城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '42.160.0.0 - 42.175.255.255'
% Abuse contact for '42.160.0.0 - 42.175.255.255' is 'liuxin15@cmtt.chinamobile.com'
inetnum: 42.160.0.0 - 42.175.255.255
netname: NorthStar
descr: North Star Information Hi.tech Ltd. Co.
descr: No.18, Beifengwo Road, Haidian District,
descr: Beijing, China, 100038
country: CN
org: ORG-NSIH1-AP
admin-c: CW1171-AP
tech-c: LQ568-AP
abuse-c: AN833-AP
status: ALLOCATED PORTABLE
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
mnt-by: APNIC-HM
mnt-lower: MAINT-NORTHSTAR-APNIC
mnt-routes: MAINT-NORTHSTAR-APNIC
mnt-irt: IRT-NORTHSTAR-CN
last-modified: 2020-07-07T04:54:06Z
source: APNIC
irt: IRT-NORTHSTAR-CN
address: No.18, Beifengwo Road, Haidian District,
address: Beijing, China
e-mail: liuxin15@cmtt.chinamobile.com
abuse-mailbox: liuxin15@cmtt.chinamobile.com
admin-c: CW1171-AP
tech-c: LQ568-AP
auth: # Filtered
remarks: liuxin15@cmtt.chinamobile.com
remarks: liuxin15@cmtt.chinamobile.com
remarks: liuxin15@cmtt.chinamobile.com was validated on 2026-05-21
mnt-by: MAINT-NORTHSTAR-APNIC
last-modified: 2026-05-21T07:58:00Z
source: APNIC
organisation: ORG-NSIH1-AP
org-name: North Star Information Hi.tech Ltd. Co.
org-type: LIR
country: CN
address: No.18, Beifengwo Road, Haidian District,
phone: +86-13910572340
fax-no: +86-13910572340
e-mail: liuxin15@cmtt.chinamobile.com
mnt-ref: APNIC-HM
mnt-by: APNIC-HM
last-modified: 2023-09-05T02:15:30Z
source: APNIC
role: ABUSE NORTHSTARCN
country: ZZ
address: No.18, Beifengwo Road, Haidian District,
address: Beijing, China
phone: +000000000
e-mail: liuxin15@cmtt.chinamobile.com
admin-c: CW1171-AP
tech-c: LQ568-AP
nic-hdl: AN833-AP
remarks: Generated from irt object IRT-NORTHSTAR-CN
remarks: liuxin15@cmtt.chinamobile.com was validated on 2026-05-21
abuse-mailbox: liuxin15@cmtt.chinamobile.com
mnt-by: APNIC-ABUSE
last-modified: 2026-05-21T08:06:57Z
source: APNIC
person: Cindy Wang
address: No.18, Beifengwo Road, Haidian District,
address: Beijing, China
country: CN
phone: +86-10-51892147
fax-no: +86-10-51890674
e-mail: cindywang.ns@gmail.com
nic-hdl: CW1171-AP
mnt-by: MAINT-NORTHSTAR-APNIC
last-modified: 2009-02-10T07:32:20Z
source: APNIC
person: Lu Qian
address: No.18, Beifengwo Road, Haidian District,
address: Beijing, China
country: CN
phone: +86-10-51890418
fax-no: +86-10-51890674
e-mail: wpli@chinatietong.com
nic-hdl: LQ568-AP
mnt-by: MAINT-NORTHSTAR-APNIC
last-modified: 2015-10-22T01:18:00Z
source: APNIC
% Information related to '42.160.0.0/12AS9394'
route: 42.160.0.0/12
descr: North Star Information Hi.tech Ltd. Co.
origin: AS9394
country: CN
notify: luqian.ns@gmail.com
mnt-by: MAINT-NORTHSTAR-APNIC
last-modified: 2013-06-12T15:22:20Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-US2); <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.168.146.111
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29108
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;42.168.146.111. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026082001 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Aug 21 02:54:11 CST 2026
;; MSG SIZE rcvd: 107Host 111.146.168.42.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 111.146.168.42.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 187.60.139.253 | attackspam | Listed on barracudaCentral plus zen-spamhaus / proto=6 . srcport=57687 . dstport=82 . (3523) |
2020-10-06 00:39:40 |
| 152.67.47.139 | attackspam | Oct 4 20:36:51 scw-6657dc sshd[22310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.67.47.139 user=root Oct 4 20:36:51 scw-6657dc sshd[22310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.67.47.139 user=root Oct 4 20:36:54 scw-6657dc sshd[22310]: Failed password for root from 152.67.47.139 port 59408 ssh2 ... |
2020-10-06 01:19:50 |
| 41.90.105.202 | attack | 41.90.105.202 (KE/Kenya/41-90-105-202.safaricombusiness.co.ke), 12 distributed sshd attacks on account [root] in the last 3600 secs |
2020-10-06 00:59:30 |
| 222.186.42.213 | attack | Oct 5 19:12:12 dev0-dcde-rnet sshd[20961]: Failed password for root from 222.186.42.213 port 29786 ssh2 Oct 5 19:12:26 dev0-dcde-rnet sshd[20963]: Failed password for root from 222.186.42.213 port 51964 ssh2 |
2020-10-06 01:18:09 |
| 106.12.212.89 | attackspambots | prod11 ... |
2020-10-06 00:47:49 |
| 180.250.247.45 | attackspambots | Oct 5 17:50:23 nextcloud sshd\[21628\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.247.45 user=root Oct 5 17:50:25 nextcloud sshd\[21628\]: Failed password for root from 180.250.247.45 port 51978 ssh2 Oct 5 17:54:38 nextcloud sshd\[27000\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.247.45 user=root |
2020-10-06 00:49:18 |
| 172.116.84.144 | attackspam | Automatic report - Port Scan Attack |
2020-10-06 01:12:04 |
| 129.204.208.34 | attackbots | bruteforce detected |
2020-10-06 01:07:52 |
| 202.29.51.28 | attack | s2.hscode.pl - SSH Attack |
2020-10-06 00:44:40 |
| 115.207.4.139 | attackbotsspam | 115.207.4.139 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct 5 04:10:26 server2 sshd[319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.179.87 user=root Oct 5 04:10:28 server2 sshd[319]: Failed password for root from 188.131.179.87 port 35657 ssh2 Oct 5 04:12:10 server2 sshd[2186]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.207.4.139 user=root Oct 5 04:10:55 server2 sshd[637]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.230.29.79 user=root Oct 5 04:10:57 server2 sshd[637]: Failed password for root from 43.230.29.79 port 52470 ssh2 Oct 5 04:09:55 server2 sshd[32092]: Failed password for root from 91.106.193.72 port 32850 ssh2 IP Addresses Blocked: 188.131.179.87 (CN/China/-) |
2020-10-06 00:45:20 |
| 106.12.113.111 | attack | Port scan denied |
2020-10-06 01:18:52 |
| 35.209.209.15 | attackbots | Oct 5 17:44:23 localhost sshd\[5544\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.209.209.15 user=root Oct 5 17:44:25 localhost sshd\[5544\]: Failed password for root from 35.209.209.15 port 45448 ssh2 Oct 5 17:48:13 localhost sshd\[5805\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.209.209.15 user=root Oct 5 17:48:14 localhost sshd\[5805\]: Failed password for root from 35.209.209.15 port 50922 ssh2 Oct 5 17:52:07 localhost sshd\[6073\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.209.209.15 user=root ... |
2020-10-06 01:07:23 |
| 190.39.162.200 | attackbots | Port scan on 1 port(s): 445 |
2020-10-06 00:55:14 |
| 104.223.197.227 | attackspam | Oct 5 18:44:12 vps647732 sshd[25478]: Failed password for root from 104.223.197.227 port 50576 ssh2 ... |
2020-10-06 00:55:51 |
| 165.22.103.237 | attackspambots | [N3.H3.VM3] Port Scanner Detected Blocked by UFW |
2020-10-06 00:54:37 |