城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): China Unicom
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '42.48.0.0 - 42.49.255.255'
% Abuse contact for '42.48.0.0 - 42.49.255.255' is 'hqs-ipabuse@chinaunicom.cn'
inetnum: 42.48.0.0 - 42.49.255.255
netname: UNICOM-HN
descr: China Unicom HuNan province network
descr: China Unicom
descr: No.21,Jin-Rong Street,
descr: Beijing 100033
country: CN
admin-c: CH1302-AP
tech-c: RP181-AP
abuse-c: AC1718-AP
status: ALLOCATED PORTABLE
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-HN
mnt-routes: MAINT-CNCGROUP-RR
mnt-irt: IRT-CU-CN
last-modified: 2025-01-22T13:18:26Z
source: APNIC
irt: IRT-CU-CN
address: No.21,Financial Street
address: Beijing,100033
address: P.R.China
e-mail: hqs-ipabuse@chinaunicom.cn
abuse-mailbox: hqs-ipabuse@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
auth: # Filtered
remarks: hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
mnt-by: MAINT-CNCGROUP
last-modified: 2026-08-19T00:57:22Z
source: APNIC
role: ABUSE CUCN
country: ZZ
address: No.21,Financial Street
address: Beijing,100033
address: P.R.China
phone: +000000000
e-mail: hqs-ipabuse@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
nic-hdl: AC1718-AP
remarks: Generated from irt object IRT-CU-CN
remarks: hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
abuse-mailbox: hqs-ipabuse@chinaunicom.cn
mnt-by: APNIC-ABUSE
last-modified: 2026-08-20T03:22:23Z
source: APNIC
person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: hqs-ipabuse@chinaunicom.cn
address: No.21,Jin-Rong Street
address: Beijing,100033
address: P.R.China
phone: +86-10-66259764
fax-no: +86-10-66259764
country: CN
mnt-by: MAINT-CNCGROUP
last-modified: 2017-08-17T06:13:16Z
source: APNIC
person: runkeng pan
nic-hdl: RP181-AP
e-mail: gdipnoc@chinaunicom.cn
address: XinShiKong Plaza,No 666 Huangpu Rd. Guangzhou 510627,China
phone: +86-20-22214174
fax-no: +86-20-22212266-4174
country: CN
mnt-by: MAINT-CNCGROUP-GD
last-modified: 2015-12-16T03:32:02Z
source: APNIC
% Information related to '42.48.0.0/15AS4837'
route: 42.48.0.0/15
descr: China Unicom Hunan Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
last-modified: 2011-03-02T05:24:04Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.49.172.205
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56372
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;42.49.172.205. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026090201 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Sep 03 11:00:59 CST 2026
;; MSG SIZE rcvd: 106Host 205.172.49.42.in-addr.arpa not found: 2(SERVFAIL);; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 205.172.49.42.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 89.248.168.217 | attackspambots | 89.248.168.217 was recorded 10 times by 6 hosts attempting to connect to the following ports: 22547,40859. Incident counter (4h, 24h, all-time): 10, 48, 21503 |
2020-06-21 08:01:19 |
| 150.109.74.174 | attackspambots | Honeypot attack, port: 445, PTR: PTR record not found |
2020-06-21 08:26:16 |
| 208.113.164.202 | attackbotsspam | Jun 21 02:05:13 sso sshd[10644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.113.164.202 Jun 21 02:05:14 sso sshd[10644]: Failed password for invalid user thais from 208.113.164.202 port 39262 ssh2 ... |
2020-06-21 08:14:27 |
| 87.251.74.212 | attackbotsspam | 06/20/2020-19:23:59.727440 87.251.74.212 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-06-21 08:02:46 |
| 185.39.11.29 | attackbotsspam | =Multiport scan 762 ports : 2659 2660 2661 2662 2663 2664 2665 2666 2667 2668 2669 2670 2671 2672 2673 2674 2675 2676 2677 2678 2679 2680 2681 2682 2683 2684 2685 2686 2687 2688 2689 2690 2691 2692 2693 2694 2695 2696 2697 2698 2699 2700 2701 2702 2703 2704 2705 2706 2707 2708 2709 2710 2711 2712 2713 2714 2715 2716 2717 2718 2719 2720 2721 2722 2723 2724 2725 2726 2727 2728 2729 2730 2731 2732 2733 2734 2735 2736 2737 2738 2739 2740 2741 2742 2743 2744 2745 2746 2747 2748 2749 2750 2751 2752 2753 2754 5042 5043 5044 5045 5046 5047 5048 5049 5050 5051 5052 5053 5054 5055 5056 5057 5058 5059 5060 5061 5062 5063 5064 5065 5066 5067 5068 5069 5070 5071 5072 5073 5074 5075 5076 5077 5078 5079 5080 5081 5082 5083 5084 5085 5086 5087 5088 5089 5090 5091 5092 5093 5094 5095 5096 5097 5098 5099 5100 5101 5102 5103 5104 5105 5106 5107 5108 5109 5110 5111 5112 5113 5114 5115 5116 5117 5118 5119 5120 5121 5122 5123 5124 5125 5126 5127 5128 5129 5130 5131 5132 5133 5134 5135 5136 5137 7284 7285 728.... |
2020-06-21 07:54:54 |
| 61.177.172.41 | attack | Jun 20 21:17:07 firewall sshd[5889]: Failed password for root from 61.177.172.41 port 16695 ssh2 Jun 20 21:17:10 firewall sshd[5889]: Failed password for root from 61.177.172.41 port 16695 ssh2 Jun 20 21:17:13 firewall sshd[5889]: Failed password for root from 61.177.172.41 port 16695 ssh2 ... |
2020-06-21 08:21:39 |
| 118.25.74.199 | attack | Jun 20 18:02:22 Tower sshd[20840]: Connection from 118.25.74.199 port 36764 on 192.168.10.220 port 22 rdomain "" Jun 20 18:02:24 Tower sshd[20840]: Invalid user testuser from 118.25.74.199 port 36764 Jun 20 18:02:24 Tower sshd[20840]: error: Could not get shadow information for NOUSER Jun 20 18:02:24 Tower sshd[20840]: Failed password for invalid user testuser from 118.25.74.199 port 36764 ssh2 Jun 20 18:02:26 Tower sshd[20840]: Received disconnect from 118.25.74.199 port 36764:11: Bye Bye [preauth] Jun 20 18:02:26 Tower sshd[20840]: Disconnected from invalid user testuser 118.25.74.199 port 36764 [preauth] |
2020-06-21 08:22:48 |
| 79.2.137.18 | attackspam | Automatic report - Banned IP Access |
2020-06-21 08:12:50 |
| 170.106.33.194 | attack | Jun 20 23:12:18 localhost sshd[100839]: Invalid user dy from 170.106.33.194 port 51626 Jun 20 23:12:18 localhost sshd[100839]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.106.33.194 Jun 20 23:12:18 localhost sshd[100839]: Invalid user dy from 170.106.33.194 port 51626 Jun 20 23:12:20 localhost sshd[100839]: Failed password for invalid user dy from 170.106.33.194 port 51626 ssh2 Jun 20 23:15:59 localhost sshd[101345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.106.33.194 user=root Jun 20 23:16:01 localhost sshd[101345]: Failed password for root from 170.106.33.194 port 45712 ssh2 ... |
2020-06-21 08:26:44 |
| 183.62.139.167 | attackbots | Jun 20 22:25:07 srv-ubuntu-dev3 sshd[83096]: Invalid user office from 183.62.139.167 Jun 20 22:25:07 srv-ubuntu-dev3 sshd[83096]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.62.139.167 Jun 20 22:25:07 srv-ubuntu-dev3 sshd[83096]: Invalid user office from 183.62.139.167 Jun 20 22:25:09 srv-ubuntu-dev3 sshd[83096]: Failed password for invalid user office from 183.62.139.167 port 49956 ssh2 Jun 20 22:27:46 srv-ubuntu-dev3 sshd[83504]: Invalid user admin from 183.62.139.167 Jun 20 22:27:46 srv-ubuntu-dev3 sshd[83504]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.62.139.167 Jun 20 22:27:46 srv-ubuntu-dev3 sshd[83504]: Invalid user admin from 183.62.139.167 Jun 20 22:27:48 srv-ubuntu-dev3 sshd[83504]: Failed password for invalid user admin from 183.62.139.167 port 44239 ssh2 Jun 20 22:30:28 srv-ubuntu-dev3 sshd[84010]: Invalid user admin from 183.62.139.167 ... |
2020-06-21 08:18:02 |
| 114.35.166.20 | attack | Honeypot attack, port: 81, PTR: 114-35-166-20.HINET-IP.hinet.net. |
2020-06-21 08:18:54 |
| 222.186.175.23 | attackspambots | Jun 21 02:18:29 minden010 sshd[16323]: Failed password for root from 222.186.175.23 port 52071 ssh2 Jun 21 02:18:37 minden010 sshd[16397]: Failed password for root from 222.186.175.23 port 12032 ssh2 ... |
2020-06-21 08:20:38 |
| 103.83.18.98 | attack | Jun 20 23:09:58 vlre-nyc-1 sshd\[31099\]: Invalid user randy from 103.83.18.98 Jun 20 23:09:58 vlre-nyc-1 sshd\[31099\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.83.18.98 Jun 20 23:10:00 vlre-nyc-1 sshd\[31099\]: Failed password for invalid user randy from 103.83.18.98 port 48954 ssh2 Jun 20 23:13:54 vlre-nyc-1 sshd\[31225\]: Invalid user ubb from 103.83.18.98 Jun 20 23:13:54 vlre-nyc-1 sshd\[31225\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.83.18.98 ... |
2020-06-21 08:25:59 |
| 188.167.106.191 | attack | xmlrpc attack |
2020-06-21 08:17:36 |
| 118.69.226.144 | attackbotsspam | Honeypot attack, port: 445, PTR: 118-69-226-144-static.hcm.fpt.vn. |
2020-06-21 08:32:38 |