115.63.104.168

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '115.48.0.0 - 115.63.255.255'

% Abuse contact for '115.48.0.0 - 115.63.255.255' is 'hqs-ipabuse@chinaunicom.cn'

inetnum:        115.48.0.0 - 115.63.255.255
netname:        UNICOM-HA
descr:          China Unicom Henan province network
descr:          China Unicom
country:        CN
admin-c:        CH1302-AP
tech-c:         WW444-AP
abuse-c:        AC1718-AP
status:         ALLOCATED PORTABLE
remarks:        service provider
remarks:        --------------------------------------------------------
remarks:        To report network abuse, please contact mnt-irt
remarks:        For troubleshooting, please contact tech-c and admin-c
remarks:        Report invalid contact via www.apnic.net/invalidcontact
remarks:        --------------------------------------------------------
mnt-by:         APNIC-HM
mnt-lower:      MAINT-CNCGROUP-HA
mnt-routes:     MAINT-CNCGROUP-RR
mnt-irt:        IRT-CU-CN
last-modified:  2025-01-22T13:15:04Z
source:         APNIC

irt:            IRT-CU-CN
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
e-mail:         hqs-ipabuse@chinaunicom.cn
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
auth:           # Filtered
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
mnt-by:         MAINT-CNCGROUP
last-modified:  2026-08-19T00:57:22Z
source:         APNIC

role:           ABUSE CUCN
country:        ZZ
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
phone:          +000000000
e-mail:         hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
nic-hdl:        AC1718-AP
remarks:        Generated from irt object IRT-CU-CN
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
mnt-by:         APNIC-ABUSE
last-modified:  2026-08-20T03:22:23Z
source:         APNIC

person:         ChinaUnicom Hostmaster
nic-hdl:        CH1302-AP
e-mail:         hqs-ipabuse@chinaunicom.cn
address:        No.21,Jin-Rong Street
address:        Beijing,100033
address:        P.R.China
phone:          +86-10-66259764
fax-no:         +86-10-66259764
country:        CN
mnt-by:         MAINT-CNCGROUP
last-modified:  2017-08-17T06:13:16Z
source:         APNIC

person:         Wei Wang
nic-hdl:        WW444-AP
e-mail:         abuse@public.zz.ha.cn
address:        #55 San Quan Road, Zhengzhou, Henan Provice
phone:          +86-371-65952358
fax-no:         +86-371-65968952
country:        CN
mnt-by:         MAINT-CNCGROUP-HA
last-modified:  2010-03-05T08:20:01Z
source:         APNIC

% Information related to '115.48.0.0/12AS4837'

route:          115.48.0.0/12
descr:          CNC Group CHINA169 Henan Province Network
country:        CN
origin:         AS4837
mnt-by:         MAINT-CNCGROUP-RR
last-modified:  2008-09-04T07:55:26Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU4)

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 115.63.104.168
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54307
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;115.63.104.168.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026102602 1800 900 604800 86400

;; Query time: 5 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Oct 27 07:31:52 CST 2026
;; MSG SIZE  rcvd: 107

Host info

168.104.63.115.in-addr.arpa domain name pointer hn.kd.ny.adsl.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
168.104.63.115.in-addr.arpa	name = hn.kd.ny.adsl.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
117.35.118.42	attack	Dec 4 14:49:37 gw1 sshd[28563]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.35.118.42 Dec 4 14:49:40 gw1 sshd[28563]: Failed password for invalid user guest from 117.35.118.42 port 34256 ssh2 ...	2019-12-04 17:55:51
144.91.83.19	attackspambots	Host Scan	2019-12-04 17:51:03
84.197.67.165	attackbotsspam	Lines containing failures of 84.197.67.165 Dec 4 04:05:47 shared01 sshd[20714]: Invalid user user from 84.197.67.165 port 51595 Dec 4 04:05:47 shared01 sshd[20714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.197.67.165 Dec 4 04:05:49 shared01 sshd[20714]: Failed password for invalid user user from 84.197.67.165 port 51595 ssh2 Dec 4 04:05:49 shared01 sshd[20714]: Connection closed by invalid user user 84.197.67.165 port 51595 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=84.197.67.165	2019-12-04 17:17:53
159.65.151.216	attack	20 attempts against mh-ssh on cloud.magehost.pro	2019-12-04 17:21:33
136.243.199.131	spamattack	Fkng new analytics app.hand up.fuk	2019-12-04 17:49:57
194.33.77.191	attackspam	DATE:2019-12-04 07:27:58, IP:194.33.77.191, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)	2019-12-04 17:21:21
51.75.31.33	attack	Dec 4 07:25:53 web8 sshd\[31191\]: Invalid user test from 51.75.31.33 Dec 4 07:25:53 web8 sshd\[31191\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.31.33 Dec 4 07:25:55 web8 sshd\[31191\]: Failed password for invalid user test from 51.75.31.33 port 52164 ssh2 Dec 4 07:33:25 web8 sshd\[2876\]: Invalid user connery from 51.75.31.33 Dec 4 07:33:25 web8 sshd\[2876\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.31.33	2019-12-04 17:41:07
87.236.22.71	attack	WordPress login Brute force / Web App Attack on client site.	2019-12-04 17:36:24
49.51.162.170	attackspam	Dec 4 10:41:38 sd-53420 sshd\[1919\]: Invalid user rimas from 49.51.162.170 Dec 4 10:41:38 sd-53420 sshd\[1919\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.51.162.170 Dec 4 10:41:40 sd-53420 sshd\[1919\]: Failed password for invalid user rimas from 49.51.162.170 port 51522 ssh2 Dec 4 10:47:05 sd-53420 sshd\[2881\]: Invalid user norima from 49.51.162.170 Dec 4 10:47:05 sd-53420 sshd\[2881\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.51.162.170 ...	2019-12-04 17:51:45
212.30.52.243	attack	2019-12-04T10:18:28.593607scmdmz1 sshd\[24313\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.30.52.243 user=root 2019-12-04T10:18:30.942304scmdmz1 sshd\[24313\]: Failed password for root from 212.30.52.243 port 59330 ssh2 2019-12-04T10:25:23.814121scmdmz1 sshd\[25019\]: Invalid user 2wsx from 212.30.52.243 port 37110 ...	2019-12-04 17:37:43
31.211.65.102	attackbots	Dec 4 14:35:33 areeb-Workstation sshd[22043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.211.65.102 Dec 4 14:35:35 areeb-Workstation sshd[22043]: Failed password for invalid user kalijah from 31.211.65.102 port 33403 ssh2 ...	2019-12-04 17:26:07
154.95.20.6	attackbots	2019-12-04T09:10:04.547028shield sshd\[6272\]: Invalid user 123456 from 154.95.20.6 port 57574 2019-12-04T09:10:04.552788shield sshd\[6272\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.95.20.6 2019-12-04T09:10:06.376777shield sshd\[6272\]: Failed password for invalid user 123456 from 154.95.20.6 port 57574 ssh2 2019-12-04T09:16:20.503169shield sshd\[7975\]: Invalid user lorain from 154.95.20.6 port 40640 2019-12-04T09:16:20.507294shield sshd\[7975\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.95.20.6	2019-12-04 17:26:54
106.12.120.155	attackbotsspam	Dec 4 07:20:10 vs01 sshd[29799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.120.155 Dec 4 07:20:12 vs01 sshd[29799]: Failed password for invalid user wulfsberg from 106.12.120.155 port 58124 ssh2 Dec 4 07:27:59 vs01 sshd[2964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.120.155	2019-12-04 17:20:44
119.163.196.146	attackspam	Dec 4 03:00:01 ny01 sshd[30043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.163.196.146 Dec 4 03:00:03 ny01 sshd[30043]: Failed password for invalid user f102 from 119.163.196.146 port 17517 ssh2 Dec 4 03:05:37 ny01 sshd[30644]: Failed password for root from 119.163.196.146 port 5197 ssh2	2019-12-04 17:27:20
69.94.156.7	attackspam	Dec 4 07:27:46 smtp postfix/smtpd[82385]: NOQUEUE: reject: RCPT from juvenile.nabhaa.com[69.94.156.7]: 554 5.7.1 Service unavailable; Client host [69.94.156.7] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo= ...	2019-12-04 17:32:05

Recently Reported IPs

121.43.119.2	4.150.194.35	176.65.132.239	18.97.9.99
220.194.144.141	2606:4700:20::681a:145	123.235.108.157	42.49.170.74
39.65.231.69	212.73.148.49	183.199.194.129	182.113.213.61
123.12.54.86	120.9.190.130	116.113.50.124	115.63.68.198
115.58.45.204	113.201.88.119	101.26.28.82	45.141.233.9