Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '42.160.0.0 - 42.175.255.255'

% Abuse contact for '42.160.0.0 - 42.175.255.255' is 'liuxin15@cmtt.chinamobile.com'

inetnum:        42.160.0.0 - 42.175.255.255
netname:        NorthStar
descr:          North Star Information Hi.tech Ltd. Co.
descr:          No.18, Beifengwo Road, Haidian District,
descr:          Beijing, China, 100038
country:        CN
org:            ORG-NSIH1-AP
admin-c:        CW1171-AP
tech-c:         LQ568-AP
abuse-c:        AN833-AP
status:         ALLOCATED PORTABLE
remarks:        --------------------------------------------------------
remarks:        To report network abuse, please contact mnt-irt
remarks:        For troubleshooting, please contact tech-c and admin-c
remarks:        Report invalid contact via www.apnic.net/invalidcontact
remarks:        --------------------------------------------------------
mnt-by:         APNIC-HM
mnt-lower:      MAINT-NORTHSTAR-APNIC
mnt-routes:     MAINT-NORTHSTAR-APNIC
mnt-irt:        IRT-NORTHSTAR-CN
last-modified:  2020-07-07T04:54:06Z
source:         APNIC

irt:            IRT-NORTHSTAR-CN
address:        No.18, Beifengwo Road, Haidian District,
address:        Beijing, China
e-mail:         liuxin15@cmtt.chinamobile.com
abuse-mailbox:  liuxin15@cmtt.chinamobile.com
admin-c:        CW1171-AP
tech-c:         LQ568-AP
auth:           # Filtered
remarks:        liuxin15@cmtt.chinamobile.com
remarks:        liuxin15@cmtt.chinamobile.com
remarks:        liuxin15@cmtt.chinamobile.com was validated on 2026-05-21
mnt-by:         MAINT-NORTHSTAR-APNIC
last-modified:  2026-05-21T07:58:00Z
source:         APNIC

organisation:   ORG-NSIH1-AP
org-name:       North Star Information Hi.tech Ltd. Co.
org-type:       LIR
country:        CN
address:        No.18, Beifengwo Road, Haidian District,
phone:          +86-13910572340
fax-no:         +86-13910572340
e-mail:         liuxin15@cmtt.chinamobile.com
mnt-ref:        APNIC-HM
mnt-by:         APNIC-HM
last-modified:  2023-09-05T02:15:30Z
source:         APNIC

role:           ABUSE NORTHSTARCN
country:        ZZ
address:        No.18, Beifengwo Road, Haidian District,
address:        Beijing, China
phone:          +000000000
e-mail:         liuxin15@cmtt.chinamobile.com
admin-c:        CW1171-AP
tech-c:         LQ568-AP
nic-hdl:        AN833-AP
remarks:        Generated from irt object IRT-NORTHSTAR-CN
remarks:        liuxin15@cmtt.chinamobile.com was validated on 2026-05-21
abuse-mailbox:  liuxin15@cmtt.chinamobile.com
mnt-by:         APNIC-ABUSE
last-modified:  2026-05-21T08:06:57Z
source:         APNIC

person:         Cindy Wang
address:        No.18, Beifengwo Road, Haidian District,
address:        Beijing, China
country:        CN
phone:          +86-10-51892147
fax-no:         +86-10-51890674
e-mail:         cindywang.ns@gmail.com
nic-hdl:        CW1171-AP
mnt-by:         MAINT-NORTHSTAR-APNIC
last-modified:  2009-02-10T07:32:20Z
source:         APNIC

person:         Lu Qian
address:        No.18, Beifengwo Road, Haidian District,
address:        Beijing, China
country:        CN
phone:          +86-10-51890418
fax-no:         +86-10-51890674
e-mail:         wpli@chinatietong.com
nic-hdl:        LQ568-AP
mnt-by:         MAINT-NORTHSTAR-APNIC
last-modified:  2015-10-22T01:18:00Z
source:         APNIC

% Information related to '42.160.0.0/12AS9394'

route:          42.160.0.0/12
descr:          North Star Information Hi.tech Ltd. Co.
origin:         AS9394
country:        CN
notify:         luqian.ns@gmail.com
mnt-by:         MAINT-NORTHSTAR-APNIC
last-modified:  2013-06-12T15:22:20Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU4)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.163.14.115
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47315
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;42.163.14.115.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026082101 1800 900 604800 86400

;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Aug 22 04:29:06 CST 2026
;; MSG SIZE  rcvd: 106
Host info
Host 115.14.163.42.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 115.14.163.42.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
195.54.160.210 attackbots
 TCP (SYN) 195.54.160.210:52353 -> port 3356, len 44
2020-06-03 21:51:36
51.89.148.69 attack
2020-06-03T19:09:10.619917billing sshd[24745]: Failed password for root from 51.89.148.69 port 42414 ssh2
2020-06-03T19:12:25.550945billing sshd[31459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.ip-51-89-148.eu  user=root
2020-06-03T19:12:27.230115billing sshd[31459]: Failed password for root from 51.89.148.69 port 46940 ssh2
...
2020-06-03 22:10:02
167.114.96.156 attack
2020-06-03T13:39:28.368039shield sshd\[15871\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.ip-167-114-96.net  user=root
2020-06-03T13:39:30.396880shield sshd\[15871\]: Failed password for root from 167.114.96.156 port 58298 ssh2
2020-06-03T13:43:10.659427shield sshd\[16378\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.ip-167-114-96.net  user=root
2020-06-03T13:43:13.165340shield sshd\[16378\]: Failed password for root from 167.114.96.156 port 34118 ssh2
2020-06-03T13:46:49.722393shield sshd\[16887\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.ip-167-114-96.net  user=root
2020-06-03 21:57:58
62.171.144.195 attackbots
[2020-06-03 10:19:27] NOTICE[1288] chan_sip.c: Registration from '' failed for '62.171.144.195:42799' - Wrong password
[2020-06-03 10:19:27] SECURITY[1303] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-03T10:19:27.789-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="newyork",SessionID="0x7f4d740397b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.171.144.195/42799",Challenge="6b87a5eb",ReceivedChallenge="6b87a5eb",ReceivedHash="da07f0664af2f6418fdb4f4b23c129ec"
[2020-06-03 10:20:50] NOTICE[1288] chan_sip.c: Registration from '' failed for '62.171.144.195:45822' - Wrong password
[2020-06-03 10:20:50] SECURITY[1303] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-03T10:20:50.639-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="soccer",SessionID="0x7f4d740436f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/
...
2020-06-03 22:24:46
106.12.38.109 attackbotsspam
Jun  3 14:05:43 srv-ubuntu-dev3 sshd[43138]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.38.109  user=root
Jun  3 14:05:45 srv-ubuntu-dev3 sshd[43138]: Failed password for root from 106.12.38.109 port 41218 ssh2
Jun  3 14:07:06 srv-ubuntu-dev3 sshd[43348]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.38.109  user=root
Jun  3 14:07:08 srv-ubuntu-dev3 sshd[43348]: Failed password for root from 106.12.38.109 port 57828 ssh2
Jun  3 14:08:30 srv-ubuntu-dev3 sshd[43552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.38.109  user=root
Jun  3 14:08:32 srv-ubuntu-dev3 sshd[43552]: Failed password for root from 106.12.38.109 port 46204 ssh2
Jun  3 14:09:50 srv-ubuntu-dev3 sshd[43735]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.38.109  user=root
Jun  3 14:09:51 srv-ubuntu-dev3 sshd[43735]: Failed p
...
2020-06-03 22:27:08
94.21.232.2 attackbots
xmlrpc attack
2020-06-03 22:27:26
77.247.108.119 attack
ET CINS Active Threat Intelligence Poor Reputation IP group 70 - port: 5038 proto: TCP cat: Misc Attack
2020-06-03 22:29:38
93.177.158.104 attackbots
xmlrpc attack
2020-06-03 21:55:13
123.30.237.51 attack
IP 123.30.237.51 attacked honeypot on port: 1433 at 6/3/2020 12:55:22 PM
2020-06-03 21:54:38
83.233.134.61 attack
2020-06-03T11:55:06.775369Z 4e1d438c7210 New connection: 83.233.134.61:43564 (172.17.0.3:2222) [session: 4e1d438c7210]
2020-06-03T11:55:06.776915Z 2f00d5d9dc28 New connection: 83.233.134.61:43566 (172.17.0.3:2222) [session: 2f00d5d9dc28]
2020-06-03 22:13:27
90.209.183.55 attack
Brute forcing email accounts
2020-06-03 22:29:09
67.225.146.4 attackspambots
Automatic report - XMLRPC Attack
2020-06-03 22:09:27
76.169.171.13 attack
Jun  3 13:49:33 vmi345603 sshd[19890]: Failed password for root from 76.169.171.13 port 50257 ssh2
...
2020-06-03 22:30:25
54.207.33.42 attackspam
Unauthorized connection. Very violent continuous attack! IP address disabled! I stored locally the attack data, from the server .log files!
2020-06-03 21:56:51
192.95.42.46 attackbotsspam
port
2020-06-03 22:14:07

Recently Reported IPs

74.208.230.77 74.226.142.214 195.170.172.118 58.255.236.115
42.54.182.9 221.5.41.166 219.155.63.220 182.91.78.148
182.123.132.113 171.35.80.155 123.11.184.199 121.22.35.194
120.82.82.166 119.39.193.223 110.248.46.77 69.14.195.145
71.235.106.246 47.231.59.118 37.213.242.133 20.151.9.151