城市(city): Luoyang
省份(region): Henan
国家(country): China
运营商(isp): China Unicom
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '42.224.0.0 - 42.239.255.255'
% Abuse contact for '42.224.0.0 - 42.239.255.255' is 'hqs-ipabuse@chinaunicom.cn'
inetnum: 42.224.0.0 - 42.239.255.255
netname: UNICOM-HA
descr: China Unicom Henan province network
descr: China Unicom
descr: No.21,JiN-Rong Street,
descr: Beijing 100033
country: CN
admin-c: CH1302-AP
tech-c: WW444-AP
abuse-c: AC1718-AP
status: ALLOCATED PORTABLE
remarks: service provider
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-HA
mnt-routes: MAINT-CNCGROUP-RR
mnt-irt: IRT-CU-CN
last-modified: 2025-01-22T13:12:22Z
source: APNIC
irt: IRT-CU-CN
address: No.21,Financial Street
address: Beijing,100033
address: P.R.China
e-mail: hqs-ipabuse@chinaunicom.cn
abuse-mailbox: hqs-ipabuse@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
auth: # Filtered
remarks: hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
mnt-by: MAINT-CNCGROUP
last-modified: 2026-08-19T00:57:22Z
source: APNIC
role: ABUSE CUCN
country: ZZ
address: No.21,Financial Street
address: Beijing,100033
address: P.R.China
phone: +000000000
e-mail: hqs-ipabuse@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
nic-hdl: AC1718-AP
remarks: Generated from irt object IRT-CU-CN
remarks: hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
abuse-mailbox: hqs-ipabuse@chinaunicom.cn
mnt-by: APNIC-ABUSE
last-modified: 2026-08-20T03:22:23Z
source: APNIC
person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: hqs-ipabuse@chinaunicom.cn
address: No.21,Jin-Rong Street
address: Beijing,100033
address: P.R.China
phone: +86-10-66259764
fax-no: +86-10-66259764
country: CN
mnt-by: MAINT-CNCGROUP
last-modified: 2017-08-17T06:13:16Z
source: APNIC
person: Wei Wang
nic-hdl: WW444-AP
e-mail: abuse@public.zz.ha.cn
address: #55 San Quan Road, Zhengzhou, Henan Provice
phone: +86-371-65952358
fax-no: +86-371-65968952
country: CN
mnt-by: MAINT-CNCGROUP-HA
last-modified: 2010-03-05T08:20:01Z
source: APNIC
% Information related to '42.224.0.0/12AS4837'
route: 42.224.0.0/12
descr: China Unicom Henan Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
last-modified: 2011-03-02T05:24:03Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.224.205.147
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21922
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;42.224.205.147. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026083001 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Aug 31 12:01:25 CST 2026
;; MSG SIZE rcvd: 107147.205.224.42.in-addr.arpa domain name pointer hn.kd.ny.adsl.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
147.205.224.42.in-addr.arpa name = hn.kd.ny.adsl.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 211.239.170.90 | attackbots | 2020-06-13T15:27:22.492845abusebot-3.cloudsearch.cf sshd[28348]: Invalid user squid from 211.239.170.90 port 40342 2020-06-13T15:27:22.507475abusebot-3.cloudsearch.cf sshd[28348]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.239.170.90 2020-06-13T15:27:22.492845abusebot-3.cloudsearch.cf sshd[28348]: Invalid user squid from 211.239.170.90 port 40342 2020-06-13T15:27:25.120735abusebot-3.cloudsearch.cf sshd[28348]: Failed password for invalid user squid from 211.239.170.90 port 40342 ssh2 2020-06-13T15:31:27.172506abusebot-3.cloudsearch.cf sshd[28598]: Invalid user test from 211.239.170.90 port 41798 2020-06-13T15:31:27.178286abusebot-3.cloudsearch.cf sshd[28598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.239.170.90 2020-06-13T15:31:27.172506abusebot-3.cloudsearch.cf sshd[28598]: Invalid user test from 211.239.170.90 port 41798 2020-06-13T15:31:29.425239abusebot-3.cloudsearch.cf sshd[28598]: F ... |
2020-06-13 23:46:40 |
| 167.99.170.91 | attack | Jun 13 21:35:38 webhost01 sshd[30893]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.170.91 Jun 13 21:35:39 webhost01 sshd[30893]: Failed password for invalid user fulgencia from 167.99.170.91 port 34606 ssh2 ... |
2020-06-14 00:35:15 |
| 192.3.177.213 | attackspambots | Jun 13 12:30:24 Tower sshd[27296]: Connection from 192.3.177.213 port 57362 on 192.168.10.220 port 22 rdomain "" Jun 13 12:30:24 Tower sshd[27296]: Failed password for root from 192.3.177.213 port 57362 ssh2 Jun 13 12:30:24 Tower sshd[27296]: Received disconnect from 192.3.177.213 port 57362:11: Bye Bye [preauth] Jun 13 12:30:24 Tower sshd[27296]: Disconnected from authenticating user root 192.3.177.213 port 57362 [preauth] |
2020-06-14 00:34:51 |
| 94.176.165.13 | attackbotsspam | (Jun 13) LEN=48 PREC=0x20 TTL=119 ID=29280 DF TCP DPT=445 WINDOW=8192 SYN (Jun 13) LEN=48 PREC=0x20 TTL=119 ID=16771 DF TCP DPT=445 WINDOW=8192 SYN (Jun 12) LEN=48 TOS=0x08 PREC=0x20 TTL=120 ID=9643 DF TCP DPT=445 WINDOW=8192 SYN (Jun 12) LEN=48 TOS=0x08 PREC=0x20 TTL=120 ID=5671 DF TCP DPT=445 WINDOW=8192 SYN (Jun 12) LEN=48 PREC=0x20 TTL=119 ID=15013 DF TCP DPT=445 WINDOW=8192 SYN (Jun 12) LEN=48 TOS=0x08 PREC=0x20 TTL=120 ID=23040 DF TCP DPT=445 WINDOW=8192 SYN (Jun 11) LEN=48 PREC=0x20 TTL=119 ID=32678 DF TCP DPT=445 WINDOW=8192 SYN (Jun 11) LEN=48 PREC=0x20 TTL=119 ID=21487 DF TCP DPT=445 WINDOW=8192 SYN (Jun 11) LEN=48 TOS=0x08 PREC=0x20 TTL=120 ID=18084 DF TCP DPT=445 WINDOW=8192 SYN (Jun 10) LEN=48 PREC=0x20 TTL=119 ID=10480 DF TCP DPT=445 WINDOW=8192 SYN (Jun 10) LEN=48 PREC=0x20 TTL=119 ID=17386 DF TCP DPT=445 WINDOW=8192 SYN (Jun 10) LEN=48 TOS=0x08 PREC=0x20 TTL=120 ID=30043 DF TCP DPT=445 WINDOW=8192 SYN (Jun 10) LEN=48 PREC=0x20 TTL=1... |
2020-06-14 00:32:23 |
| 120.70.101.85 | attackbots | $f2bV_matches |
2020-06-14 00:38:06 |
| 77.247.181.165 | attackspambots | Bruteforce detected by fail2ban |
2020-06-14 00:01:51 |
| 185.176.27.174 | attackspam | 06/13/2020-11:56:28.172123 185.176.27.174 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2020-06-13 23:56:44 |
| 54.38.139.210 | attackspambots | Jun 13 14:21:57 onepixel sshd[784633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.139.210 Jun 13 14:21:57 onepixel sshd[784633]: Invalid user xy from 54.38.139.210 port 39530 Jun 13 14:22:00 onepixel sshd[784633]: Failed password for invalid user xy from 54.38.139.210 port 39530 ssh2 Jun 13 14:25:37 onepixel sshd[785116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.139.210 user=root Jun 13 14:25:39 onepixel sshd[785116]: Failed password for root from 54.38.139.210 port 41588 ssh2 |
2020-06-14 00:06:34 |
| 46.101.100.227 | attackbotsspam | Jun 13 15:10:26 cosmoit sshd[8705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.100.227 |
2020-06-13 23:56:10 |
| 23.237.44.162 | attackbots | SmallBizIT.US 3 packets to tcp(8089) |
2020-06-14 00:08:27 |
| 39.155.221.190 | attack | Jun 13 12:55:30 django-0 sshd\[16487\]: Failed password for root from 39.155.221.190 port 45078 ssh2Jun 13 12:57:40 django-0 sshd\[16574\]: Failed password for root from 39.155.221.190 port 44340 ssh2Jun 13 12:59:56 django-0 sshd\[16652\]: Failed password for root from 39.155.221.190 port 43780 ssh2 ... |
2020-06-14 00:24:58 |
| 130.61.118.231 | attackspambots | Jun 13 17:27:20 rotator sshd\[13140\]: Invalid user snjuguna from 130.61.118.231Jun 13 17:27:21 rotator sshd\[13140\]: Failed password for invalid user snjuguna from 130.61.118.231 port 42256 ssh2Jun 13 17:30:28 rotator sshd\[13901\]: Invalid user oracle from 130.61.118.231Jun 13 17:30:31 rotator sshd\[13901\]: Failed password for invalid user oracle from 130.61.118.231 port 41712 ssh2Jun 13 17:33:44 rotator sshd\[13939\]: Invalid user pi from 130.61.118.231Jun 13 17:33:45 rotator sshd\[13939\]: Failed password for invalid user pi from 130.61.118.231 port 41174 ssh2 ... |
2020-06-13 23:57:01 |
| 202.74.74.186 | attackspam | Invalid user teamspeak3 from 202.74.74.186 port 19664 |
2020-06-14 00:25:31 |
| 92.63.194.57 | attackbots | Unauthorized connection attempt detected from IP address 92.63.194.57 to port 3389 |
2020-06-14 00:32:40 |
| 203.54.221.218 | attack | Lines containing failures of 203.54.221.218 Jun 12 12:51:44 shared04 sshd[10923]: Invalid user smmsp from 203.54.221.218 port 35390 Jun 12 12:51:44 shared04 sshd[10923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.54.221.218 Jun 12 12:51:46 shared04 sshd[10923]: Failed password for invalid user smmsp from 203.54.221.218 port 35390 ssh2 Jun 12 12:51:46 shared04 sshd[10923]: Received disconnect from 203.54.221.218 port 35390:11: Bye Bye [preauth] Jun 12 12:51:46 shared04 sshd[10923]: Disconnected from invalid user smmsp 203.54.221.218 port 35390 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=203.54.221.218 |
2020-06-13 23:50:39 |