60.190.252.139

Basic Info

City: Hangzhou

Region: Zhejiang

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
60.190.252.21	attack	Auto Detect Rule! proto TCP (SYN), 60.190.252.21:63034->gjan.info:1433, len 48	2020-09-24 03:07:05
60.190.252.21	attackspam	Auto Detect Rule! proto TCP (SYN), 60.190.252.21:63034->gjan.info:1433, len 48	2020-09-23 19:18:22
60.190.252.21	attackbotsspam	RDP Bruteforce	2019-10-18 15:23:20

Whois info:

% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '60.190.252.136 - 60.190.252.143'

% Abuse contact for '60.190.252.136 - 60.190.252.143' is 'anti-spam@chinatelecom.cn'

inetnum:        60.190.252.136 - 60.190.252.143
netname:        HANGZHOU-JUQI-NETBAR
country:        CN
descr:          Hangzhou Juqi Online Internet Bar Co.,Ltd.
descr:
admin-c:        LL779-AP
tech-c:         CH122-AP
status:         ASSIGNED NON-PORTABLE
mnt-by:         MAINT-CN-CHINANET-ZJ-HZ
last-modified:  2008-09-04T07:04:18Z
source:         APNIC

role:           CHINANET-ZJ Hangzhou
address:        No.352 Tiyuchang Road,Hangzhou,Zhejiang.310003
country:        CN
phone:          +86-571-85157929
fax-no:         +86-571-85102776
e-mail:         anti_spam_zjdx@189.cn
remarks:        send spam reports to  mailto:anti_spam_zjdx@189.cn
remarks:        and abuse reports to  mailto:anti_spam_zjdx@189.cn
remarks:        Please include detailed information and times in UTC
admin-c:        CH54-AP
tech-c:         CH54-AP
nic-hdl:        CH122-AP
mnt-by:         MAINT-CHINANET-ZJ
last-modified:  2023-08-11T08:25:58Z
source:         APNIC

person:         Lianhong Li
nic-hdl:        LL779-AP
e-mail:         dkhxtb@mail.hz.zj.cn
address:        Hangzhou,Zhejiang.Postcode:310000
phone:          +86-13067732603
country:        CN
mnt-by:         MAINT-CN-CHINANET-ZJ-HZ
last-modified:  2008-09-04T07:35:26Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.36-SNAPSHOT (WHOIS-AU5)

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 60.190.252.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1569
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;60.190.252.139.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026031000 1800 900 604800 86400

;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 10 15:39:50 CST 2026
;; MSG SIZE  rcvd: 107

Host info

Host 139.252.190.60.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 139.252.190.60.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
149.56.44.47	attackspam	Jul 9 00:11:28 vibhu-HP-Z238-Microtower-Workstation sshd\[13219\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.56.44.47 user=root Jul 9 00:11:30 vibhu-HP-Z238-Microtower-Workstation sshd\[13219\]: Failed password for root from 149.56.44.47 port 39816 ssh2 Jul 9 00:11:34 vibhu-HP-Z238-Microtower-Workstation sshd\[13219\]: Failed password for root from 149.56.44.47 port 39816 ssh2 Jul 9 00:11:36 vibhu-HP-Z238-Microtower-Workstation sshd\[13219\]: Failed password for root from 149.56.44.47 port 39816 ssh2 Jul 9 00:11:39 vibhu-HP-Z238-Microtower-Workstation sshd\[13219\]: Failed password for root from 149.56.44.47 port 39816 ssh2 ...	2019-07-09 06:55:15
177.130.138.13	attackbotsspam	smtp auth brute force	2019-07-09 06:54:19
96.32.200.50	attackbots	Honeypot attack, port: 23, PTR: 96-32-200-50.dhcp.slid.la.charter.com.	2019-07-09 06:56:41
185.40.4.23	attackspambots	\[2019-07-08 17:54:10\] NOTICE\[13443\] chan_sip.c: Registration from '"876543210" \' failed for '185.40.4.23:5115' - Wrong password \[2019-07-08 17:54:10\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-08T17:54:10.489-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="876543210",SessionID="0x7f02f876b078",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.40.4.23/5115",Challenge="016117a9",ReceivedChallenge="016117a9",ReceivedHash="4cdd641d7dbee3a40ef7e291e7d869b8" \[2019-07-08 17:56:14\] NOTICE\[13443\] chan_sip.c: Registration from '"9000" \' failed for '185.40.4.23:5155' - Wrong password \[2019-07-08 17:56:14\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-08T17:56:14.491-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9000",SessionID="0x7f02f81c5a28",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAdd	2019-07-09 06:37:40
114.238.198.236	attackbots	2323/tcp [2019-07-08]1pkt	2019-07-09 06:15:31
177.73.193.186	attackbotsspam	Brute force attempt	2019-07-09 06:41:54
112.85.42.185	attack	Jul 8 22:18:48 MK-Soft-VM7 sshd\[13248\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.185 user=root Jul 8 22:18:50 MK-Soft-VM7 sshd\[13248\]: Failed password for root from 112.85.42.185 port 44346 ssh2 Jul 8 22:18:52 MK-Soft-VM7 sshd\[13248\]: Failed password for root from 112.85.42.185 port 44346 ssh2 ...	2019-07-09 06:24:19
78.96.35.12	attack	8728/tcp [2019-07-08]1pkt	2019-07-09 06:23:27
148.255.187.188	attackspambots	v+ssh-bruteforce	2019-07-09 06:58:37
101.86.128.71	attack	23/tcp [2019-07-08]1pkt	2019-07-09 06:56:00
77.40.106.47	attackspam	445/tcp [2019-07-08]1pkt	2019-07-09 06:18:33
77.221.66.105	attackbotsspam	Jul 8 20:32:11 mxgate1 postfix/postscreen[11768]: CONNECT from [77.221.66.105]:48512 to [176.31.12.44]:25 Jul 8 20:32:11 mxgate1 postfix/dnsblog[11790]: addr 77.221.66.105 listed by domain zen.spamhaus.org as 127.0.0.4 Jul 8 20:32:11 mxgate1 postfix/dnsblog[11788]: addr 77.221.66.105 listed by domain cbl.abuseat.org as 127.0.0.2 Jul 8 20:32:11 mxgate1 postfix/dnsblog[11787]: addr 77.221.66.105 listed by domain bl.spamcop.net as 127.0.0.2 Jul 8 20:32:11 mxgate1 postfix/dnsblog[11789]: addr 77.221.66.105 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Jul 8 20:32:11 mxgate1 postfix/dnsblog[11786]: addr 77.221.66.105 listed by domain b.barracudacentral.org as 127.0.0.2 Jul 8 20:32:17 mxgate1 postfix/postscreen[11768]: DNSBL rank 6 for [77.221.66.105]:48512 Jul x@x Jul 8 20:32:18 mxgate1 postfix/postscreen[11768]: HANGUP after 1.6 from [77.221.66.105]:48512 in tests after SMTP handshake Jul 8 20:32:18 mxgate1 postfix/postscreen[11768]: DISCONNECT [77.221.66.105]:........ -------------------------------	2019-07-09 06:48:16
31.208.118.197	attackspam	Jul 8 20:35:51 reporting4 sshd[4480]: User r.r from 31-208-118-197.cust.bredband2.com not allowed because not listed in AllowUsers Jul 8 20:35:51 reporting4 sshd[4480]: Failed password for invalid user r.r from 31.208.118.197 port 57552 ssh2 Jul 8 20:35:51 reporting4 sshd[4480]: Failed password for invalid user r.r from 31.208.118.197 port 57552 ssh2 Jul 8 20:35:51 reporting4 sshd[4480]: Failed password for invalid user r.r from 31.208.118.197 port 57552 ssh2 Jul 8 20:35:51 reporting4 sshd[4480]: Failed password for invalid user r.r from 31.208.118.197 port 57552 ssh2 Jul 8 20:35:52 reporting4 sshd[4480]: Failed password for invalid user r.r from 31.208.118.197 port 57552 ssh2 Jul 8 20:35:52 reporting4 sshd[4480]: Failed password for invalid user r.r from 31.208.118.197 port 57552 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=31.208.118.197	2019-07-09 06:53:50
51.158.107.18	attackbots	Jul 8 20:13:30 kmh-wsh-001-nbg03 sshd[25485]: Did not receive identification string from 51.158.107.18 port 43720 Jul 8 20:15:28 kmh-wsh-001-nbg03 sshd[25611]: Invalid user discordbot from 51.158.107.18 port 55092 Jul 8 20:15:28 kmh-wsh-001-nbg03 sshd[25611]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.107.18 Jul 8 20:15:29 kmh-wsh-001-nbg03 sshd[25611]: Failed password for invalid user discordbot from 51.158.107.18 port 55092 ssh2 Jul 8 20:15:29 kmh-wsh-001-nbg03 sshd[25611]: Received disconnect from 51.158.107.18 port 55092:11: Normal Shutdown, Thank you for playing [preauth] Jul 8 20:15:29 kmh-wsh-001-nbg03 sshd[25611]: Disconnected from 51.158.107.18 port 55092 [preauth] Jul 8 20:16:23 kmh-wsh-001-nbg03 sshd[25633]: Invalid user discordbot from 51.158.107.18 port 59788 Jul 8 20:16:23 kmh-wsh-001-nbg03 sshd[25633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158......... -------------------------------	2019-07-09 06:27:59
189.7.17.61	attack	$f2bV_matches	2019-07-09 06:36:01

Recently Reported IPs

176.65.148.68	77.68.6.216	123.220.94.80	147.185.133.163
188.166.219.219	165.232.43.198	143.198.165.121	80.94.92.158
107.172.20.103	167.172.149.199	167.172.90.204	60.190.252.115
104.28.94.138	82.213.153.144	146.190.82.177	110.38.242.96
192.168.50.17	205.198.70.172	230.160.191.239	157.245.197.148