Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Xinxiang

Region: Henan

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '61.54.0.0 - 61.54.255.255'

% Abuse contact for '61.54.0.0 - 61.54.255.255' is 'zhaoyz3@chinaunicom.cn'

inetnum:        61.54.0.0 - 61.54.255.255
netname:        UNICOM-HA
descr:          China Unicom Henan province network
country:        CN
admin-c:        WW444-AP
tech-c:         WW444-AP
abuse-c:        AC1718-AP
status:         ASSIGNED NON-PORTABLE
mnt-by:         MAINT-CNCGROUP-HA
mnt-irt:        IRT-CU-CN
last-modified:  2023-10-21T03:35:39Z
source:         APNIC

irt:            IRT-CU-CN
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
e-mail:         zhaoyz3@chinaunicom.cn
abuse-mailbox:  zhaoyz3@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
auth:           # Filtered
remarks:        zhaoyz3@chinaunicom.cn was validated on 2025-10-17
mnt-by:         MAINT-CNCGROUP
last-modified:  2025-11-18T00:26:20Z
source:         APNIC

role:           ABUSE CUCN
country:        ZZ
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
phone:          +000000000
e-mail:         zhaoyz3@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
nic-hdl:        AC1718-AP
remarks:        Generated from irt object IRT-CU-CN
remarks:        zhaoyz3@chinaunicom.cn was validated on 2025-10-17
abuse-mailbox:  zhaoyz3@chinaunicom.cn
mnt-by:         APNIC-ABUSE
last-modified:  2025-10-17T02:26:56Z
source:         APNIC

person:         Wei Wang
nic-hdl:        WW444-AP
e-mail:         abuse@public.zz.ha.cn
address:        #55 San Quan Road, Zhengzhou, Henan Provice
phone:          +86-371-65952358
fax-no:         +86-371-65968952
country:        CN
mnt-by:         MAINT-CNCGROUP-HA
last-modified:  2010-03-05T08:20:01Z
source:         APNIC

% Information related to '61.54.0.0/16AS4837'

route:          61.54.0.0/16
descr:          CNC Group CHINA169 Henan Province Network
country:        CN
origin:         AS4837
mnt-by:         MAINT-CNCGROUP-RR
last-modified:  2008-09-04T07:54:44Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.36-SNAPSHOT (WHOIS-AU5)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 61.54.29.207
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47002
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;61.54.29.207.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026012600 1800 900 604800 86400

;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 26 16:30:18 CST 2026
;; MSG SIZE  rcvd: 105
Host info
207.29.54.61.in-addr.arpa domain name pointer hn.kd.dhcp.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
207.29.54.61.in-addr.arpa	name = hn.kd.dhcp.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
113.19.72.108 attackspam
11.01.2020 21:13:29 Connection to port 445 blocked by firewall
2020-01-12 08:08:01
185.209.0.32 attack
Jan 12 01:11:46 debian-2gb-nbg1-2 kernel: \[1047212.729966\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.209.0.32 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54245 PROTO=TCP SPT=45196 DPT=43435 WINDOW=1024 RES=0x00 SYN URGP=0
2020-01-12 08:14:18
106.13.67.127 attack
Jan 11 23:10:49 srv206 sshd[11905]: Invalid user vnc from 106.13.67.127
Jan 11 23:10:49 srv206 sshd[11905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.67.127
Jan 11 23:10:49 srv206 sshd[11905]: Invalid user vnc from 106.13.67.127
Jan 11 23:10:51 srv206 sshd[11905]: Failed password for invalid user vnc from 106.13.67.127 port 44822 ssh2
...
2020-01-12 08:05:00
63.143.53.138 attackbots
[2020-01-11 18:41:50] NOTICE[2175] chan_sip.c: Registration from '"125" ' failed for '63.143.53.138:5531' - Wrong password
[2020-01-11 18:41:50] SECURITY[2212] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-01-11T18:41:50.929-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="125",SessionID="0x7f5ac400f638",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/63.143.53.138/5531",Challenge="21379738",ReceivedChallenge="21379738",ReceivedHash="0def6575a2bdfbf1546fdb0043e9ecd8"
[2020-01-11 18:41:51] NOTICE[2175] chan_sip.c: Registration from '"125" ' failed for '63.143.53.138:5531' - Wrong password
[2020-01-11 18:41:51] SECURITY[2212] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-01-11T18:41:51.017-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="125",SessionID="0x7f5ac4718f88",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/63.143.5
...
2020-01-12 07:45:43
188.166.232.14 attack
SSH Login Bruteforce
2020-01-12 07:57:12
178.128.72.80 attackbotsspam
2020-01-11T17:00:34.8450571495-001 sshd[40558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.72.80
2020-01-11T17:00:34.8420001495-001 sshd[40558]: Invalid user yw123 from 178.128.72.80 port 48660
2020-01-11T17:00:36.4214101495-001 sshd[40558]: Failed password for invalid user yw123 from 178.128.72.80 port 48660 ssh2
2020-01-11T18:02:58.6170301495-001 sshd[42996]: Invalid user 0 from 178.128.72.80 port 49078
2020-01-11T18:02:58.6248931495-001 sshd[42996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.72.80
2020-01-11T18:02:58.6170301495-001 sshd[42996]: Invalid user 0 from 178.128.72.80 port 49078
2020-01-11T18:03:00.8535651495-001 sshd[42996]: Failed password for invalid user 0 from 178.128.72.80 port 49078 ssh2
2020-01-11T18:05:52.0145521495-001 sshd[43113]: Invalid user ima from 178.128.72.80 port 50442
2020-01-11T18:05:52.0223121495-001 sshd[43113]: pam_unix(sshd:auth): authenticatio
...
2020-01-12 08:09:34
183.166.171.47 attack
2020-01-11 15:04:32 dovecot_login authenticator failed for (czupa) [183.166.171.47]:64110 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=chenxiaowei@lerctr.org)
2020-01-11 15:04:39 dovecot_login authenticator failed for (yfntl) [183.166.171.47]:64110 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=chenxiaowei@lerctr.org)
2020-01-11 15:04:50 dovecot_login authenticator failed for (tagss) [183.166.171.47]:64110 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=chenxiaofang@lerctr.org)
...
2020-01-12 08:02:00
139.199.87.233 attack
Jan 11 20:55:48 vlre-nyc-1 sshd\[7520\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.87.233  user=root
Jan 11 20:55:50 vlre-nyc-1 sshd\[7520\]: Failed password for root from 139.199.87.233 port 37138 ssh2
Jan 11 21:04:25 vlre-nyc-1 sshd\[7756\]: Invalid user tkr from 139.199.87.233
Jan 11 21:04:25 vlre-nyc-1 sshd\[7756\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.87.233
Jan 11 21:04:27 vlre-nyc-1 sshd\[7756\]: Failed password for invalid user tkr from 139.199.87.233 port 41480 ssh2
...
2020-01-12 08:15:45
131.255.94.66 attack
SSH invalid-user multiple login attempts
2020-01-12 07:57:33
116.111.226.194 attack
1578776682 - 01/11/2020 22:04:42 Host: 116.111.226.194/116.111.226.194 Port: 445 TCP Blocked
2020-01-12 08:08:32
51.178.30.102 attackspam
Jan 11 22:04:57 mail sshd\[15586\]: Invalid user muhamad from 51.178.30.102
Jan 11 22:04:57 mail sshd\[15586\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.30.102
Jan 11 22:05:00 mail sshd\[15586\]: Failed password for invalid user muhamad from 51.178.30.102 port 40850 ssh2
...
2020-01-12 07:57:59
40.113.202.222 attack
...
2020-01-12 08:13:05
218.92.0.158 attack
Jan 12 00:51:13 root sshd[32111]: Failed password for root from 218.92.0.158 port 46448 ssh2
Jan 12 00:51:17 root sshd[32111]: Failed password for root from 218.92.0.158 port 46448 ssh2
Jan 12 00:51:21 root sshd[32111]: Failed password for root from 218.92.0.158 port 46448 ssh2
Jan 12 00:51:27 root sshd[32111]: Failed password for root from 218.92.0.158 port 46448 ssh2
...
2020-01-12 08:07:06
119.149.149.36 attack
ssh failed login
2020-01-12 07:55:14
222.186.175.167 attack
2020-01-11T23:55:59.462403abusebot.cloudsearch.cf sshd[1847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.167  user=root
2020-01-11T23:56:01.384662abusebot.cloudsearch.cf sshd[1847]: Failed password for root from 222.186.175.167 port 63220 ssh2
2020-01-11T23:56:04.529882abusebot.cloudsearch.cf sshd[1847]: Failed password for root from 222.186.175.167 port 63220 ssh2
2020-01-11T23:55:59.462403abusebot.cloudsearch.cf sshd[1847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.167  user=root
2020-01-11T23:56:01.384662abusebot.cloudsearch.cf sshd[1847]: Failed password for root from 222.186.175.167 port 63220 ssh2
2020-01-11T23:56:04.529882abusebot.cloudsearch.cf sshd[1847]: Failed password for root from 222.186.175.167 port 63220 ssh2
2020-01-11T23:55:59.462403abusebot.cloudsearch.cf sshd[1847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=
...
2020-01-12 07:56:40

Recently Reported IPs

183.255.53.131 115.45.41.140 47.92.242.210 45.91.81.248
117.55.202.152 10.42.113.224 20.168.109.236 130.12.180.95
180.127.229.136 31.130.155.161 185.247.137.82 112.97.82.15
140.174.161.179 34.148.187.47 14.220.182.154 173.82.226.18
142.171.201.207 34.52.153.230 188.253.124.73 1.234.44.150