City: Changchun
Region: Jilin
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '49.140.0.0 - 49.141.255.255'
% Abuse contact for '49.140.0.0 - 49.141.255.255' is 'abuse@cernet.edu.cn'
inetnum: 49.140.0.0 - 49.141.255.255
netname: SYR-CERNET
descr: China Education and Research Network
descr: Shenyang Regional Network
country: CN
admin-c: CER-AP
tech-c: CER-AP
abuse-c: AC1685-AP
status: ALLOCATED PORTABLE
remarks: origin AS4538
remarks: confederation
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
mnt-by: APNIC-HM
mnt-lower: MAINT-CERNET-AP
mnt-routes: MAINT-CERNET-AP
mnt-irt: IRT-CERNET-AP
last-modified: 2020-09-03T09:16:22Z
source: APNIC
irt: IRT-CERNET-AP
address: Network Center,
address: FIT-3-220, Tsinghua Univ
address: Beijing 100084, China
phone: +86-10-62784301
fax-no: +86-10-62785933
e-mail: abuse@cernet.edu.cn
abuse-mailbox: abuse@cernet.edu.cn
admin-c: CER-AP
tech-c: CER-AP
auth: # Filtered
remarks: timezone GMT+8
remarks: abuse@cernet.edu.cn was validated on 2026-03-05
mnt-by: MAINT-CERNET-AP
last-modified: 2026-05-25T09:07:47Z
source: APNIC
role: ABUSE CERNETAP
country: ZZ
address: Network Center,
address: FIT-3-220, Tsinghua Univ
address: Beijing 100084, China
phone: +86-10-62784301
e-mail: abuse@cernet.edu.cn
admin-c: CER-AP
tech-c: CER-AP
nic-hdl: AC1685-AP
remarks: Generated from irt object IRT-CERNET-AP
remarks: abuse@cernet.edu.cn was validated on 2026-03-05
abuse-mailbox: abuse@cernet.edu.cn
mnt-by: APNIC-ABUSE
last-modified: 2026-03-05T06:40:20Z
source: APNIC
role: CERNET Helpdesk
address: CERNET Center
address: Beijing 100084, China
country: CN
phone: +86-10-6278-4049
fax-no: +86-10-6278-5933
e-mail: helpdesk@cernet.edu.cn
remarks: abuse@cernet.edu.cn
admin-c: XL1-CN
tech-c: SZ2-AP
nic-hdl: CER-AP
mnt-by: MAINT-CERNET-AP
last-modified: 2020-09-03T09:14:12Z
source: APNIC
% Information related to '49.140.0.0/15AS4538'
route: 49.140.0.0/15
descr: CERNET
origin: AS4538
mnt-by: MAINT-CERNET-AP
last-modified: 2010-10-29T01:48:01Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.140.187.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9446
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;49.140.187.8. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026081800 1800 900 604800 86400
;; Query time: 5 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Aug 18 14:36:40 CST 2026
;; MSG SIZE rcvd: 105Host 8.187.140.49.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 8.187.140.49.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 61.177.172.168 | attackbots | Jun 25 09:27:56 sshgateway sshd\[14833\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.168 user=root Jun 25 09:27:58 sshgateway sshd\[14833\]: Failed password for root from 61.177.172.168 port 23603 ssh2 Jun 25 09:28:01 sshgateway sshd\[14833\]: Failed password for root from 61.177.172.168 port 23603 ssh2 |
2020-06-25 15:28:39 |
| 220.231.180.131 | attack | Jun 25 06:54:14 ArkNodeAT sshd\[30822\]: Invalid user tibco from 220.231.180.131 Jun 25 06:54:14 ArkNodeAT sshd\[30822\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.231.180.131 Jun 25 06:54:16 ArkNodeAT sshd\[30822\]: Failed password for invalid user tibco from 220.231.180.131 port 55466 ssh2 |
2020-06-25 15:17:22 |
| 106.53.220.103 | attack |
|
2020-06-25 15:15:25 |
| 106.12.215.238 | attackbots | detected by Fail2Ban |
2020-06-25 15:34:21 |
| 54.38.240.23 | attackbots | Jun 25 08:30:05 ArkNodeAT sshd\[831\]: Invalid user suisse from 54.38.240.23 Jun 25 08:30:05 ArkNodeAT sshd\[831\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.240.23 Jun 25 08:30:06 ArkNodeAT sshd\[831\]: Failed password for invalid user suisse from 54.38.240.23 port 43818 ssh2 |
2020-06-25 15:17:00 |
| 43.230.27.44 | attack | Jun 25 07:04:19 db sshd[9604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.230.27.44 Jun 25 07:04:21 db sshd[9604]: Failed password for invalid user kf from 43.230.27.44 port 52706 ssh2 Jun 25 07:08:49 db sshd[9610]: Invalid user shobhit from 43.230.27.44 port 48108 ... |
2020-06-25 15:29:12 |
| 139.199.32.22 | attackbots | Jun 25 09:23:28 vps639187 sshd\[912\]: Invalid user xff from 139.199.32.22 port 44116 Jun 25 09:23:28 vps639187 sshd\[912\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.32.22 Jun 25 09:23:30 vps639187 sshd\[912\]: Failed password for invalid user xff from 139.199.32.22 port 44116 ssh2 ... |
2020-06-25 15:31:39 |
| 49.232.45.64 | attackspambots | Jun 25 06:45:47 gestao sshd[1858]: Failed password for root from 49.232.45.64 port 33852 ssh2 Jun 25 06:49:13 gestao sshd[1918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.45.64 Jun 25 06:49:15 gestao sshd[1918]: Failed password for invalid user ignacio from 49.232.45.64 port 56160 ssh2 ... |
2020-06-25 15:13:12 |
| 61.7.235.211 | attackspam | Jun 25 17:10:46 localhost sshd[579019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.7.235.211 user=root Jun 25 17:10:48 localhost sshd[579019]: Failed password for root from 61.7.235.211 port 47044 ssh2 ... |
2020-06-25 15:19:16 |
| 134.122.23.187 | attack | Port scan denied |
2020-06-25 15:41:44 |
| 95.217.108.83 | attackbotsspam | RDP Brute-Force (honeypot 3) |
2020-06-25 15:41:14 |
| 41.208.72.141 | attack | Invalid user User from 41.208.72.141 port 52720 |
2020-06-25 15:06:47 |
| 139.215.208.125 | attackbotsspam | Jun 25 06:18:36 home sshd[11002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.215.208.125 Jun 25 06:18:37 home sshd[11002]: Failed password for invalid user remote from 139.215.208.125 port 55575 ssh2 Jun 25 06:20:51 home sshd[11216]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.215.208.125 ... |
2020-06-25 15:22:44 |
| 106.55.167.157 | attackspam | Invalid user iva from 106.55.167.157 port 36016 |
2020-06-25 15:42:36 |
| 185.53.168.96 | attackspam | $f2bV_matches |
2020-06-25 15:08:34 |