Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Hong Kong

Region: unknown

Country: Hong Kong

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '42.201.192.0 - 42.201.207.255'

% Abuse contact for '42.201.192.0 - 42.201.207.255' is 'hwssecurity@huaweicloud.com'

inetnum:        42.201.192.0 - 42.201.207.255
netname:        Huawei-Cloud-HK
descr:          Huawei-Cloud-HK
country:        HK
admin-c:        HIPL7-AP
tech-c:         HIPL7-AP
abuse-c:        AH905-AP
status:         ALLOCATED NON-PORTABLE
mnt-by:         MAINT-HIPL-SG
mnt-irt:        IRT-HIPL-SG
last-modified:  2024-09-29T09:31:55Z
geofeed:        https://res-static.hc-cdn.cn/cloudbu-site/china/zh-cn/IP-location/google-geo-feed.csv
source:         APNIC

irt:            IRT-HIPL-SG
address:        15A Changi Business Park Central 1 Eightrium
e-mail:         hwssecurity@huaweicloud.com
abuse-mailbox:  hwssecurity@huaweicloud.com
admin-c:        HIPL4-AP
tech-c:         HIPL4-AP
auth:           # Filtered
remarks:        hwssecurity@huaweicloud.com
remarks:        hwssecurity@huaweicloud.com was validated on 2026-08-20
mnt-by:         MAINT-HIPL-SG
last-modified:  2026-08-20T09:57:02Z
source:         APNIC

role:           ABUSE HIPLSG
country:        ZZ
address:        15A Changi Business Park Central 1 Eightrium
phone:          +000000000
e-mail:         hwssecurity@huaweicloud.com
admin-c:        HIPL4-AP
tech-c:         HIPL4-AP
nic-hdl:        AH905-AP
remarks:        Generated from irt object IRT-HIPL-SG
remarks:        hwssecurity@huaweicloud.com was validated on 2026-08-20
abuse-mailbox:  hwssecurity@huaweicloud.com
mnt-by:         APNIC-ABUSE
last-modified:  2026-08-20T09:57:26Z
source:         APNIC

role:           HUAWEI INTERNATIONAL PTE LTD administrator
address:        15A Changi Business Park Central 1 Eightrium #03-03/04, Singapore  486035
country:        SG
phone:          +8618730601505
e-mail:         wanggang222@huawei.com
admin-c:        HIPL7-AP
tech-c:         HIPL7-AP
nic-hdl:        HIPL7-AP
notify:         wanggang222@huawei.com
mnt-by:         MAINT-HIPL-SG
last-modified:  2021-06-04T07:42:42Z
source:         APNIC

% Information related to '42.201.192.0/24AS136907'

route:          42.201.192.0/24
origin:         AS136907
descr:          HUAWEI INTERNATIONAL PTE. LTD.
                15A Changi Business Park Central 1 Eightrium #03-03/04
mnt-by:         MAINT-HIPL-SG
last-modified:  2025-05-28T08:51:17Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.201.192.4
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46872
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;42.201.192.4.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026082000 1800 900 604800 86400

;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Aug 20 23:42:07 CST 2026
;; MSG SIZE  rcvd: 105
Host info
Host 4.192.201.42.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 4.192.201.42.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
82.205.8.114 attack
[2020-09-12 03:07:55] NOTICE[1239] chan_sip.c: Registration from '"77" ' failed for '82.205.8.114:5077' - Wrong password
[2020-09-12 03:07:55] SECURITY[1264] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-12T03:07:55.270-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="77",SessionID="0x7f4d480961a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/82.205.8.114/5077",Challenge="76b04789",ReceivedChallenge="76b04789",ReceivedHash="f9521f67b8a617b5d8987d0a3e7fc792"
[2020-09-12 03:10:23] NOTICE[1239] chan_sip.c: Registration from '"308" ' failed for '82.205.8.114:5060' - Wrong password
[2020-09-12 03:10:23] SECURITY[1264] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-12T03:10:23.562-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="308",SessionID="0x7f4d481972d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/82.205.8.114/5
...
2020-09-12 15:18:39
177.126.130.112 attackbotsspam
Sep 11 19:27:47 hanapaa sshd\[6061\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.126.130.112  user=root
Sep 11 19:27:49 hanapaa sshd\[6061\]: Failed password for root from 177.126.130.112 port 58306 ssh2
Sep 11 19:31:02 hanapaa sshd\[6256\]: Invalid user abuzar from 177.126.130.112
Sep 11 19:31:02 hanapaa sshd\[6256\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.126.130.112
Sep 11 19:31:04 hanapaa sshd\[6256\]: Failed password for invalid user abuzar from 177.126.130.112 port 49364 ssh2
2020-09-12 15:00:58
167.71.134.241 attack
167.71.134.241 (GB/United Kingdom/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 12 02:10:44 jbs1 sshd[12004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.247  user=root
Sep 12 02:09:48 jbs1 sshd[11544]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.188.72  user=root
Sep 12 02:09:49 jbs1 sshd[11544]: Failed password for root from 111.229.188.72 port 44952 ssh2
Sep 12 02:08:53 jbs1 sshd[11215]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.134.241  user=root
Sep 12 02:08:55 jbs1 sshd[11215]: Failed password for root from 167.71.134.241 port 58810 ssh2
Sep 12 02:10:42 jbs1 sshd[11994]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.135.132.179  user=root

IP Addresses Blocked:

218.92.0.247 (CN/China/-)
111.229.188.72 (CN/China/-)
2020-09-12 15:04:02
186.154.36.212 attack
Icarus honeypot on github
2020-09-12 15:17:35
66.98.124.86 attackbots
Sep 11 18:45:48 sshgateway sshd\[26274\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.98.124.86.16clouds.com  user=root
Sep 11 18:45:50 sshgateway sshd\[26274\]: Failed password for root from 66.98.124.86 port 34024 ssh2
Sep 11 18:54:36 sshgateway sshd\[27408\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.98.124.86.16clouds.com  user=root
2020-09-12 15:29:28
27.74.243.157 attack
Unauthorised access (Sep 11) SRC=27.74.243.157 LEN=52 TTL=111 ID=4093 DF TCP DPT=445 WINDOW=8192 SYN
2020-09-12 15:07:27
122.51.222.42 attackbotsspam
Sep 11 23:07:20 [host] sshd[7744]: pam_unix(sshd:a
Sep 11 23:07:22 [host] sshd[7744]: Failed password
Sep 11 23:09:53 [host] sshd[8119]: pam_unix(sshd:a
2020-09-12 15:38:53
180.76.134.238 attack
$f2bV_matches
2020-09-12 15:38:22
66.154.107.18 attackspam
Invalid user luke from 66.154.107.18 port 39212
2020-09-12 15:23:52
54.37.14.3 attackspam
Sep 12 06:15:54 scw-6657dc sshd[29088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.14.3
Sep 12 06:15:54 scw-6657dc sshd[29088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.14.3
Sep 12 06:15:56 scw-6657dc sshd[29088]: Failed password for invalid user ftpuser from 54.37.14.3 port 51966 ssh2
...
2020-09-12 15:05:31
172.93.184.179 attack
(pop3d) Failed POP3 login from 172.93.184.179 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Sep 12 08:01:48 ir1 dovecot[3110802]: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=172.93.184.179, lip=5.63.12.44, session=
2020-09-12 15:14:24
140.143.137.170 attack
Sep 12 00:48:52 fhem-rasp sshd[26204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.137.170
Sep 12 00:48:53 fhem-rasp sshd[26204]: Failed password for invalid user svn from 140.143.137.170 port 42148 ssh2
...
2020-09-12 15:28:58
202.155.211.226 attackbots
2020-09-12T05:44:23.922144abusebot-3.cloudsearch.cf sshd[14015]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.155.211.226  user=root
2020-09-12T05:44:25.777102abusebot-3.cloudsearch.cf sshd[14015]: Failed password for root from 202.155.211.226 port 53866 ssh2
2020-09-12T05:48:18.442231abusebot-3.cloudsearch.cf sshd[14019]: Invalid user mari from 202.155.211.226 port 35222
2020-09-12T05:48:18.448138abusebot-3.cloudsearch.cf sshd[14019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.155.211.226
2020-09-12T05:48:18.442231abusebot-3.cloudsearch.cf sshd[14019]: Invalid user mari from 202.155.211.226 port 35222
2020-09-12T05:48:20.564001abusebot-3.cloudsearch.cf sshd[14019]: Failed password for invalid user mari from 202.155.211.226 port 35222 ssh2
2020-09-12T05:52:04.859539abusebot-3.cloudsearch.cf sshd[14029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2
...
2020-09-12 15:07:58
51.145.242.1 attack
$f2bV_matches
2020-09-12 15:29:42
41.39.119.209 attack
" "
2020-09-12 15:01:27

Recently Reported IPs

183.207.45.103 102.88.114.14 112.86.225.246 112.86.225.120
223.123.11.220 112.86.225.124 2606:4700:10::6816:4316 171.225.209.132
183.87.96.87 42.118.184.49 183.87.96.172 121.229.156.68
183.87.97.49 123.20.29.132 42.201.192.13 154.197.7.73
5.34.163.159 121.229.156.126 165.16.183.110 186.219.145.97