City: Nanjing
Region: Jiangsu
Country: China
Internet Service Provider: China Unicom
Hostname: unknown
Organization: unknown
Usage Type: unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '112.80.0.0 - 112.87.255.255'
% Abuse contact for '112.80.0.0 - 112.87.255.255' is 'zhaoyz3@chinaunicom.cn'
inetnum: 112.80.0.0 - 112.87.255.255
netname: UNICOM-JS
descr: China Unicom Jiangsu province network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: LL58-AP
abuse-c: AC1718-AP
status: ALLOCATED PORTABLE
remarks: service provider
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-JS
mnt-routes: MAINT-CNCGROUP-RR
mnt-irt: IRT-CU-CN
last-modified: 2025-01-22T13:12:40Z
source: APNIC
irt: IRT-CU-CN
address: No.21,Financial Street
address: Beijing,100033
address: P.R.China
e-mail: zhaoyz3@chinaunicom.cn
abuse-mailbox: zhaoyz3@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
auth: # Filtered
remarks: zhaoyz3@chinaunicom.cn was validated on 2026-05-08
mnt-by: MAINT-CNCGROUP
last-modified: 2026-05-09T04:50:16Z
source: APNIC
role: ABUSE CUCN
country: ZZ
address: No.21,Financial Street
address: Beijing,100033
address: P.R.China
phone: +000000000
e-mail: zhaoyz3@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
nic-hdl: AC1718-AP
remarks: Generated from irt object IRT-CU-CN
remarks: zhaoyz3@chinaunicom.cn was validated on 2026-05-08
abuse-mailbox: zhaoyz3@chinaunicom.cn
mnt-by: APNIC-ABUSE
last-modified: 2026-05-08T01:31:32Z
source: APNIC
person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: hqs-ipabuse@chinaunicom.cn
address: No.21,Jin-Rong Street
address: Beijing,100033
address: P.R.China
phone: +86-10-66259764
fax-no: +86-10-66259764
country: CN
mnt-by: MAINT-CNCGROUP
last-modified: 2017-08-17T06:13:16Z
source: APNIC
person: Lan Li
nic-hdl: LL58-AP
e-mail: js-cu-ipmanage@chinaunicom.cn
address: No. 65 Beijing West Road,Nanjing,China
phone: +86257900060
fax-no: +86252900280
country: CN
mnt-by: MAINT-NEW
last-modified: 2013-08-15T02:13:11Z
source: APNIC
% Information related to '112.80.0.0/13AS4837'
route: 112.80.0.0/13
descr: China Unicom CHINA169 Jiangsu Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
last-modified: 2008-12-31T01:00:07Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU4); <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.86.225.157
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28883
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;112.86.225.157. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026070700 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jul 07 23:34:12 CST 2026
;; MSG SIZE rcvd: 107157.225.86.112.in-addr.arpa domain name pointer sogouspider-112-86-225-157.crawl.sogou.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
157.225.86.112.in-addr.arpa name = sogouspider-112-86-225-157.crawl.sogou.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 94.74.100.211 | attackspam | 94.74.100.211 - - [02/Sep/2020:00:55:38 +0100] "POST /wp-login.php HTTP/1.1" 200 1905 "https://www.hbpaynter.co.uk/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_29_76) AppleWebKit/531.70.17 (KHTML, like Gecko) Chrome/55.1.6914.0642 Safari/532.00 Edge/36.94647" 94.74.100.211 - - [02/Sep/2020:00:55:38 +0100] "POST /wp-login.php HTTP/1.1" 200 1912 "https://www.hbpaynter.co.uk/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_29_76) AppleWebKit/531.70.17 (KHTML, like Gecko) Chrome/55.1.6914.0642 Safari/532.00 Edge/36.94647" 94.74.100.211 - - [02/Sep/2020:00:55:38 +0100] "POST /wp-login.php HTTP/1.1" 200 1909 "https://www.hbpaynter.co.uk/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_29_76) AppleWebKit/531.70.17 (KHTML, like Gecko) Chrome/55.1.6914.0642 Safari/532.00 Edge/36.94647" ... |
2020-09-02 08:46:09 |
| 177.86.124.13 | attack | Attempted connection to port 445. |
2020-09-02 08:26:39 |
| 188.13.201.91 | attackbotsspam | "XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES: |
2020-09-02 08:24:13 |
| 200.123.30.18 | attackspambots | Unauthorized connection attempt from IP address 200.123.30.18 on Port 445(SMB) |
2020-09-02 08:52:44 |
| 13.234.186.29 | attack | 2020-09-01T18:46:06.530768ns386461 sshd\[18912\]: Invalid user aditya from 13.234.186.29 port 54240 2020-09-01T18:46:06.535207ns386461 sshd\[18912\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-13-234-186-29.ap-south-1.compute.amazonaws.com 2020-09-01T18:46:08.221315ns386461 sshd\[18912\]: Failed password for invalid user aditya from 13.234.186.29 port 54240 ssh2 2020-09-01T18:53:34.438211ns386461 sshd\[26054\]: Invalid user ysw from 13.234.186.29 port 46284 2020-09-01T18:53:34.440801ns386461 sshd\[26054\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-13-234-186-29.ap-south-1.compute.amazonaws.com ... |
2020-09-02 08:29:55 |
| 37.208.183.8 | attackspam | 37.208.183.8 - - [01/Sep/2020:19:05:32 +0200] "POST /xmlrpc.php HTTP/1.1" 200 254 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36" 37.208.183.8 - - [01/Sep/2020:19:05:35 +0200] "POST /xmlrpc.php HTTP/1.1" 200 254 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36" 37.208.183.8 - - [01/Sep/2020:19:05:39 +0200] "POST /xmlrpc.php HTTP/1.1" 200 254 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36" 37.208.183.8 - - [01/Sep/2020:19:05:43 +0200] "POST /xmlrpc.php HTTP/1.1" 200 254 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36" 37.208.183.8 - - [01/Sep/2020:19:05:45 +0200] "POST /xmlrpc.php HTTP/1.1" 200 254 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 ... |
2020-09-02 08:53:40 |
| 92.112.174.217 | attackbots | Unauthorized connection attempt from IP address 92.112.174.217 on Port 139(NETBIOS) |
2020-09-02 08:40:46 |
| 37.70.129.132 | attackbots | IP 37.70.129.132 attacked honeypot on port: 23 at 9/1/2020 9:45:21 AM |
2020-09-02 08:37:20 |
| 186.89.74.224 | attack | Attempted connection to port 445. |
2020-09-02 08:24:46 |
| 171.5.178.67 | attackbotsspam | "XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES: |
2020-09-02 08:42:06 |
| 201.215.238.79 | attack | Brute Force |
2020-09-02 08:19:06 |
| 167.248.133.25 | attackspam | Honeypot hit. |
2020-09-02 08:27:40 |
| 200.73.128.148 | attackbots | Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-01T22:33:43Z and 2020-09-01T22:44:21Z |
2020-09-02 08:19:33 |
| 174.114.16.224 | attackspambots | Attempted connection to port 23. |
2020-09-02 08:27:00 |
| 92.222.74.255 | attackspambots | Invalid user cactiuser from 92.222.74.255 port 60360 |
2020-09-02 08:44:17 |