Use ` instead of ' in the database name, and escape the _
GRANT ALL PRIVILEGES ON xian\_%.* TO xian@'192.168.1.%';
-
http://stackoverflow.com/questions/2469119/grant-permissions-to-a-set-of-databases-matching-a-pattern-in-mysql-5-0