Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Make a comment on this IP
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '42.224.0.0 - 42.239.255.255'

% Abuse contact for '42.224.0.0 - 42.239.255.255' is 'hqs-ipabuse@chinaunicom.cn'

inetnum:        42.224.0.0 - 42.239.255.255
netname:        UNICOM-HA
descr:          China Unicom Henan province network
descr:          China Unicom
descr:          No.21,JiN-Rong Street,
descr:          Beijing 100033
country:        CN
admin-c:        CH1302-AP
tech-c:         WW444-AP
abuse-c:        AC1718-AP
status:         ALLOCATED PORTABLE
remarks:        service provider
remarks:        --------------------------------------------------------
remarks:        To report network abuse, please contact mnt-irt
remarks:        For troubleshooting, please contact tech-c and admin-c
remarks:        Report invalid contact via www.apnic.net/invalidcontact
remarks:        --------------------------------------------------------
mnt-by:         APNIC-HM
mnt-lower:      MAINT-CNCGROUP-HA
mnt-routes:     MAINT-CNCGROUP-RR
mnt-irt:        IRT-CU-CN
last-modified:  2025-01-22T13:12:22Z
source:         APNIC

irt:            IRT-CU-CN
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
e-mail:         hqs-ipabuse@chinaunicom.cn
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
auth:           # Filtered
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
mnt-by:         MAINT-CNCGROUP
last-modified:  2026-08-19T00:57:22Z
source:         APNIC

role:           ABUSE CUCN
country:        ZZ
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
phone:          +000000000
e-mail:         hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
nic-hdl:        AC1718-AP
remarks:        Generated from irt object IRT-CU-CN
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
mnt-by:         APNIC-ABUSE
last-modified:  2026-08-20T03:22:23Z
source:         APNIC

person:         ChinaUnicom Hostmaster
nic-hdl:        CH1302-AP
e-mail:         hqs-ipabuse@chinaunicom.cn
address:        No.21,Jin-Rong Street
address:        Beijing,100033
address:        P.R.China
phone:          +86-10-66259764
fax-no:         +86-10-66259764
country:        CN
mnt-by:         MAINT-CNCGROUP
last-modified:  2017-08-17T06:13:16Z
source:         APNIC

person:         Wei Wang
nic-hdl:        WW444-AP
e-mail:         abuse@public.zz.ha.cn
address:        #55 San Quan Road, Zhengzhou, Henan Provice
phone:          +86-371-65952358
fax-no:         +86-371-65968952
country:        CN
mnt-by:         MAINT-CNCGROUP-HA
last-modified:  2010-03-05T08:20:01Z
source:         APNIC

% Information related to '42.224.0.0/12AS4837'

route:          42.224.0.0/12
descr:          China Unicom Henan Province Network
country:        CN
origin:         AS4837
mnt-by:         MAINT-CNCGROUP-RR
last-modified:  2011-03-02T05:24:03Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-US2)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.231.28.11
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10557
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;42.231.28.11.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026101400 1800 900 604800 86400

;; Query time: 30 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Oct 14 15:32:53 CST 2026
;; MSG SIZE  rcvd: 105
Host info
11.28.231.42.in-addr.arpa domain name pointer hn.kd.ny.adsl.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
11.28.231.42.in-addr.arpa	name = hn.kd.ny.adsl.

Authoritative answers can be found from:
Related IP info:
42.231.28.67
42.231.28.240
42.231.28.136
42.231.28.151
42.231.28.101
42.231.28.15
42.231.28.12
42.231.28.152
42.231.28.32
42.231.28.241
42.231.28.25
42.231.28.184
42.231.28.6
42.231.28.219
42.231.28.93
42.231.28.150
42.231.28.249
42.231.28.110
42.231.28.214
42.231.28.33
42.231.28.118
42.231.28.161
42.231.28.108
42.231.28.239
42.231.28.14
42.231.28.179
42.231.28.156
42.231.28.167
42.231.28.141
42.231.28.246
42.231.28.253
42.231.28.34
42.231.28.198
42.231.28.35
42.231.28.86
42.231.28.137
42.231.28.215
42.231.28.109
42.231.28.149
42.231.28.178
42.231.28.43
42.231.28.232
42.231.28.105
42.231.28.26
42.231.28.87
42.231.28.229
42.231.28.21
42.231.28.146
42.231.28.9
42.231.28.228
42.231.28.107
42.231.28.82
42.231.28.144
42.231.28.123
42.231.28.185
42.231.28.57
42.231.28.173
42.231.28.60
42.231.28.40
42.231.28.143
42.231.28.213
42.231.28.134
42.231.28.72
42.231.28.84
42.231.28.222
42.231.28.63
42.231.28.208
42.231.28.172
42.231.28.139
42.231.28.193
42.231.28.223
42.231.28.38
42.231.28.112
42.231.28.116
42.231.28.221
42.231.28.227
42.231.28.181
42.231.28.10
42.231.28.53
42.231.28.49
42.231.28.81
42.231.28.162
42.231.28.188
42.231.28.242
42.231.28.1
42.231.28.3
42.231.28.80
42.231.28.113
42.231.28.56
42.231.28.61
42.231.28.83
42.231.28.111
42.231.28.226
42.231.28.234
42.231.28.197
42.231.28.77
42.231.28.89
42.231.28.132
42.231.28.95
42.231.28.20
42.231.28.58
42.231.28.71
42.231.28.19
42.231.28.248
42.231.28.187
42.231.28.163
42.231.28.37
42.231.28.97
42.231.28.103
42.231.28.126
42.231.28.190
42.231.28.7
42.231.28.231
42.231.28.24
42.231.28.195
42.231.28.252
42.231.28.206
42.231.28.160
42.231.28.140
42.231.28.169
42.231.28.192
42.231.28.236
42.231.28.129
42.231.28.98
42.231.28.211
42.231.28.69
42.231.28.155
42.231.28.39
42.231.28.243
42.231.28.154
42.231.28.119
42.231.28.230
42.231.28.85
42.231.28.225
42.231.28.128
42.231.28.76
42.231.28.250
42.231.28.166
42.231.28.204
42.231.28.138
42.231.28.182
42.231.28.13
42.231.28.131
42.231.28.159
42.231.28.201
42.231.28.180
42.231.28.122
42.231.28.165
42.231.28.235
42.231.28.254
42.231.28.170
42.231.28.220
42.231.28.145
42.231.28.8
42.231.28.125
42.231.28.41
42.231.28.62
42.231.28.124
42.231.28.168
42.231.28.245
42.231.28.22
42.231.28.224
42.231.28.16
42.231.28.114
42.231.28.189
42.231.28.52
42.231.28.202
42.231.28.237
42.231.28.2
42.231.28.73
42.231.28.175
42.231.28.191
42.231.28.42
42.231.28.196
42.231.28.29
42.231.28.174
42.231.28.55
42.231.28.44
42.231.28.218
42.231.28.75
42.231.28.216
42.231.28.59
42.231.28.104
42.231.28.244
42.231.28.142
42.231.28.36
42.231.28.177
42.231.28.217
42.231.28.50
42.231.28.48
42.231.28.27
42.231.28.11
42.231.28.164
42.231.28.46
42.231.28.233
42.231.28.117
42.231.28.238
42.231.28.199
42.231.28.68
42.231.28.90
42.231.28.23
42.231.28.171
42.231.28.45
42.231.28.99
42.231.28.51
42.231.28.31
42.231.28.130
42.231.28.194
42.231.28.64
42.231.28.74
42.231.28.247
42.231.28.210
42.231.28.96
42.231.28.65
42.231.28.158
42.231.28.157
42.231.28.148
42.231.28.70
42.231.28.47
42.231.28.5
42.231.28.200
42.231.28.212
42.231.28.127
42.231.28.17
42.231.28.251
42.231.28.91
42.231.28.66
42.231.28.205
42.231.28.186
42.231.28.209
42.231.28.176
42.231.28.183
42.231.28.203
42.231.28.133
42.231.28.100
42.231.28.79
42.231.28.92
42.231.28.121
42.231.28.147
42.231.28.207
42.231.28.30
42.231.28.18
42.231.28.106
42.231.28.135
42.231.28.28
42.231.28.102
42.231.28.153
42.231.28.94
42.231.28.120
42.231.28.88
42.231.28.54
42.231.28.4
42.231.28.78
42.231.28.115
Related comments:
IP Type Details Datetime
103.81.85.21 attackspambots 
Automatic report - Banned IP Access
 2020-02-03 19:06:37
31.223.108.235 attackspam 
port scan and connect, tcp 23 (telnet)
 2020-02-03 19:08:48
196.27.127.61 attackspam 
Unauthorized connection attempt detected from IP address 196.27.127.61 to port 2220 [J]
 2020-02-03 19:11:15
202.137.154.158 attackspam 
From: Camryn  (Security Alert. Your account was compromised. Password must be changed.)
 I am a hacker who has access to your operating system.
 I also have full access to your account.
 2020-02-03 19:12:05
178.128.53.229 attack 
serveres are UTC -0500
Lines containing failures of 178.128.53.229
Feb  2 18:50:49 tux2 sshd[12170]: Invalid user support from 178.128.53.229 port 65115
Feb  2 18:50:50 tux2 sshd[12170]: Failed password for invalid user support from 178.128.53.229 port 65115 ssh2
Feb  2 18:50:50 tux2 sshd[12170]: Connection closed by invalid user support 178.128.53.229 port 65115 [preauth]
Feb  2 23:31:44 tux2 sshd[28186]: Invalid user support from 178.128.53.229 port 61465
Feb  2 23:31:44 tux2 sshd[28186]: Failed password for invalid user support from 178.128.53.229 port 61465 ssh2
Feb  2 23:31:45 tux2 sshd[28186]: Connection closed by invalid user support 178.128.53.229 port 61465 [preauth]



........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=178.128.53.229
 2020-02-03 18:43:53
49.207.130.242 attackbots 
Unauthorized connection attempt from IP address 49.207.130.242 on Port 445(SMB)
 2020-02-03 19:21:48
14.186.201.244 attackbotsspam 
(sshd) Failed SSH login from 14.186.201.244 (VN/Vietnam/static.vnpt.vn): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Feb  3 04:46:57 andromeda sshd[1260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.186.201.244  user=admin
Feb  3 04:47:00 andromeda sshd[1260]: Failed password for admin from 14.186.201.244 port 42678 ssh2
Feb  3 04:47:05 andromeda sshd[1266]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.186.201.244  user=admin
 2020-02-03 19:13:55
117.14.146.143 attack 
Unauthorized connection attempt detected, IP banned.
 2020-02-03 19:20:41
222.186.180.142 attack 
2020-02-03T11:45:58.372958scmdmz1 sshd[723]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.142  user=root
2020-02-03T11:46:00.247847scmdmz1 sshd[723]: Failed password for root from 222.186.180.142 port 51978 ssh2
2020-02-03T11:46:02.639632scmdmz1 sshd[723]: Failed password for root from 222.186.180.142 port 51978 ssh2
2020-02-03T11:45:58.372958scmdmz1 sshd[723]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.142  user=root
2020-02-03T11:46:00.247847scmdmz1 sshd[723]: Failed password for root from 222.186.180.142 port 51978 ssh2
2020-02-03T11:46:02.639632scmdmz1 sshd[723]: Failed password for root from 222.186.180.142 port 51978 ssh2
2020-02-03T11:45:58.372958scmdmz1 sshd[723]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.142  user=root
2020-02-03T11:46:00.247847scmdmz1 sshd[723]: Failed password for root from 222.186.180.142 port 51978 ssh2
2020-02-0
 2020-02-03 18:48:20
200.194.36.60 attack 
Unauthorized connection attempt detected from IP address 200.194.36.60 to port 23 [J]
 2020-02-03 19:09:14
5.135.177.2 attackspambots 
Automatic report - XMLRPC Attack
 2020-02-03 18:50:09
51.178.29.39 attackspambots 
Unauthorized connection attempt detected from IP address 51.178.29.39 to port 2220 [J]
 2020-02-03 19:00:37
117.4.40.222 attackspam 
Unauthorized connection attempt from IP address 117.4.40.222 on Port 445(SMB)
 2020-02-03 19:16:06
103.49.206.77 attack 
Unauthorized connection attempt from IP address 103.49.206.77 on Port 445(SMB)
 2020-02-03 18:45:46
212.64.43.52 attackbotsspam 
Unauthorized connection attempt detected from IP address 212.64.43.52 to port 2220 [J]
 2020-02-03 18:51:58

Recently Reported IPs

223.73.131.101 183.199.113.190 182.124.102.51 175.42.206.139
112.91.240.130 112.49.185.179 60.27.107.217 42.238.178.130
39.78.96.79 194.50.235.156 183.206.44.236 175.44.117.4
1.30.30.137 123.90.57.81 117.179.175.120 116.114.76.236
115.53.152.220 112.32.151.224 61.164.114.201 66.249.70.170