City: unknown
Region: unknown
Country: China
Internet Service Provider: China Unicom
Hostname: unknown
Organization: unknown
Usage Type: unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '115.48.0.0 - 115.63.255.255'
% Abuse contact for '115.48.0.0 - 115.63.255.255' is 'hqs-ipabuse@chinaunicom.cn'
inetnum: 115.48.0.0 - 115.63.255.255
netname: UNICOM-HA
descr: China Unicom Henan province network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: WW444-AP
abuse-c: AC1718-AP
status: ALLOCATED PORTABLE
remarks: service provider
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-HA
mnt-routes: MAINT-CNCGROUP-RR
mnt-irt: IRT-CU-CN
last-modified: 2025-01-22T13:15:04Z
source: APNIC
irt: IRT-CU-CN
address: No.21,Financial Street
address: Beijing,100033
address: P.R.China
e-mail: hqs-ipabuse@chinaunicom.cn
abuse-mailbox: hqs-ipabuse@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
auth: # Filtered
remarks: hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
mnt-by: MAINT-CNCGROUP
last-modified: 2026-08-19T00:57:22Z
source: APNIC
role: ABUSE CUCN
country: ZZ
address: No.21,Financial Street
address: Beijing,100033
address: P.R.China
phone: +000000000
e-mail: hqs-ipabuse@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
nic-hdl: AC1718-AP
remarks: Generated from irt object IRT-CU-CN
remarks: hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
abuse-mailbox: hqs-ipabuse@chinaunicom.cn
mnt-by: APNIC-ABUSE
last-modified: 2026-08-20T03:22:23Z
source: APNIC
person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: hqs-ipabuse@chinaunicom.cn
address: No.21,Jin-Rong Street
address: Beijing,100033
address: P.R.China
phone: +86-10-66259764
fax-no: +86-10-66259764
country: CN
mnt-by: MAINT-CNCGROUP
last-modified: 2017-08-17T06:13:16Z
source: APNIC
person: Wei Wang
nic-hdl: WW444-AP
e-mail: abuse@public.zz.ha.cn
address: #55 San Quan Road, Zhengzhou, Henan Provice
phone: +86-371-65952358
fax-no: +86-371-65968952
country: CN
mnt-by: MAINT-CNCGROUP-HA
last-modified: 2010-03-05T08:20:01Z
source: APNIC
% Information related to '115.48.0.0/12AS4837'
route: 115.48.0.0/12
descr: CNC Group CHINA169 Henan Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
last-modified: 2008-09-04T07:55:26Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU4); <<>> DiG 9.10.3-P4-Ubuntu <<>> 115.54.40.87
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4069
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;115.54.40.87. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026083102 1800 900 604800 86400
;; Query time: 26 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Sep 01 08:31:48 CST 2026
;; MSG SIZE rcvd: 10587.40.54.115.in-addr.arpa domain name pointer hn.kd.ny.adsl.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
87.40.54.115.in-addr.arpa name = hn.kd.ny.adsl.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 162.241.176.39 | attackspam | WordPress wp-login brute force :: 162.241.176.39 0.116 - [27/Dec/2019:22:56:04 0000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 1806 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "HTTP/1.1" |
2019-12-28 07:38:53 |
| 104.248.173.148 | attack | Dec 23 03:22:11 rama sshd[831153]: Invalid user contactus from 104.248.173.148 Dec 23 03:22:11 rama sshd[831153]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.173.148 Dec 23 03:22:14 rama sshd[831153]: Failed password for invalid user contactus from 104.248.173.148 port 46802 ssh2 Dec 23 03:22:14 rama sshd[831153]: Received disconnect from 104.248.173.148: 11: Bye Bye [preauth] Dec 23 03:31:13 rama sshd[833411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.173.148 user=r.r Dec 23 03:31:15 rama sshd[833411]: Failed password for r.r from 104.248.173.148 port 44880 ssh2 Dec 23 03:31:15 rama sshd[833411]: Received disconnect from 104.248.173.148: 11: Bye Bye [preauth] Dec 23 03:35:52 rama sshd[834594]: Invalid user huwei123 from 104.248.173.148 Dec 23 03:35:52 rama sshd[834594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.24........ ------------------------------- |
2019-12-28 07:59:18 |
| 222.186.42.4 | attackspambots | Dec 28 00:39:09 amit sshd\[31735\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.4 user=root Dec 28 00:39:12 amit sshd\[31735\]: Failed password for root from 222.186.42.4 port 4200 ssh2 Dec 28 00:39:29 amit sshd\[31737\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.4 user=root ... |
2019-12-28 07:45:54 |
| 213.232.126.117 | attack | firewall-block, port(s): 1433/tcp |
2019-12-28 07:34:11 |
| 222.186.175.181 | attackspam | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.181 user=root Failed password for root from 222.186.175.181 port 51750 ssh2 Failed password for root from 222.186.175.181 port 51750 ssh2 Failed password for root from 222.186.175.181 port 51750 ssh2 Failed password for root from 222.186.175.181 port 51750 ssh2 |
2019-12-28 07:35:37 |
| 104.197.32.38 | attackspambots | Exploid host for vulnerabilities on 27-12-2019 22:55:09. |
2019-12-28 08:10:49 |
| 139.178.68.119 | attackspam | Unauthorized connection attempt detected from IP address 139.178.68.119 to port 22 |
2019-12-28 08:06:42 |
| 212.237.4.147 | attackbots | firewall-block, port(s): 22/tcp |
2019-12-28 07:35:57 |
| 223.149.245.175 | attack | Honeypot hit. |
2019-12-28 07:39:06 |
| 165.227.39.250 | attackbots | Exploid host for vulnerabilities on 27-12-2019 22:55:12. |
2019-12-28 08:08:30 |
| 138.197.173.88 | attack | Exploid host for vulnerabilities on 27-12-2019 22:55:11. |
2019-12-28 08:10:06 |
| 51.15.194.184 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2019-12-28 07:52:06 |
| 51.38.39.222 | attackspambots | WordPress wp-login brute force :: 51.38.39.222 0.064 BYPASS [27/Dec/2019:22:55:57 0000] [censored_4] "POST /wp-login.php HTTP/1.1" 200 2100 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-12-28 07:43:33 |
| 222.186.175.167 | attackspambots | 2019-12-28T00:42:44.050960ns386461 sshd\[11100\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.167 user=root 2019-12-28T00:42:45.273822ns386461 sshd\[11100\]: Failed password for root from 222.186.175.167 port 4032 ssh2 2019-12-28T00:42:48.658532ns386461 sshd\[11100\]: Failed password for root from 222.186.175.167 port 4032 ssh2 2019-12-28T00:42:51.456194ns386461 sshd\[11100\]: Failed password for root from 222.186.175.167 port 4032 ssh2 2019-12-28T00:42:54.666354ns386461 sshd\[11100\]: Failed password for root from 222.186.175.167 port 4032 ssh2 ... |
2019-12-28 07:49:33 |
| 222.186.175.154 | attackspam | Dec 28 00:26:58 minden010 sshd[21057]: Failed password for root from 222.186.175.154 port 31248 ssh2 Dec 28 00:27:07 minden010 sshd[21057]: Failed password for root from 222.186.175.154 port 31248 ssh2 Dec 28 00:27:10 minden010 sshd[21057]: Failed password for root from 222.186.175.154 port 31248 ssh2 Dec 28 00:27:10 minden010 sshd[21057]: error: maximum authentication attempts exceeded for root from 222.186.175.154 port 31248 ssh2 [preauth] ... |
2019-12-28 07:36:52 |