City: unknown
Region: unknown
Country: China
Internet Service Provider: China Unicom
Hostname: unknown
Organization: unknown
Usage Type: unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '118.81.112.0 - 118.81.127.255'
% Abuse contact for '118.81.112.0 - 118.81.127.255' is 'hqs-ipabuse@chinaunicom.cn'
inetnum: 118.81.112.0 - 118.81.127.255
netname: sxty-dadongguan-BAS
descr: sxty-dadongguan-BAS
country: cn
admin-c: YZ225-AP
tech-c: YZ225-AP
abuse-c: AC1718-AP
status: ASSIGNED NON-PORTABLE
mnt-by: MAINT-CNCGROUP-SX
mnt-irt: IRT-CU-CN
last-modified: 2023-10-21T03:39:28Z
source: APNIC
irt: IRT-CU-CN
address: No.21,Financial Street
address: Beijing,100033
address: P.R.China
e-mail: hqs-ipabuse@chinaunicom.cn
abuse-mailbox: hqs-ipabuse@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
auth: # Filtered
remarks: hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
mnt-by: MAINT-CNCGROUP
last-modified: 2026-08-19T00:57:22Z
source: APNIC
role: ABUSE CUCN
country: ZZ
address: No.21,Financial Street
address: Beijing,100033
address: P.R.China
phone: +000000000
e-mail: hqs-ipabuse@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
nic-hdl: AC1718-AP
remarks: Generated from irt object IRT-CU-CN
remarks: hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
abuse-mailbox: hqs-ipabuse@chinaunicom.cn
mnt-by: APNIC-ABUSE
last-modified: 2026-08-20T03:22:23Z
source: APNIC
person: Ying Zhao
nic-hdl: YZ225-AP
e-mail: zhy0607@public.ty.sx.cn
address: Taiyuan Shanxi
phone: +86-351-4091749
fax-no: +86-351-4088347
country: CN
mnt-by: MAINT-NEW
last-modified: 2008-09-04T07:30:24Z
source: APNIC
% Information related to '118.80.0.0/15AS4837'
route: 118.80.0.0/15
descr: CNC Group CHINA169 Shanxi Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
last-modified: 2008-09-04T07:55:02Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 118.81.123.253
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4245
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;118.81.123.253. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026102100 1800 900 604800 86400
;; Query time: 5 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Oct 21 19:30:53 CST 2026
;; MSG SIZE rcvd: 107253.123.81.118.in-addr.arpa domain name pointer 253.123.81.118.adsl-pool.sx.cn.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
253.123.81.118.in-addr.arpa name = 253.123.81.118.adsl-pool.sx.cn.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 118.89.173.215 | attackbots | Jun 28 10:46:01 home sshd[882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.173.215 Jun 28 10:46:03 home sshd[882]: Failed password for invalid user xum from 118.89.173.215 port 15988 ssh2 Jun 28 10:48:59 home sshd[1097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.173.215 ... |
2020-06-28 16:56:34 |
| 118.24.239.245 | attackspambots | Brute force SMTP login attempted. ... |
2020-06-28 17:30:08 |
| 27.224.149.54 | attack | GET http://api.gxout.com/proxy/check.aspx HTTP/1.1 403 0 "http://api.gxout.com/proxy/check.aspx" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" |
2020-06-28 16:49:51 |
| 52.187.19.52 | attackbotsspam | Invalid user oracle from 52.187.19.52 port 44652 |
2020-06-28 17:22:34 |
| 14.172.239.197 | attack | Automatic report - Port Scan Attack |
2020-06-28 16:59:19 |
| 178.62.118.53 | attackbots | $f2bV_matches |
2020-06-28 17:08:54 |
| 59.61.228.154 | attackbotsspam | Jun 28 05:51:07 debian-2gb-nbg1-2 kernel: \[15574916.579161\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=59.61.228.154 DST=195.201.40.59 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=8917 DF PROTO=TCP SPT=13150 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 |
2020-06-28 16:49:21 |
| 125.76.212.138 | attackbots | 2020-06-28T08:11:38.673983ks3355764 sshd[26149]: Invalid user dspace from 125.76.212.138 port 2163 2020-06-28T08:11:40.313228ks3355764 sshd[26149]: Failed password for invalid user dspace from 125.76.212.138 port 2163 ssh2 ... |
2020-06-28 17:17:26 |
| 222.186.180.223 | attack | Jun 28 05:03:21 NPSTNNYC01T sshd[28907]: Failed password for root from 222.186.180.223 port 33728 ssh2 Jun 28 05:03:25 NPSTNNYC01T sshd[28907]: Failed password for root from 222.186.180.223 port 33728 ssh2 Jun 28 05:03:28 NPSTNNYC01T sshd[28907]: Failed password for root from 222.186.180.223 port 33728 ssh2 Jun 28 05:03:32 NPSTNNYC01T sshd[28907]: Failed password for root from 222.186.180.223 port 33728 ssh2 ... |
2020-06-28 17:23:13 |
| 120.70.103.239 | attackbotsspam | Invalid user scpuser from 120.70.103.239 port 39889 |
2020-06-28 17:20:04 |
| 52.168.167.179 | attack | <6 unauthorized SSH connections |
2020-06-28 17:00:57 |
| 87.229.51.48 | attackbots | Automatic report - XMLRPC Attack |
2020-06-28 17:07:48 |
| 111.229.28.34 | attackspam | $f2bV_matches |
2020-06-28 17:15:00 |
| 45.235.131.50 | attackbotsspam | Honeypot attack, port: 445, PTR: PTR record not found |
2020-06-28 17:23:42 |
| 157.245.64.140 | attackbots | <6 unauthorized SSH connections |
2020-06-28 17:00:42 |