City: Xi’an
Region: Shaanxi
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '1.80.0.0 - 1.87.255.255'
% Abuse contact for '1.80.0.0 - 1.87.255.255' is 'anti-spam@chinatelecom.cn'
inetnum: 1.80.0.0 - 1.87.255.255
netname: CHINANET-SN
descr: CHINANET SHAANXI PROVINCE NETWORK
descr: China Telecom
descr: No.56,gaoxin street
descr: Beijing 100032
country: CN
admin-c: XC9-AP
tech-c: XC9-AP
abuse-c: AC1573-AP
status: ALLOCATED PORTABLE
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-SHAANXI
mnt-routes: MAINT-CHINANET-SHAANXI
mnt-irt: IRT-CHINANET-CN
last-modified: 2021-06-15T08:04:55Z
source: APNIC
irt: IRT-CHINANET-CN
address: No.31 ,jingrong street,beijing
address: 100032
e-mail: anti-spam@chinatelecom.cn
abuse-mailbox: anti-spam@chinatelecom.cn
admin-c: CH93-AP
tech-c: CH93-AP
auth: # Filtered
remarks: anti-spam@chinatelecom.cn was validated on 2026-05-21
mnt-by: MAINT-CHINANET
last-modified: 2026-05-21T01:31:36Z
source: APNIC
role: ABUSE CHINANETCN
country: ZZ
address: No.31 ,jingrong street,beijing
address: 100032
phone: +000000000
e-mail: anti-spam@chinatelecom.cn
admin-c: CH93-AP
tech-c: CH93-AP
nic-hdl: AC1573-AP
remarks: Generated from irt object IRT-CHINANET-CN
remarks: anti-spam@chinatelecom.cn was validated on 2026-05-21
abuse-mailbox: anti-spam@chinatelecom.cn
mnt-by: APNIC-ABUSE
last-modified: 2026-05-21T01:32:00Z
source: APNIC
person: Xianghong Cao
address: Shanxi provice data communication Bureau
address: 185# zhuque Road
address: Xi'an city, Shanxi provice 710061
country: CN
phone: +8629-523-3633
fax-no: +8629-522-8093
e-mail: sxic@public.xa.sn.cn
nic-hdl: XC9-AP
mnt-by: MAINT-CHINANET
last-modified: 2017-03-17T01:44:04Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU4)
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.80.139.87
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29348
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;1.80.139.87. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026070300 1800 900 604800 86400
;; Query time: 30 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jul 03 15:59:02 CST 2026
;; MSG SIZE rcvd: 104
Host 87.139.80.1.in-addr.arpa not found: 2(SERVFAIL)
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 87.139.80.1.in-addr.arpa: SERVFAIL
| IP | Type | Details | Datetime |
|---|---|---|---|
| 114.44.52.149 | attackbotsspam | 37215/tcp 37215/tcp 37215/tcp... [2019-07-07/09]4pkt,1pt.(tcp) |
2019-07-10 16:12:15 |
| 103.101.160.94 | attackspambots | $f2bV_matches |
2019-07-10 16:25:07 |
| 45.13.39.53 | attackbotsspam | 2019-07-10T12:35:19.547264ns1.unifynetsol.net postfix/smtpd\[11714\]: warning: unknown\[45.13.39.53\]: SASL LOGIN authentication failed: authentication failure 2019-07-10T12:36:09.283604ns1.unifynetsol.net postfix/smtpd\[6672\]: warning: unknown\[45.13.39.53\]: SASL LOGIN authentication failed: authentication failure 2019-07-10T12:37:02.173868ns1.unifynetsol.net postfix/smtpd\[6672\]: warning: unknown\[45.13.39.53\]: SASL LOGIN authentication failed: authentication failure 2019-07-10T12:37:53.002882ns1.unifynetsol.net postfix/smtpd\[13258\]: warning: unknown\[45.13.39.53\]: SASL LOGIN authentication failed: authentication failure 2019-07-10T12:38:44.449140ns1.unifynetsol.net postfix/smtpd\[13258\]: warning: unknown\[45.13.39.53\]: SASL LOGIN authentication failed: authentication failure |
2019-07-10 15:38:27 |
| 5.206.237.50 | attack | Unauthorized IMAP connection attempt |
2019-07-10 15:49:43 |
| 46.174.88.1 | attackbotsspam | [portscan] Port scan |
2019-07-10 16:05:58 |
| 91.237.189.1 | attackspam | [portscan] Port scan |
2019-07-10 16:00:33 |
| 82.114.89.130 | attackbotsspam | 445/tcp 445/tcp 445/tcp... [2019-05-10/07-09]15pkt,1pt.(tcp) |
2019-07-10 16:20:54 |
| 46.161.27.42 | attackspam | 10.07.2019 07:38:20 Connection to port 1723 blocked by firewall |
2019-07-10 16:12:37 |
| 105.247.157.59 | attackspambots | Jul 10 02:02:41 OPSO sshd\[9871\]: Invalid user stella from 105.247.157.59 port 44661 Jul 10 02:02:41 OPSO sshd\[9871\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=105.247.157.59 Jul 10 02:02:43 OPSO sshd\[9871\]: Failed password for invalid user stella from 105.247.157.59 port 44661 ssh2 Jul 10 02:06:42 OPSO sshd\[10208\]: Invalid user administrador from 105.247.157.59 port 58691 Jul 10 02:06:42 OPSO sshd\[10208\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=105.247.157.59 |
2019-07-10 15:36:20 |
| 106.12.193.160 | attackspam | Jul 9 23:40:05 localhost sshd\[65451\]: Invalid user myftp from 106.12.193.160 port 55284 Jul 9 23:40:05 localhost sshd\[65451\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.193.160 Jul 9 23:40:07 localhost sshd\[65451\]: Failed password for invalid user myftp from 106.12.193.160 port 55284 ssh2 Jul 9 23:43:10 localhost sshd\[65597\]: Invalid user r from 106.12.193.160 port 54044 Jul 9 23:43:10 localhost sshd\[65597\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.193.160 ... |
2019-07-10 16:13:40 |
| 159.65.150.212 | attackspambots | Scanning random ports - tries to find possible vulnerable services |
2019-07-10 16:24:03 |
| 152.169.204.74 | attackspam | Jul 8 17:06:32 *** sshd[15484]: Invalid user rp from 152.169.204.74 port 23907 Jul 8 17:06:33 *** sshd[15484]: Failed password for invalid user rp from 152.169.204.74 port 23907 ssh2 Jul 8 17:06:34 *** sshd[15484]: Received disconnect from 152.169.204.74 port 23907:11: Bye Bye [preauth] Jul 8 17:06:34 *** sshd[15484]: Disconnected from 152.169.204.74 port 23907 [preauth] Jul 8 17:07:00 *** sshd[15870]: Invalid user rp from 152.169.204.74 port 32193 Jul 8 17:07:02 *** sshd[15870]: Failed password for invalid user rp from 152.169.204.74 port 32193 ssh2 Jul 8 17:07:02 *** sshd[15870]: Received disconnect from 152.169.204.74 port 32193:11: Bye Bye [preauth] Jul 8 17:07:02 *** sshd[15870]: Disconnected from 152.169.204.74 port 32193 [preauth] Jul 8 17:10:07 *** sshd[18230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.169.204.74 user=r.r Jul 8 17:10:10 *** sshd[18230]: Failed password for r.r from 152.169.204.74 port ........ ------------------------------- |
2019-07-10 16:07:10 |
| 123.207.241.223 | attack | Jul 9 23:06:09 ip-172-31-62-245 sshd\[5916\]: Invalid user vr from 123.207.241.223\ Jul 9 23:06:11 ip-172-31-62-245 sshd\[5916\]: Failed password for invalid user vr from 123.207.241.223 port 43778 ssh2\ Jul 9 23:13:55 ip-172-31-62-245 sshd\[6039\]: Invalid user lisa from 123.207.241.223\ Jul 9 23:13:57 ip-172-31-62-245 sshd\[6039\]: Failed password for invalid user lisa from 123.207.241.223 port 42448 ssh2\ Jul 9 23:15:22 ip-172-31-62-245 sshd\[6057\]: Invalid user wordpress from 123.207.241.223\ |
2019-07-10 16:14:44 |
| 188.131.145.123 | attackbotsspam | Jul 10 01:43:09 ns41 sshd[22782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.145.123 Jul 10 01:43:11 ns41 sshd[22782]: Failed password for invalid user dpi from 188.131.145.123 port 44902 ssh2 Jul 10 01:50:45 ns41 sshd[23128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.145.123 |
2019-07-10 15:56:50 |
| 211.149.210.240 | attackspam | 10 attempts against mh-pma-try-ban on grass.magehost.pro |
2019-07-10 15:35:46 |