Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Tangshan

Region: Hebei

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '111.224.0.0 - 111.227.255.255'

% Abuse contact for '111.224.0.0 - 111.227.255.255' is 'anti-spam@chinatelecom.cn'

inetnum:        111.224.0.0 - 111.227.255.255
netname:        CHINANET-HE
descr:          CHINANET hebei province network
descr:          China Telecom
descr:          No.31,jingrong street
descr:          Beijing 100032
country:        CN
admin-c:        CH93-AP
tech-c:         BR3-AP
abuse-c:        AC1573-AP
status:         ALLOCATED PORTABLE
remarks:        --------------------------------------------------------
remarks:        To report network abuse, please contact mnt-irt
remarks:        For troubleshooting, please contact tech-c and admin-c
remarks:        Report invalid contact via www.apnic.net/invalidcontact
remarks:        --------------------------------------------------------
mnt-by:         APNIC-HM
mnt-lower:      MAINT-CHINANET-HE
mnt-routes:     MAINT-CHINANET-HE
mnt-irt:        IRT-CHINANET-CN
last-modified:  2021-06-15T08:06:20Z
source:         APNIC

irt:            IRT-CHINANET-CN
address:        No.31 ,jingrong street,beijing
address:        100032
e-mail:         anti-spam@chinatelecom.cn
abuse-mailbox:  anti-spam@chinatelecom.cn
admin-c:        CH93-AP
tech-c:         CH93-AP
auth:           # Filtered
remarks:        anti-spam@chinatelecom.cn was validated on 2025-11-13
mnt-by:         MAINT-CHINANET
last-modified:  2025-11-18T00:26:23Z
source:         APNIC

role:           ABUSE CHINANETCN
country:        ZZ
address:        No.31 ,jingrong street,beijing
address:        100032
phone:          +000000000
e-mail:         anti-spam@chinatelecom.cn
admin-c:        CH93-AP
tech-c:         CH93-AP
nic-hdl:        AC1573-AP
remarks:        Generated from irt object IRT-CHINANET-CN
remarks:        anti-spam@chinatelecom.cn was validated on 2025-11-13
abuse-mailbox:  anti-spam@chinatelecom.cn
mnt-by:         APNIC-ABUSE
last-modified:  2025-11-13T14:15:15Z
source:         APNIC

person:         Bin Ren
nic-hdl:        BR3-AP
e-mail:         g-noc.he@chinatelecom.cn
address:        NO.69 KunLun avenue, Shijiazhuang 050000 China
phone:          +86-311-85211771
fax-no:         +86-311-85202145
country:        CN
mnt-by:         MAINT-CHINANET-HE
last-modified:  2019-03-20T02:47:26Z
source:         APNIC

person:         Chinanet Hostmaster
nic-hdl:        CH93-AP
e-mail:         anti-spam@chinatelecom.cn
address:        No.31 ,jingrong street,beijing
address:        100032
phone:          +86-10-58501724
fax-no:         +86-10-58501724
country:        CN
mnt-by:         MAINT-CHINANET
last-modified:  2022-02-28T06:53:44Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.34 (WHOIS-AU4)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 111.227.30.152
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44197
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;111.227.30.152.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025113001 1800 900 604800 86400

;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Dec 01 08:01:27 CST 2025
;; MSG SIZE  rcvd: 107
Host info
Host 152.30.227.111.in-addr.arpa not found: 2(SERVFAIL)
Nslookup info:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 152.30.227.111.in-addr.arpa: SERVFAIL
Related IP info:
Related comments:
IP Type Details Datetime
103.56.164.61 attack
ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic
2020-06-21 06:43:01
180.182.47.132 attack
Invalid user bep from 180.182.47.132 port 46270
2020-06-21 06:31:18
116.255.139.236 attackbotsspam
SSH Brute Force
2020-06-21 06:24:41
54.37.226.123 attackspambots
Invalid user postgres from 54.37.226.123 port 37230
2020-06-21 06:18:06
104.152.52.35 attackspambots
Non Approved Port scans
2020-06-21 06:26:13
45.14.150.130 attackspambots
Multiport scan 28 ports : 1210 3968 8576 9714 12721 13762 14576 15822 16017 16160 16294 17807 17887 19629 20736 21857 22101 22276 24126 24782 25825 26550 27808 29293 29697 29862 31229 31769
2020-06-21 06:29:20
42.200.155.72 attack
Invalid user c1 from 42.200.155.72 port 60070
2020-06-21 06:29:49
45.143.220.243 attackspambots
Multiport scan : 4 ports scanned 5093 5094 5095 5096
2020-06-21 06:52:14
71.228.61.137 attack
Jun 20 23:38:27 mout sshd[11213]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=71.228.61.137  user=pi
Jun 20 23:38:29 mout sshd[11213]: Failed password for pi from 71.228.61.137 port 60032 ssh2
Jun 20 23:38:31 mout sshd[11213]: Connection closed by authenticating user pi 71.228.61.137 port 60032 [preauth]
2020-06-21 06:27:23
34.96.197.53 attack
Jun 21 03:31:29 dhoomketu sshd[919341]: Failed password for root from 34.96.197.53 port 46598 ssh2
Jun 21 03:33:45 dhoomketu sshd[919368]: Invalid user user from 34.96.197.53 port 55858
Jun 21 03:33:45 dhoomketu sshd[919368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.96.197.53 
Jun 21 03:33:45 dhoomketu sshd[919368]: Invalid user user from 34.96.197.53 port 55858
Jun 21 03:33:47 dhoomketu sshd[919368]: Failed password for invalid user user from 34.96.197.53 port 55858 ssh2
...
2020-06-21 06:30:03
111.229.58.117 attackspam
Failed password for invalid user office from 111.229.58.117 port 59710 ssh2
2020-06-21 06:15:56
71.6.232.5 attackbots
 TCP (SYN) 71.6.232.5:33048 -> port 3306, len 44
2020-06-21 06:46:56
138.197.196.221 attackbots
SSH Invalid Login
2020-06-21 06:14:47
92.63.197.70 attack
 TCP (SYN) 92.63.197.70:46942 -> port 3396, len 44
2020-06-21 06:44:23
213.189.179.83 attackbots
Honeypot attack, port: 81, PTR: host-213-189-179-83.dynamic.voo.be.
2020-06-21 06:18:42

Recently Reported IPs

113.228.79.59 106.8.187.196 83.130.143.198 156.212.59.62
37.41.8.84 10.86.164.233 47.79.41.201 138.197.135.217
134.209.168.160 44.220.48.213 98.70.151.163 10.254.4.111
54.176.49.81 44.248.99.51 31.14.32.7 14.1.104.253
111.7.100.49 44.248.229.237 111.7.100.48 10.148.111.105