城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '211.156.80.0 - 211.156.95.255'
% Abuse contact for '211.156.80.0 - 211.156.95.255' is 'ipas@cnnic.cn'
inetnum: 211.156.80.0 - 211.156.95.255
netname: CNNIC
descr: No.4, Zhongguancun No.4 South Street,
descr: Haidian District, Beijing
descr: P.O.Box: No.6 Branch-box of No.349 Mailbox, Beijing
country: CN
admin-c: MW1-AP
tech-c: IPAS1-AP
abuse-c: AC1601-AP
status: ALLOCATED PORTABLE
mnt-by: APNIC-HM
mnt-lower: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
last-modified: 2023-10-09T06:49:37Z
source: APNIC
irt: IRT-CNNIC-CN
address: Beijing, China
e-mail: ipas@cnnic.cn
abuse-mailbox: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
auth: # Filtered
remarks: Please note that CNNIC is not an ISP and is not
remarks: empowered to investigate complaints of network abuse.
remarks: Please contact the tech-c or admin-c of the network.
remarks: ipas@cnnic.cn is invalid
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-11-17T23:08:37Z
source: APNIC
role: ABUSE CNNICCN
country: ZZ
address: Beijing, China
phone: +000000000
e-mail: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
nic-hdl: AC1601-AP
remarks: Generated from irt object IRT-CNNIC-CN
remarks: ipas@cnnic.cn is invalid
abuse-mailbox: ipas@cnnic.cn
mnt-by: APNIC-ABUSE
last-modified: 2025-09-19T17:20:32Z
source: APNIC
role: CNNIC IPAS CONFEDERATION
address: No.4, Zhongguancun No.4 South Street,
address: Haidian District, Beijing
country: CN
phone: +86-010-58813000
fax-no: +86-010-58813075
e-mail: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
nic-hdl: IPAS1-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2013-09-12T07:40:01Z
source: APNIC
person: Mao Wei
address: China Internet Information Center(CNNIC)No. 4 of South street,
address: Zhongguancun, Beijing, P.R.China 100080
country: CN
phone: +86-10-58813000
fax-no: +86-10-62559892
e-mail: ipas@cnnic.net.cn
nic-hdl: MW1-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2008-09-04T07:29:40Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 211.156.88.187
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57935
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;211.156.88.187. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026091000 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Sep 10 23:33:32 CST 2026
;; MSG SIZE rcvd: 107Host 187.88.156.211.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 187.88.156.211.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 122.202.48.251 | attackspambots | Lines containing failures of 122.202.48.251 Feb 27 21:23:28 localhost sshd[3454]: Invalid user rinko from 122.202.48.251 port 55472 Feb 27 21:23:28 localhost sshd[3454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.202.48.251 Feb 27 21:23:30 localhost sshd[3454]: Failed password for invalid user rinko from 122.202.48.251 port 55472 ssh2 Feb 27 21:23:30 localhost sshd[3454]: Received disconnect from 122.202.48.251 port 55472:11: Bye Bye [preauth] Feb 27 21:23:30 localhost sshd[3454]: Disconnected from invalid user rinko 122.202.48.251 port 55472 [preauth] Mar 17 07:05:25 g sshd[21124]: Invalid user mc from 122.202.48.251 port 48568 Mar 17 07:05:25 g sshd[21124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.202.48.251 Mar 17 07:05:27 g sshd[21124]: Failed password for invalid user mc from 122.202.48.251 port 48568 ssh2 Mar 17 07:05:27 g sshd[21124]: Received disconnect from 122.20........ ------------------------------ |
2020-03-17 16:08:39 |
| 197.41.86.157 | attackspambots | Unauthorized connection attempt detected from IP address 197.41.86.157 to port 23 |
2020-03-17 16:49:14 |
| 179.232.13.179 | attackspam | SSH bruteforce |
2020-03-17 16:24:56 |
| 98.113.78.18 | attack | Unauthorized connection attempt detected from IP address 98.113.78.18 to port 81 |
2020-03-17 17:01:33 |
| 91.67.190.97 | attackbots | Invalid user pi from 91.67.190.97 port 43806 |
2020-03-17 16:21:00 |
| 173.63.6.217 | attackspambots | Unauthorized connection attempt detected from IP address 173.63.6.217 to port 23 |
2020-03-17 16:55:28 |
| 172.247.123.207 | attackbotsspam | Invalid user docker from 172.247.123.207 port 9462 |
2020-03-17 16:28:23 |
| 189.253.107.36 | attackbots | Unauthorized connection attempt detected from IP address 189.253.107.36 to port 23 |
2020-03-17 16:50:09 |
| 125.209.67.53 | attackspambots | Unauthorized connection attempt detected from IP address 125.209.67.53 to port 445 |
2020-03-17 16:59:04 |
| 197.61.76.147 | attackbots | Unauthorized connection attempt detected from IP address 197.61.76.147 to port 23 |
2020-03-17 16:48:58 |
| 88.78.16.191 | attackbots | Mar 17 00:25:14 web1 sshd\[1353\]: Invalid user ubnt from 88.78.16.191 Mar 17 00:25:14 web1 sshd\[1353\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.78.16.191 Mar 17 00:25:16 web1 sshd\[1353\]: Failed password for invalid user ubnt from 88.78.16.191 port 57124 ssh2 Mar 17 00:25:16 web1 sshd\[1355\]: Invalid user openhabian from 88.78.16.191 Mar 17 00:25:16 web1 sshd\[1355\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.78.16.191 |
2020-03-17 16:36:35 |
| 58.87.78.55 | attack | Mar 17 03:56:16 ns41 sshd[20828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.87.78.55 Mar 17 03:56:16 ns41 sshd[20828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.87.78.55 |
2020-03-17 16:37:24 |
| 49.234.235.89 | attack | Lines containing failures of 49.234.235.89 Mar 16 06:08:27 penfold sshd[12999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.235.89 user=r.r Mar 16 06:08:29 penfold sshd[12999]: Failed password for r.r from 49.234.235.89 port 59614 ssh2 Mar 16 06:08:30 penfold sshd[12999]: Received disconnect from 49.234.235.89 port 59614:11: Bye Bye [preauth] Mar 16 06:08:30 penfold sshd[12999]: Disconnected from authenticating user r.r 49.234.235.89 port 59614 [preauth] Mar 16 06:18:49 penfold sshd[13867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.235.89 user=debian-spamd Mar 16 06:18:51 penfold sshd[13867]: Failed password for debian-spamd from 49.234.235.89 port 39826 ssh2 Mar 16 06:18:52 penfold sshd[13867]: Received disconnect from 49.234.235.89 port 39826:11: Bye Bye [preauth] Mar 16 06:18:52 penfold sshd[13867]: Disconnected from authenticating user debian-spamd 49.234.235.89 ........ ------------------------------ |
2020-03-17 16:17:23 |
| 181.64.241.219 | attackspam | Lines containing failures of 181.64.241.219 Mar 17 00:18:46 mx-in-02 sshd[32698]: Invalid user debian from 181.64.241.219 port 61621 Mar 17 00:18:46 mx-in-02 sshd[32698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.64.241.219 Mar 17 00:18:48 mx-in-02 sshd[32698]: Failed password for invalid user debian from 181.64.241.219 port 61621 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=181.64.241.219 |
2020-03-17 16:35:40 |
| 186.192.205.245 | attack | Unauthorized connection attempt detected from IP address 186.192.205.245 to port 2323 |
2020-03-17 16:52:25 |