城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '180.152.0.0 - 180.159.255.255'
% Abuse contact for '180.152.0.0 - 180.159.255.255' is 'anti-spam@chinatelecom.cn'
inetnum: 180.152.0.0 - 180.159.255.255
netname: CHINANET-SH
descr: CHINANET SHANGHAI PROVINCE NETWORK
descr: China Telecom
descr: No.31,jingrong street
descr: Beijing 100032
country: CN
admin-c: WWQ4-AP
tech-c: WWQ4-AP
abuse-c: AC1573-AP
status: ALLOCATED PORTABLE
remarks: service provider
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-SH
mnt-irt: IRT-CHINANET-CN
last-modified: 2021-06-15T08:04:51Z
source: APNIC
irt: IRT-CHINANET-CN
address: No.31 ,jingrong street,beijing
address: 100032
e-mail: anti-spam@chinatelecom.cn
abuse-mailbox: anti-spam@chinatelecom.cn
admin-c: CH93-AP
tech-c: CH93-AP
auth: # Filtered
remarks: anti-spam@chinatelecom.cn was validated on 2025-04-24
mnt-by: MAINT-CHINANET
last-modified: 2025-09-04T00:59:42Z
source: APNIC
role: ABUSE CHINANETCN
country: ZZ
address: No.31 ,jingrong street,beijing
address: 100032
phone: +000000000
e-mail: anti-spam@chinatelecom.cn
admin-c: CH93-AP
tech-c: CH93-AP
nic-hdl: AC1573-AP
remarks: Generated from irt object IRT-CHINANET-CN
remarks: anti-spam@chinatelecom.cn was validated on 2025-04-24
abuse-mailbox: anti-spam@chinatelecom.cn
mnt-by: APNIC-ABUSE
last-modified: 2025-04-24T03:21:54Z
source: APNIC
person: Weng Wen Qian
address: Room 2405,357 Songlin Road,Shanghai 200122
country: CN
phone: +86-21-68405784
fax-no: +86-21-50623458
e-mail: shizhiming.sh@chinatelecom.cn
nic-hdl: WWQ4-AP
mnt-by: MAINT-CHINANET-SH
last-modified: 2023-02-07T08:25:17Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.36-SNAPSHOT (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 180.153.236.23
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21020
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;180.153.236.23. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025110700 1800 900 604800 86400
;; Query time: 39 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Nov 07 14:01:39 CST 2025
;; MSG SIZE rcvd: 107Host 23.236.153.180.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 23.236.153.180.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 128.1.91.205 | attackbotsspam | " " |
2019-11-06 19:03:47 |
| 45.136.110.47 | attackspambots | Nov 6 11:06:10 h2177944 kernel: \[5910405.680827\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.47 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=62213 PROTO=TCP SPT=45328 DPT=7930 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 6 11:45:26 h2177944 kernel: \[5912761.114343\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.47 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=24372 PROTO=TCP SPT=45328 DPT=6928 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 6 11:50:09 h2177944 kernel: \[5913044.278273\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.47 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=47697 PROTO=TCP SPT=45328 DPT=7656 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 6 11:50:50 h2177944 kernel: \[5913085.519718\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.47 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=51123 PROTO=TCP SPT=45328 DPT=7774 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 6 11:55:29 h2177944 kernel: \[5913364.973806\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.47 DST=85.214.117.9 |
2019-11-06 19:22:06 |
| 217.182.216.191 | attackspambots | CloudCIX Reconnaissance Scan Detected, PTR: ip191.ip-217-182-216.eu. |
2019-11-06 19:35:44 |
| 51.75.124.215 | attackspam | Nov 4 06:47:35 db01 sshd[17734]: Failed password for r.r from 51.75.124.215 port 45768 ssh2 Nov 4 06:47:35 db01 sshd[17734]: Received disconnect from 51.75.124.215: 11: Bye Bye [preauth] Nov 4 07:01:14 db01 sshd[18867]: Failed password for r.r from 51.75.124.215 port 46224 ssh2 Nov 4 07:01:14 db01 sshd[18867]: Received disconnect from 51.75.124.215: 11: Bye Bye [preauth] Nov 4 07:04:39 db01 sshd[19069]: Failed password for r.r from 51.75.124.215 port 55148 ssh2 Nov 4 07:04:39 db01 sshd[19069]: Received disconnect from 51.75.124.215: 11: Bye Bye [preauth] Nov 4 07:07:51 db01 sshd[19370]: Failed password for r.r from 51.75.124.215 port 35844 ssh2 Nov 4 07:07:51 db01 sshd[19370]: Received disconnect from 51.75.124.215: 11: Bye Bye [preauth] Nov 4 07:11:02 db01 sshd[19663]: Failed password for r.r from 51.75.124.215 port 44768 ssh2 Nov 4 07:11:02 db01 sshd[19663]: Received disconnect from 51.75.124.215: 11: Bye Bye [preauth] Nov 4 07:14:09 db01 sshd[19928]: Faile........ ------------------------------- |
2019-11-06 19:34:11 |
| 87.123.39.91 | attackspambots | Nov 6 08:36:13 linuxrulz sshd[15921]: Invalid user deploy from 87.123.39.91 port 52064 Nov 6 08:36:13 linuxrulz sshd[15921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.123.39.91 Nov 6 08:36:15 linuxrulz sshd[15921]: Failed password for invalid user deploy from 87.123.39.91 port 52064 ssh2 Nov 6 08:36:15 linuxrulz sshd[15921]: Received disconnect from 87.123.39.91 port 52064:11: Bye Bye [preauth] Nov 6 08:36:15 linuxrulz sshd[15921]: Disconnected from 87.123.39.91 port 52064 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=87.123.39.91 |
2019-11-06 19:20:26 |
| 82.102.173.73 | attackspambots | [portscan] tcp/110 [POP3] in spfbl.net:'listed' *(RWIN=1024)(11061245) |
2019-11-06 18:57:51 |
| 218.244.146.115 | attackbots | CloudCIX Reconnaissance Scan Detected, PTR: mxvps2705.hichina.com. |
2019-11-06 19:27:55 |
| 104.197.87.216 | attack | CloudCIX Reconnaissance Scan Detected, PTR: 216.87.197.104.bc.googleusercontent.com. |
2019-11-06 19:33:11 |
| 45.227.253.140 | attackbotsspam | v+mailserver-auth-bruteforce |
2019-11-06 19:28:22 |
| 92.53.65.40 | attack | 92.53.65.40 was recorded 39 times by 19 hosts attempting to connect to the following ports: 5828,5811,5827,5826,5825,5822,5801,5815,5807,5831,5819,5829,5837,5830,5842,5847,5850,5843,5824,5809,5833,5804,5803,5802,5813,5816,5838. Incident counter (4h, 24h, all-time): 39, 118, 267 |
2019-11-06 19:24:47 |
| 212.83.158.222 | attackspambots | 11/06/2019-03:22:09.206432 212.83.158.222 Protocol: 17 ATTACK [PTSecurity] Cisco ASA and Cisco FTD possible DoS (CVE-2018-15454) |
2019-11-06 18:56:45 |
| 45.55.190.106 | attackspambots | 2019-11-06T10:07:52.217999abusebot-7.cloudsearch.cf sshd\[20117\]: Invalid user yeproc from 45.55.190.106 port 49129 |
2019-11-06 19:35:14 |
| 51.75.248.251 | attack | Nov 6 07:25:04 ns315508 sshd[3086]: Invalid user local from 51.75.248.251 port 45544 Nov 6 07:29:41 ns315508 sshd[3101]: Invalid user local from 51.75.248.251 port 47900 Nov 6 07:34:15 ns315508 sshd[3158]: Invalid user local from 51.75.248.251 port 50258 ... |
2019-11-06 19:12:21 |
| 41.225.16.234 | attackbotsspam | 2019-11-06T07:24:08.205974 X postfix/smtpd[19205]: NOQUEUE: reject: RCPT from unknown[41.225.16.234]: 554 5.7.1 Service unavailable; Client host [41.225.16.234] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/41.225.16.234; from= |
2019-11-06 19:28:54 |
| 139.59.73.205 | attackbotsspam | Nov 5 00:12:11 cw sshd[19234]: Invalid user 1234 from 139.59.73.205 Nov 5 00:12:11 cw sshd[19235]: Received disconnect from 139.59.73.205: 11: Bye Bye Nov 5 00:12:13 cw sshd[19236]: Invalid user admin from 139.59.73.205 Nov 5 00:12:13 cw sshd[19237]: Received disconnect from 139.59.73.205: 11: Bye Bye Nov 5 00:12:15 cw sshd[19238]: Invalid user ubnt from 139.59.73.205 Nov 5 00:12:15 cw sshd[19241]: Received disconnect from 139.59.73.205: 11: Bye Bye Nov 5 00:12:17 cw sshd[19242]: User r.r from 139.59.73.205 not allowed because listed in DenyUsers Nov 5 00:12:17 cw sshd[19243]: Received disconnect from 139.59.73.205: 11: Bye Bye Nov 5 00:12:18 cw sshd[19244]: Invalid user default from 139.59.73.205 Nov 5 00:12:19 cw sshd[19245]: Received disconnect from 139.59.73.205: 11: Bye Bye Nov 5 00:12:20 cw sshd[19246]: Invalid user default from 139.59.73.205 Nov 5 00:12:20 cw sshd[19247]: Received disconnect from 139.59.73.205: 11: Bye Bye Nov 5 00:12:21 cw sshd[1924........ ------------------------------- |
2019-11-06 19:30:09 |