City: Guangzhou
Region: Guangdong
Country: China
Internet Service Provider: China Unicom
Hostname: unknown
Organization: unknown
Usage Type: unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '124.240.0.0 - 124.240.127.255'
% Abuse contact for '124.240.0.0 - 124.240.127.255' is '476498015@qq.com'
inetnum: 124.240.0.0 - 124.240.127.255
netname: GCableNET
descr: Guangdong Cable Corporation Limited
descr: Guangsheng International Building 35-37F
descr: No. 17 Western Zhujiang Road ,Tianhe District,
descr: Guangzhou ,Guangdong, P.R China
country: CN
admin-c: LJ2934-AP
tech-c: LJ2934-AP
abuse-c: AC1601-AP
status: ALLOCATED PORTABLE
mnt-by: MAINT-CNNIC-AP
mnt-irt: IRT-GCABLENET-CN
mnt-lower: MAINT-CNNIC-AP
mnt-routes: MAINT-CNNIC-AP
last-modified: 2023-11-28T00:57:04Z
source: APNIC
irt: IRT-GCableNET-CN
address: Guangsheng International Building 35-37F No. 17 Western
address: Zhujiang RoadTianhe District,Guangzhou,Guangdong, China
e-mail: 476498015@qq.com
abuse-mailbox: 476498015@qq.com
admin-c: LJ2934-AP
tech-c: LJ2934-AP
auth: # Filtered
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-11-18T00:34:58Z
source: APNIC
role: ABUSE CNNICCN
country: ZZ
address: Beijing, China
phone: +000000000
e-mail: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
nic-hdl: AC1601-AP
remarks: Generated from irt object IRT-CNNIC-CN
remarks: ipas@cnnic.cn is invalid
abuse-mailbox: ipas@cnnic.cn
mnt-by: APNIC-ABUSE
last-modified: 2025-09-19T17:20:32Z
source: APNIC
person: Li Jianhua
address: Guangsheng International Building 35-37F No. 17 Western Zhujiang Road ,Tianhe District, Guangzhou ,Guangdong, P.R China
country: CN
phone: +86-020-29000255
e-mail: cooljh@163.com
nic-hdl: LJ2934-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2013-06-28T04:04:21Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-US2)
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 124.240.119.195
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3125
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;124.240.119.195. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026082602 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Aug 27 03:00:50 CST 2026
;; MSG SIZE rcvd: 108
Host 195.119.240.124.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 195.119.240.124.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 94.102.63.65 | attackbots | Dec 20 15:48:40 h2177944 kernel: \[52139.817986\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=94.102.63.65 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=13964 PROTO=TCP SPT=41984 DPT=43395 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 20 15:48:40 h2177944 kernel: \[52139.818003\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=94.102.63.65 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=13964 PROTO=TCP SPT=41984 DPT=43395 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 20 15:49:21 h2177944 kernel: \[52180.653305\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=94.102.63.65 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=5193 PROTO=TCP SPT=41984 DPT=33398 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 20 15:49:21 h2177944 kernel: \[52180.653322\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=94.102.63.65 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=5193 PROTO=TCP SPT=41984 DPT=33398 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 20 15:51:26 h2177944 kernel: \[52305.992199\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=94.102.63.65 DST=85.214.117.9 LEN=40 TOS=0 |
2019-12-21 02:32:44 |
| 216.144.251.86 | attackbots | Dec 20 15:45:50 sd-53420 sshd\[31543\]: Invalid user test from 216.144.251.86 Dec 20 15:45:50 sd-53420 sshd\[31543\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.144.251.86 Dec 20 15:45:52 sd-53420 sshd\[31543\]: Failed password for invalid user test from 216.144.251.86 port 36174 ssh2 Dec 20 15:51:41 sd-53420 sshd\[1151\]: User root from 216.144.251.86 not allowed because none of user's groups are listed in AllowGroups Dec 20 15:51:41 sd-53420 sshd\[1151\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.144.251.86 user=root ... |
2019-12-21 02:21:09 |
| 223.171.32.66 | attackspam | Dec 20 19:06:48 ns381471 sshd[28778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.171.32.66 Dec 20 19:06:49 ns381471 sshd[28778]: Failed password for invalid user pass1234 from 223.171.32.66 port 37370 ssh2 |
2019-12-21 02:23:14 |
| 192.241.202.169 | attackbots | Dec 20 18:24:14 h2177944 sshd\[26118\]: Invalid user tabria from 192.241.202.169 port 49880 Dec 20 18:24:14 h2177944 sshd\[26118\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.202.169 Dec 20 18:24:16 h2177944 sshd\[26118\]: Failed password for invalid user tabria from 192.241.202.169 port 49880 ssh2 Dec 20 18:28:51 h2177944 sshd\[26213\]: Invalid user mietek from 192.241.202.169 port 53116 ... |
2019-12-21 02:29:11 |
| 182.48.84.6 | attackspam | Dec 20 18:13:30 l02a sshd[31748]: Invalid user zf from 182.48.84.6 Dec 20 18:13:30 l02a sshd[31748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.48.84.6 Dec 20 18:13:30 l02a sshd[31748]: Invalid user zf from 182.48.84.6 Dec 20 18:13:32 l02a sshd[31748]: Failed password for invalid user zf from 182.48.84.6 port 38274 ssh2 |
2019-12-21 02:29:24 |
| 206.189.81.101 | attackbots | Dec 20 07:32:37 hanapaa sshd\[19316\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.81.101 user=root Dec 20 07:32:39 hanapaa sshd\[19316\]: Failed password for root from 206.189.81.101 port 59102 ssh2 Dec 20 07:38:01 hanapaa sshd\[19848\]: Invalid user server from 206.189.81.101 Dec 20 07:38:01 hanapaa sshd\[19848\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.81.101 Dec 20 07:38:03 hanapaa sshd\[19848\]: Failed password for invalid user server from 206.189.81.101 port 60780 ssh2 |
2019-12-21 02:46:27 |
| 49.149.78.163 | attackspambots | Attempt to attack host OS, exploiting network vulnerabilities, on 20-12-2019 14:51:01. |
2019-12-21 02:50:13 |
| 40.92.75.16 | attackbots | Dec 20 17:51:31 debian-2gb-vpn-nbg1-1 kernel: [1231850.210498] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.75.16 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=1029 DF PROTO=TCP SPT=7425 DPT=25 WINDOW=0 RES=0x00 ACK RST URGP=0 |
2019-12-21 02:30:57 |
| 185.176.27.170 | attackspam | Dec 20 18:03:31 mail kernel: [8241510.120836] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=185.176.27.170 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=54008 PROTO=TCP SPT=45121 DPT=16318 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 20 18:06:39 mail kernel: [8241698.235731] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=185.176.27.170 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=712 PROTO=TCP SPT=45121 DPT=20515 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 20 18:07:16 mail kernel: [8241734.977946] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=185.176.27.170 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=62373 PROTO=TCP SPT=45121 DPT=55083 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 20 18:09:08 mail kernel: [8241847.516638] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=185.176.27.170 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=22315 PROTO=TCP SPT=45121 DPT=50552 WINDOW=1024 RES=0x0 |
2019-12-21 02:33:06 |
| 18.222.204.158 | attack | Forbidden directory scan :: 2019/12/20 14:51:47 [error] 33155#33155: *6989 access forbidden by rule, client: 18.222.204.158, server: [censored_2], request: "HEAD /~onixpw/cfg/AppleID.logln.myaccount.JAZ2834HQSD7Q7SD6Q6SD67QSD5Q7S6D6QSD76QSD67Q67D6QQSJDQLJF HTTP/1.1", host: "[censored_2]" |
2019-12-21 02:18:27 |
| 185.216.140.252 | attack | 12/20/2019-12:48:05.202095 185.216.140.252 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-12-21 02:10:30 |
| 203.192.241.228 | attackspam | Unauthorized connection attempt detected from IP address 203.192.241.228 to port 445 |
2019-12-21 02:31:42 |
| 157.230.112.34 | attackbots | Dec 20 17:39:38 legacy sshd[17495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.112.34 Dec 20 17:39:40 legacy sshd[17495]: Failed password for invalid user picasoo from 157.230.112.34 port 50420 ssh2 Dec 20 17:44:50 legacy sshd[17751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.112.34 ... |
2019-12-21 02:38:17 |
| 68.183.127.93 | attack | Dec 20 18:53:10 loxhost sshd\[20637\]: Invalid user ggggg from 68.183.127.93 port 38158 Dec 20 18:53:10 loxhost sshd\[20637\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.127.93 Dec 20 18:53:12 loxhost sshd\[20637\]: Failed password for invalid user ggggg from 68.183.127.93 port 38158 ssh2 Dec 20 18:58:34 loxhost sshd\[20910\]: Invalid user harrer from 68.183.127.93 port 47130 Dec 20 18:58:34 loxhost sshd\[20910\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.127.93 ... |
2019-12-21 02:18:55 |
| 183.82.0.15 | attackbotsspam | --- report --- Dec 20 14:07:30 sshd: Connection from 183.82.0.15 port 31289 Dec 20 14:07:32 sshd: Invalid user test from 183.82.0.15 Dec 20 14:07:34 sshd: Failed password for invalid user test from 183.82.0.15 port 31289 ssh2 Dec 20 14:07:34 sshd: Received disconnect from 183.82.0.15: 11: Normal Shutdown, Thank you for playing [preauth] |
2019-12-21 02:47:03 |