1.28.109.137 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '1.24.0.0 - 1.31.255.255'

% Abuse contact for '1.24.0.0 - 1.31.255.255' is 'hqs-ipabuse@chinaunicom.cn'

inetnum:        1.24.0.0 - 1.31.255.255
netname:        UNICOM-NM
descr:          China unicom InnerMongolia province network
descr:          China unicom
descr:          No.21,Ji-Rong Street,
descr:          Beijing 100032
country:        CN
admin-c:        CH1302-AP
tech-c:         HY690-AP
abuse-c:        AC1718-AP
status:         ALLOCATED PORTABLE
remarks:        service provider
mnt-by:         APNIC-HM
mnt-lower:      MAINT-CNCGROUP-NM
mnt-routes:     MAINT-CNCGROUP-RR
mnt-irt:        IRT-CU-CN
last-modified:  2023-10-21T03:35:27Z
source:         APNIC

irt:            IRT-CU-CN
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
e-mail:         hqs-ipabuse@chinaunicom.cn
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
auth:           # Filtered
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
mnt-by:         MAINT-CNCGROUP
last-modified:  2026-08-19T00:57:22Z
source:         APNIC

role:           ABUSE CUCN
country:        ZZ
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
phone:          +000000000
e-mail:         hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
nic-hdl:        AC1718-AP
remarks:        Generated from irt object IRT-CU-CN
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
mnt-by:         APNIC-ABUSE
last-modified:  2026-08-20T03:22:23Z
source:         APNIC

person:         ChinaUnicom Hostmaster
nic-hdl:        CH1302-AP
e-mail:         hqs-ipabuse@chinaunicom.cn
address:        No.21,Jin-Rong Street
address:        Beijing,100033
address:        P.R.China
phone:          +86-10-66259764
fax-no:         +86-10-66259764
country:        CN
mnt-by:         MAINT-CNCGROUP
last-modified:  2017-08-17T06:13:16Z
source:         APNIC

person:         honghui yuan
nic-hdl:        HY690-AP
e-mail:         oo@public.hh.nm.cn
address:        NO.169 hulun south road Huhhot Inner Mongolia, 010028,China
phone:          +86-471-6268961
fax-no:         +86-471-6291559
country:        cn
mnt-by:         MAINT-CNCGROUP-NM
last-modified:  2008-09-04T07:42:51Z
source:         APNIC

% Information related to '1.24.0.0/13AS4837'

route:          1.24.0.0/13
descr:          China Unicom Neimeng Province Network
country:        CN
origin:         AS4837
mnt-by:         MAINT-CNCGROUP-RR
last-modified:  2010-05-05T04:42:01Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-US2)

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.28.109.137
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11829
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.28.109.137.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026090100 1800 900 604800 86400

;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Sep 01 22:03:16 CST 2026
;; MSG SIZE  rcvd: 105

Host info

Host 137.109.28.1.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 137.109.28.1.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
36.81.8.240	attackspambots	Unauthorized connection attempt from IP address 36.81.8.240 on Port 445(SMB)	2020-03-21 19:04:39
86.120.24.228	attackbotsspam	port scan and connect, tcp 23 (telnet)	2020-03-21 19:08:59
119.29.225.82	attackspambots	2020-03-21T08:27:59.382919shield sshd\[4075\]: Invalid user vongani from 119.29.225.82 port 42912 2020-03-21T08:27:59.389759shield sshd\[4075\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.225.82 2020-03-21T08:28:01.149642shield sshd\[4075\]: Failed password for invalid user vongani from 119.29.225.82 port 42912 ssh2 2020-03-21T08:30:50.605865shield sshd\[4788\]: Invalid user lanbijia from 119.29.225.82 port 55370 2020-03-21T08:30:50.615037shield sshd\[4788\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.225.82	2020-03-21 18:58:48
217.244.138.63	attackbots	Mar 21 11:27:39 minden010 postfix/smtpd[7356]: NOQUEUE: reject: RCPT from pD9F48A3F.dip0.t-ipconnect.de[217.244.138.63]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Mar 21 11:27:39 minden010 postfix/smtpd[11841]: NOQUEUE: reject: RCPT from pD9F48A3F.dip0.t-ipconnect.de[217.244.138.63]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Mar 21 11:27:40 minden010 postfix/smtpd[7392]: NOQUEUE: reject: RCPT from pD9F48A3F.dip0.t-ipconnect.de[217.244.138.63]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Mar 21 11:27:40 minden010 postfix/smtpd[11839]: NOQUEUE: reject: RCPT from pD9F48A3F.dip0.t-ipconnect.de[217.244.138.63]: 450 4.7.1 : Helo ...	2020-03-21 18:49:49
183.250.155.206	attackbotsspam	$f2bV_matches	2020-03-21 19:01:37
45.224.105.209	attack	(imapd) Failed IMAP login from 45.224.105.209 (AR/Argentina/-): 1 in the last 3600 secs	2020-03-21 18:40:28
138.68.82.194	attack	Mar 21 09:23:33 h2646465 sshd[8133]: Invalid user don from 138.68.82.194 Mar 21 09:23:33 h2646465 sshd[8133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.194 Mar 21 09:23:33 h2646465 sshd[8133]: Invalid user don from 138.68.82.194 Mar 21 09:23:35 h2646465 sshd[8133]: Failed password for invalid user don from 138.68.82.194 port 54988 ssh2 Mar 21 09:33:17 h2646465 sshd[10712]: Invalid user kayleigh from 138.68.82.194 Mar 21 09:33:17 h2646465 sshd[10712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.194 Mar 21 09:33:17 h2646465 sshd[10712]: Invalid user kayleigh from 138.68.82.194 Mar 21 09:33:19 h2646465 sshd[10712]: Failed password for invalid user kayleigh from 138.68.82.194 port 39230 ssh2 Mar 21 09:38:05 h2646465 sshd[12212]: Invalid user pi from 138.68.82.194 ...	2020-03-21 18:57:49
118.24.158.42	attackbots	Mar 20 23:47:50 lanister sshd[2826]: Invalid user anthony from 118.24.158.42 Mar 20 23:47:50 lanister sshd[2826]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.158.42 Mar 20 23:47:50 lanister sshd[2826]: Invalid user anthony from 118.24.158.42 Mar 20 23:47:52 lanister sshd[2826]: Failed password for invalid user anthony from 118.24.158.42 port 48552 ssh2	2020-03-21 18:39:16
62.12.108.238	attackbots	Mar 21 11:48:08 ourumov-web sshd\[14115\]: Invalid user rodriguez from 62.12.108.238 port 41731 Mar 21 11:48:08 ourumov-web sshd\[14115\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.12.108.238 Mar 21 11:48:10 ourumov-web sshd\[14115\]: Failed password for invalid user rodriguez from 62.12.108.238 port 41731 ssh2 ...	2020-03-21 19:07:55
49.233.132.81	attackspam	Mar 21 08:11:48 work-partkepr sshd\[30724\]: Invalid user riann from 49.233.132.81 port 33356 Mar 21 08:11:48 work-partkepr sshd\[30724\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.132.81 ...	2020-03-21 18:46:52
91.146.121.3	attackspambots	Unauthorized connection attempt detected, IP banned.	2020-03-21 19:14:08
14.249.243.21	attackbotsspam	20/3/20@23:47:11: FAIL: Alarm-Network address from=14.249.243.21 ...	2020-03-21 19:05:47
92.118.37.55	attackbots	Mar 21 11:52:40 debian-2gb-nbg1-2 kernel: \[7047058.013655\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=92.118.37.55 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=4420 PROTO=TCP SPT=52438 DPT=13659 WINDOW=1024 RES=0x00 SYN URGP=0	2020-03-21 18:56:52
140.213.139.50	attackspam	1584762455 - 03/21/2020 04:47:35 Host: 140.213.139.50/140.213.139.50 Port: 445 TCP Blocked	2020-03-21 18:50:13
49.235.33.212	attackbotsspam	ssh brute force	2020-03-21 18:55:07

Recently Reported IPs

110.252.129.168	110.19.174.132	46.151.182.40	182.44.67.143
60.5.26.149	60.5.185.72	42.233.7.97	39.89.165.185
223.74.125.173	175.166.163.221	175.154.80.192	123.4.102.34
114.252.206.119	111.25.189.29	111.19.41.222	112.49.165.152
160.119.76.27	198.65.53.8	198.65.53.37	195.178.110.137