City: Guangzhou
Region: Guangdong
Country: China
Internet Service Provider: China Unicom
Hostname: unknown
Organization: unknown
Usage Type: unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '120.80.0.0 - 120.87.255.255'
% Abuse contact for '120.80.0.0 - 120.87.255.255' is 'hqs-ipabuse@chinaunicom.cn'
inetnum: 120.80.0.0 - 120.87.255.255
netname: UNICOM-GD
descr: China Unicom Guangdong province network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: RP181-AP
abuse-c: AC1718-AP
status: ALLOCATED PORTABLE
remarks: service provider
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-GD
mnt-routes: MAINT-CNCGROUP-RR
mnt-irt: IRT-CU-CN
last-modified: 2023-10-21T03:29:33Z
source: APNIC
irt: IRT-CU-CN
address: No.21,Financial Street
address: Beijing,100033
address: P.R.China
e-mail: hqs-ipabuse@chinaunicom.cn
abuse-mailbox: hqs-ipabuse@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
auth: # Filtered
remarks: hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
mnt-by: MAINT-CNCGROUP
last-modified: 2026-08-19T00:57:22Z
source: APNIC
role: ABUSE CUCN
country: ZZ
address: No.21,Financial Street
address: Beijing,100033
address: P.R.China
phone: +000000000
e-mail: hqs-ipabuse@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
nic-hdl: AC1718-AP
remarks: Generated from irt object IRT-CU-CN
remarks: hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
abuse-mailbox: hqs-ipabuse@chinaunicom.cn
mnt-by: APNIC-ABUSE
last-modified: 2026-08-20T03:22:23Z
source: APNIC
person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: hqs-ipabuse@chinaunicom.cn
address: No.21,Jin-Rong Street
address: Beijing,100033
address: P.R.China
phone: +86-10-66259764
fax-no: +86-10-66259764
country: CN
mnt-by: MAINT-CNCGROUP
last-modified: 2017-08-17T06:13:16Z
source: APNIC
person: runkeng pan
nic-hdl: RP181-AP
e-mail: gdipnoc@chinaunicom.cn
address: XinShiKong Plaza,No 666 Huangpu Rd. Guangzhou 510627,China
phone: +86-20-22214174
fax-no: +86-20-22212266-4174
country: CN
mnt-by: MAINT-CNCGROUP-GD
last-modified: 2015-12-16T03:32:02Z
source: APNIC
% Information related to '120.80.0.0/13AS17816'
route: 120.80.0.0/13
descr: CNC Group CHINA169 Guangdong Province Network
country: CN
origin: AS17816
mnt-by: MAINT-CNCGROUP-RR
last-modified: 2008-09-04T07:55:15Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-US2); <<>> DiG 9.10.3-P4-Ubuntu <<>> 120.82.83.168
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49182
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;120.82.83.168. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026090501 1800 900 604800 86400
;; Query time: 55 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Sep 06 14:02:35 CST 2026
;; MSG SIZE rcvd: 106Host 168.83.82.120.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 168.83.82.120.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.248.197.40 | attack | 2019-12-24T16:01:29.455471shield sshd\[16938\]: Invalid user wailes from 104.248.197.40 port 52494 2019-12-24T16:01:29.461100shield sshd\[16938\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.197.40 2019-12-24T16:01:30.743956shield sshd\[16938\]: Failed password for invalid user wailes from 104.248.197.40 port 52494 ssh2 2019-12-24T16:04:38.349272shield sshd\[17270\]: Invalid user chon0101 from 104.248.197.40 port 40163 2019-12-24T16:04:38.355100shield sshd\[17270\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.197.40 |
2019-12-25 02:42:22 |
| 5.39.86.219 | attack | $f2bV_matches |
2019-12-25 02:58:32 |
| 221.229.250.19 | attackspam | Portscan or hack attempt detected by psad/fwsnort |
2019-12-25 02:50:51 |
| 94.23.145.189 | attack | Brute force attempt |
2019-12-25 02:32:08 |
| 112.85.42.173 | attack | 2019-12-24T19:01:33.816518abusebot-3.cloudsearch.cf sshd[22587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.173 user=root 2019-12-24T19:01:35.966374abusebot-3.cloudsearch.cf sshd[22587]: Failed password for root from 112.85.42.173 port 6056 ssh2 2019-12-24T19:01:39.059245abusebot-3.cloudsearch.cf sshd[22587]: Failed password for root from 112.85.42.173 port 6056 ssh2 2019-12-24T19:01:33.816518abusebot-3.cloudsearch.cf sshd[22587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.173 user=root 2019-12-24T19:01:35.966374abusebot-3.cloudsearch.cf sshd[22587]: Failed password for root from 112.85.42.173 port 6056 ssh2 2019-12-24T19:01:39.059245abusebot-3.cloudsearch.cf sshd[22587]: Failed password for root from 112.85.42.173 port 6056 ssh2 2019-12-24T19:01:33.816518abusebot-3.cloudsearch.cf sshd[22587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= r ... |
2019-12-25 03:02:03 |
| 185.153.196.225 | attackspam | Honeypot attack, port: 5555, PTR: server-185-153-196-225.cloudedic.net. |
2019-12-25 02:37:56 |
| 103.143.213.3 | attackbotsspam | Unauthorized connection attempt from IP address 103.143.213.3 on Port 445(SMB) |
2019-12-25 02:56:32 |
| 188.162.52.243 | attackbots | Unauthorized connection attempt detected from IP address 188.162.52.243 to port 445 |
2019-12-25 02:51:08 |
| 106.12.118.235 | attackspambots | Invalid user goines from 106.12.118.235 port 56008 |
2019-12-25 02:33:04 |
| 67.207.88.180 | attackbotsspam | Dec 24 17:09:01 l02a sshd[22449]: Invalid user dulleck from 67.207.88.180 Dec 24 17:09:01 l02a sshd[22449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.207.88.180 Dec 24 17:09:01 l02a sshd[22449]: Invalid user dulleck from 67.207.88.180 Dec 24 17:09:03 l02a sshd[22449]: Failed password for invalid user dulleck from 67.207.88.180 port 42360 ssh2 |
2019-12-25 02:35:25 |
| 213.251.41.52 | attackbots | Dec 24 17:56:41 game-panel sshd[27804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.251.41.52 Dec 24 17:56:43 game-panel sshd[27804]: Failed password for invalid user israni from 213.251.41.52 port 36896 ssh2 Dec 24 17:57:49 game-panel sshd[27853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.251.41.52 |
2019-12-25 02:48:23 |
| 192.99.152.160 | attackbotsspam | 12/24/2019-11:31:10.599861 192.99.152.160 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-12-25 02:42:43 |
| 82.64.147.176 | attackbotsspam | 2019-12-24T15:27:15.465157abusebot-8.cloudsearch.cf sshd[15109]: Invalid user parriott from 82.64.147.176 port 59676 2019-12-24T15:27:15.478069abusebot-8.cloudsearch.cf sshd[15109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82-64-147-176.subs.proxad.net 2019-12-24T15:27:15.465157abusebot-8.cloudsearch.cf sshd[15109]: Invalid user parriott from 82.64.147.176 port 59676 2019-12-24T15:27:17.452438abusebot-8.cloudsearch.cf sshd[15109]: Failed password for invalid user parriott from 82.64.147.176 port 59676 ssh2 2019-12-24T15:32:12.157682abusebot-8.cloudsearch.cf sshd[15117]: Invalid user master from 82.64.147.176 port 41686 2019-12-24T15:32:12.164662abusebot-8.cloudsearch.cf sshd[15117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82-64-147-176.subs.proxad.net 2019-12-24T15:32:12.157682abusebot-8.cloudsearch.cf sshd[15117]: Invalid user master from 82.64.147.176 port 41686 2019-12-24T15:32:13.576078ab ... |
2019-12-25 03:03:02 |
| 218.92.0.157 | attack | Dec 24 15:47:10 firewall sshd[1749]: Failed password for root from 218.92.0.157 port 65450 ssh2 Dec 24 15:47:10 firewall sshd[1749]: error: maximum authentication attempts exceeded for root from 218.92.0.157 port 65450 ssh2 [preauth] Dec 24 15:47:10 firewall sshd[1749]: Disconnecting: Too many authentication failures [preauth] ... |
2019-12-25 02:48:54 |
| 197.82.202.98 | attackbots | 4x Failed Password |
2019-12-25 02:55:30 |