City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '111.172.0.0 - 111.175.255.255'
% Abuse contact for '111.172.0.0 - 111.175.255.255' is 'anti-spam@chinatelecom.cn'
inetnum: 111.172.0.0 - 111.175.255.255
netname: CHINANET-HB
descr: CHINANET HUBEI PROVINCE NETWORK
descr: China Telecom
descr: No.31,jingrong street
descr: Beijing 100032
country: CN
admin-c: CHA1-AP
tech-c: CHA1-AP
abuse-c: AC1573-AP
status: ALLOCATED PORTABLE
remarks: service provider
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-HB
mnt-irt: IRT-CHINANET-CN
last-modified: 2021-06-15T08:05:50Z
source: APNIC
irt: IRT-CHINANET-CN
address: No.31 ,jingrong street,beijing
address: 100032
e-mail: anti-spam@chinatelecom.cn
abuse-mailbox: anti-spam@chinatelecom.cn
admin-c: CH93-AP
tech-c: CH93-AP
auth: # Filtered
remarks: anti-spam@chinatelecom.cn was validated on 2025-11-13
mnt-by: MAINT-CHINANET
last-modified: 2026-03-13T07:12:20Z
source: APNIC
role: ABUSE CHINANETCN
country: ZZ
address: No.31 ,jingrong street,beijing
address: 100032
phone: +000000000
e-mail: anti-spam@chinatelecom.cn
admin-c: CH93-AP
tech-c: CH93-AP
nic-hdl: AC1573-AP
remarks: Generated from irt object IRT-CHINANET-CN
remarks: anti-spam@chinatelecom.cn was validated on 2025-11-13
abuse-mailbox: anti-spam@chinatelecom.cn
mnt-by: APNIC-ABUSE
last-modified: 2025-11-13T14:15:15Z
source: APNIC
role: CHINANET HB ADMIN
address: 8th floor of JinGuang Building
address: #232 of Macao Road
address: HanKou Wuhan Hubei Province
address: P.R.China
country: CN
phone: +86 27 82862199
fax-no: +86 27 82861499
e-mail: hbadd@189.cn
remarks: send spam reports to hbadd@189.cn
remarks: and abuse reports to hbadd@189.cn
remarks: Please include detailed information and
remarks: times in GMT+8
admin-c: YZ83-AP
admin-c: ZC77-AP
tech-c: YZ83-AP
tech-c: ZC77-AP
nic-hdl: CHA1-AP
notify: hbadd@189.cn
mnt-by: MAINT-CN-CHINANET-HB
last-modified: 2013-08-06T11:09:18Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5)
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 111.172.5.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55410
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;111.172.5.8. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026042700 1800 900 604800 86400
;; Query time: 463 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Apr 28 01:30:04 CST 2026
;; MSG SIZE rcvd: 104
Host 8.5.172.111.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 8.5.172.111.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 185.254.68.170 | attackspam | Nov 10 08:43:40 h2177944 kernel: \[6247395.300207\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.68.170 DST=85.214.117.9 LEN=671 TOS=0x00 PREC=0x00 TTL=122 ID=15178 PROTO=UDP SPT=40461 DPT=4277 LEN=651 Nov 10 08:45:20 h2177944 kernel: \[6247494.819900\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.68.170 DST=85.214.117.9 LEN=671 TOS=0x00 PREC=0x00 TTL=121 ID=9561 PROTO=UDP SPT=34568 DPT=4355 LEN=651 Nov 10 08:46:56 h2177944 kernel: \[6247591.023514\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.68.170 DST=85.214.117.9 LEN=671 TOS=0x00 PREC=0x00 TTL=121 ID=5219 PROTO=UDP SPT=36600 DPT=2225 LEN=651 Nov 10 08:49:41 h2177944 kernel: \[6247756.449657\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.68.170 DST=85.214.117.9 LEN=671 TOS=0x00 PREC=0x00 TTL=122 ID=17310 PROTO=UDP SPT=10803 DPT=5033 LEN=651 Nov 10 08:57:28 h2177944 kernel: \[6248223.022316\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.68.170 DST=85.214.117.9 LEN=671 TOS=0x00 PREC=0x00 TTL=121 ID=6745 PROTO=UDP SPT=38857 DPT=7055 LEN=651 ... |
2019-11-10 16:08:28 |
| 84.254.28.47 | attackbots | 2019-11-10T08:32:36.271559tmaserv sshd\[29508\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.254.28.47 user=root 2019-11-10T08:32:38.551490tmaserv sshd\[29508\]: Failed password for root from 84.254.28.47 port 47247 ssh2 2019-11-10T08:42:22.883405tmaserv sshd\[29953\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.254.28.47 user=root 2019-11-10T08:42:24.609646tmaserv sshd\[29953\]: Failed password for root from 84.254.28.47 port 51544 ssh2 2019-11-10T08:46:25.739336tmaserv sshd\[30150\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.254.28.47 user=root 2019-11-10T08:46:28.159788tmaserv sshd\[30150\]: Failed password for root from 84.254.28.47 port 41580 ssh2 ... |
2019-11-10 15:47:30 |
| 106.3.147.213 | attackspambots | Nov 10 07:26:22 sd-53420 sshd\[27931\]: User root from 106.3.147.213 not allowed because none of user's groups are listed in AllowGroups Nov 10 07:26:22 sd-53420 sshd\[27931\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.3.147.213 user=root Nov 10 07:26:24 sd-53420 sshd\[27931\]: Failed password for invalid user root from 106.3.147.213 port 38662 ssh2 Nov 10 07:32:11 sd-53420 sshd\[29552\]: Invalid user kxso from 106.3.147.213 Nov 10 07:32:11 sd-53420 sshd\[29552\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.3.147.213 ... |
2019-11-10 15:36:41 |
| 159.203.201.18 | attackspam | Connection by 159.203.201.18 on port: 389 got caught by honeypot at 11/10/2019 5:32:02 AM |
2019-11-10 15:30:25 |
| 202.29.20.214 | attackspambots | Nov 10 07:22:56 srv01 sshd[16268]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.20.214 user=root Nov 10 07:22:58 srv01 sshd[16268]: Failed password for root from 202.29.20.214 port 60994 ssh2 Nov 10 07:27:15 srv01 sshd[16530]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.20.214 user=root Nov 10 07:27:17 srv01 sshd[16530]: Failed password for root from 202.29.20.214 port 41248 ssh2 Nov 10 07:31:32 srv01 sshd[16731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.20.214 user=root Nov 10 07:31:34 srv01 sshd[16731]: Failed password for root from 202.29.20.214 port 49744 ssh2 ... |
2019-11-10 15:41:15 |
| 128.199.38.162 | attackspambots | Nov 10 07:27:23 legacy sshd[13024]: Failed password for root from 128.199.38.162 port 39604 ssh2 Nov 10 07:31:07 legacy sshd[13109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.38.162 Nov 10 07:31:10 legacy sshd[13109]: Failed password for invalid user rk from 128.199.38.162 port 48598 ssh2 ... |
2019-11-10 15:55:28 |
| 222.186.175.182 | attackbotsspam | Nov 10 07:21:52 sshgateway sshd\[479\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.182 user=root Nov 10 07:21:53 sshgateway sshd\[479\]: Failed password for root from 222.186.175.182 port 17746 ssh2 Nov 10 07:22:04 sshgateway sshd\[479\]: Failed password for root from 222.186.175.182 port 17746 ssh2 |
2019-11-10 15:25:13 |
| 89.185.1.175 | attack | Nov 10 07:19:56 pornomens sshd\[16662\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.185.1.175 user=root Nov 10 07:19:57 pornomens sshd\[16662\]: Failed password for root from 89.185.1.175 port 55098 ssh2 Nov 10 07:40:46 pornomens sshd\[16836\]: Invalid user support from 89.185.1.175 port 59180 Nov 10 07:40:46 pornomens sshd\[16836\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.185.1.175 ... |
2019-11-10 15:47:08 |
| 120.192.246.107 | attackspam | " " |
2019-11-10 15:34:04 |
| 60.250.149.19 | attack | Automatic report - SSH Brute-Force Attack |
2019-11-10 15:58:04 |
| 193.32.160.152 | attack | Nov 10 07:31:44 relay postfix/smtpd\[5754\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.152\]: 554 5.7.1 \ |
2019-11-10 15:41:30 |
| 190.115.1.49 | attack | Nov 10 09:12:36 sauna sshd[104588]: Failed password for root from 190.115.1.49 port 53888 ssh2 ... |
2019-11-10 15:28:27 |
| 213.248.51.58 | attackbots | 2019-11-10T06:31:20.569214abusebot-3.cloudsearch.cf sshd\[17771\]: Invalid user admin from 213.248.51.58 port 59401 |
2019-11-10 15:51:09 |
| 49.51.8.99 | attackbots | Connection by 49.51.8.99 on port: 631 got caught by honeypot at 11/10/2019 5:31:31 AM |
2019-11-10 15:59:21 |
| 210.183.21.48 | attackspam | 2019-11-10T07:02:23.907193abusebot-5.cloudsearch.cf sshd\[22830\]: Invalid user cui from 210.183.21.48 port 27638 |
2019-11-10 16:04:45 |