城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 49.89.69.207 | attack | SIP/5060 Probe, BF, Hack - |
2020-01-25 03:23:52 |
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '49.64.0.0 - 49.95.255.255'
% Abuse contact for '49.64.0.0 - 49.95.255.255' is 'anti-spam@chinatelecom.cn'
inetnum: 49.64.0.0 - 49.95.255.255
netname: CHINANET-JS
descr: CHINANET jiangsu province network
descr: China Telecom
descr: 260 Zhongyang Road,Nanjing 210037
country: CN
admin-c: CH360-AP
tech-c: CS306-AP
tech-c: CN142-AP
abuse-c: AC1573-AP
status: ALLOCATED PORTABLE
remarks: service provider
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
notify: jsipmanager@163.com
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-JS
mnt-routes: MAINT-CHINANET-JS
mnt-irt: IRT-CHINANET-CN
last-modified: 2022-04-26T07:40:27Z
source: APNIC
irt: IRT-CHINANET-CN
address: No.31 ,jingrong street,beijing
address: 100032
e-mail: anti-spam@chinatelecom.cn
abuse-mailbox: anti-spam@chinatelecom.cn
admin-c: CH93-AP
tech-c: CH93-AP
auth: # Filtered
remarks: anti-spam@chinatelecom.cn was validated on 2026-05-21
mnt-by: MAINT-CHINANET
last-modified: 2026-05-21T01:31:36Z
source: APNIC
role: ABUSE CHINANETCN
country: ZZ
address: No.31 ,jingrong street,beijing
address: 100032
phone: +000000000
e-mail: anti-spam@chinatelecom.cn
admin-c: CH93-AP
tech-c: CH93-AP
nic-hdl: AC1573-AP
remarks: Generated from irt object IRT-CHINANET-CN
remarks: anti-spam@chinatelecom.cn was validated on 2026-05-21
abuse-mailbox: anti-spam@chinatelecom.cn
mnt-by: APNIC-ABUSE
last-modified: 2026-05-21T01:32:00Z
source: APNIC
person: CHINANET-JS Hostmaster
nic-hdl: CH360-AP
e-mail: jsipmanager@163.com
address: Room 1001#, 260 Zhongyang Road, Nanjing,Jiangsu Province
phone: +86-25-87799222
country: CN
mnt-by: MAINT-CHINANET-JS
last-modified: 2026-03-17T06:28:18Z
source: APNIC
person: CHINANET-JS Network Operations
nic-hdl: CN142-AP
e-mail: jsipmanager@163.com
address: Room 1001#, 260 Zhongyang Road, Nanjing,Jiangsu Province
phone: +86-25-86588721
phone: +86-25-86788130
phone: +86-25-86788122
phone: +86-25-86588787
fax-no: +86-25-86588104
country: CN
mnt-by: MAINT-CHINANET-JS
last-modified: 2022-03-15T07:09:00Z
source: APNIC
person: CHINANET-JS Security Administrater
nic-hdl: CS306-AP
e-mail: jsipmanager@163.com
address: Room 1001#, 260 Zhongyang Road, Nanjing,Jiangsu Province
phone: +86-25-87799222
country: CN
mnt-by: MAINT-CHINANET-JS
last-modified: 2026-03-17T06:29:04Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.89.69.209
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29001
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;49.89.69.209. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026070302 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jul 04 10:11:15 CST 2026
;; MSG SIZE rcvd: 105Host 209.69.89.49.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 209.69.89.49.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 187.189.181.115 | attackspam | firewall-block, port(s): 445/tcp |
2020-06-10 04:59:57 |
| 185.175.93.104 | attackspambots | TCP Port Scanning |
2020-06-10 05:01:51 |
| 51.91.247.125 | attackbotsspam | Jun 9 23:20:35 debian kernel: [636591.669636] [UFW BLOCK] IN=eth0 OUT= MAC=52:54:00:be:e4:65:08:e8:4f:6e:48:0c:08:00 SRC=51.91.247.125 DST=89.252.131.35 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=54321 PROTO=TCP SPT=50117 DPT=5672 WINDOW=65535 RES=0x00 SYN URGP=0 |
2020-06-10 04:47:26 |
| 220.135.192.123 | attackspam | Automatic report - XMLRPC Attack |
2020-06-10 04:26:28 |
| 203.151.146.216 | attackbots | SSH bruteforce |
2020-06-10 04:46:22 |
| 112.85.42.188 | attackspambots | 06/09/2020-17:02:28.403615 112.85.42.188 Protocol: 6 ET SCAN Potential SSH Scan |
2020-06-10 05:02:36 |
| 175.30.205.136 | attackbotsspam | Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF) |
2020-06-10 04:50:38 |
| 181.116.228.193 | attackspam | Jun 9 17:25:47 firewall sshd[18886]: Failed password for invalid user zhangxiaofei from 181.116.228.193 port 32860 ssh2 Jun 9 17:34:13 firewall sshd[19175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.116.228.193 user=root Jun 9 17:34:15 firewall sshd[19175]: Failed password for root from 181.116.228.193 port 52334 ssh2 ... |
2020-06-10 04:53:12 |
| 189.47.214.28 | attackbots | Jun 9 22:16:40 server sshd[12235]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.47.214.28 Jun 9 22:16:42 server sshd[12235]: Failed password for invalid user czn from 189.47.214.28 port 59346 ssh2 Jun 9 22:20:53 server sshd[12536]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.47.214.28 ... |
2020-06-10 04:35:30 |
| 157.230.37.15 | attack | /ajax-index.php?url=http://domainnamespace.top/lf.jpeg |
2020-06-10 05:01:36 |
| 222.186.169.194 | attackbots | Jun 9 22:33:39 eventyay sshd[6328]: Failed password for root from 222.186.169.194 port 1206 ssh2 Jun 9 22:33:42 eventyay sshd[6328]: Failed password for root from 222.186.169.194 port 1206 ssh2 Jun 9 22:33:45 eventyay sshd[6328]: Failed password for root from 222.186.169.194 port 1206 ssh2 Jun 9 22:33:49 eventyay sshd[6328]: Failed password for root from 222.186.169.194 port 1206 ssh2 ... |
2020-06-10 04:56:24 |
| 165.22.107.13 | attackbotsspam | 165.22.107.13 - - [09/Jun/2020:22:05:35 +0200] "POST /xmlrpc.php HTTP/1.1" 403 461 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 165.22.107.13 - - [09/Jun/2020:22:20:39 +0200] "POST /xmlrpc.php HTTP/1.1" 403 7066 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-06-10 04:43:21 |
| 178.128.125.10 | attackbotsspam | $f2bV_matches |
2020-06-10 04:44:16 |
| 157.230.31.236 | attackbots | Jun 9 22:33:15 legacy sshd[588]: Failed password for root from 157.230.31.236 port 41016 ssh2 Jun 9 22:36:22 legacy sshd[692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.31.236 Jun 9 22:36:25 legacy sshd[692]: Failed password for invalid user admin from 157.230.31.236 port 42606 ssh2 ... |
2020-06-10 04:36:53 |
| 46.38.150.153 | attackbotsspam | 2020-06-09 23:35:11 auth_plain authenticator failed for (User) [46.38.150.153]: 535 Incorrect authentication data (set_id=testdomain@lavrinenko.info) 2020-06-09 23:36:35 auth_plain authenticator failed for (User) [46.38.150.153]: 535 Incorrect authentication data (set_id=kp@lavrinenko.info) ... |
2020-06-10 04:37:31 |