City: Hong Kong
Region: unknown
Country: Hong Kong
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '42.201.192.0 - 42.201.207.255'
% Abuse contact for '42.201.192.0 - 42.201.207.255' is 'hwssecurity@huaweicloud.com'
inetnum: 42.201.192.0 - 42.201.207.255
netname: Huawei-Cloud-HK
descr: Huawei-Cloud-HK
country: HK
admin-c: HIPL7-AP
tech-c: HIPL7-AP
abuse-c: AH905-AP
status: ALLOCATED NON-PORTABLE
mnt-by: MAINT-HIPL-SG
mnt-irt: IRT-HIPL-SG
last-modified: 2024-09-29T09:31:55Z
geofeed: https://res-static.hc-cdn.cn/cloudbu-site/china/zh-cn/IP-location/google-geo-feed.csv
source: APNIC
irt: IRT-HIPL-SG
address: 15A Changi Business Park Central 1 Eightrium
e-mail: hwssecurity@huaweicloud.com
abuse-mailbox: hwssecurity@huaweicloud.com
admin-c: HIPL4-AP
tech-c: HIPL4-AP
auth: # Filtered
remarks: hwssecurity@huaweicloud.com
remarks: hwssecurity@huaweicloud.com was validated on 2026-08-20
mnt-by: MAINT-HIPL-SG
last-modified: 2026-08-20T09:57:02Z
source: APNIC
role: ABUSE HIPLSG
country: ZZ
address: 15A Changi Business Park Central 1 Eightrium
phone: +000000000
e-mail: hwssecurity@huaweicloud.com
admin-c: HIPL4-AP
tech-c: HIPL4-AP
nic-hdl: AH905-AP
remarks: Generated from irt object IRT-HIPL-SG
remarks: hwssecurity@huaweicloud.com was validated on 2026-08-20
abuse-mailbox: hwssecurity@huaweicloud.com
mnt-by: APNIC-ABUSE
last-modified: 2026-08-20T09:57:26Z
source: APNIC
role: HUAWEI INTERNATIONAL PTE LTD administrator
address: 15A Changi Business Park Central 1 Eightrium #03-03/04, Singapore 486035
country: SG
phone: +8618730601505
e-mail: wanggang222@huawei.com
admin-c: HIPL7-AP
tech-c: HIPL7-AP
nic-hdl: HIPL7-AP
notify: wanggang222@huawei.com
mnt-by: MAINT-HIPL-SG
last-modified: 2021-06-04T07:42:42Z
source: APNIC
% Information related to '42.201.192.0/24AS136907'
route: 42.201.192.0/24
origin: AS136907
descr: HUAWEI INTERNATIONAL PTE. LTD.
15A Changi Business Park Central 1 Eightrium #03-03/04
mnt-by: MAINT-HIPL-SG
last-modified: 2025-05-28T08:51:17Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-US2)
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.201.192.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6144
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;42.201.192.34. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026083000 1800 900 604800 86400
;; Query time: 5 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Aug 30 19:01:15 CST 2026
;; MSG SIZE rcvd: 106
Host 34.192.201.42.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 34.192.201.42.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 185.226.113.11 | attack | Telnet/23 MH Probe, BF, Hack - |
2020-01-09 22:16:11 |
| 202.72.243.198 | attackbots | $f2bV_matches |
2020-01-09 22:13:50 |
| 222.186.180.6 | attackbots | Jan 9 14:58:50 eventyay sshd[5885]: Failed password for root from 222.186.180.6 port 48950 ssh2 Jan 9 14:59:04 eventyay sshd[5885]: error: maximum authentication attempts exceeded for root from 222.186.180.6 port 48950 ssh2 [preauth] Jan 9 14:59:11 eventyay sshd[5887]: Failed password for root from 222.186.180.6 port 16270 ssh2 ... |
2020-01-09 22:04:46 |
| 39.65.226.52 | attack | Honeypot hit. |
2020-01-09 22:03:03 |
| 142.93.47.125 | attackbotsspam | ssh failed login |
2020-01-09 21:49:58 |
| 178.92.188.183 | attack | Telnet/23 MH Probe, BF, Hack - |
2020-01-09 21:40:44 |
| 168.128.86.35 | attackbotsspam | Jan 9 03:23:45 eddieflores sshd\[10613\]: Invalid user mvq from 168.128.86.35 Jan 9 03:23:45 eddieflores sshd\[10613\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.128.86.35 Jan 9 03:23:48 eddieflores sshd\[10613\]: Failed password for invalid user mvq from 168.128.86.35 port 59958 ssh2 Jan 9 03:27:04 eddieflores sshd\[10938\]: Invalid user sysop from 168.128.86.35 Jan 9 03:27:04 eddieflores sshd\[10938\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.128.86.35 |
2020-01-09 21:39:56 |
| 218.76.28.22 | attack | firewall-block, port(s): 1433/tcp |
2020-01-09 22:07:09 |
| 192.99.32.151 | attackbotsspam | Port scan on 1 port(s): 445 |
2020-01-09 22:11:50 |
| 222.186.175.147 | attackspambots | 2020-01-09T13:37:09.255966abusebot-7.cloudsearch.cf sshd[21088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.147 user=root 2020-01-09T13:37:11.449197abusebot-7.cloudsearch.cf sshd[21088]: Failed password for root from 222.186.175.147 port 47812 ssh2 2020-01-09T13:37:15.380766abusebot-7.cloudsearch.cf sshd[21088]: Failed password for root from 222.186.175.147 port 47812 ssh2 2020-01-09T13:37:09.255966abusebot-7.cloudsearch.cf sshd[21088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.147 user=root 2020-01-09T13:37:11.449197abusebot-7.cloudsearch.cf sshd[21088]: Failed password for root from 222.186.175.147 port 47812 ssh2 2020-01-09T13:37:15.380766abusebot-7.cloudsearch.cf sshd[21088]: Failed password for root from 222.186.175.147 port 47812 ssh2 2020-01-09T13:37:09.255966abusebot-7.cloudsearch.cf sshd[21088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... |
2020-01-09 21:43:24 |
| 222.186.175.169 | attack | Jan 9 15:09:29 dcd-gentoo sshd[24932]: User root from 222.186.175.169 not allowed because none of user's groups are listed in AllowGroups Jan 9 15:09:32 dcd-gentoo sshd[24932]: error: PAM: Authentication failure for illegal user root from 222.186.175.169 Jan 9 15:09:29 dcd-gentoo sshd[24932]: User root from 222.186.175.169 not allowed because none of user's groups are listed in AllowGroups Jan 9 15:09:32 dcd-gentoo sshd[24932]: error: PAM: Authentication failure for illegal user root from 222.186.175.169 Jan 9 15:09:29 dcd-gentoo sshd[24932]: User root from 222.186.175.169 not allowed because none of user's groups are listed in AllowGroups Jan 9 15:09:32 dcd-gentoo sshd[24932]: error: PAM: Authentication failure for illegal user root from 222.186.175.169 Jan 9 15:09:32 dcd-gentoo sshd[24932]: Failed keyboard-interactive/pam for invalid user root from 222.186.175.169 port 43388 ssh2 ... |
2020-01-09 22:16:47 |
| 212.83.153.98 | attackbots | SIP auth scanning - multiple failed SIP authentication |
2020-01-09 22:03:23 |
| 94.191.48.152 | attackbots | Jan 9 14:45:11 pornomens sshd\[21044\]: Invalid user asus from 94.191.48.152 port 34332 Jan 9 14:45:11 pornomens sshd\[21044\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.48.152 Jan 9 14:45:13 pornomens sshd\[21044\]: Failed password for invalid user asus from 94.191.48.152 port 34332 ssh2 ... |
2020-01-09 21:45:17 |
| 112.85.42.180 | attack | Jan 9 14:34:33 SilenceServices sshd[3613]: Failed password for root from 112.85.42.180 port 51491 ssh2 Jan 9 14:34:46 SilenceServices sshd[3613]: error: maximum authentication attempts exceeded for root from 112.85.42.180 port 51491 ssh2 [preauth] Jan 9 14:34:55 SilenceServices sshd[3760]: Failed password for root from 112.85.42.180 port 26822 ssh2 |
2020-01-09 22:08:47 |
| 109.110.52.77 | attackbotsspam | Jan 9 03:05:15 hpm sshd\[633\]: Invalid user postgres from 109.110.52.77 Jan 9 03:05:15 hpm sshd\[633\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.110.52.77 Jan 9 03:05:17 hpm sshd\[633\]: Failed password for invalid user postgres from 109.110.52.77 port 52614 ssh2 Jan 9 03:10:12 hpm sshd\[1155\]: Invalid user firebird from 109.110.52.77 Jan 9 03:10:12 hpm sshd\[1155\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.110.52.77 |
2020-01-09 22:15:48 |