City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '180.152.0.0 - 180.159.255.255'
% Abuse contact for '180.152.0.0 - 180.159.255.255' is 'anti-spam@chinatelecom.cn'
inetnum: 180.152.0.0 - 180.159.255.255
netname: CHINANET-SH
descr: CHINANET SHANGHAI PROVINCE NETWORK
descr: China Telecom
descr: No.31,jingrong street
descr: Beijing 100032
country: CN
admin-c: WWQ4-AP
tech-c: WWQ4-AP
abuse-c: AC1573-AP
status: ALLOCATED PORTABLE
remarks: service provider
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-SH
mnt-irt: IRT-CHINANET-CN
last-modified: 2021-06-15T08:04:51Z
source: APNIC
irt: IRT-CHINANET-CN
address: No.31 ,jingrong street,beijing
address: 100032
e-mail: anti-spam@chinatelecom.cn
abuse-mailbox: anti-spam@chinatelecom.cn
admin-c: CH93-AP
tech-c: CH93-AP
auth: # Filtered
remarks: anti-spam@chinatelecom.cn was validated on 2026-05-21
mnt-by: MAINT-CHINANET
last-modified: 2026-05-21T01:31:36Z
source: APNIC
role: ABUSE CHINANETCN
country: ZZ
address: No.31 ,jingrong street,beijing
address: 100032
phone: +000000000
e-mail: anti-spam@chinatelecom.cn
admin-c: CH93-AP
tech-c: CH93-AP
nic-hdl: AC1573-AP
remarks: Generated from irt object IRT-CHINANET-CN
remarks: anti-spam@chinatelecom.cn was validated on 2026-05-21
abuse-mailbox: anti-spam@chinatelecom.cn
mnt-by: APNIC-ABUSE
last-modified: 2026-05-21T01:32:00Z
source: APNIC
person: Weng Wen Qian
address: Room 2405,357 Songlin Road,Shanghai 200122
country: CN
phone: +86-21-68405784
fax-no: +86-21-50623458
e-mail: shizhiming.sh@chinatelecom.cn
nic-hdl: WWQ4-AP
mnt-by: MAINT-CHINANET-SH
last-modified: 2023-02-07T08:25:17Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5)
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 180.153.236.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64945
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;180.153.236.142. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026110200 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Nov 03 00:30:07 CST 2026
;; MSG SIZE rcvd: 108
Host 142.236.153.180.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 142.236.153.180.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 187.72.177.131 | attackbots | Sep 30 01:32:42 *hidden* sshd[43741]: Invalid user a1s2d3f4g5h6j7k8l9 from 187.72.177.131 port 57397 Sep 30 01:32:42 *hidden* sshd[43741]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.177.131 Sep 30 01:32:44 *hidden* sshd[43741]: Failed password for invalid user a1s2d3f4g5h6j7k8l9 from 187.72.177.131 port 57397 ssh2 |
2020-09-30 12:03:31 |
| 222.165.222.190 | attackspam | Invalid user fatimac from 222.165.222.190 port 60320 |
2020-09-30 09:45:28 |
| 195.54.160.72 | attackspam | 195.54.160.72 - - [29/Sep/2020:22:08:39 +0100] "POST //xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 195.54.160.72 - - [29/Sep/2020:22:08:39 +0100] "POST //xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 195.54.160.72 - - [29/Sep/2020:22:08:39 +0100] "POST //xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" ... |
2020-09-30 09:55:07 |
| 111.72.194.164 | attack | Sep 29 00:08:27 srv01 postfix/smtpd\[24622\]: warning: unknown\[111.72.194.164\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 29 00:22:10 srv01 postfix/smtpd\[24634\]: warning: unknown\[111.72.194.164\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 29 00:22:22 srv01 postfix/smtpd\[24634\]: warning: unknown\[111.72.194.164\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 29 00:22:38 srv01 postfix/smtpd\[24634\]: warning: unknown\[111.72.194.164\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 29 00:22:56 srv01 postfix/smtpd\[24634\]: warning: unknown\[111.72.194.164\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-09-30 09:58:59 |
| 181.223.36.5 | attackspambots | Sep 29 22:41:46 ns382633 sshd\[13301\]: Invalid user 888888 from 181.223.36.5 port 27040 Sep 29 22:41:46 ns382633 sshd\[13299\]: Invalid user 888888 from 181.223.36.5 port 27019 Sep 29 22:41:46 ns382633 sshd\[13301\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.223.36.5 Sep 29 22:41:46 ns382633 sshd\[13299\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.223.36.5 Sep 29 22:41:48 ns382633 sshd\[13301\]: Failed password for invalid user 888888 from 181.223.36.5 port 27040 ssh2 Sep 29 22:41:48 ns382633 sshd\[13299\]: Failed password for invalid user 888888 from 181.223.36.5 port 27019 ssh2 |
2020-09-30 12:12:06 |
| 165.227.195.122 | attackbots | 165.227.195.122 - - [29/Sep/2020:19:10:52 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 165.227.195.122 - - [29/Sep/2020:19:10:53 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 165.227.195.122 - - [29/Sep/2020:19:10:54 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-09-30 09:45:15 |
| 66.70.142.231 | attack | Sep 29 20:31:53 logopedia-1vcpu-1gb-nyc1-01 sshd[245171]: Failed password for root from 66.70.142.231 port 37104 ssh2 ... |
2020-09-30 12:10:27 |
| 142.93.8.99 | attackspambots | Sep 29 18:29:40 vlre-nyc-1 sshd\[25066\]: Invalid user book from 142.93.8.99 Sep 29 18:29:40 vlre-nyc-1 sshd\[25066\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.8.99 Sep 29 18:29:41 vlre-nyc-1 sshd\[25066\]: Failed password for invalid user book from 142.93.8.99 port 34816 ssh2 Sep 29 18:34:18 vlre-nyc-1 sshd\[25213\]: Invalid user dave from 142.93.8.99 Sep 29 18:34:18 vlre-nyc-1 sshd\[25213\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.8.99 ... |
2020-09-30 09:39:26 |
| 139.59.11.66 | attackbots |
|
2020-09-30 09:50:50 |
| 5.135.94.191 | attackbotsspam | Invalid user ghost5 from 5.135.94.191 port 51508 |
2020-09-30 09:52:57 |
| 107.170.184.26 | attack | $f2bV_matches |
2020-09-30 09:43:54 |
| 49.235.84.250 | attack | Automatic report - Banned IP Access |
2020-09-30 12:10:44 |
| 185.8.10.230 | attack | xmlrpc attack |
2020-09-30 09:43:39 |
| 119.183.54.25 | attackbotsspam | 5353/udp [2020-09-29]1pkt |
2020-09-30 12:06:12 |
| 191.35.142.238 | attackspam | Sep 29 22:41:54 vpn01 sshd[3600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.35.142.238 Sep 29 22:41:56 vpn01 sshd[3600]: Failed password for invalid user noc from 191.35.142.238 port 50168 ssh2 ... |
2020-09-30 12:03:03 |