63.135.161.121
Classification: Malicious
63.135.161.121 is a malicious IP address. Reported by 6 threat sources, last seen 2026-09-09. IoC context and downloadable threat intel on Maltiverse.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Known scanner — Seen scanning hosts over the Internet.
- VPN node — Provides anonymization that can hide an attacker.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| VPN | IPWhois.io | 2025-02-20 05:02:46 | 2026-09-09 10:27:01 | anonymization vpn | |
| HTTP Attacker | AbuseIPDB | 2026-06-17 07:45:11 | 2026-09-06 17:48:12 | attacker malicious-activity | |
| DDoS Attacker | Blocklist.net.ua | 2026-04-25 12:23:53 | 2026-09-05 16:23:34 | attacker malicious-activity | |
| SSH Attacker | AbuseIPDB | 2026-06-18 14:15:08 | 2026-09-05 01:48:43 | attacker malicious-activity | |
| Bruteforce | AbuseIPDB | 2026-06-17 07:45:11 | 2026-09-05 01:48:43 | attacker malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2026-06-17 21:15:13 | 2026-09-04 23:08:00 | anomalous-activity attacker malicious-activity | |
| Hacking | AbuseIPDB | 2026-06-17 19:00:03 | 2026-09-04 23:08:00 | attacker malicious-activity | |
| Malicious Host | AbuseIPDB | 2026-06-23 19:50:02 | 2026-09-04 22:08:01 | attacker compromised malicious-activity | |
| Empty reason | Blocklist.net.ua | 2026-09-04 16:25:36 | 2026-09-04 16:25:36 | attacker malicious-activity | |
| Port Scanner | AbuseIPDB | 2026-07-10 18:06:23 | 2026-09-03 14:21:56 | anomalous-activity attacker malicious-activity reconnaissance | |
| DDoS Attacker | AbuseIPDB | 2026-07-18 00:21:31 | 2026-09-02 18:30:50 | attacker malicious-activity | |
| Suspicious Host | AbuseIPDB | 2024-11-07 11:01:48 | 2026-05-12 13:19:53 | anomalous-activity | |
| HTTP Spammer | StopForumSpam.com | 2023-03-12 15:26:19 | 2025-05-21 10:20:55 | malicious-activity | |
| HTTP Spammer | Botscout | 2025-03-23 21:34:41 | 2025-03-23 21:34:41 | malicious-activity | |
| Mail Spammer | Abuseat.org | 2023-03-12 15:26:20 | 2023-03-12 15:26:20 |
Tags
bot abuseWhois information
- AS name
- AS206092 AS206092 Internet Utilities Europe and Asia Limited
- AS registry
- arin
- AS date
- 2020-12-18 00:00:00
- AS CIDR
- 63.135.161.0/24
- CIDR
- 63.135.160.0/22
- Registrant
- AS206092 Internet Utilities Europe and Asia Limited
- Address
- 184 East Snowy Egret Dr.
- City
- New York City
- State
- NY
- Postal code
- 10203
- Country
- US — United States 🇺🇸
- Contact email
- [email protected]
- First indexed
- 2023-03-12 15:26:19
- Last updated
- 2026-09-09 10:27:02
Malicious IPs in the same CIDR
63.135.161.69 63.135.161.41 63.135.161.121 63.135.161.115 63.135.161.55 63.135.161.72 63.135.161.71 63.135.161.155 63.135.161.17 63.135.161.109 63.135.161.100 63.135.161.108 63.135.161.99 63.135.161.53 63.135.161.62 63.135.161.12 63.135.161.164 63.135.161.122 63.135.161.57 63.135.161.135 63.135.161.168 63.135.161.171 63.135.161.120 63.135.161.149 63.135.161.8