City: Foshan
Region: Guangdong
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '14.208.0.0 - 14.223.255.255'
% Abuse contact for '14.208.0.0 - 14.223.255.255' is 'anti-spam@chinatelecom.cn'
inetnum: 14.208.0.0 - 14.223.255.255
netname: CHINANET-GD
descr: CHINANET Guangdong province network
descr: Data Communication Division
descr: China Telecom
country: CN
admin-c: CH93-AP
tech-c: IC83-AP
abuse-c: AC1573-AP
status: ALLOCATED PORTABLE
remarks: service provider
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
notify: abuse_gdnoc@189.cn
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-GD
mnt-irt: IRT-CHINANET-CN
last-modified: 2021-06-15T08:06:06Z
source: APNIC
irt: IRT-CHINANET-CN
address: No.31 ,jingrong street,beijing
address: 100032
e-mail: anti-spam@chinatelecom.cn
abuse-mailbox: anti-spam@chinatelecom.cn
admin-c: CH93-AP
tech-c: CH93-AP
auth: # Filtered
remarks: anti-spam@chinatelecom.cn was validated on 2025-11-13
mnt-by: MAINT-CHINANET
last-modified: 2025-11-18T00:26:23Z
source: APNIC
role: ABUSE CHINANETCN
country: ZZ
address: No.31 ,jingrong street,beijing
address: 100032
phone: +000000000
e-mail: anti-spam@chinatelecom.cn
admin-c: CH93-AP
tech-c: CH93-AP
nic-hdl: AC1573-AP
remarks: Generated from irt object IRT-CHINANET-CN
remarks: anti-spam@chinatelecom.cn was validated on 2025-11-13
abuse-mailbox: anti-spam@chinatelecom.cn
mnt-by: APNIC-ABUSE
last-modified: 2025-11-13T14:15:15Z
source: APNIC
person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@chinatelecom.cn
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
mnt-by: MAINT-CHINANET
last-modified: 2022-02-28T06:53:44Z
source: APNIC
person: IPMASTER CHINANET-GD
nic-hdl: IC83-AP
e-mail: abuse_gdicnoc@163.com
address: NO.18,RO. ZHONGSHANER,YUEXIU DISTRIC,GUANGZHOU
phone: +86-20-87189274
fax-no: +86-20-87189274
country: CN
mnt-by: MAINT-CHINANET-GD
remarks: IPMASTER is not for spam complaint,please send spam complaint to abuse_gdicnoc@163.com
abuse-mailbox: abuse_gdicnoc@163.com
last-modified: 2021-05-12T09:06:58Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.34 (WHOIS-AU4)
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.212.94.145
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23258
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;14.212.94.145. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025112200 1800 900 604800 86400
;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Nov 22 18:00:24 CST 2025
;; MSG SIZE rcvd: 106
Host 145.94.212.14.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 145.94.212.14.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 192.151.159.76 | attackspam | Unauthorised access (Aug 29) SRC=192.151.159.76 LEN=40 TTL=241 ID=32030 TCP DPT=445 WINDOW=1024 SYN |
2019-08-29 20:23:16 |
| 167.71.200.201 | attackbotsspam | Aug 29 14:31:30 MK-Soft-Root1 sshd\[527\]: Invalid user infa from 167.71.200.201 port 56553 Aug 29 14:31:30 MK-Soft-Root1 sshd\[527\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.200.201 Aug 29 14:31:32 MK-Soft-Root1 sshd\[527\]: Failed password for invalid user infa from 167.71.200.201 port 56553 ssh2 ... |
2019-08-29 20:33:54 |
| 103.205.68.2 | attackspam | Aug 29 08:11:22 TORMINT sshd\[32118\]: Invalid user jordan from 103.205.68.2 Aug 29 08:11:22 TORMINT sshd\[32118\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.205.68.2 Aug 29 08:11:24 TORMINT sshd\[32118\]: Failed password for invalid user jordan from 103.205.68.2 port 48806 ssh2 ... |
2019-08-29 20:14:26 |
| 94.176.5.253 | attackbotsspam | (Aug 29) LEN=44 TTL=244 ID=44595 DF TCP DPT=23 WINDOW=14600 SYN (Aug 29) LEN=44 TTL=244 ID=946 DF TCP DPT=23 WINDOW=14600 SYN (Aug 29) LEN=44 TTL=244 ID=7240 DF TCP DPT=23 WINDOW=14600 SYN (Aug 29) LEN=44 TTL=244 ID=6700 DF TCP DPT=23 WINDOW=14600 SYN (Aug 29) LEN=44 TTL=244 ID=30048 DF TCP DPT=23 WINDOW=14600 SYN (Aug 29) LEN=44 TTL=244 ID=26029 DF TCP DPT=23 WINDOW=14600 SYN (Aug 29) LEN=44 TTL=244 ID=16444 DF TCP DPT=23 WINDOW=14600 SYN (Aug 29) LEN=44 TTL=244 ID=14995 DF TCP DPT=23 WINDOW=14600 SYN (Aug 29) LEN=44 TTL=244 ID=61172 DF TCP DPT=23 WINDOW=14600 SYN (Aug 29) LEN=44 TTL=244 ID=3209 DF TCP DPT=23 WINDOW=14600 SYN (Aug 29) LEN=44 TTL=244 ID=23945 DF TCP DPT=23 WINDOW=14600 SYN (Aug 29) LEN=44 TTL=244 ID=27672 DF TCP DPT=23 WINDOW=14600 SYN (Aug 29) LEN=44 TTL=244 ID=62282 DF TCP DPT=23 WINDOW=14600 SYN (Aug 28) LEN=44 TTL=244 ID=4738 DF TCP DPT=23 WINDOW=14600 SYN (Aug 28) LEN=44 TTL=244 ID=38676 DF TCP DPT=23 WINDOW=14600 SYN ... |
2019-08-29 21:00:22 |
| 67.225.227.137 | attack | WordPress XMLRPC scan :: 67.225.227.137 0.056 BYPASS [29/Aug/2019:19:27:26 1000] [censored_2] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" |
2019-08-29 20:01:49 |
| 78.228.165.215 | attackbots | Automatic report - Banned IP Access |
2019-08-29 20:16:28 |
| 106.13.3.79 | attackspam | Aug 29 12:18:06 hb sshd\[5359\]: Invalid user admin from 106.13.3.79 Aug 29 12:18:06 hb sshd\[5359\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.3.79 Aug 29 12:18:08 hb sshd\[5359\]: Failed password for invalid user admin from 106.13.3.79 port 46726 ssh2 Aug 29 12:26:32 hb sshd\[6000\]: Invalid user hiperg from 106.13.3.79 Aug 29 12:26:32 hb sshd\[6000\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.3.79 |
2019-08-29 20:42:06 |
| 14.204.136.125 | attackbotsspam | 2019-08-29T11:26:51.408027centos sshd\[15667\]: Invalid user test from 14.204.136.125 port 48645 2019-08-29T11:26:51.414239centos sshd\[15667\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.204.136.125 2019-08-29T11:26:53.943830centos sshd\[15667\]: Failed password for invalid user test from 14.204.136.125 port 48645 ssh2 |
2019-08-29 20:33:24 |
| 66.198.240.61 | attackbotsspam | WordPress XMLRPC scan :: 66.198.240.61 0.144 BYPASS [29/Aug/2019:19:26:37 1000] [censored_2] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" |
2019-08-29 20:46:48 |
| 178.128.194.116 | attackbots | Aug 29 00:47:29 sachi sshd\[9480\]: Invalid user Administrator123 from 178.128.194.116 Aug 29 00:47:29 sachi sshd\[9480\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.194.116 Aug 29 00:47:31 sachi sshd\[9480\]: Failed password for invalid user Administrator123 from 178.128.194.116 port 53374 ssh2 Aug 29 00:54:12 sachi sshd\[10072\]: Invalid user 12345 from 178.128.194.116 Aug 29 00:54:12 sachi sshd\[10072\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.194.116 |
2019-08-29 20:53:11 |
| 107.172.193.134 | attackspambots | Aug 29 11:27:24 dedicated sshd[24983]: Invalid user facturacion123 from 107.172.193.134 port 42281 |
2019-08-29 20:03:40 |
| 129.121.176.210 | attack | WordPress login Brute force / Web App Attack on client site. |
2019-08-29 20:50:15 |
| 194.15.36.19 | attackbotsspam | Aug 29 14:05:56 vps691689 sshd[32556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.15.36.19 Aug 29 14:05:58 vps691689 sshd[32556]: Failed password for invalid user wt from 194.15.36.19 port 48708 ssh2 ... |
2019-08-29 20:25:35 |
| 186.213.202.109 | attack | Aug 29 15:07:54 www sshd\[185483\]: Invalid user 123456 from 186.213.202.109 Aug 29 15:07:54 www sshd\[185483\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.213.202.109 Aug 29 15:07:56 www sshd\[185483\]: Failed password for invalid user 123456 from 186.213.202.109 port 57721 ssh2 ... |
2019-08-29 20:08:41 |
| 209.97.128.177 | attack | Invalid user fiona from 209.97.128.177 port 47720 |
2019-08-29 20:07:29 |