City: unknown
Region: unknown
Country: China
Internet Service Provider: China Unicom
Hostname: unknown
Organization: unknown
Usage Type: unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '42.48.0.0 - 42.49.255.255'
% Abuse contact for '42.48.0.0 - 42.49.255.255' is 'hqs-ipabuse@chinaunicom.cn'
inetnum: 42.48.0.0 - 42.49.255.255
netname: UNICOM-HN
descr: China Unicom HuNan province network
descr: China Unicom
descr: No.21,Jin-Rong Street,
descr: Beijing 100033
country: CN
admin-c: CH1302-AP
tech-c: RP181-AP
abuse-c: AC1718-AP
status: ALLOCATED PORTABLE
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-HN
mnt-routes: MAINT-CNCGROUP-RR
mnt-irt: IRT-CU-CN
last-modified: 2025-01-22T13:18:26Z
source: APNIC
irt: IRT-CU-CN
address: No.21,Financial Street
address: Beijing,100033
address: P.R.China
e-mail: hqs-ipabuse@chinaunicom.cn
abuse-mailbox: hqs-ipabuse@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
auth: # Filtered
remarks: hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
mnt-by: MAINT-CNCGROUP
last-modified: 2026-08-19T00:57:22Z
source: APNIC
role: ABUSE CUCN
country: ZZ
address: No.21,Financial Street
address: Beijing,100033
address: P.R.China
phone: +000000000
e-mail: hqs-ipabuse@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
nic-hdl: AC1718-AP
remarks: Generated from irt object IRT-CU-CN
remarks: hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
abuse-mailbox: hqs-ipabuse@chinaunicom.cn
mnt-by: APNIC-ABUSE
last-modified: 2026-08-20T03:22:23Z
source: APNIC
person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: hqs-ipabuse@chinaunicom.cn
address: No.21,Jin-Rong Street
address: Beijing,100033
address: P.R.China
phone: +86-10-66259764
fax-no: +86-10-66259764
country: CN
mnt-by: MAINT-CNCGROUP
last-modified: 2017-08-17T06:13:16Z
source: APNIC
person: runkeng pan
nic-hdl: RP181-AP
e-mail: gdipnoc@chinaunicom.cn
address: XinShiKong Plaza,No 666 Huangpu Rd. Guangzhou 510627,China
phone: +86-20-22214174
fax-no: +86-20-22212266-4174
country: CN
mnt-by: MAINT-CNCGROUP-GD
last-modified: 2015-12-16T03:32:02Z
source: APNIC
% Information related to '42.48.0.0/15AS4837'
route: 42.48.0.0/15
descr: China Unicom Hunan Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
last-modified: 2011-03-02T05:24:04Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU4)
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.49.48.226
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7904
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;42.49.48.226. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026102803 1800 900 604800 86400
;; Query time: 29 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 29 04:00:34 CST 2026
;; MSG SIZE rcvd: 105
Host 226.48.49.42.in-addr.arpa not found: 2(SERVFAIL)
server can't find 42.49.48.226.in-addr.arpa: SERVFAIL
| IP | Type | Details | Datetime |
|---|---|---|---|
| 68.183.142.240 | attackbotsspam | Feb 12 08:04:43 web8 sshd\[18797\]: Invalid user bookings from 68.183.142.240 Feb 12 08:04:43 web8 sshd\[18797\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.142.240 Feb 12 08:04:45 web8 sshd\[18797\]: Failed password for invalid user bookings from 68.183.142.240 port 48282 ssh2 Feb 12 08:07:39 web8 sshd\[20501\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.142.240 user=root Feb 12 08:07:41 web8 sshd\[20501\]: Failed password for root from 68.183.142.240 port 46946 ssh2 |
2020-02-12 16:21:38 |
| 218.92.0.173 | attackspambots | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.173 user=root Failed password for root from 218.92.0.173 port 48149 ssh2 Failed password for root from 218.92.0.173 port 48149 ssh2 Failed password for root from 218.92.0.173 port 48149 ssh2 Failed password for root from 218.92.0.173 port 48149 ssh2 |
2020-02-12 16:09:30 |
| 35.186.145.141 | attack | Feb 12 02:48:33 plusreed sshd[15629]: Invalid user rugby from 35.186.145.141 ... |
2020-02-12 15:50:46 |
| 51.15.9.27 | attack | Wordpress Admin Login attack |
2020-02-12 16:24:15 |
| 82.207.73.168 | attackspambots | 1581483311 - 02/12/2020 05:55:11 Host: 82.207.73.168/82.207.73.168 Port: 445 TCP Blocked |
2020-02-12 16:05:23 |
| 223.220.159.78 | attackspam | 2020-02-12T02:00:45.2610541495-001 sshd[44155]: Invalid user bluntj from 223.220.159.78 port 36311 2020-02-12T02:00:45.2643191495-001 sshd[44155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.220.159.78 2020-02-12T02:00:45.2610541495-001 sshd[44155]: Invalid user bluntj from 223.220.159.78 port 36311 2020-02-12T02:00:47.9787311495-001 sshd[44155]: Failed password for invalid user bluntj from 223.220.159.78 port 36311 ssh2 2020-02-12T02:05:15.6712271495-001 sshd[44445]: Invalid user Michael from 223.220.159.78 port 60371 2020-02-12T02:05:15.6753951495-001 sshd[44445]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.220.159.78 2020-02-12T02:05:15.6712271495-001 sshd[44445]: Invalid user Michael from 223.220.159.78 port 60371 2020-02-12T02:05:17.4520881495-001 sshd[44445]: Failed password for invalid user Michael from 223.220.159.78 port 60371 ssh2 2020-02-12T02:10:09.3663251495-001 sshd[44715]: pam ... |
2020-02-12 15:56:31 |
| 36.68.12.16 | attackbots | Attempt to attack host OS, exploiting network vulnerabilities, on 12-02-2020 04:55:10. |
2020-02-12 16:06:50 |
| 90.79.154.39 | attack | Feb 11 18:55:39 web1 sshd\[10246\]: Invalid user pi from 90.79.154.39 Feb 11 18:55:39 web1 sshd\[10247\]: Invalid user pi from 90.79.154.39 Feb 11 18:55:39 web1 sshd\[10246\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=90.79.154.39 Feb 11 18:55:39 web1 sshd\[10247\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=90.79.154.39 Feb 11 18:55:41 web1 sshd\[10246\]: Failed password for invalid user pi from 90.79.154.39 port 49348 ssh2 Feb 11 18:55:41 web1 sshd\[10247\]: Failed password for invalid user pi from 90.79.154.39 port 49346 ssh2 |
2020-02-12 15:41:58 |
| 101.51.28.11 | attack | Tue Feb 11 21:55:22 2020 - Child process 13924 handling connection Tue Feb 11 21:55:22 2020 - New connection from: 101.51.28.11:49425 Tue Feb 11 21:55:22 2020 - Sending data to client: [Login: ] Tue Feb 11 21:55:53 2020 - Child aborting Tue Feb 11 21:55:53 2020 - Reporting IP address: 101.51.28.11 - mflag: 0 |
2020-02-12 16:02:11 |
| 51.83.72.243 | attackspam | Automatic report - Banned IP Access |
2020-02-12 16:03:02 |
| 101.108.182.41 | attackbotsspam | Feb 12 05:55:12 ks10 sshd[3822731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.108.182.41 Feb 12 05:55:13 ks10 sshd[3822731]: Failed password for invalid user 666666 from 101.108.182.41 port 55545 ssh2 ... |
2020-02-12 16:00:56 |
| 157.7.244.38 | attackbotsspam | Port scan on 1 port(s): 23 |
2020-02-12 15:42:32 |
| 89.248.160.150 | attackbots | trying to access non-authorized port |
2020-02-12 15:47:46 |
| 50.255.64.233 | attackspambots | Invalid user txl from 50.255.64.233 port 59962 |
2020-02-12 15:52:59 |
| 89.248.174.193 | attackspambots | firewall-block, port(s): 10001/tcp |
2020-02-12 16:23:45 |