Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Chengdu

Region: Sichuan

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '119.4.0.0 - 119.7.255.255'

% Abuse contact for '119.4.0.0 - 119.7.255.255' is 'hqs-ipabuse@chinaunicom.cn'

inetnum:        119.4.0.0 - 119.7.255.255
netname:        UNICOM-SC
descr:          China Unicom SiChuan province network
descr:          China Unicom
country:        CN
admin-c:        CH1302-AP
tech-c:         XX288-AP
abuse-c:        AC1718-AP
status:         ALLOCATED PORTABLE
remarks:        --------------------------------------------------------
remarks:        To report network abuse, please contact mnt-irt
remarks:        For troubleshooting, please contact tech-c and admin-c
remarks:        Report invalid contact via www.apnic.net/invalidcontact
remarks:        --------------------------------------------------------
mnt-by:         APNIC-HM
mnt-lower:      MAINT-CNCGROUP-SC
mnt-routes:     MAINT-CNCGROUP-RR
mnt-irt:        IRT-CU-CN
last-modified:  2023-10-21T03:35:02Z
source:         APNIC

irt:            IRT-CU-CN
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
e-mail:         hqs-ipabuse@chinaunicom.cn
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
auth:           # Filtered
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
mnt-by:         MAINT-CNCGROUP
last-modified:  2026-08-19T00:57:22Z
source:         APNIC

role:           ABUSE CUCN
country:        ZZ
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
phone:          +000000000
e-mail:         hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
nic-hdl:        AC1718-AP
remarks:        Generated from irt object IRT-CU-CN
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
mnt-by:         APNIC-ABUSE
last-modified:  2026-08-20T03:22:23Z
source:         APNIC

person:         ChinaUnicom Hostmaster
nic-hdl:        CH1302-AP
e-mail:         hqs-ipabuse@chinaunicom.cn
address:        No.21,Jin-Rong Street
address:        Beijing,100033
address:        P.R.China
phone:          +86-10-66259764
fax-no:         +86-10-66259764
country:        CN
mnt-by:         MAINT-CNCGROUP
last-modified:  2017-08-17T06:13:16Z
source:         APNIC

person:         Xifei Xie
nic-hdl:        XX288-AP
e-mail:         sc-sjwg@chinaunicom.cn
address:        Tianfu Road High-Tec international square C,Chengdu,Sichuan 610041,China
phone:          +86-28-66850327
fax-no:         +86-28-66850327
country:        CN
mnt-by:         MAINT-CNCGROUP-SC
last-modified:  2010-12-27T03:36:01Z
source:         APNIC

% Information related to '119.4.0.0/14AS4837'

route:          119.4.0.0/14
descr:          CNC Group CHINA169 Sichuan Province Network
country:        CN
origin:         AS4837
mnt-by:         MAINT-CNCGROUP-RR
last-modified:  2008-09-04T07:55:11Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU4)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.4.55.96
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2995
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;119.4.55.96.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026102900 1800 900 604800 86400

;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 29 17:00:08 CST 2026
;; MSG SIZE  rcvd: 104
Host info
Host 96.55.4.119.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 96.55.4.119.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
189.89.219.184 attack
Lines containing failures of 189.89.219.184
Jun  2 02:14:42 supported sshd[1731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.89.219.184  user=r.r
Jun  2 02:14:45 supported sshd[1731]: Failed password for r.r from 189.89.219.184 port 16429 ssh2
Jun  2 02:14:47 supported sshd[1731]: Received disconnect from 189.89.219.184 port 16429:11: Bye Bye [preauth]
Jun  2 02:14:47 supported sshd[1731]: Disconnected from authenticating user r.r 189.89.219.184 port 16429 [preauth]
Jun  2 02:37:14 supported sshd[5168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.89.219.184  user=r.r
Jun  2 02:37:16 supported sshd[5168]: Failed password for r.r from 189.89.219.184 port 64134 ssh2
Jun  2 02:37:17 supported sshd[5168]: Received disconnect from 189.89.219.184 port 64134:11: Bye Bye [preauth]
Jun  2 02:37:17 supported sshd[5168]: Disconnected from authenticating user r.r 189.89.219.184 port 64134........
------------------------------
2020-06-02 23:06:05
195.144.21.225 attackbotsspam
Port scan of tcp/0 and tcp/65535 across multiple subnets that started on 06/01/2020.
2020-06-02 23:19:53
111.9.56.34 attackbots
Jun  2 14:57:26 buvik sshd[18420]: Failed password for root from 111.9.56.34 port 39702 ssh2
Jun  2 15:01:27 buvik sshd[19442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.9.56.34  user=root
Jun  2 15:01:29 buvik sshd[19442]: Failed password for root from 111.9.56.34 port 57696 ssh2
...
2020-06-02 23:30:10
193.35.48.18 attack
Jun  2 16:30:15 mail postfix/smtpd\[29209\]: warning: unknown\[193.35.48.18\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Jun  2 17:07:27 mail postfix/smtpd\[30715\]: warning: unknown\[193.35.48.18\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Jun  2 17:07:47 mail postfix/smtpd\[30715\]: warning: unknown\[193.35.48.18\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Jun  2 17:09:25 mail postfix/smtpd\[30715\]: warning: unknown\[193.35.48.18\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
2020-06-02 23:16:03
211.193.58.173 attackbots
Jun  2 16:15:47 vps647732 sshd[30831]: Failed password for root from 211.193.58.173 port 53632 ssh2
...
2020-06-02 23:27:35
181.48.23.154 attackspambots
May 26 02:46:20 v2202003116398111542 sshd[11934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.48.23.154  user=root
2020-06-02 23:22:46
31.184.199.114 attack
Jun  2 20:52:16 itv-usvr-01 sshd[6155]: Invalid user 0 from 31.184.199.114
2020-06-02 23:03:23
222.186.180.130 attack
SSH bruteforce
2020-06-02 23:44:09
69.94.135.195 attackspam
Jun  2 13:46:57 mail.srvfarm.net postfix/smtpd[1211070]: NOQUEUE: reject: RCPT from unknown[69.94.135.195]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  2 13:46:58 mail.srvfarm.net postfix/smtpd[1209266]: NOQUEUE: reject: RCPT from unknown[69.94.135.195]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  2 13:47:19 mail.srvfarm.net postfix/smtpd[1203832]: NOQUEUE: reject: RCPT from unknown[69.94.135.195]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  2 13:48:06 mail.srvfarm.net postfix/smtpd[1211325]: NOQUEUE: reject: RCPT from unknown[69.94.135.195]: 450 4.1.8 
2020-06-02 23:43:30
104.248.92.124 attackbots
(sshd) Failed SSH login from 104.248.92.124 (NL/Netherlands/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun  2 14:49:42 s1 sshd[26537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.92.124  user=root
Jun  2 14:49:44 s1 sshd[26537]: Failed password for root from 104.248.92.124 port 47676 ssh2
Jun  2 15:03:03 s1 sshd[27367]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.92.124  user=root
Jun  2 15:03:05 s1 sshd[27367]: Failed password for root from 104.248.92.124 port 52280 ssh2
Jun  2 15:06:14 s1 sshd[27883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.92.124  user=root
2020-06-02 22:57:52
107.170.57.221 attackspam
(sshd) Failed SSH login from 107.170.57.221 (US/United States/-): 5 in the last 3600 secs
2020-06-02 23:01:35
222.186.15.115 attackbotsspam
Jun  3 00:57:49 localhost sshd[1017108]: Disconnected from 222.186.15.115 port 30531 [preauth]
...
2020-06-02 22:59:10
103.28.84.55 attack
(imapd) Failed IMAP login from 103.28.84.55 (NP/Nepal/-): 1 in the last 3600 secs
2020-06-02 23:05:23
188.247.141.215 attackbotsspam
2020-06-0214:05:161jg5fP-0004wi-HN\<=info@whatsup2013.chH=\(localhost\)[45.180.150.34]:38086P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3009id=8745580b002bfef2d59026758146ccc0f300f6ec@whatsup2013.chT="tojosuem3215"forjosuem3215@gmail.comwesleywatson80@gmail.comalbertguerrero3606@icloud.com2020-06-0214:05:421jg5fp-0004y6-5z\<=info@whatsup2013.chH=\(localhost\)[113.57.110.154]:37622P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2978id=0ecf9f7c775c897a59a7510209dde4486b81b1ada2@whatsup2013.chT="tomealplan45"formealplan45@gmail.comprandall4225@gmail.commarkarjohn@yahoo.com2020-06-0214:05:071jg5fG-0004vv-EK\<=info@whatsup2013.chH=\(localhost\)[113.177.134.57]:40881P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3042id=a67fdd494269bc4f6c9264373ce8d17d5eb4fe7757@whatsup2013.chT="tochillip37"forchillip37@gmail.comdiancamilobravogarzon@gmail.combgodbey81@gmail.com2020-06-0214:05:1
2020-06-02 23:17:30
2.136.122.123 attackspambots
DATE:2020-06-02 14:05:40, IP:2.136.122.123, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)
2020-06-02 23:27:08

Recently Reported IPs

35.241.224.239 34.156.187.18 123.190.225.96 42.234.91.74
39.154.0.8 36.159.135.87 222.132.200.49 176.65.149.73
175.162.104.102 125.44.182.78 121.24.38.21 117.27.135.88
115.54.93.177 112.47.120.248 111.85.238.33 110.244.103.109
101.26.28.73 43.106.59.71 43.106.99.247 34.62.17.249