Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Zhengzhou

Region: Henan

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '182.112.0.0 - 182.127.255.255'

% Abuse contact for '182.112.0.0 - 182.127.255.255' is 'hqs-ipabuse@chinaunicom.cn'

inetnum:        182.112.0.0 - 182.127.255.255
netname:        UNICOM-HA
descr:          China Unicom Henan province network
descr:          China Unicom
descr:          No.21,Ji-Rong Street,
descr:          Beijing 100032
country:        CN
admin-c:        CH1302-AP
tech-c:         WW444-AP
abuse-c:        AC1718-AP
status:         ALLOCATED PORTABLE
remarks:        service provider
remarks:        --------------------------------------------------------
remarks:        To report network abuse, please contact mnt-irt
remarks:        For troubleshooting, please contact tech-c and admin-c
remarks:        Report invalid contact via www.apnic.net/invalidcontact
remarks:        --------------------------------------------------------
mnt-by:         APNIC-HM
mnt-lower:      MAINT-CNCGROUP-HA
mnt-routes:     MAINT-CNCGROUP-RR
mnt-irt:        IRT-CU-CN
last-modified:  2023-10-21T03:39:30Z
source:         APNIC

irt:            IRT-CU-CN
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
e-mail:         hqs-ipabuse@chinaunicom.cn
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
auth:           # Filtered
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
mnt-by:         MAINT-CNCGROUP
last-modified:  2026-08-19T00:57:22Z
source:         APNIC

role:           ABUSE CUCN
country:        ZZ
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
phone:          +000000000
e-mail:         hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
nic-hdl:        AC1718-AP
remarks:        Generated from irt object IRT-CU-CN
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
mnt-by:         APNIC-ABUSE
last-modified:  2026-08-20T03:22:23Z
source:         APNIC

person:         ChinaUnicom Hostmaster
nic-hdl:        CH1302-AP
e-mail:         hqs-ipabuse@chinaunicom.cn
address:        No.21,Jin-Rong Street
address:        Beijing,100033
address:        P.R.China
phone:          +86-10-66259764
fax-no:         +86-10-66259764
country:        CN
mnt-by:         MAINT-CNCGROUP
last-modified:  2017-08-17T06:13:16Z
source:         APNIC

person:         Wei Wang
nic-hdl:        WW444-AP
e-mail:         abuse@public.zz.ha.cn
address:        #55 San Quan Road, Zhengzhou, Henan Provice
phone:          +86-371-65952358
fax-no:         +86-371-65968952
country:        CN
mnt-by:         MAINT-CNCGROUP-HA
last-modified:  2010-03-05T08:20:01Z
source:         APNIC

% Information related to '182.112.0.0/12AS4837'

route:          182.112.0.0/12
descr:          China Unicom Henan Province Network
country:        CN
origin:         AS4837
mnt-by:         MAINT-CNCGROUP-RR
last-modified:  2010-03-02T01:06:01Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-US2)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 182.120.11.222
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 447
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;182.120.11.222.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026082001 1800 900 604800 86400

;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Aug 21 09:31:17 CST 2026
;; MSG SIZE  rcvd: 107
Host info
222.11.120.182.in-addr.arpa domain name pointer hn.kd.ny.adsl.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
222.11.120.182.in-addr.arpa	name = hn.kd.ny.adsl.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
64.202.187.48 attack
ssh failed login
2019-10-10 17:41:01
65.169.38.37 attackbotsspam
Oct  9 **REMOVED** dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=65.169.38.37, lip=**REMOVED**, TLS, session=\
Oct 10 **REMOVED** dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=65.169.38.37, lip=**REMOVED**, TLS, session=\<52DddoGUL45BqSYl\>
Oct 10 **REMOVED** dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=65.169.38.37, lip=**REMOVED**, TLS, session=\
2019-10-10 17:48:27
43.231.61.146 attackbotsspam
Oct 10 07:00:28 www5 sshd\[803\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.231.61.146  user=root
Oct 10 07:00:30 www5 sshd\[803\]: Failed password for root from 43.231.61.146 port 59992 ssh2
Oct 10 07:05:07 www5 sshd\[1758\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.231.61.146  user=root
...
2019-10-10 17:41:43
200.57.73.170 attackspam
2019-10-10T11:12:07.406165mail01 postfix/smtpd[24699]: warning: unknown[200.57.73.170]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-10-10T11:12:56.251457mail01 postfix/smtpd[20119]: warning: unknown[200.57.73.170]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-10-10T11:21:54.149095mail01 postfix/smtpd[20113]: warning: unknown[200.57.73.170]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-10-10 17:41:59
58.87.67.226 attackspam
Oct 10 10:14:23 sauna sshd[73133]: Failed password for root from 58.87.67.226 port 55718 ssh2
...
2019-10-10 18:03:21
113.125.60.208 attackspambots
Oct 10 05:46:06 icinga sshd[31570]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.125.60.208
Oct 10 05:46:08 icinga sshd[31570]: Failed password for invalid user College123 from 113.125.60.208 port 34836 ssh2
...
2019-10-10 18:07:39
132.248.88.73 attackbots
Tried sshing with brute force.
2019-10-10 17:39:48
62.28.34.125 attackspambots
2019-10-10T11:05:22.433341  sshd[31250]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.28.34.125  user=root
2019-10-10T11:05:24.377881  sshd[31250]: Failed password for root from 62.28.34.125 port 46425 ssh2
2019-10-10T11:09:39.199274  sshd[31284]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.28.34.125  user=root
2019-10-10T11:09:41.424917  sshd[31284]: Failed password for root from 62.28.34.125 port 47140 ssh2
2019-10-10T11:13:58.902198  sshd[31317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.28.34.125  user=root
2019-10-10T11:14:00.681565  sshd[31317]: Failed password for root from 62.28.34.125 port 16763 ssh2
...
2019-10-10 18:09:59
159.205.102.24 attack
IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/159.205.102.24/ 
 AU - 1H : (36)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : AU 
 NAME ASN : ASN12741 
 
 IP : 159.205.102.24 
 
 CIDR : 159.205.0.0/16 
 
 PREFIX COUNT : 95 
 
 UNIQUE IP COUNT : 1590528 
 
 
 WYKRYTE ATAKI Z ASN12741 :  
  1H - 2 
  3H - 6 
  6H - 9 
 12H - 13 
 24H - 21 
 
 DateTime : 2019-10-10 05:46:22 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-10-10 17:57:52
59.25.197.146 attackspam
2019-10-10T09:03:34.507457  sshd[29674]: Invalid user omar from 59.25.197.146 port 58856
2019-10-10T09:03:34.522181  sshd[29674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.25.197.146
2019-10-10T09:03:34.507457  sshd[29674]: Invalid user omar from 59.25.197.146 port 58856
2019-10-10T09:03:36.538173  sshd[29674]: Failed password for invalid user omar from 59.25.197.146 port 58856 ssh2
2019-10-10T09:39:45.103273  sshd[30151]: Invalid user pokemon from 59.25.197.146 port 33016
...
2019-10-10 17:45:21
159.65.148.115 attackbots
Oct 10 10:22:05 vps01 sshd[18058]: Failed password for root from 159.65.148.115 port 57802 ssh2
2019-10-10 17:53:36
152.136.225.47 attackspam
Oct 10 11:17:56 ncomp sshd[21934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.225.47  user=root
Oct 10 11:17:58 ncomp sshd[21934]: Failed password for root from 152.136.225.47 port 36518 ssh2
Oct 10 11:30:33 ncomp sshd[22121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.225.47  user=root
Oct 10 11:30:35 ncomp sshd[22121]: Failed password for root from 152.136.225.47 port 60218 ssh2
2019-10-10 17:49:23
59.120.243.8 attack
Oct 10 10:23:17 OPSO sshd\[25818\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.120.243.8  user=root
Oct 10 10:23:19 OPSO sshd\[25818\]: Failed password for root from 59.120.243.8 port 51828 ssh2
Oct 10 10:27:56 OPSO sshd\[26776\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.120.243.8  user=root
Oct 10 10:27:57 OPSO sshd\[26776\]: Failed password for root from 59.120.243.8 port 35284 ssh2
Oct 10 10:32:37 OPSO sshd\[27659\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.120.243.8  user=root
2019-10-10 17:55:22
125.167.245.36 attack
Oct  9 08:37:56 kmh-wsh-001-nbg03 sshd[6886]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.167.245.36  user=r.r
Oct  9 08:37:58 kmh-wsh-001-nbg03 sshd[6886]: Failed password for r.r from 125.167.245.36 port 48355 ssh2
Oct  9 08:37:58 kmh-wsh-001-nbg03 sshd[6886]: Received disconnect from 125.167.245.36 port 48355:11: Bye Bye [preauth]
Oct  9 08:37:58 kmh-wsh-001-nbg03 sshd[6886]: Disconnected from 125.167.245.36 port 48355 [preauth]
Oct  9 08:42:27 kmh-wsh-001-nbg03 sshd[7167]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.167.245.36  user=r.r
Oct  9 08:42:29 kmh-wsh-001-nbg03 sshd[7167]: Failed password for r.r from 125.167.245.36 port 27840 ssh2
Oct  9 08:42:29 kmh-wsh-001-nbg03 sshd[7167]: Received disconnect from 125.167.245.36 port 27840:11: Bye Bye [preauth]
Oct  9 08:42:29 kmh-wsh-001-nbg03 sshd[7167]: Disconnected from 125.167.245.36 port 27840 [preauth]
Oct  9 08:47:00 ........
-------------------------------
2019-10-10 17:45:39
77.232.128.87 attackspambots
Oct 10 05:59:10 meumeu sshd[27686]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.232.128.87 
Oct 10 05:59:12 meumeu sshd[27686]: Failed password for invalid user Example2017 from 77.232.128.87 port 36896 ssh2
Oct 10 06:03:17 meumeu sshd[28800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.232.128.87 
...
2019-10-10 17:44:08

Recently Reported IPs

182.126.220.123 123.14.148.160 120.239.181.71 120.231.44.34
120.230.23.251 120.230.20.178 115.51.117.186 112.8.134.94
111.15.47.125 101.26.28.74 40.81.79.136 56.118.31.153
106.75.181.44 2606:4700:10::6816:286 30.33.143.63 36.17.195.9
94.231.164.10 61.134.157.159 60.24.209.228 58.17.113.125