城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '42.88.0.0 - 42.95.255.255'
% Abuse contact for '42.88.0.0 - 42.95.255.255' is 'anti-spam@chinatelecom.cn'
inetnum: 42.88.0.0 - 42.95.255.255
netname: CHINANET-GS
descr: CHINANET Gansu province network
descr: China Telecom
descr: No.31,jingrong street
descr: Beijing 100032
country: CN
admin-c: YZ37-AP
tech-c: YZ37-AP
abuse-c: AC1573-AP
status: ALLOCATED PORTABLE
remarks: service provider
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
notify: yangermy@hotmail.com
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-GS
mnt-routes: MAINT-CHINANET-GS
mnt-irt: IRT-CHINANET-CN
last-modified: 2021-06-15T08:05:06Z
source: APNIC
irt: IRT-CHINANET-CN
address: No.31 ,jingrong street,beijing
address: 100032
e-mail: anti-spam@chinatelecom.cn
abuse-mailbox: anti-spam@chinatelecom.cn
admin-c: CH93-AP
tech-c: CH93-AP
auth: # Filtered
remarks: anti-spam@chinatelecom.cn was validated on 2026-05-21
mnt-by: MAINT-CHINANET
last-modified: 2026-05-21T01:31:36Z
source: APNIC
role: ABUSE CHINANETCN
country: ZZ
address: No.31 ,jingrong street,beijing
address: 100032
phone: +000000000
e-mail: anti-spam@chinatelecom.cn
admin-c: CH93-AP
tech-c: CH93-AP
nic-hdl: AC1573-AP
remarks: Generated from irt object IRT-CHINANET-CN
remarks: anti-spam@chinatelecom.cn was validated on 2026-05-21
abuse-mailbox: anti-spam@chinatelecom.cn
mnt-by: APNIC-ABUSE
last-modified: 2026-05-21T01:32:00Z
source: APNIC
person: Yang Zhanrong
address: CHINA,LANZHOU,No.405 Pingliang Road
country: CN
phone: +86-931-8395823
e-mail: yangmy.gsnoc@chinatelecom.cn
nic-hdl: YZ37-AP
mnt-by: MAINT-CHINANET-GS
last-modified: 2020-03-12T07:56:08Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.92.77.107
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14519
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;42.92.77.107. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026111000 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Nov 11 00:02:01 CST 2026
;; MSG SIZE rcvd: 105Host 107.77.92.42.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 107.77.92.42.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 162.244.95.2 | attackspam | 162.244.95.2 - - [10/Nov/2019:01:01:55 +0100] "GET /wp-login.php HTTP/1.1" 200 1238 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 162.244.95.2 - - [10/Nov/2019:01:01:56 +0100] "POST /wp-login.php HTTP/1.1" 200 1631 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 162.244.95.2 - - [10/Nov/2019:01:05:38 +0100] "GET /wp-login.php HTTP/1.1" 200 1202 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 162.244.95.2 - - [10/Nov/2019:01:05:39 +0100] "POST /wp-login.php HTTP/1.1" 200 1595 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 162.244.95.2 - - [10/Nov/2019:01:11:29 +0100] "GET /wp-login.php HTTP/1.1" 200 4404 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 162.244.95.2 - - [10/Nov/2019:01:11:30 +0100] "POST /wp-login.php HTTP/1.1" 200 4404 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-11-10 09:18:46 |
| 182.72.161.90 | attack | ssh failed login |
2019-11-10 09:07:45 |
| 192.99.166.243 | attackspam | Nov 9 21:30:20 rb06 sshd[25911]: Failed password for r.r from 192.99.166.243 port 56770 ssh2 Nov 9 21:30:20 rb06 sshd[25911]: Received disconnect from 192.99.166.243: 11: Bye Bye [preauth] Nov 9 21:37:44 rb06 sshd[10986]: Failed password for invalid user unt from 192.99.166.243 port 33256 ssh2 Nov 9 21:37:44 rb06 sshd[10986]: Received disconnect from 192.99.166.243: 11: Bye Bye [preauth] Nov 9 21:41:22 rb06 sshd[12369]: Failed password for r.r from 192.99.166.243 port 46338 ssh2 Nov 9 21:41:22 rb06 sshd[12369]: Received disconnect from 192.99.166.243: 11: Bye Bye [preauth] Nov 9 21:44:51 rb06 sshd[21416]: Failed password for r.r from 192.99.166.243 port 59414 ssh2 Nov 9 21:44:51 rb06 sshd[21416]: Received disconnect from 192.99.166.243: 11: Bye Bye [preauth] Nov 9 21:48:31 rb06 sshd[22106]: Failed password for invalid user sg from 192.99.166.243 port 44264 ssh2 Nov 9 21:48:31 rb06 sshd[22106]: Received disconnect from 192.99.166.243: 11: Bye Bye [preauth] Nov ........ ------------------------------- |
2019-11-10 09:17:28 |
| 203.192.196.50 | attackbots | Brute force attempt |
2019-11-10 09:10:46 |
| 92.118.38.38 | attackbotsspam | Nov 10 02:14:50 andromeda postfix/smtpd\[24723\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: authentication failure Nov 10 02:15:03 andromeda postfix/smtpd\[24388\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: authentication failure Nov 10 02:15:22 andromeda postfix/smtpd\[24723\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: authentication failure Nov 10 02:15:26 andromeda postfix/smtpd\[28944\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: authentication failure Nov 10 02:15:38 andromeda postfix/smtpd\[24388\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: authentication failure |
2019-11-10 09:16:36 |
| 80.211.159.118 | attackbots | Nov 10 00:55:46 OneL sshd\[423\]: Invalid user ma from 80.211.159.118 port 45166 Nov 10 00:55:46 OneL sshd\[423\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.159.118 Nov 10 00:55:48 OneL sshd\[423\]: Failed password for invalid user ma from 80.211.159.118 port 45166 ssh2 Nov 10 00:59:28 OneL sshd\[445\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.159.118 user=root Nov 10 00:59:30 OneL sshd\[445\]: Failed password for root from 80.211.159.118 port 53492 ssh2 ... |
2019-11-10 09:12:16 |
| 88.225.215.221 | attack | DATE:2019-11-10 01:11:52, IP:88.225.215.221, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc-bis) |
2019-11-10 08:56:48 |
| 119.29.2.157 | attack | Nov 10 01:22:37 herz-der-gamer sshd[29660]: Invalid user wcsuser from 119.29.2.157 port 46707 Nov 10 01:22:37 herz-der-gamer sshd[29660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.2.157 Nov 10 01:22:37 herz-der-gamer sshd[29660]: Invalid user wcsuser from 119.29.2.157 port 46707 Nov 10 01:22:39 herz-der-gamer sshd[29660]: Failed password for invalid user wcsuser from 119.29.2.157 port 46707 ssh2 ... |
2019-11-10 08:47:35 |
| 47.254.131.234 | attackspam | Nov 10 03:36:30 server sshd\[25390\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.254.131.234 user=root Nov 10 03:36:32 server sshd\[25390\]: Failed password for root from 47.254.131.234 port 39904 ssh2 Nov 10 03:40:11 server sshd\[26789\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.254.131.234 user=root Nov 10 03:40:13 server sshd\[26789\]: Failed password for root from 47.254.131.234 port 50230 ssh2 Nov 10 03:43:47 server sshd\[27572\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.254.131.234 user=root ... |
2019-11-10 09:04:07 |
| 107.173.140.173 | attackbotsspam | Nov 10 01:23:29 amit sshd\[23635\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.173.140.173 user=root Nov 10 01:23:31 amit sshd\[23635\]: Failed password for root from 107.173.140.173 port 52014 ssh2 Nov 10 01:27:01 amit sshd\[23655\]: Invalid user login from 107.173.140.173 ... |
2019-11-10 09:18:10 |
| 211.219.80.99 | attack | Nov 10 01:25:56 meumeu sshd[8453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.219.80.99 Nov 10 01:25:59 meumeu sshd[8453]: Failed password for invalid user nfsnobod from 211.219.80.99 port 37144 ssh2 Nov 10 01:30:38 meumeu sshd[9072]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.219.80.99 ... |
2019-11-10 09:01:37 |
| 218.92.0.200 | attackbots | 2019-11-10T01:19:09.005486abusebot-4.cloudsearch.cf sshd\[12818\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.200 user=root |
2019-11-10 09:21:06 |
| 45.55.88.94 | attack | 2019-11-09T17:54:35.6734371495-001 sshd\[10095\]: Failed password for invalid user kamal from 45.55.88.94 port 49807 ssh2 2019-11-09T18:56:42.2048781495-001 sshd\[12228\]: Invalid user onetwothree from 45.55.88.94 port 56138 2019-11-09T18:56:42.2085541495-001 sshd\[12228\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=retailnes.com 2019-11-09T18:56:44.5132961495-001 sshd\[12228\]: Failed password for invalid user onetwothree from 45.55.88.94 port 56138 ssh2 2019-11-09T19:01:57.3966831495-001 sshd\[12505\]: Invalid user password from 45.55.88.94 port 47254 2019-11-09T19:01:57.4070511495-001 sshd\[12505\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=retailnes.com ... |
2019-11-10 08:45:38 |
| 213.87.224.40 | attackbotsspam | Chat Spam |
2019-11-10 08:50:53 |
| 222.186.175.167 | attack | Nov 10 02:17:31 arianus sshd\[25055\]: Unable to negotiate with 222.186.175.167 port 13326: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 \[preauth\] ... |
2019-11-10 09:20:27 |