JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

42.236.73.143

Recent Activity

Abuse confidence score ?

100% Critical

34 reports

29 reporters · latest 53 minutes ago

ISP	China Unicom Henan province network
Usage Type	Fixed Line ISP
ASN	AS4837
Hostname(s)	hn.kd.ny.adsl
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Zhengzhou, Henan

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 42.236.73.143

This IP address has been reported a total of 34 times from 29 distinct sources. 42.236.73.143 was first reported on September 13th 2026, and the most recent report was 53 minutes ago. In the last 60 days, the top reporter locations were: United States of America with 11 reports; Germany with 9 reports; Poland with 4 reports. The most common categories in these recent reports were: Port Scan 24 times; Web App Attack 12 times; Hacking 8 times; Brute-Force 2 times; Email Spam 1 time; Other 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 LotPhantom	2026-09-22 01:47:41 (53 minutes ago)	2026-09-22T01:47:40.010581+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-09-22T01:47:40.010581+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=42.236.73.143 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=33531 DF PROTO=TCP SPT=41988 DPT=8069 WINDOW=64240 RES=0x00 SYN URGP=0 2026-09-22T01:47:41.009236+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=42.236.73.143 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=33532 DF PROTO=TCP SPT=41988 DPT=8069 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇩🇪 Jochen Pretli	2026-09-21 09:15:29 (17 hours ago)	connection to honeypot	Email Spam Port Scan
🇵🇱 mkey	2026-09-21 07:18:33 (19 hours ago)	[First: 2026-09-16 17:47:18/1s] HITS=2 Repeated suspicious IDS-detected activity; sample=WEB-APP-ATA ... show more [First: 2026-09-16 17:47:18/1s] HITS=2 Repeated suspicious IDS-detected activity; sample=WEB-APP-ATACK: Script check of structure \| WEB-ATACK: Invalid destination host in header show less	Port Scan Hacking Web App Attack
🇵🇱 mkey	2026-09-21 06:57:39 (19 hours ago)	[First: 2026-09-16 17:47:23/single] HITS=1 Repeated suspicious web requests; sample=POST /xmlrpc/2/c ... show more [First: 2026-09-16 17:47:23/single] HITS=1 Repeated suspicious web requests; sample=POST /xmlrpc/2/common 403 show less	Port Scan Hacking Web App Attack
🇩🇪 Admins@FBN	2026-09-21 03:31:15 (23 hours ago)	FW-PortScan: Traffic Blocked srcport=52744 dstport=8072	Port Scan
🇫🇮 sonot	2026-09-21 02:31:21 (1 day ago)	Blocked by UFW on mail [8072/tcp] \| SPT: 48178 \| TTL: 43 \| LEN: 60 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on mail [8072/tcp] \| SPT: 48178 \| TTL: 43 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-09-20 21:23:20 (1 day ago)	Blocked by UFW (TCP on 80) Source port: 52700 TTL: 48 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 52700 TTL: 48 Packet length: 60 TOS: 0x00 This report (for 42.236.73.143) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇨🇳 WMK965	2026-09-20 19:10:07 (1 day ago)	42.236.73.143 - - [21/Sep/2026:03:10:05 +0800] "POST /xmlrpc/2/common HTTP/1.1" 400 252 "-" "Mozilla ... show more 42.236.73.143 - - [21/Sep/2026:03:10:05 +0800] "POST /xmlrpc/2/common HTTP/1.1" 400 252 "-" "Mozilla/5.0" "-" 42.236.73.143 - - [21/Sep/2026:03:10:05 +0800] "POST /web/database/list HTTP/1.1" 400 252 "-" "Mozilla/5.0" "-" 42.236.73.143 - - [21/Sep/2026:03:10:05 +0800] "GET /web/login HTTP/1.1" 400 252 "-" "Mozilla/5.0" "-" show less	Port Scan Web App Attack
🇺🇸 MPL	2026-09-20 17:07:42 (1 day ago)	tcp/8069 (2 or more attempts)	Port Scan
🇭🇰 amyriad	2026-09-20 12:48:34 (1 day ago)	42.236.73.143 - - [20/Sep/2026:20:48:32 +0800] "GET / HTTP/1.0" 400 618 "-" "-" 42.236.73.143 - - [2 ... show more 42.236.73.143 - - [20/Sep/2026:20:48:32 +0800] "GET / HTTP/1.0" 400 618 "-" "-" 42.236.73.143 - - [20/Sep/2026:20:48:33 +0800] "GET / HTTP/1.0" 400 618 "-" "-" 42.236.73.143 - - [20/Sep/2026:20:48:33 +0800] "GET / HTTP/1.0" 400 618 "-" "-" ... show less	DDoS Attack Hacking Brute-Force
🇫🇷 Petre 21_ip	2026-09-20 03:37:04 (1 day ago)	2026-09-20T05:37:04.292889+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-09-20T05:37:04.292889+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=42.236.73.143 DST=155.133.26.57 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=14607 DF PROTO=TCP SPT=46964 DPT=3000 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-09-19 14:02:08 (2 days ago)	Blocked by firewall on hugin [8069/tcp] \| Rule: UFW \| SPT: 43194 \| TTL: 43 \| LEN: 60 \| TOS: 0x00 • R ... show more Blocked by firewall on hugin [8069/tcp] \| Rule: UFW \| SPT: 43194 \| TTL: 43 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇹 CoreTech srl	2026-09-18 23:55:26 (3 days ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact	Hacking
🇪🇪 Selckie	2026-09-18 04:58:01 (3 days ago)	fail2ban: NGINX unusual impact	Web App Attack
🇩🇪 acadeova	2026-09-18 03:36:19 (3 days ago)	Blocked by UFW on vps4 [80/tcp] Source port: 35182 TTL: 50 Packet length: 60 TOS: 0x00 This report ... show more Blocked by UFW on vps4 [80/tcp] Source port: 35182 TTL: 50 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 169.150.199.173

🇺🇸 159.89.52.116

🇩🇪 147.90.209.10

🇸🇬 2a09:bac1:6520:8::2e4:5c

🇭🇰 199.45.154.182

🇮🇪 194.46.238.56

🇨🇴 185.244.139.84

🇲🇳 180.149.125.226

🇧🇷 179.176.210.17

🇺🇸 172.172.30.160

🇯🇵 172.105.199.92

🇧🇷 138.97.24.114

🇧🇪 104.199.91.63

🇧🇪 94.104.96.53

🇺🇸 54.235.52.37

🇲🇾 47.250.133.175

🇳🇱 45.148.10.152

🇺🇸 45.131.194.174

🇨🇳 43.137.217.156

🇨🇳 36.129.15.111