Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '115.48.0.0 - 115.63.255.255'

% Abuse contact for '115.48.0.0 - 115.63.255.255' is 'hqs-ipabuse@chinaunicom.cn'

inetnum:        115.48.0.0 - 115.63.255.255
netname:        UNICOM-HA
descr:          China Unicom Henan province network
descr:          China Unicom
country:        CN
admin-c:        CH1302-AP
tech-c:         WW444-AP
abuse-c:        AC1718-AP
status:         ALLOCATED PORTABLE
remarks:        service provider
remarks:        --------------------------------------------------------
remarks:        To report network abuse, please contact mnt-irt
remarks:        For troubleshooting, please contact tech-c and admin-c
remarks:        Report invalid contact via www.apnic.net/invalidcontact
remarks:        --------------------------------------------------------
mnt-by:         APNIC-HM
mnt-lower:      MAINT-CNCGROUP-HA
mnt-routes:     MAINT-CNCGROUP-RR
mnt-irt:        IRT-CU-CN
last-modified:  2025-01-22T13:15:04Z
source:         APNIC

irt:            IRT-CU-CN
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
e-mail:         hqs-ipabuse@chinaunicom.cn
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
auth:           # Filtered
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
mnt-by:         MAINT-CNCGROUP
last-modified:  2026-08-19T00:57:22Z
source:         APNIC

role:           ABUSE CUCN
country:        ZZ
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
phone:          +000000000
e-mail:         hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
nic-hdl:        AC1718-AP
remarks:        Generated from irt object IRT-CU-CN
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
mnt-by:         APNIC-ABUSE
last-modified:  2026-08-20T03:22:23Z
source:         APNIC

person:         ChinaUnicom Hostmaster
nic-hdl:        CH1302-AP
e-mail:         hqs-ipabuse@chinaunicom.cn
address:        No.21,Jin-Rong Street
address:        Beijing,100033
address:        P.R.China
phone:          +86-10-66259764
fax-no:         +86-10-66259764
country:        CN
mnt-by:         MAINT-CNCGROUP
last-modified:  2017-08-17T06:13:16Z
source:         APNIC

person:         Wei Wang
nic-hdl:        WW444-AP
e-mail:         abuse@public.zz.ha.cn
address:        #55 San Quan Road, Zhengzhou, Henan Provice
phone:          +86-371-65952358
fax-no:         +86-371-65968952
country:        CN
mnt-by:         MAINT-CNCGROUP-HA
last-modified:  2010-03-05T08:20:01Z
source:         APNIC

% Information related to '115.48.0.0/12AS4837'

route:          115.48.0.0/12
descr:          CNC Group CHINA169 Henan Province Network
country:        CN
origin:         AS4837
mnt-by:         MAINT-CNCGROUP-RR
last-modified:  2008-09-04T07:55:26Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU4)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 115.55.28.67
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32904
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;115.55.28.67.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026100401 1800 900 604800 86400

;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Oct 05 10:01:39 CST 2026
;; MSG SIZE  rcvd: 105
Host info
67.28.55.115.in-addr.arpa domain name pointer hn.kd.ny.adsl.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
67.28.55.115.in-addr.arpa	name = hn.kd.ny.adsl.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
132.232.33.161 attackspambots
2020-01-17T14:16:26.369233shield sshd\[32023\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.33.161  user=root
2020-01-17T14:16:28.864442shield sshd\[32023\]: Failed password for root from 132.232.33.161 port 54966 ssh2
2020-01-17T14:20:16.952133shield sshd\[1696\]: Invalid user admin from 132.232.33.161 port 53704
2020-01-17T14:20:16.957646shield sshd\[1696\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.33.161
2020-01-17T14:20:19.020338shield sshd\[1696\]: Failed password for invalid user admin from 132.232.33.161 port 53704 ssh2
2020-01-17 22:26:01
49.88.112.55 attackspam
$f2bV_matches
2020-01-17 22:43:09
46.229.168.151 attack
Forbidden directory scan :: 2020/01/17 13:03:24 [error] 1008#1008: *16803 access forbidden by rule, client: 46.229.168.151, server: [censored_1], request: "GET /.../office-2010/excel-2010-how-to-create-drop-down-lists HTTP/1.1", host: "www.[censored_1]"
2020-01-17 22:31:31
148.70.24.20 attack
Unauthorized connection attempt detected from IP address 148.70.24.20 to port 2220 [J]
2020-01-17 22:38:45
46.150.108.116 attackspam
Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -
2020-01-17 22:59:18
61.177.172.128 attack
Jan 17 16:01:37 dedicated sshd[21651]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.128  user=root
Jan 17 16:01:38 dedicated sshd[21651]: Failed password for root from 61.177.172.128 port 30166 ssh2
2020-01-17 23:03:37
37.49.231.181 attackbots
unauthorized connection attempt
2020-01-17 23:06:20
200.98.200.77 attack
Portscan or hack attempt detected by psad/fwsnort
2020-01-17 22:52:36
71.183.251.104 attackbots
Jan 17 14:03:03 debian-2gb-nbg1-2 kernel: \[1525476.749887\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=71.183.251.104 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=24551 PROTO=TCP SPT=17154 DPT=8000 WINDOW=44296 RES=0x00 SYN URGP=0
2020-01-17 22:46:10
80.82.65.74 attack
ET CINS Active Threat Intelligence Poor Reputation IP group 74 - port: 2018 proto: TCP cat: Misc Attack
2020-01-17 22:34:10
1.1.141.250 attackspambots
Jan 17 13:54:09 smtp sshd[13618]: Failed password for r.r from 1.1.141.250 port 40610 ssh2
Jan 17 13:54:11 smtp sshd[13618]: Failed password for r.r from 1.1.141.250 port 40610 ssh2
Jan 17 13:54:14 smtp sshd[13618]: Failed password for r.r from 1.1.141.250 port 40610 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=1.1.141.250
2020-01-17 23:08:21
193.32.163.123 attackbots
Jan 17 13:03:36 thevastnessof sshd[27608]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.32.163.123
...
2020-01-17 22:25:12
119.254.12.66 attack
Unauthorized connection attempt detected from IP address 119.254.12.66 to port 2220 [J]
2020-01-17 23:03:54
112.85.42.178 attack
Jan 17 15:18:06 markkoudstaal sshd[16433]: Failed password for root from 112.85.42.178 port 6407 ssh2
Jan 17 15:18:09 markkoudstaal sshd[16433]: Failed password for root from 112.85.42.178 port 6407 ssh2
Jan 17 15:18:13 markkoudstaal sshd[16433]: Failed password for root from 112.85.42.178 port 6407 ssh2
Jan 17 15:18:17 markkoudstaal sshd[16433]: Failed password for root from 112.85.42.178 port 6407 ssh2
2020-01-17 22:27:35
45.136.109.221 attack
MultiHost/MultiPort Probe, Scan, Hack -
2020-01-17 22:50:05

Recently Reported IPs

120.228.150.134 115.44.145.72 112.49.238.255 112.42.63.173
111.208.81.3 110.248.61.200 101.28.138.93 101.204.175.120
42.234.193.99 42.229.130.128 36.143.208.240 218.8.167.82
175.44.117.115 171.37.154.100 120.82.113.220 120.239.200.15
120.230.29.105 116.136.229.174 115.60.90.77 112.251.79.212