City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '42.208.0.0 - 42.223.255.255'
% Abuse contact for '42.208.0.0 - 42.223.255.255' is 'liuxin15@cmtt.chinamobile.com'
inetnum: 42.208.0.0 - 42.223.255.255
netname: NorthStar
descr: North Star Information Hi.tech Ltd. Co.
descr: No.18, Beifengwo Road, Haidian District,
descr: Beijing, China, 100038
country: CN
org: ORG-NSIH1-AP
admin-c: CW1171-AP
tech-c: LQ568-AP
abuse-c: AN833-AP
status: ALLOCATED PORTABLE
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
mnt-by: APNIC-HM
mnt-lower: MAINT-NORTHSTAR-APNIC
mnt-routes: MAINT-NORTHSTAR-APNIC
mnt-irt: IRT-NORTHSTAR-CN
last-modified: 2020-07-07T04:54:07Z
source: APNIC
irt: IRT-NORTHSTAR-CN
address: No.18, Beifengwo Road, Haidian District,
address: Beijing, China
e-mail: liuxin15@cmtt.chinamobile.com
abuse-mailbox: liuxin15@cmtt.chinamobile.com
admin-c: CW1171-AP
tech-c: LQ568-AP
auth: # Filtered
remarks: liuxin15@cmtt.chinamobile.com
remarks: liuxin15@cmtt.chinamobile.com
remarks: liuxin15@cmtt.chinamobile.com was validated on 2026-05-21
mnt-by: MAINT-NORTHSTAR-APNIC
last-modified: 2026-05-21T07:58:00Z
source: APNIC
organisation: ORG-NSIH1-AP
org-name: North Star Information Hi.tech Ltd. Co.
org-type: LIR
country: CN
address: No.18, Beifengwo Road, Haidian District,
phone: +86-13910572340
fax-no: +86-13910572340
e-mail: liuxin15@cmtt.chinamobile.com
mnt-ref: APNIC-HM
mnt-by: APNIC-HM
last-modified: 2023-09-05T02:15:30Z
source: APNIC
role: ABUSE NORTHSTARCN
country: ZZ
address: No.18, Beifengwo Road, Haidian District,
address: Beijing, China
phone: +000000000
e-mail: liuxin15@cmtt.chinamobile.com
admin-c: CW1171-AP
tech-c: LQ568-AP
nic-hdl: AN833-AP
remarks: Generated from irt object IRT-NORTHSTAR-CN
remarks: liuxin15@cmtt.chinamobile.com was validated on 2026-05-21
abuse-mailbox: liuxin15@cmtt.chinamobile.com
mnt-by: APNIC-ABUSE
last-modified: 2026-05-21T08:06:57Z
source: APNIC
person: Cindy Wang
address: No.18, Beifengwo Road, Haidian District,
address: Beijing, China
country: CN
phone: +86-10-51892147
fax-no: +86-10-51890674
e-mail: cindywang.ns@gmail.com
nic-hdl: CW1171-AP
mnt-by: MAINT-NORTHSTAR-APNIC
last-modified: 2009-02-10T07:32:20Z
source: APNIC
person: Lu Qian
address: No.18, Beifengwo Road, Haidian District,
address: Beijing, China
country: CN
phone: +86-10-51890418
fax-no: +86-10-51890674
e-mail: wpli@chinatietong.com
nic-hdl: LQ568-AP
mnt-by: MAINT-NORTHSTAR-APNIC
last-modified: 2015-10-22T01:18:00Z
source: APNIC
% Information related to '42.208.0.0/12AS9394'
route: 42.208.0.0/12
descr: North Star Information Hi.tech Ltd. Co.
origin: AS9394
country: CN
notify: luqian.ns@gmail.com
mnt-by: MAINT-NORTHSTAR-APNIC
last-modified: 2013-06-12T15:22:38Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5)
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.208.43.249
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49651
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;42.208.43.249. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026081600 1800 900 604800 86400
;; Query time: 31 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Aug 16 21:26:10 CST 2026
;; MSG SIZE rcvd: 106
Host 249.43.208.42.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 249.43.208.42.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 185.108.164.164 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2020-02-17 01:46:14 |
| 104.131.29.92 | attackspam | Automatic report - Banned IP Access |
2020-02-17 02:25:03 |
| 94.137.113.66 | attackbotsspam | Tried sshing with brute force. |
2020-02-17 02:08:48 |
| 187.32.242.217 | attackspam | Feb 16 17:26:12 vpn01 sshd[24076]: Failed password for root from 187.32.242.217 port 50130 ssh2 ... |
2020-02-17 02:20:03 |
| 185.108.164.112 | attackspambots | MultiHost/MultiPort Probe, Scan, Hack - |
2020-02-17 01:49:16 |
| 51.91.8.222 | attackspam | Feb 16 17:18:48 web8 sshd\[21307\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.8.222 user=games Feb 16 17:18:50 web8 sshd\[21307\]: Failed password for games from 51.91.8.222 port 57272 ssh2 Feb 16 17:24:19 web8 sshd\[24064\]: Invalid user fgshiu from 51.91.8.222 Feb 16 17:24:19 web8 sshd\[24064\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.8.222 Feb 16 17:24:21 web8 sshd\[24064\]: Failed password for invalid user fgshiu from 51.91.8.222 port 55824 ssh2 |
2020-02-17 01:59:51 |
| 139.162.112.248 | attackbots | " " |
2020-02-17 02:06:15 |
| 201.92.123.32 | attackbots | Automatic report - Port Scan Attack |
2020-02-17 01:44:27 |
| 183.182.105.142 | attack | 1581865644 - 02/16/2020 16:07:24 Host: 183.182.105.142/183.182.105.142 Port: 445 TCP Blocked |
2020-02-17 02:13:04 |
| 177.155.36.67 | attackbotsspam | Automatic report - Port Scan Attack |
2020-02-17 02:11:16 |
| 50.62.177.231 | attack | Automatic report - XMLRPC Attack |
2020-02-17 02:25:44 |
| 65.50.209.87 | attack | Feb 16 05:52:48 hpm sshd\[15872\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.50.209.87 user=root Feb 16 05:52:50 hpm sshd\[15872\]: Failed password for root from 65.50.209.87 port 57374 ssh2 Feb 16 05:56:03 hpm sshd\[16239\]: Invalid user vijay from 65.50.209.87 Feb 16 05:56:03 hpm sshd\[16239\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.50.209.87 Feb 16 05:56:06 hpm sshd\[16239\]: Failed password for invalid user vijay from 65.50.209.87 port 58538 ssh2 |
2020-02-17 01:57:14 |
| 45.143.220.4 | attack | [2020-02-16 13:12:51] NOTICE[1148][C-00009b23] chan_sip.c: Call from '' (45.143.220.4:9764) to extension '00390237920793' rejected because extension not found in context 'public'. [2020-02-16 13:12:51] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-02-16T13:12:51.292-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="00390237920793",SessionID="0x7fd82cc0d5f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.4/9764",ACLName="no_extension_match" [2020-02-16 13:20:36] NOTICE[1148][C-00009b26] chan_sip.c: Call from '' (45.143.220.4:6382) to extension '+390237920793' rejected because extension not found in context 'public'. [2020-02-16 13:20:36] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-02-16T13:20:36.086-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="+390237920793",SessionID="0x7fd82cc0d5f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.4 ... |
2020-02-17 02:22:58 |
| 222.186.175.183 | attack | 2020-02-16T17:53:51.979413shield sshd\[6548\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.183 user=root 2020-02-16T17:53:54.109413shield sshd\[6548\]: Failed password for root from 222.186.175.183 port 2812 ssh2 2020-02-16T17:53:58.023567shield sshd\[6548\]: Failed password for root from 222.186.175.183 port 2812 ssh2 2020-02-16T17:54:01.483871shield sshd\[6548\]: Failed password for root from 222.186.175.183 port 2812 ssh2 2020-02-16T17:54:05.018161shield sshd\[6548\]: Failed password for root from 222.186.175.183 port 2812 ssh2 |
2020-02-17 01:56:09 |
| 172.222.33.65 | attackbotsspam | Feb 16 16:53:15 cvbnet sshd[27377]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.222.33.65 Feb 16 16:53:17 cvbnet sshd[27377]: Failed password for invalid user qazxswedc from 172.222.33.65 port 55206 ssh2 ... |
2020-02-17 02:13:49 |