Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Shijiazhuang

Region: Hebei

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '121.28.0.0 - 121.29.255.255'

% Abuse contact for '121.28.0.0 - 121.29.255.255' is 'zhaoyz3@chinaunicom.cn'

inetnum:        121.28.0.0 - 121.29.255.255
netname:        UNICOM-HE
descr:          China Unicom Hebei province network
descr:          China Unicom
country:        CN
admin-c:        CH1302-AP
tech-c:         KL984-AP
abuse-c:        AC1718-AP
status:         ALLOCATED PORTABLE
remarks:        service provider
remarks:        --------------------------------------------------------
remarks:        To report network abuse, please contact mnt-irt
remarks:        For troubleshooting, please contact tech-c and admin-c
remarks:        Report invalid contact via www.apnic.net/invalidcontact
remarks:        --------------------------------------------------------
mnt-by:         APNIC-HM
mnt-lower:      MAINT-CNCGROUP-HE
mnt-routes:     MAINT-CNCGROUP-RR
mnt-irt:        IRT-CU-CN
last-modified:  2023-10-21T03:30:44Z
source:         APNIC

irt:            IRT-CU-CN
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
e-mail:         zhaoyz3@chinaunicom.cn
abuse-mailbox:  zhaoyz3@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
auth:           # Filtered
remarks:        zhaoyz3@chinaunicom.cn was validated on 2025-10-17
mnt-by:         MAINT-CNCGROUP
last-modified:  2025-11-18T00:26:20Z
source:         APNIC

role:           ABUSE CUCN
country:        ZZ
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
phone:          +000000000
e-mail:         zhaoyz3@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
nic-hdl:        AC1718-AP
remarks:        Generated from irt object IRT-CU-CN
remarks:        zhaoyz3@chinaunicom.cn was validated on 2025-10-17
abuse-mailbox:  zhaoyz3@chinaunicom.cn
mnt-by:         APNIC-ABUSE
last-modified:  2025-10-17T02:26:56Z
source:         APNIC

person:         ChinaUnicom Hostmaster
nic-hdl:        CH1302-AP
e-mail:         hqs-ipabuse@chinaunicom.cn
address:        No.21,Jin-Rong Street
address:        Beijing,100033
address:        P.R.China
phone:          +86-10-66259764
fax-no:         +86-10-66259764
country:        CN
mnt-by:         MAINT-CNCGROUP
last-modified:  2017-08-17T06:13:16Z
source:         APNIC

person:         Kong Lingfei
nic-hdl:        KL984-AP
e-mail:         konglf5@chinaunicom.cn
address:        45, Guang An Street, Shi Jiazhuang City, HeBei Province,050011,CN
phone:          +86-311-86681601
fax-no:         +86-311-86689210
country:        cn
mnt-by:         MAINT-CNCGROUP-HE
last-modified:  2009-02-06T02:31:32Z
source:         APNIC

% Information related to '121.28.0.0/15AS4837'

route:          121.28.0.0/15
descr:          CNC Group CHINA169 Hebei Province Network
country:        CN
origin:         AS4837
mnt-by:         MAINT-CNCGROUP-RR
last-modified:  2008-09-04T07:54:47Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.36-SNAPSHOT (WHOIS-AU5)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.29.149.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4202
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;121.29.149.8.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026012601 1800 900 604800 86400

;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 27 06:00:34 CST 2026
;; MSG SIZE  rcvd: 105
Host info
b'Host 8.149.29.121.in-addr.arpa not found: 2(SERVFAIL)
'
Nslookup info:
server can't find 121.29.149.8.in-addr.arpa: SERVFAIL
Related IP info:
Related comments:
IP Type Details Datetime
81.22.45.22 attackbots
Jul 25 12:51:06 lumpi kernel: INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.22 DST=172.31.1.100 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=13931 PROTO=TCP SPT=54791 DPT=3380 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2019-07-25 19:02:26
119.82.68.254 attackspambots
Jul 25 11:22:53 MK-Soft-VM4 sshd\[26749\]: Invalid user marlon from 119.82.68.254 port 51351
Jul 25 11:22:53 MK-Soft-VM4 sshd\[26749\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.82.68.254
Jul 25 11:22:56 MK-Soft-VM4 sshd\[26749\]: Failed password for invalid user marlon from 119.82.68.254 port 51351 ssh2
...
2019-07-25 19:35:17
121.182.166.81 attackspam
Jul 25 13:13:13 OPSO sshd\[10029\]: Invalid user mqm from 121.182.166.81 port 16180
Jul 25 13:13:13 OPSO sshd\[10029\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.182.166.81
Jul 25 13:13:15 OPSO sshd\[10029\]: Failed password for invalid user mqm from 121.182.166.81 port 16180 ssh2
Jul 25 13:18:42 OPSO sshd\[10955\]: Invalid user pankaj from 121.182.166.81 port 11317
Jul 25 13:18:42 OPSO sshd\[10955\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.182.166.81
2019-07-25 19:21:45
138.197.140.194 attackbotsspam
SSH Brute-Forcing (ownc)
2019-07-25 19:31:58
187.73.204.170 attack
email spam
2019-07-25 18:55:35
116.203.92.6 attackspam
Jul 24 21:38:00 fv15 sshd[17535]: Failed password for invalid user musicbot from 116.203.92.6 port 37616 ssh2
Jul 24 21:38:00 fv15 sshd[17535]: Received disconnect from 116.203.92.6: 11: Bye Bye [preauth]
Jul 24 21:42:13 fv15 sshd[24702]: Failed password for invalid user admin from 116.203.92.6 port 33208 ssh2
Jul 24 21:42:13 fv15 sshd[24702]: Received disconnect from 116.203.92.6: 11: Bye Bye [preauth]
Jul 24 21:46:15 fv15 sshd[9031]: Failed password for invalid user ama from 116.203.92.6 port 57036 ssh2
Jul 24 21:46:15 fv15 sshd[9031]: Received disconnect from 116.203.92.6: 11: Bye Bye [preauth]
Jul 24 21:50:20 fv15 sshd[6318]: Failed password for invalid user teamchostnamey from 116.203.92.6 port 52628 ssh2
Jul 24 21:50:20 fv15 sshd[6318]: Received disconnect from 116.203.92.6: 11: Bye Bye [preauth]
Jul 24 21:54:35 fv15 sshd[28953]: Failed password for invalid user developer from 116.203.92.6 port 48230 ssh2
Jul 24 21:54:35 fv15 sshd[28953]: Received disconnect from ........
-------------------------------
2019-07-25 19:39:05
5.62.41.147 attackspam
\[2019-07-25 07:15:30\] NOTICE\[2288\] chan_sip.c: Registration from '\' failed for '5.62.41.147:4165' - Wrong password
\[2019-07-25 07:15:30\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-25T07:15:30.296-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1788",SessionID="0x7ff4d0058518",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/5.62.41.147/49189",Challenge="7124a8ab",ReceivedChallenge="7124a8ab",ReceivedHash="5bcb82950d1a3f9bd27d6f03505223c9"
\[2019-07-25 07:16:09\] NOTICE\[2288\] chan_sip.c: Registration from '\' failed for '5.62.41.147:4012' - Wrong password
\[2019-07-25 07:16:09\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-25T07:16:09.592-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5282",SessionID="0x7ff4d004fe18",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/5.62.41.147/64316
2019-07-25 19:20:18
148.72.23.24 attackspambots
[munged]::80 148.72.23.24 - - [25/Jul/2019:06:58:56 +0200] "POST /[munged]: HTTP/1.1" 500 4512 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2019-07-25 19:19:07
118.24.48.13 attack
2019-07-25T03:04:49.985695abusebot-7.cloudsearch.cf sshd\[23242\]: Invalid user a from 118.24.48.13 port 37794
2019-07-25 19:36:36
189.30.4.152 attackbots
Jul 25 03:47:40 mxgate1 postfix/postscreen[17281]: CONNECT from [189.30.4.152]:12470 to [176.31.12.44]:25
Jul 25 03:47:40 mxgate1 postfix/dnsblog[17332]: addr 189.30.4.152 listed by domain zen.spamhaus.org as 127.0.0.11
Jul 25 03:47:40 mxgate1 postfix/dnsblog[17332]: addr 189.30.4.152 listed by domain zen.spamhaus.org as 127.0.0.4
Jul 25 03:47:40 mxgate1 postfix/dnsblog[17319]: addr 189.30.4.152 listed by domain cbl.abuseat.org as 127.0.0.2
Jul 25 03:47:40 mxgate1 postfix/dnsblog[17320]: addr 189.30.4.152 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Jul 25 03:47:40 mxgate1 postfix/dnsblog[17321]: addr 189.30.4.152 listed by domain b.barracudacentral.org as 127.0.0.2
Jul 25 03:47:46 mxgate1 postfix/postscreen[17281]: DNSBL rank 5 for [189.30.4.152]:12470
Jul x@x
Jul 25 03:47:47 mxgate1 postfix/postscreen[17281]: HANGUP after 1.6 from [189.30.4.152]:12470 in tests after SMTP handshake
Jul 25 03:47:47 mxgate1 postfix/postscreen[17281]: DISCONNECT [189.30.4.152]:12470
........
-------------------------------
2019-07-25 19:35:42
92.53.65.196 attack
firewall-block, port(s): 4052/tcp
2019-07-25 19:32:25
218.92.0.179 attackspam
$f2bV_matches
2019-07-25 19:42:47
180.251.170.175 attackspambots
CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
2019-07-25 19:25:22
114.24.110.208 attackspambots
Honeypot attack, port: 23, PTR: 114-24-110-208.dynamic-ip.hinet.net.
2019-07-25 18:53:48
200.52.80.34 attackbotsspam
Jul 25 08:05:48 microserver sshd[49651]: Invalid user webmaster from 200.52.80.34 port 60720
Jul 25 08:05:48 microserver sshd[49651]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34
Jul 25 08:05:50 microserver sshd[49651]: Failed password for invalid user webmaster from 200.52.80.34 port 60720 ssh2
Jul 25 08:11:16 microserver sshd[50355]: Invalid user gtekautomation from 200.52.80.34 port 51866
Jul 25 08:11:16 microserver sshd[50355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34
Jul 25 08:22:10 microserver sshd[51835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34  user=mysql
Jul 25 08:22:12 microserver sshd[51835]: Failed password for mysql from 200.52.80.34 port 34166 ssh2
Jul 25 08:27:34 microserver sshd[52689]: Invalid user acs from 200.52.80.34 port 53548
Jul 25 08:27:34 microserver sshd[52689]: pam_unix(sshd:auth): authentication failure; log
2019-07-25 18:57:05

Recently Reported IPs

222.76.196.247 223.123.38.33 103.252.73.37 216.180.246.24
8.222.235.35 223.123.43.7 129.212.228.172 45.56.70.177
120.227.43.101 158.94.211.103 3.84.163.153 34.230.74.23
50.155.5.165 52.86.84.238 44.202.28.209 167.172.29.224
43.139.112.219 183.191.122.111 171.36.7.107 14.212.103.143