Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Zhengzhou

Region: Henan

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '42.224.0.0 - 42.239.255.255'

% Abuse contact for '42.224.0.0 - 42.239.255.255' is 'hqs-ipabuse@chinaunicom.cn'

inetnum:        42.224.0.0 - 42.239.255.255
netname:        UNICOM-HA
descr:          China Unicom Henan province network
descr:          China Unicom
descr:          No.21,JiN-Rong Street,
descr:          Beijing 100033
country:        CN
admin-c:        CH1302-AP
tech-c:         WW444-AP
abuse-c:        AC1718-AP
status:         ALLOCATED PORTABLE
remarks:        service provider
remarks:        --------------------------------------------------------
remarks:        To report network abuse, please contact mnt-irt
remarks:        For troubleshooting, please contact tech-c and admin-c
remarks:        Report invalid contact via www.apnic.net/invalidcontact
remarks:        --------------------------------------------------------
mnt-by:         APNIC-HM
mnt-lower:      MAINT-CNCGROUP-HA
mnt-routes:     MAINT-CNCGROUP-RR
mnt-irt:        IRT-CU-CN
last-modified:  2025-01-22T13:12:22Z
source:         APNIC

irt:            IRT-CU-CN
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
e-mail:         hqs-ipabuse@chinaunicom.cn
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
auth:           # Filtered
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
mnt-by:         MAINT-CNCGROUP
last-modified:  2026-08-19T00:57:22Z
source:         APNIC

role:           ABUSE CUCN
country:        ZZ
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
phone:          +000000000
e-mail:         hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
nic-hdl:        AC1718-AP
remarks:        Generated from irt object IRT-CU-CN
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
mnt-by:         APNIC-ABUSE
last-modified:  2026-08-20T03:22:23Z
source:         APNIC

person:         ChinaUnicom Hostmaster
nic-hdl:        CH1302-AP
e-mail:         hqs-ipabuse@chinaunicom.cn
address:        No.21,Jin-Rong Street
address:        Beijing,100033
address:        P.R.China
phone:          +86-10-66259764
fax-no:         +86-10-66259764
country:        CN
mnt-by:         MAINT-CNCGROUP
last-modified:  2017-08-17T06:13:16Z
source:         APNIC

person:         Wei Wang
nic-hdl:        WW444-AP
e-mail:         abuse@public.zz.ha.cn
address:        #55 San Quan Road, Zhengzhou, Henan Provice
phone:          +86-371-65952358
fax-no:         +86-371-65968952
country:        CN
mnt-by:         MAINT-CNCGROUP-HA
last-modified:  2010-03-05T08:20:01Z
source:         APNIC

% Information related to '42.224.0.0/12AS4837'

route:          42.224.0.0/12
descr:          China Unicom Henan Province Network
country:        CN
origin:         AS4837
mnt-by:         MAINT-CNCGROUP-RR
last-modified:  2011-03-02T05:24:03Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU4)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.236.155.234
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15901
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;42.236.155.234.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026083100 1800 900 604800 86400

;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Aug 31 18:31:51 CST 2026
;; MSG SIZE  rcvd: 107
Host info
234.155.236.42.in-addr.arpa domain name pointer hn.kd.ny.adsl.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
234.155.236.42.in-addr.arpa	name = hn.kd.ny.adsl.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
211.140.151.13 attackspam
Sep 25 20:35:58 *** sshd[15625]: User root from 211.140.151.13 not allowed because not listed in AllowUsers
2020-09-27 01:20:18
152.231.107.22 attackspambots
Invalid user marge from 152.231.107.22 port 39126
2020-09-27 01:18:31
104.45.193.247 attackspambots
Invalid user sipesat from 104.45.193.247 port 47487
2020-09-27 01:21:30
192.241.185.120 attackspambots
Total attacks: 2
2020-09-27 01:26:44
45.142.120.166 attackbotsspam
Sep 26 19:07:27 srv01 postfix/smtpd\[30272\]: warning: unknown\[45.142.120.166\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 26 19:07:28 srv01 postfix/smtpd\[28777\]: warning: unknown\[45.142.120.166\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 26 19:07:28 srv01 postfix/smtpd\[30253\]: warning: unknown\[45.142.120.166\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 26 19:07:34 srv01 postfix/smtpd\[28478\]: warning: unknown\[45.142.120.166\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 26 19:07:36 srv01 postfix/smtpd\[22441\]: warning: unknown\[45.142.120.166\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-09-27 01:27:10
118.83.180.76 attack
Sep 26 14:58:33 gospond sshd[30230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.83.180.76  user=root
Sep 26 14:58:35 gospond sshd[30230]: Failed password for root from 118.83.180.76 port 42220 ssh2
...
2020-09-27 01:08:14
137.117.171.11 attackspam
Sep 26 16:52:53 localhost sshd\[15850\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.117.171.11  user=root
Sep 26 16:52:55 localhost sshd\[15850\]: Failed password for root from 137.117.171.11 port 47104 ssh2
Sep 26 17:13:10 localhost sshd\[16206\]: Invalid user 245 from 137.117.171.11 port 29450
...
2020-09-27 01:16:24
93.184.221.240 attack
Blocked by Sophos UTM Network Protection . /    / proto=6  .  srcport=80  .  dstport=49970  .     (3527)
2020-09-27 01:39:31
115.56.170.16 attackbotsspam
Telnet Honeypot -> Telnet Bruteforce / Login
2020-09-27 01:25:03
125.227.226.9 attackspam
Found on   Alienvault    / proto=6  .  srcport=54614  .  dstport=5555  .     (3529)
2020-09-27 01:31:21
13.82.92.111 attackbotsspam
Sep 26 17:03:05 ssh2 sshd[71212]: User root from 13.82.92.111 not allowed because not listed in AllowUsers
Sep 26 17:03:05 ssh2 sshd[71212]: Failed password for invalid user root from 13.82.92.111 port 57626 ssh2
Sep 26 17:03:05 ssh2 sshd[71212]: Disconnected from invalid user root 13.82.92.111 port 57626 [preauth]
...
2020-09-27 01:07:30
140.143.20.135 attack
Invalid user gameserver from 140.143.20.135 port 40210
2020-09-27 01:22:05
89.163.223.216 attack
Tracking message source: 89.163.223.216:
Routing details for 89.163.223.216
[refresh/show] Cached whois for 89.163.223.216 : abuse@myloc.de
From: =?UTF-8?q?=47=65=6C=64=6E=61=63=68?= =?UTF-8?q?=72=69=63=68=74=65=6E=20?=  (=?UTF-8?q?=49=68=72=20=6E=65=75=65=73=20=45=69=6E=6B=6F=6D?= =?UTF-8?q?=6D=65=6E=20=69=73=74=20=66=65=72=74=69=67=20?= Chris)
 Gesendet: Donnerstag, 24. September 2020 um 21:44 Uhr
 Von: "Geldnachrichten " An: x
2020-09-27 01:37:13
40.89.155.138 attack
invalid user
2020-09-27 01:22:54
154.221.27.28 attackspambots
Sep 26 16:12:29 marvibiene sshd[39163]: Invalid user discord from 154.221.27.28 port 37670
Sep 26 16:12:29 marvibiene sshd[39163]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.221.27.28
Sep 26 16:12:29 marvibiene sshd[39163]: Invalid user discord from 154.221.27.28 port 37670
Sep 26 16:12:31 marvibiene sshd[39163]: Failed password for invalid user discord from 154.221.27.28 port 37670 ssh2
2020-09-27 01:31:02

Recently Reported IPs

121.41.169.65 146.70.240.212 42.233.0.198 34.34.229.71
221.207.73.69 221.206.204.32 207.175.123.9 182.116.31.60
182.113.118.188 112.238.91.190 91.225.184.185 186.244.245.79
46.201.53.94 39.168.81.42 35.189.97.118 6.131.234.170
112.20.17.200 111.52.69.75 2606:4700:10::6814:8423 2606:4700:10::6816:3714