Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Make a comment on this IP
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '42.224.0.0 - 42.239.255.255'

% Abuse contact for '42.224.0.0 - 42.239.255.255' is 'hqs-ipabuse@chinaunicom.cn'

inetnum:        42.224.0.0 - 42.239.255.255
netname:        UNICOM-HA
descr:          China Unicom Henan province network
descr:          China Unicom
descr:          No.21,JiN-Rong Street,
descr:          Beijing 100033
country:        CN
admin-c:        CH1302-AP
tech-c:         WW444-AP
abuse-c:        AC1718-AP
status:         ALLOCATED PORTABLE
remarks:        service provider
remarks:        --------------------------------------------------------
remarks:        To report network abuse, please contact mnt-irt
remarks:        For troubleshooting, please contact tech-c and admin-c
remarks:        Report invalid contact via www.apnic.net/invalidcontact
remarks:        --------------------------------------------------------
mnt-by:         APNIC-HM
mnt-lower:      MAINT-CNCGROUP-HA
mnt-routes:     MAINT-CNCGROUP-RR
mnt-irt:        IRT-CU-CN
last-modified:  2025-01-22T13:12:22Z
source:         APNIC

irt:            IRT-CU-CN
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
e-mail:         hqs-ipabuse@chinaunicom.cn
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
auth:           # Filtered
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
mnt-by:         MAINT-CNCGROUP
last-modified:  2026-08-19T00:57:22Z
source:         APNIC

role:           ABUSE CUCN
country:        ZZ
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
phone:          +000000000
e-mail:         hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
nic-hdl:        AC1718-AP
remarks:        Generated from irt object IRT-CU-CN
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
mnt-by:         APNIC-ABUSE
last-modified:  2026-08-20T03:22:23Z
source:         APNIC

person:         ChinaUnicom Hostmaster
nic-hdl:        CH1302-AP
e-mail:         hqs-ipabuse@chinaunicom.cn
address:        No.21,Jin-Rong Street
address:        Beijing,100033
address:        P.R.China
phone:          +86-10-66259764
fax-no:         +86-10-66259764
country:        CN
mnt-by:         MAINT-CNCGROUP
last-modified:  2017-08-17T06:13:16Z
source:         APNIC

person:         Wei Wang
nic-hdl:        WW444-AP
e-mail:         abuse@public.zz.ha.cn
address:        #55 San Quan Road, Zhengzhou, Henan Provice
phone:          +86-371-65952358
fax-no:         +86-371-65968952
country:        CN
mnt-by:         MAINT-CNCGROUP-HA
last-modified:  2010-03-05T08:20:01Z
source:         APNIC

% Information related to '42.224.0.0/12AS4837'

route:          42.224.0.0/12
descr:          China Unicom Henan Province Network
country:        CN
origin:         AS4837
mnt-by:         MAINT-CNCGROUP-RR
last-modified:  2011-03-02T05:24:03Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU4)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.228.123.57
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24031
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;42.228.123.57.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026102902 1800 900 604800 86400

;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 30 07:30:53 CST 2026
;; MSG SIZE  rcvd: 106
Host info
57.123.228.42.in-addr.arpa domain name pointer hn.kd.ny.adsl.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
57.123.228.42.in-addr.arpa	name = hn.kd.ny.adsl.

Authoritative answers can be found from:
Related IP info:
42.228.123.38
42.228.123.4
42.228.123.148
42.228.123.198
42.228.123.14
42.228.123.205
42.228.123.152
42.228.123.47
42.228.123.82
42.228.123.36
42.228.123.210
42.228.123.138
42.228.123.179
42.228.123.87
42.228.123.235
42.228.123.246
42.228.123.163
42.228.123.79
42.228.123.26
42.228.123.191
42.228.123.147
42.228.123.73
42.228.123.183
42.228.123.125
42.228.123.140
42.228.123.207
42.228.123.25
42.228.123.116
42.228.123.71
42.228.123.180
42.228.123.174
42.228.123.214
42.228.123.232
42.228.123.190
42.228.123.22
42.228.123.216
42.228.123.195
42.228.123.222
42.228.123.225
42.228.123.80
42.228.123.155
42.228.123.178
42.228.123.215
42.228.123.168
42.228.123.143
42.228.123.172
42.228.123.134
42.228.123.135
42.228.123.245
42.228.123.31
42.228.123.66
42.228.123.84
42.228.123.107
42.228.123.122
42.228.123.1
42.228.123.241
42.228.123.239
42.228.123.194
42.228.123.173
42.228.123.35
42.228.123.208
42.228.123.209
42.228.123.221
42.228.123.114
42.228.123.46
42.228.123.43
42.228.123.129
42.228.123.90
42.228.123.56
42.228.123.37
42.228.123.76
42.228.123.103
42.228.123.74
42.228.123.196
42.228.123.254
42.228.123.64
42.228.123.8
42.228.123.199
42.228.123.57
42.228.123.85
42.228.123.20
42.228.123.240
42.228.123.153
42.228.123.5
42.228.123.110
42.228.123.177
42.228.123.55
42.228.123.211
42.228.123.34
42.228.123.145
42.228.123.229
42.228.123.50
42.228.123.150
42.228.123.217
42.228.123.118
42.228.123.2
42.228.123.100
42.228.123.144
42.228.123.12
42.228.123.141
42.228.123.81
42.228.123.30
42.228.123.247
42.228.123.52
42.228.123.60
42.228.123.192
42.228.123.27
42.228.123.162
42.228.123.230
42.228.123.28
42.228.123.121
42.228.123.157
42.228.123.248
42.228.123.243
42.228.123.166
42.228.123.78
42.228.123.126
42.228.123.171
42.228.123.200
42.228.123.188
42.228.123.252
42.228.123.170
42.228.123.237
42.228.123.68
42.228.123.89
42.228.123.175
42.228.123.10
42.228.123.137
42.228.123.101
42.228.123.75
42.228.123.65
42.228.123.109
42.228.123.233
42.228.123.95
42.228.123.72
42.228.123.17
42.228.123.99
42.228.123.223
42.228.123.92
42.228.123.204
42.228.123.159
42.228.123.158
42.228.123.111
42.228.123.98
42.228.123.24
42.228.123.184
42.228.123.97
42.228.123.69
42.228.123.53
42.228.123.250
42.228.123.9
42.228.123.253
42.228.123.218
42.228.123.238
42.228.123.128
42.228.123.187
42.228.123.91
42.228.123.156
42.228.123.58
42.228.123.113
42.228.123.29
42.228.123.104
42.228.123.182
42.228.123.16
42.228.123.224
42.228.123.11
42.228.123.7
42.228.123.202
42.228.123.123
42.228.123.15
42.228.123.23
42.228.123.44
42.228.123.219
42.228.123.131
42.228.123.142
42.228.123.45
42.228.123.136
42.228.123.77
42.228.123.206
42.228.123.13
42.228.123.83
42.228.123.203
42.228.123.154
42.228.123.236
42.228.123.112
42.228.123.226
42.228.123.67
42.228.123.33
42.228.123.115
42.228.123.105
42.228.123.132
42.228.123.165
42.228.123.106
42.228.123.18
42.228.123.227
42.228.123.61
42.228.123.108
42.228.123.193
42.228.123.88
42.228.123.54
42.228.123.213
42.228.123.93
42.228.123.41
42.228.123.102
42.228.123.96
42.228.123.21
42.228.123.124
42.228.123.6
42.228.123.181
42.228.123.40
42.228.123.32
42.228.123.234
42.228.123.130
42.228.123.249
42.228.123.169
42.228.123.242
42.228.123.186
42.228.123.149
42.228.123.212
42.228.123.164
42.228.123.39
42.228.123.231
42.228.123.49
42.228.123.62
42.228.123.48
42.228.123.251
42.228.123.117
42.228.123.201
42.228.123.63
42.228.123.139
42.228.123.220
42.228.123.151
42.228.123.70
42.228.123.86
42.228.123.120
42.228.123.119
42.228.123.127
42.228.123.176
42.228.123.228
42.228.123.94
42.228.123.161
42.228.123.244
42.228.123.160
42.228.123.59
42.228.123.185
42.228.123.3
42.228.123.133
42.228.123.146
42.228.123.51
42.228.123.167
42.228.123.19
42.228.123.197
42.228.123.42
42.228.123.189
Related comments:
IP Type Details Datetime
45.65.124.216 attackbots 
2019-07-09 x@x
2019-07-09 x@x
2019-07-09 x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=45.65.124.216
 2019-07-09 22:53:22
41.233.233.187 attackspam 
Honeypot attack, port: 23, PTR: host-41.233.233.187.tedata.net.
 2019-07-09 22:54:58
54.36.84.241 attack 
blogonese.net 54.36.84.241 \[09/Jul/2019:16:19:29 +0200\] "POST /wp-login.php HTTP/1.1" 200 5771 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
blogonese.net 54.36.84.241 \[09/Jul/2019:16:19:31 +0200\] "POST /wp-login.php HTTP/1.1" 200 5731 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
blogonese.net 54.36.84.241 \[09/Jul/2019:16:19:31 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4086 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
 2019-07-09 23:19:24
41.40.80.127 attack 
Honeypot attack, port: 23, PTR: host-41.40.80.127.tedata.net.
 2019-07-09 22:47:15
103.207.38.153 attackspam 
2019-07-09 08:21:51 H=(lloydinsulations.com) [103.207.38.153]:59992 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.2, 127.0.0.11, 127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS)
2019-07-09 08:40:53 H=(lloydinsulations.com) [103.207.38.153]:52427 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4, 127.0.0.11, 127.0.0.2) (https://www.spamhaus.org/sbl/query/SBL378171)
2019-07-09 08:42:07 H=(lloydinsulations.com) [103.207.38.153]:54622 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4, 127.0.0.11, 127.0.0.2) (https://www.spamhaus.org/sbl/query/SBL378171)
...
 2019-07-09 23:35:18
221.125.165.59 attack 
web-1 [ssh] SSH Attack
 2019-07-09 23:57:22
151.80.108.27 attackspam 
langenachtfulda.de 151.80.108.27 \[09/Jul/2019:15:41:06 +0200\] "POST /wp-login.php HTTP/1.1" 200 6029 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
langenachtfulda.de 151.80.108.27 \[09/Jul/2019:15:41:06 +0200\] "POST /wp-login.php HTTP/1.1" 200 5994 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
langenachtfulda.de 151.80.108.27 \[09/Jul/2019:15:41:07 +0200\] "POST /wp-login.php HTTP/1.1" 200 5986 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
 2019-07-10 00:06:19
95.44.60.193 attackbots 
$f2bV_matches
 2019-07-10 00:09:47
24.61.247.11 attackspam 
From CCTV User Interface Log
...::ffff:24.61.247.11 - - [09/Jul/2019:09:43:26 +0000] "GET /mysql/admin/index.php?lang=en HTTP/1.1" 404 203
::ffff:24.61.247.11 - - [09/Jul/2019:09:43:26 +0000] "GET /mysql/admin/index.php?lang=en HTTP/1.1" 404 203
::ffff:24.61.247.11 - - [09/Jul/2019:09:43:26 +0000] "-" 400 0
...
 2019-07-09 22:46:43
178.128.107.61 attackbots 
Jul  9 18:10:46 hosting sshd[1620]: Invalid user glenn from 178.128.107.61 port 41993
Jul  9 18:10:46 hosting sshd[1620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.107.61
Jul  9 18:10:46 hosting sshd[1620]: Invalid user glenn from 178.128.107.61 port 41993
Jul  9 18:10:48 hosting sshd[1620]: Failed password for invalid user glenn from 178.128.107.61 port 41993 ssh2
Jul  9 18:17:08 hosting sshd[2006]: Invalid user dell from 178.128.107.61 port 55825
...
 2019-07-09 23:50:55
218.92.0.200 attackbots 
Jul  9 15:43:22 dev sshd\[14225\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.200  user=root
Jul  9 15:43:25 dev sshd\[14225\]: Failed password for root from 218.92.0.200 port 50968 ssh2
...
 2019-07-09 22:47:54
23.129.64.196 attackspam 
Jul  9 15:43:25 ns341937 sshd[14952]: Failed password for root from 23.129.64.196 port 59619 ssh2
Jul  9 15:43:28 ns341937 sshd[14952]: Failed password for root from 23.129.64.196 port 59619 ssh2
Jul  9 15:43:30 ns341937 sshd[14952]: Failed password for root from 23.129.64.196 port 59619 ssh2
Jul  9 15:43:32 ns341937 sshd[14952]: Failed password for root from 23.129.64.196 port 59619 ssh2
...
 2019-07-09 22:42:38
106.111.210.147 attack 
Lines containing failures of 106.111.210.147
Jul  9 14:24:32 expertgeeks postfix/smtpd[25360]: connect from unknown[106.111.210.147]
Jul x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=106.111.210.147
 2019-07-09 23:24:30
222.217.221.178 attackspam 
Brute force attempt
 2019-07-09 23:45:37
61.216.1.223 attackbotsspam 
SSH-bruteforce attempts
 2019-07-09 22:50:44

Recently Reported IPs

42.236.210.12 39.187.127.159 39.151.94.129 223.88.83.180
223.107.237.39 221.5.40.52 163.177.52.70 122.195.241.185
112.32.116.193 111.19.20.101 111.16.61.74 183.211.3.159
211.161.118.3 112.226.193.173 42.229.131.217 39.181.175.4
39.149.242.0 3.83.162.99 36.159.136.87 34.239.130.59