AbuseIPDB » 211.93.113.138

211.93.113.138 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 39%: ?

39%

ISP	China United Telecommunications Corporation
Usage Type	Fixed Line ISP
Domain Name	cnuninet.com
Country	China
City	Shanghai, Shanghai

Report 211.93.113.138

Whois 211.93.113.138

IP Abuse Reports for 211.93.113.138:

This IP address has been reported a total of 10 times from 9 distinct sources. 211.93.113.138 was first reported on November 10th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
bigscoots.com	2024-11-10 08:07:46 (3 weeks ago)	(sshd) Failed SSH login from 211.93.113.138 (CN/China/-): 5 in the last 3600 secs; Ports: ; Directi ... show more(sshd) Failed SSH login from 211.93.113.138 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Nov 10 02:06:27 17693 sshd[10331]: Invalid user leo from 211.93.113.138 port 45372 Nov 10 02:06:29 17693 sshd[10331]: Failed password for invalid user leo from 211.93.113.138 port 45372 ssh2 Nov 10 02:07:01 17693 sshd[10396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.93.113.138 user=root Nov 10 02:07:02 17693 sshd[10396]: Failed password for root from 211.93.113.138 port 49494 ssh2 Nov 10 02:07:32 17693 sshd[10519]: Invalid user webmaster from 211.93.113.138 port 53810 show less	Brute-Force SSH
Savvii	2024-11-10 07:48:19 (3 weeks ago)	20 attempts against mh-ssh on storm	Brute-Force SSH
Savvii	2024-11-10 06:37:44 (3 weeks ago)	20 attempts against mh-ssh on toon-dev	Brute-Force SSH
EGP Abuse Dept	2024-11-10 06:21:37 (3 weeks ago)	Unauthorized connection to Telnet port 23	Port Scan Hacking
Anonymous	2024-11-10 05:22:08 (3 weeks ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
clapper	2024-11-10 05:22:01 (3 weeks ago)	(mod_security) mod_security (id:980001) triggered by 211.93.113.138 (CN/China/-): 3 in the last 3600 ... show more(mod_security) mod_security (id:980001) triggered by 211.93.113.138 (CN/China/-): 3 in the last 3600 secs; ID: LUC show less	Brute-Force Bad Web Bot
Herrminator	2024-11-10 04:49:39 (3 weeks ago)	85.215.157.225 211.93.113.138 - - [10/Nov/2024:05:47:58 +0100] "GET /vendor/phpunit/phpunit/src/Util ... show more85.215.157.225 211.93.113.138 - - [10/Nov/2024:05:47:58 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 503 190 "-" "Custom-AsyncHttpClient" "-" 85.215.157.225 211.93.113.138 - - [10/Nov/2024:05:48:02 +0100] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 503 190 "-" "Custom-AsyncHttpClient" "-" 85.215.157.225 211.93.113.138 - - [10/Nov/2024:05:48:07 +0100] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 503 190 "-" "Custom-AsyncHttpClient" "-" 85.215.157.225 211.93.113.138 - - [10/Nov/2024:05:48:11 +0100] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 503 190 "-" "Custom-AsyncHttpClient" "-" 85.215.157.225 211.93.113.138 - - [10/Nov/2024:05:48:15 +0100] "GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php HTTP/1.1" 503 190 "-" "Custom-AsyncHttpClient" "-" 85.215.157.225 211.93.113.138 - - [10/Nov/2024:05:48:20 +0100] "GET /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 503 190 "-" "Custom-AsyncHttpClient" ... show less	Brute-Force Web App Attack
RAP	2024-11-10 04:43:20 (3 weeks ago)	2024-11-10 04:43:20 UTC Unauthorized activity to TCP port 22. SSH	SSH
webbfabriken	2024-11-10 04:33:30 (3 weeks ago)	spam or other hacking activities reported by webbfabriken security servers Attack reported by ... show morespam or other hacking activities reported by webbfabriken security servers Attack reported by Webbfabriken Security API - WFSecAPI show less	Web Spam
security.rdmc.fr	2024-11-10 03:15:30 (3 weeks ago)	Port Scan Attack proto:TCP src:50005 dst:23	Port Scan