City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '111.72.0.0 - 111.79.255.255'
% Abuse contact for '111.72.0.0 - 111.79.255.255' is 'anti-spam@chinatelecom.cn'
inetnum: 111.72.0.0 - 111.79.255.255
netname: CHINANET-JX
descr: CHINANET JIANGXI PROVINCE NETWORK
descr: China Telecom
descr: No.31,jingrong street
descr: Beijing 100032
country: CN
admin-c: JN113-AP
tech-c: JN113-AP
abuse-c: AC1573-AP
status: ALLOCATED PORTABLE
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-IP-WWF
mnt-irt: IRT-CHINANET-CN
last-modified: 2021-06-15T08:05:00Z
source: APNIC
irt: IRT-CHINANET-CN
address: No.31 ,jingrong street,beijing
address: 100032
e-mail: anti-spam@chinatelecom.cn
abuse-mailbox: anti-spam@chinatelecom.cn
admin-c: CH93-AP
tech-c: CH93-AP
auth: # Filtered
remarks: anti-spam@chinatelecom.cn was validated on 2026-05-21
mnt-by: MAINT-CHINANET
last-modified: 2026-05-21T01:31:36Z
source: APNIC
role: ABUSE CHINANETCN
country: ZZ
address: No.31 ,jingrong street,beijing
address: 100032
phone: +000000000
e-mail: anti-spam@chinatelecom.cn
admin-c: CH93-AP
tech-c: CH93-AP
nic-hdl: AC1573-AP
remarks: Generated from irt object IRT-CHINANET-CN
remarks: anti-spam@chinatelecom.cn was validated on 2026-05-21
abuse-mailbox: anti-spam@chinatelecom.cn
mnt-by: APNIC-ABUSE
last-modified: 2026-05-21T01:32:00Z
source: APNIC
role: JXDCB NET
address: Jiangxi telecom network operation support department
address: No.2009, Beijing East Road , nanchangA?A?A?A?A?A?A?A?A?A?A?A?A?A?A?A?A?A?A?A?A?A?A?A?jiangxi province
country: CN
phone: +86 79186600000
e-mail: 56561125@qq.com
remarks: send spam reports to 56561125@qq.com
remarks: and abuse reports to 56561125@qq.com
remarks: http://www.online.jx.cn
admin-c: XY1-AP
tech-c: WZ1-CN
tech-c: WW49-AP
nic-hdl: JN113-AP
notify: 56561125@qq.com
mnt-by: MAINT-IP-WWF
last-modified: 2020-04-02T08:23:08Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 111.74.252.229
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14958
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;111.74.252.229. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026091702 1800 900 604800 86400
;; Query time: 31 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 18 12:11:02 CST 2026
;; MSG SIZE rcvd: 107Host 229.252.74.111.in-addr.arpa not found: 2(SERVFAIL)
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 229.252.74.111.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 112.85.42.87 | attack | $f2bV_matches |
2019-10-16 08:32:27 |
| 77.234.255.9 | attack | Failed password for invalid user 1234 from 77.234.255.9 port 43220 ssh2 Invalid user ye123 from 77.234.255.9 port 54736 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.234.255.9 Failed password for invalid user ye123 from 77.234.255.9 port 54736 ssh2 Invalid user espresso from 77.234.255.9 port 38024 |
2019-10-16 08:44:17 |
| 41.214.139.226 | attack | fraudulent SSH attempt |
2019-10-16 08:39:07 |
| 106.12.98.12 | attack | Oct 16 03:17:25 sauna sshd[225395]: Failed password for root from 106.12.98.12 port 38376 ssh2 ... |
2019-10-16 08:31:14 |
| 139.199.228.133 | attackbots | Invalid user marla from 139.199.228.133 port 28040 |
2019-10-16 08:41:34 |
| 60.170.38.71 | attack | $f2bV_matches |
2019-10-16 08:23:38 |
| 95.48.54.106 | attackbots | $f2bV_matches |
2019-10-16 08:26:36 |
| 198.20.99.130 | attack | Port scan: Attack repeated for 24 hours |
2019-10-16 08:51:13 |
| 167.99.127.197 | attackbots | miraniessen.de 167.99.127.197 \[15/Oct/2019:21:52:06 +0200\] "POST /wp-login.php HTTP/1.1" 200 5974 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" miraniessen.de 167.99.127.197 \[15/Oct/2019:21:52:12 +0200\] "POST /wp-login.php HTTP/1.1" 200 5974 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-10-16 08:29:11 |
| 119.200.186.168 | attackspam | Oct 15 21:30:39 vps sshd[10113]: Failed password for root from 119.200.186.168 port 35038 ssh2 Oct 15 21:51:52 vps sshd[11107]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.200.186.168 Oct 15 21:51:54 vps sshd[11107]: Failed password for invalid user zk from 119.200.186.168 port 47260 ssh2 ... |
2019-10-16 08:40:54 |
| 37.59.158.100 | attack | Oct 15 23:01:52 vmd17057 sshd\[4958\]: Invalid user marun from 37.59.158.100 port 56388 Oct 15 23:01:52 vmd17057 sshd\[4958\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.158.100 Oct 15 23:01:54 vmd17057 sshd\[4958\]: Failed password for invalid user marun from 37.59.158.100 port 56388 ssh2 ... |
2019-10-16 09:01:53 |
| 223.72.123.3 | attackbotsspam | Oct 14 20:49:21 our-server-hostname postfix/smtpd[14061]: connect from unknown[223.72.123.3] Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct 14 20:49:39 our-server-hostname postfix/smtpd[14061]: lost connection after RCPT from unknown[223.72.123.3] Oct 14 20:49:39 our-server-hostname postfix/smtpd[14061]: disconnect from unknown[223.72.123.3] Oct 14 23:45:22 our-server-hostname postfix/smtpd[1220]: connect from unknown[223.72.123.3] Oct x@x Oct 14 23:45:28 our-server-hostname postfix/smtpd[1220]: lost connection after RCPT from unknown[223.72.123.3] Oct 14 23:45:28 our-server-hostname postfix/smtpd[1220]: disconnect from unknown[223.72.123.3] Oct 14 23:51:07 our-server-hostname postfix/smtpd[1391]: connect from unknown[223.72.123.3] Oct x@x Oct x@x Oct 14 23:52:28 our-server-hostname postfix/smtpd[1391]: lost connection after RCPT from unknown[223.72.123.3] Oct 14 23:52:28 our-server-hostname postfix/smtpd[1391]: disconnect from unknown[223.72.123.3] Oct 15 00:05:17 our-ser........ ------------------------------- |
2019-10-16 08:38:02 |
| 185.216.140.252 | attackbotsspam | 10/15/2019-19:41:00.212954 185.216.140.252 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-10-16 08:45:09 |
| 188.166.34.129 | attackspambots | Oct 15 22:22:17 venus sshd\[30724\]: Invalid user pass from 188.166.34.129 port 49752 Oct 15 22:22:17 venus sshd\[30724\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.34.129 Oct 15 22:22:20 venus sshd\[30724\]: Failed password for invalid user pass from 188.166.34.129 port 49752 ssh2 ... |
2019-10-16 08:58:21 |
| 104.244.72.98 | attackspambots | $f2bV_matches |
2019-10-16 08:38:53 |