City: Zhengzhou
Region: Henan
Country: China
Internet Service Provider: China Unicom
Hostname: unknown
Organization: unknown
Usage Type: unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '115.48.0.0 - 115.63.255.255'
% Abuse contact for '115.48.0.0 - 115.63.255.255' is 'hqs-ipabuse@chinaunicom.cn'
inetnum: 115.48.0.0 - 115.63.255.255
netname: UNICOM-HA
descr: China Unicom Henan province network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: WW444-AP
abuse-c: AC1718-AP
status: ALLOCATED PORTABLE
remarks: service provider
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-HA
mnt-routes: MAINT-CNCGROUP-RR
mnt-irt: IRT-CU-CN
last-modified: 2025-01-22T13:15:04Z
source: APNIC
irt: IRT-CU-CN
address: No.21,Financial Street
address: Beijing,100033
address: P.R.China
e-mail: hqs-ipabuse@chinaunicom.cn
abuse-mailbox: hqs-ipabuse@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
auth: # Filtered
remarks: hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
mnt-by: MAINT-CNCGROUP
last-modified: 2026-08-19T00:57:22Z
source: APNIC
role: ABUSE CUCN
country: ZZ
address: No.21,Financial Street
address: Beijing,100033
address: P.R.China
phone: +000000000
e-mail: hqs-ipabuse@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
nic-hdl: AC1718-AP
remarks: Generated from irt object IRT-CU-CN
remarks: hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
abuse-mailbox: hqs-ipabuse@chinaunicom.cn
mnt-by: APNIC-ABUSE
last-modified: 2026-08-20T03:22:23Z
source: APNIC
person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: hqs-ipabuse@chinaunicom.cn
address: No.21,Jin-Rong Street
address: Beijing,100033
address: P.R.China
phone: +86-10-66259764
fax-no: +86-10-66259764
country: CN
mnt-by: MAINT-CNCGROUP
last-modified: 2017-08-17T06:13:16Z
source: APNIC
person: Wei Wang
nic-hdl: WW444-AP
e-mail: abuse@public.zz.ha.cn
address: #55 San Quan Road, Zhengzhou, Henan Provice
phone: +86-371-65952358
fax-no: +86-371-65968952
country: CN
mnt-by: MAINT-CNCGROUP-HA
last-modified: 2010-03-05T08:20:01Z
source: APNIC
% Information related to '115.48.0.0/12AS4837'
route: 115.48.0.0/12
descr: CNC Group CHINA169 Henan Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
last-modified: 2008-09-04T07:55:26Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5)
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 115.60.120.144
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62250
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;115.60.120.144. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026102804 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 29 13:32:35 CST 2026
;; MSG SIZE rcvd: 107
144.120.60.115.in-addr.arpa domain name pointer hn.kd.ny.adsl.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
144.120.60.115.in-addr.arpa name = hn.kd.ny.adsl.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.186.175.23 | attackspam | Jun 4 08:13:22 vps sshd[696984]: Failed password for root from 222.186.175.23 port 59504 ssh2 Jun 4 08:13:24 vps sshd[696984]: Failed password for root from 222.186.175.23 port 59504 ssh2 Jun 4 08:13:27 vps sshd[697556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.23 user=root Jun 4 08:13:29 vps sshd[697556]: Failed password for root from 222.186.175.23 port 48312 ssh2 Jun 4 08:13:31 vps sshd[697556]: Failed password for root from 222.186.175.23 port 48312 ssh2 ... |
2020-06-04 14:18:48 |
| 190.210.231.34 | attack | Jun 4 06:09:36 vps647732 sshd[25815]: Failed password for root from 190.210.231.34 port 58846 ssh2 ... |
2020-06-04 13:58:29 |
| 46.101.19.133 | attackbotsspam | Jun 4 05:52:35 sip sshd[532773]: Failed password for root from 46.101.19.133 port 52434 ssh2 Jun 4 05:56:10 sip sshd[532842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.19.133 user=root Jun 4 05:56:12 sip sshd[532842]: Failed password for root from 46.101.19.133 port 53808 ssh2 ... |
2020-06-04 14:04:28 |
| 189.41.210.64 | attack | Unauthorised access (Jun 4) SRC=189.41.210.64 LEN=44 TTL=49 ID=45575 TCP DPT=23 WINDOW=957 SYN |
2020-06-04 13:42:05 |
| 139.155.24.139 | attackspam | $f2bV_matches |
2020-06-04 13:55:23 |
| 185.121.69.40 | attack | REQUESTED PAGE: /administrator/ |
2020-06-04 13:56:34 |
| 64.225.117.133 | attackbots | MultiHost/MultiPort Probe, Scan, Hack - |
2020-06-04 13:51:55 |
| 128.199.138.31 | attack | SSH Honeypot -> SSH Bruteforce / Login |
2020-06-04 13:39:07 |
| 64.227.11.167 | attack | Automatic report - XMLRPC Attack |
2020-06-04 14:08:50 |
| 192.99.244.225 | attackbots | detected by Fail2Ban |
2020-06-04 14:12:12 |
| 200.105.183.118 | attack | $f2bV_matches |
2020-06-04 14:10:30 |
| 80.13.20.114 | attackspam | php WP PHPmyadamin ABUSE blocked for 12h |
2020-06-04 14:11:44 |
| 119.28.32.60 | attackbots | Jun 4 04:09:39 marvibiene sshd[30978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.32.60 user=root Jun 4 04:09:40 marvibiene sshd[30978]: Failed password for root from 119.28.32.60 port 35292 ssh2 Jun 4 04:17:33 marvibiene sshd[31081]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.32.60 user=root Jun 4 04:17:35 marvibiene sshd[31081]: Failed password for root from 119.28.32.60 port 43892 ssh2 ... |
2020-06-04 14:00:00 |
| 188.163.109.153 | attackspam | tried to spam in our blog comments: A new company in which over half a year more than 5 million people have registered Profit comes from the shares of the world's largest gaming + 18 and +6 channels. Passive and active income. Epic Promotion ends in Days 3. Gift 500 euro. Sign up Free! |
2020-06-04 13:45:50 |
| 106.75.141.73 | attack | 2020-06-04T05:46:24.767055vps751288.ovh.net sshd\[7331\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.73 user=root 2020-06-04T05:46:26.612746vps751288.ovh.net sshd\[7331\]: Failed password for root from 106.75.141.73 port 40664 ssh2 2020-06-04T05:51:14.707196vps751288.ovh.net sshd\[7375\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.73 user=root 2020-06-04T05:51:16.366812vps751288.ovh.net sshd\[7375\]: Failed password for root from 106.75.141.73 port 34780 ssh2 2020-06-04T05:56:00.447125vps751288.ovh.net sshd\[7427\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.73 user=root |
2020-06-04 14:11:18 |