City: unknown
Region: unknown
Country: China
Internet Service Provider: China Unicom
Hostname: unknown
Organization: unknown
Usage Type: unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '222.132.0.0 - 222.135.255.255'
% Abuse contact for '222.132.0.0 - 222.135.255.255' is 'hqs-ipabuse@chinaunicom.cn'
inetnum: 222.132.0.0 - 222.135.255.255
netname: UNICOM-SD
descr: China Unicom Shandong province network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: XZ14-AP
abuse-c: AC1718-AP
status: ALLOCATED PORTABLE
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-SD
mnt-routes: MAINT-CNCGROUP-RR
mnt-irt: IRT-CU-CN
last-modified: 2025-01-22T13:10:51Z
source: APNIC
irt: IRT-CU-CN
address: No.21,Financial Street
address: Beijing,100033
address: P.R.China
e-mail: hqs-ipabuse@chinaunicom.cn
abuse-mailbox: hqs-ipabuse@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
auth: # Filtered
remarks: hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
mnt-by: MAINT-CNCGROUP
last-modified: 2026-08-19T00:57:22Z
source: APNIC
role: ABUSE CUCN
country: ZZ
address: No.21,Financial Street
address: Beijing,100033
address: P.R.China
phone: +000000000
e-mail: hqs-ipabuse@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
nic-hdl: AC1718-AP
remarks: Generated from irt object IRT-CU-CN
remarks: hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
abuse-mailbox: hqs-ipabuse@chinaunicom.cn
mnt-by: APNIC-ABUSE
last-modified: 2026-08-20T03:22:23Z
source: APNIC
person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: hqs-ipabuse@chinaunicom.cn
address: No.21,Jin-Rong Street
address: Beijing,100033
address: P.R.China
phone: +86-10-66259764
fax-no: +86-10-66259764
country: CN
mnt-by: MAINT-CNCGROUP
last-modified: 2017-08-17T06:13:16Z
source: APNIC
person: XIAOFENG ZHANG
nic-hdl: XZ14-AP
e-mail: ip@pub.sd.cninfo.net
address: Jinan,Shandong P.R China
phone: +86-531-6666666
fax-no: +86-531-6666666
country: CN
mnt-by: MAINT-ZXF
last-modified: 2008-09-04T07:29:35Z
source: APNIC
% Information related to '222.132.0.0/14AS4837'
route: 222.132.0.0/14
descr: CNC Group CHINA169 Shandong Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
last-modified: 2008-09-04T07:54:44Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-US2); <<>> DiG 9.10.3-P4-Ubuntu <<>> 222.135.75.92
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8668
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;222.135.75.92. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026082001 1800 900 604800 86400
;; Query time: 5 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Aug 21 09:01:21 CST 2026
;; MSG SIZE rcvd: 106Host 92.75.135.222.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 92.75.135.222.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 200.27.50.85 | attackspam | 445/tcp 445/tcp 445/tcp... [2019-06-12/07-29]9pkt,1pt.(tcp) |
2019-07-30 12:57:57 |
| 117.34.73.162 | attackbotsspam | Jul 30 05:36:05 mail sshd\[28661\]: Invalid user leon from 117.34.73.162\ Jul 30 05:36:07 mail sshd\[28661\]: Failed password for invalid user leon from 117.34.73.162 port 48882 ssh2\ Jul 30 05:39:03 mail sshd\[28721\]: Invalid user vg from 117.34.73.162\ Jul 30 05:39:05 mail sshd\[28721\]: Failed password for invalid user vg from 117.34.73.162 port 46930 ssh2\ Jul 30 05:42:03 mail sshd\[28728\]: Invalid user school from 117.34.73.162\ Jul 30 05:42:05 mail sshd\[28728\]: Failed password for invalid user school from 117.34.73.162 port 44916 ssh2\ |
2019-07-30 13:07:28 |
| 185.176.27.246 | attackspambots | Excessive Port-Scanning |
2019-07-30 12:44:06 |
| 51.68.94.61 | attackspambots | Jul 30 05:58:33 localhost sshd\[11995\]: Invalid user testing from 51.68.94.61 port 35514 Jul 30 05:58:33 localhost sshd\[11995\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.94.61 ... |
2019-07-30 13:12:59 |
| 190.9.130.159 | attack | Jul 30 04:15:32 Ubuntu-1404-trusty-64-minimal sshd\[10370\]: Invalid user nodejs from 190.9.130.159 Jul 30 04:15:32 Ubuntu-1404-trusty-64-minimal sshd\[10370\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.9.130.159 Jul 30 04:15:34 Ubuntu-1404-trusty-64-minimal sshd\[10370\]: Failed password for invalid user nodejs from 190.9.130.159 port 51921 ssh2 Jul 30 04:25:16 Ubuntu-1404-trusty-64-minimal sshd\[15334\]: Invalid user parkyr from 190.9.130.159 Jul 30 04:25:16 Ubuntu-1404-trusty-64-minimal sshd\[15334\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.9.130.159 |
2019-07-30 12:59:45 |
| 67.43.15.7 | attackspambots | 445/tcp 445/tcp 445/tcp... [2019-06-18/07-29]9pkt,1pt.(tcp) |
2019-07-30 12:33:35 |
| 211.143.246.38 | attackbots | Jul 30 06:27:07 mail sshd\[29163\]: Invalid user desenv from 211.143.246.38\ Jul 30 06:27:09 mail sshd\[29163\]: Failed password for invalid user desenv from 211.143.246.38 port 53227 ssh2\ Jul 30 06:31:03 mail sshd\[29349\]: Invalid user qwerty12 from 211.143.246.38\ Jul 30 06:31:05 mail sshd\[29349\]: Failed password for invalid user qwerty12 from 211.143.246.38 port 43309 ssh2\ Jul 30 06:35:00 mail sshd\[29369\]: Invalid user 123456 from 211.143.246.38\ Jul 30 06:35:02 mail sshd\[29369\]: Failed password for invalid user 123456 from 211.143.246.38 port 33405 ssh2\ |
2019-07-30 12:54:58 |
| 118.24.40.130 | attack | Jul 30 00:35:50 xtremcommunity sshd\[19321\]: Invalid user rtkit from 118.24.40.130 port 59512 Jul 30 00:35:50 xtremcommunity sshd\[19321\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.40.130 Jul 30 00:35:52 xtremcommunity sshd\[19321\]: Failed password for invalid user rtkit from 118.24.40.130 port 59512 ssh2 Jul 30 00:41:40 xtremcommunity sshd\[19554\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.40.130 user=mysql Jul 30 00:41:42 xtremcommunity sshd\[19554\]: Failed password for mysql from 118.24.40.130 port 53876 ssh2 ... |
2019-07-30 12:49:18 |
| 216.38.134.67 | attack | Automatic report - Banned IP Access |
2019-07-30 12:54:10 |
| 103.61.37.14 | attackspambots | SSH/22 MH Probe, BF, Hack - |
2019-07-30 13:10:29 |
| 202.96.185.34 | attack | Jul 30 07:35:06 server sshd\[26722\]: Invalid user pl from 202.96.185.34 port 61166 Jul 30 07:35:06 server sshd\[26722\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.96.185.34 Jul 30 07:35:08 server sshd\[26722\]: Failed password for invalid user pl from 202.96.185.34 port 61166 ssh2 Jul 30 07:40:41 server sshd\[3601\]: Invalid user amavis from 202.96.185.34 port 55101 Jul 30 07:40:41 server sshd\[3601\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.96.185.34 |
2019-07-30 12:56:57 |
| 27.19.220.176 | attackspam | Telnetd brute force attack detected by fail2ban |
2019-07-30 13:18:34 |
| 118.68.170.172 | attackspambots | 2019-07-30T04:31:44.152009abusebot.cloudsearch.cf sshd\[11883\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118-68-170-172.higio.net user=root |
2019-07-30 12:34:22 |
| 115.148.98.126 | attackbotsspam | Jul 30 04:11:41 admin sendmail[14926]: x6U2BVfx014926: [115.148.98.126] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA Jul 30 04:11:45 admin sendmail[14930]: x6U2Bfw7014930: [115.148.98.126] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA Jul 30 04:11:46 admin sendmail[14935]: x6U2Bjw4014935: [115.148.98.126] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA Jul 30 04:11:47 admin sendmail[14939]: x6U2BkiI014939: [115.148.98.126] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=115.148.98.126 |
2019-07-30 13:08:25 |
| 118.25.40.74 | attackbotsspam | Jul 30 07:05:54 mail sshd\[32549\]: Failed password for invalid user user from 118.25.40.74 port 49752 ssh2 Jul 30 07:09:02 mail sshd\[398\]: Invalid user gmodserveur from 118.25.40.74 port 50672 Jul 30 07:09:02 mail sshd\[398\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.40.74 Jul 30 07:09:03 mail sshd\[398\]: Failed password for invalid user gmodserveur from 118.25.40.74 port 50672 ssh2 Jul 30 07:12:13 mail sshd\[1095\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.40.74 user=irc |
2019-07-30 13:20:58 |