City: Chengdu
Region: Sichuan
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 129.28.0.0 - 129.28.255.255
CIDR: 129.28.0.0/16
NetName: APNIC
NetHandle: NET-129-28-0-0-1
Parent: NET129 (NET-129-0-0-0-0)
NetType: Early Registrations, Transferred to APNIC
OriginAS:
Organization: Asia Pacific Network Information Centre (APNIC)
RegDate: 2017-08-29
Updated: 2017-08-29
Ref: https://rdap.arin.net/registry/ip/129.28.0.0
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
ResourceLink: whois://whois.apnic.net
OrgName: Asia Pacific Network Information Centre
OrgId: APNIC
Address: PO Box 3646
City: South Brisbane
StateProv: QLD
PostalCode: 4101
Country: AU
RegDate:
Updated: 2012-01-24
Ref: https://rdap.arin.net/registry/entity/APNIC
ReferralServer: whois://whois.apnic.net
ResourceLink: http://wq.apnic.net/whois-search/static/search.html
OrgAbuseHandle: AWC12-ARIN
OrgAbuseName: APNIC Whois Contact
OrgAbusePhone: +61 7 3858 3188
OrgAbuseEmail: search-apnic-not-arin@apnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3188
OrgTechEmail: search-apnic-not-arin@apnic.net
OrgTechRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to whois.apnic.net.
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '129.28.0.0 - 129.28.255.255'
% Abuse contact for '129.28.0.0 - 129.28.255.255' is 'abuse@tencent.com'
inetnum: 129.28.0.0 - 129.28.255.255
netname: TENCENT-CN
descr: Tencent Cloud Computing (Beijing) Co., Ltd
descr: Floor 6, Yinke Building, 38 Haidian St, Haidian District
country: CN
org: ORG-TCCC1-AP
admin-c: TCA15-AP
tech-c: TCA15-AP
abuse-c: AT992-AP
status: ALLOCATED PORTABLE
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
mnt-by: APNIC-HM
mnt-lower: MAINT-TENCENT-CN
mnt-routes: MAINT-TENCENT-CN
mnt-irt: IRT-TENCENT-CN
last-modified: 2020-07-22T13:11:01Z
source: APNIC
irt: IRT-TENCENT-CN
address: Floor 6, Yinke Building, 38 Haidian St, Haidian District, Beijing Beijing 100080
e-mail: tencent_noc@tencent.com
abuse-mailbox: abuse@tencent.com
admin-c: TCA15-AP
tech-c: TCA15-AP
auth: # Filtered
remarks: abuse@tencent.com was validated on 2026-05-15
remarks: tencent_noc@tencent.com was validated on 2026-06-05
mnt-by: MAINT-COMSENZ1-CN
last-modified: 2026-06-05T07:58:46Z
source: APNIC
organisation: ORG-TCCC1-AP
org-name: Tencent Cloud Computing (Beijing) Co., Ltd
org-type: LIR
country: CN
address: 309 West Zone, 3F. 49 Zhichun Road. Haidian District.
phone: +86-10-62671299
fax-no: +86-10-82602088-41299
e-mail: tencent_idc@tencent.com
mnt-ref: APNIC-HM
mnt-by: APNIC-HM
last-modified: 2023-09-05T02:16:21Z
source: APNIC
role: ABUSE TENCENTCN
country: ZZ
address: Floor 6, Yinke Building, 38 Haidian St, Haidian District, Beijing Beijing 100080
phone: +000000000
e-mail: tencent_noc@tencent.com
admin-c: TCA15-AP
tech-c: TCA15-AP
nic-hdl: AT992-AP
remarks: Generated from irt object IRT-TENCENT-CN
remarks: abuse@tencent.com was validated on 2026-05-15
remarks: tencent_noc@tencent.com was validated on 2026-06-05
abuse-mailbox: abuse@tencent.com
mnt-by: APNIC-ABUSE
last-modified: 2026-06-05T07:59:01Z
source: APNIC
role: Tencent Cloud administrator
address: Floor 6, Yinke Building, 38 Haidian St, Haidian District, Beijing Beijing 100080
country: CN
phone: +86-10-62671299
e-mail: tencent_idc@tencent.com
admin-c: TCA15-AP
tech-c: TCA15-AP
nic-hdl: TCA15-AP
mnt-by: MAINT-AP-DIALPAD
fax-no: +86-10-62671299
last-modified: 2017-04-04T10:34:03Z
source: APNIC
% Information related to '129.28.0.0/16AS45090'
route: 129.28.0.0/16
origin: AS45090
descr: Tencent Cloud Computing (Beijing) Co., Ltd
309 West Zone, 3F. 49 Zhichun Road. Haidian District.
mnt-by: MAINT-TENCENT-CN
last-modified: 2018-01-17T08:22:13Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU4); <<>> DiG 9.10.3-P4-Ubuntu <<>> 129.28.38.92
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23190
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;129.28.38.92. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026070500 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jul 05 15:00:28 CST 2026
;; MSG SIZE rcvd: 105Host 92.38.28.129.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 92.38.28.129.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 177.232.91.24 | attack | Automatic report - XMLRPC Attack |
2020-06-29 12:11:08 |
| 117.193.69.83 | attackbotsspam | 1593403097 - 06/29/2020 05:58:17 Host: 117.193.69.83/117.193.69.83 Port: 445 TCP Blocked |
2020-06-29 12:25:15 |
| 123.25.240.196 | attack | 06/28/2020-23:58:43.719405 123.25.240.196 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433 |
2020-06-29 12:03:17 |
| 113.247.250.238 | attack | Jun 29 05:58:32 ncomp sshd[3370]: Invalid user master from 113.247.250.238 Jun 29 05:58:32 ncomp sshd[3370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.247.250.238 Jun 29 05:58:32 ncomp sshd[3370]: Invalid user master from 113.247.250.238 Jun 29 05:58:34 ncomp sshd[3370]: Failed password for invalid user master from 113.247.250.238 port 49514 ssh2 |
2020-06-29 12:08:14 |
| 208.107.13.48 | attack | Brute forcing email accounts |
2020-06-29 12:01:47 |
| 68.225.245.218 | attackspam | 2020-06-29T05:58[Censored Hostname] sshd[17668]: Failed password for invalid user admin from 68.225.245.218 port 36959 ssh2 2020-06-29T05:58[Censored Hostname] sshd[17690]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.225.245.218 user=root 2020-06-29T05:58[Censored Hostname] sshd[17690]: Failed password for root from 68.225.245.218 port 37039 ssh2[...] |
2020-06-29 12:08:50 |
| 193.70.112.6 | attack | 2020-06-28T22:58:11.197153morrigan.ad5gb.com sshd[2066565]: Invalid user prueba from 193.70.112.6 port 57948 2020-06-28T22:58:13.152737morrigan.ad5gb.com sshd[2066565]: Failed password for invalid user prueba from 193.70.112.6 port 57948 ssh2 |
2020-06-29 12:29:47 |
| 124.192.225.221 | attack | Invalid user xinyi from 124.192.225.221 port 53299 |
2020-06-29 12:05:49 |
| 218.88.126.88 | attack | 20 attempts against mh-ssh on fire |
2020-06-29 12:36:15 |
| 222.186.180.6 | attackbots | 2020-06-29T06:05:00.410771vps751288.ovh.net sshd\[20052\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.6 user=root 2020-06-29T06:05:02.844632vps751288.ovh.net sshd\[20052\]: Failed password for root from 222.186.180.6 port 37808 ssh2 2020-06-29T06:05:06.113031vps751288.ovh.net sshd\[20052\]: Failed password for root from 222.186.180.6 port 37808 ssh2 2020-06-29T06:05:09.124862vps751288.ovh.net sshd\[20052\]: Failed password for root from 222.186.180.6 port 37808 ssh2 2020-06-29T06:05:12.216465vps751288.ovh.net sshd\[20052\]: Failed password for root from 222.186.180.6 port 37808 ssh2 |
2020-06-29 12:10:51 |
| 49.234.213.237 | attackspambots | 5x Failed Password |
2020-06-29 12:19:46 |
| 182.53.96.113 | attackbotsspam | 1593403092 - 06/29/2020 05:58:12 Host: 182.53.96.113/182.53.96.113 Port: 445 TCP Blocked |
2020-06-29 12:31:26 |
| 106.13.70.60 | attackspam | $f2bV_matches |
2020-06-29 12:28:53 |
| 185.39.10.140 | attack | Jun 29 05:58:14 debian-2gb-nbg1-2 kernel: \[15661739.239632\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.39.10.140 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=4100 PROTO=TCP SPT=53390 DPT=20507 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-06-29 12:27:40 |
| 192.241.211.94 | attack | Jun 29 05:58:30 mail sshd[41039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.211.94 Jun 29 05:58:31 mail sshd[41039]: Failed password for invalid user nagios from 192.241.211.94 port 37376 ssh2 ... |
2020-06-29 12:09:39 |