City: Zhengzhou
Region: Henan
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 171.11.254.110 | attackspam | 1588249430 - 04/30/2020 14:23:50 Host: 171.11.254.110/171.11.254.110 Port: 445 TCP Blocked |
2020-05-01 04:40:08 |
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '171.8.0.0 - 171.15.255.255'
% Abuse contact for '171.8.0.0 - 171.15.255.255' is 'anti-spam@chinatelecom.cn'
inetnum: 171.8.0.0 - 171.15.255.255
netname: CHINANET-HA
descr: CHINANET henan province network
descr: henan Telecom Corporation
descr: 97 # Zhongyuan Street, Zhengzhou,henan,China
country: CN
admin-c: HZ149-AP
tech-c: HZ149-AP
abuse-c: AC1573-AP
status: ALLOCATED PORTABLE
remarks: Henan Telecom Corporation hostmaster
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-HA
mnt-routes: MAINT-CHINANET-HA
mnt-irt: IRT-CHINANET-CN
last-modified: 2021-06-15T08:05:58Z
source: APNIC
irt: IRT-CHINANET-CN
address: No.31 ,jingrong street,beijing
address: 100032
e-mail: anti-spam@chinatelecom.cn
abuse-mailbox: anti-spam@chinatelecom.cn
admin-c: CH93-AP
tech-c: CH93-AP
auth: # Filtered
remarks: anti-spam@chinatelecom.cn was validated on 2026-05-21
mnt-by: MAINT-CHINANET
last-modified: 2026-05-21T01:31:36Z
source: APNIC
role: ABUSE CHINANETCN
country: ZZ
address: No.31 ,jingrong street,beijing
address: 100032
phone: +000000000
e-mail: anti-spam@chinatelecom.cn
admin-c: CH93-AP
tech-c: CH93-AP
nic-hdl: AC1573-AP
remarks: Generated from irt object IRT-CHINANET-CN
remarks: anti-spam@chinatelecom.cn was validated on 2026-05-21
abuse-mailbox: anti-spam@chinatelecom.cn
mnt-by: APNIC-ABUSE
last-modified: 2026-05-21T01:32:00Z
source: APNIC
person: Hongbiao Zhang
nic-hdl: HZ149-AP
e-mail: ip@hntele.com
address: 97# Zhongyuan Street, Zhengzhou City, China
phone: +86 371 65310018
fax-no: +86 371 65310015
country: CN
mnt-by: MAINT-CHINANET-HA
last-modified: 2008-09-04T07:29:40Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 171.11.254.239
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31684
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;171.11.254.239. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026070300 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jul 03 16:26:42 CST 2026
;; MSG SIZE rcvd: 107239.254.11.171.in-addr.arpa domain name pointer 11.171.broad.ha.dynamic.163data.com.cn.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
239.254.11.171.in-addr.arpa name = 11.171.broad.ha.dynamic.163data.com.cn.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 61.151.130.22 | attackbotsspam | Jun 21 08:45:58 game-panel sshd[6975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.151.130.22 Jun 21 08:45:59 game-panel sshd[6975]: Failed password for invalid user deploy from 61.151.130.22 port 60809 ssh2 Jun 21 08:47:54 game-panel sshd[7074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.151.130.22 |
2020-06-21 17:13:41 |
| 49.233.75.234 | attackbotsspam | Jun 21 10:27:52 plex sshd[21908]: Invalid user ubuntu from 49.233.75.234 port 51916 |
2020-06-21 16:47:37 |
| 107.181.174.74 | attackbotsspam | Invalid user usuario2 from 107.181.174.74 port 42556 |
2020-06-21 16:54:09 |
| 213.119.66.50 | attackspambots | 20/6/20@23:53:16: FAIL: IoT-Telnet address from=213.119.66.50 ... |
2020-06-21 16:55:03 |
| 222.232.29.235 | attackspambots | $f2bV_matches |
2020-06-21 16:53:04 |
| 182.18.59.187 | attackspam | " " |
2020-06-21 17:03:19 |
| 187.59.85.63 | attack | Port probing on unauthorized port 23 |
2020-06-21 17:13:27 |
| 172.245.23.172 | attack | fell into ViewStateTrap:oslo |
2020-06-21 16:46:35 |
| 183.166.149.178 | attackspam | Jun 21 05:46:32 srv01 postfix/smtpd\[28044\]: warning: unknown\[183.166.149.178\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 21 05:52:12 srv01 postfix/smtpd\[23644\]: warning: unknown\[183.166.149.178\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 21 05:52:23 srv01 postfix/smtpd\[23644\]: warning: unknown\[183.166.149.178\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 21 05:52:39 srv01 postfix/smtpd\[23644\]: warning: unknown\[183.166.149.178\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 21 05:52:57 srv01 postfix/smtpd\[23644\]: warning: unknown\[183.166.149.178\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-06-21 17:08:04 |
| 161.35.77.82 | attackspambots | Jun 21 10:19:54 ns41 sshd[14727]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.77.82 Jun 21 10:19:54 ns41 sshd[14727]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.77.82 |
2020-06-21 16:40:57 |
| 191.92.124.82 | attack | Jun 21 09:17:50 gw1 sshd[9222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.92.124.82 Jun 21 09:17:52 gw1 sshd[9222]: Failed password for invalid user atendimento from 191.92.124.82 port 34224 ssh2 ... |
2020-06-21 16:58:35 |
| 222.186.42.137 | attackspam | 2020-06-21T08:58:09.417565mail.csmailer.org sshd[31996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.137 user=root 2020-06-21T08:58:11.793299mail.csmailer.org sshd[31996]: Failed password for root from 222.186.42.137 port 38069 ssh2 2020-06-21T08:58:09.417565mail.csmailer.org sshd[31996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.137 user=root 2020-06-21T08:58:11.793299mail.csmailer.org sshd[31996]: Failed password for root from 222.186.42.137 port 38069 ssh2 2020-06-21T08:58:14.169876mail.csmailer.org sshd[31996]: Failed password for root from 222.186.42.137 port 38069 ssh2 ... |
2020-06-21 17:04:35 |
| 138.197.66.68 | attackspambots | Invalid user gbase from 138.197.66.68 port 39511 |
2020-06-21 16:49:28 |
| 122.152.195.84 | attackspam | Jun 21 07:16:33 vps sshd[584316]: Failed password for invalid user marcia from 122.152.195.84 port 42552 ssh2 Jun 21 07:18:31 vps sshd[591886]: Invalid user m from 122.152.195.84 port 33936 Jun 21 07:18:31 vps sshd[591886]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.152.195.84 Jun 21 07:18:33 vps sshd[591886]: Failed password for invalid user m from 122.152.195.84 port 33936 ssh2 Jun 21 07:20:33 vps sshd[603945]: Invalid user ubuntu from 122.152.195.84 port 53548 ... |
2020-06-21 17:12:34 |
| 87.251.74.42 | attack | RU_ru-avm-1-mnt_<177>1592727892 [1:2402000:5581] ET DROP Dshield Block Listed Source group 1 [Classification: Misc Attack] [Priority: 2]: |
2020-06-21 16:38:31 |