04:32 |
| 200.188.19.33 | attackbots | ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic |
2020-06-06 08:16:03 |
| 68.183.153.161 | attackbotsspam |
|
2020-06-06 08:05:39 |
| 147.203.238.18 | attackspam | Attempted to connect 2 times to port 161 UDP |
2020-06-06 08:26:03 |
| 185.153.199.211 | attack | Jun 6 03:09:01 debian kernel: [304702.548957] [UFW BLOCK] IN=eth0 OUT= MAC=52:54:00:be:e4:65:08:e8:4f:6e:48:0c:08:00 SRC=185.153.199.211 DST=89.252.131.35 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=12461 PROTO=TCP SPT=52795 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-06-06 08:22:09 |
| 92.53.65.52 | attackbots | 06/05/2020-17:50:22.903228 92.53.65.52 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-06-06 08:01:03 |
| 89.248.168.220 | attackspam |
|
2020-06-06 08:02:27 |
| 156.96.119.148 | attackbotsspam | ET DROP Spamhaus DROP Listed Traffic Inbound group 12 - port: 443 proto: TCP cat: Misc Attack |
2020-06-06 08:24:55 |
| 94.102.50.137 | attackbots | firewall-block, port(s): 11000/tcp, 12000/tcp |
2020-06-06 07:58:46 |