City: unknown
Region: unknown
Country: China
Internet Service Provider: China Unicom
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 157.0.0.0 - 157.0.255.255
CIDR: 157.0.0.0/16
NetName: APNIC-ERX-157-0-0-0
NetHandle: NET-157-0-0-0-1
Parent: NET157 (NET-157-0-0-0-0)
NetType: Early Registrations, Transferred to APNIC
OriginAS:
Organization: Asia Pacific Network Information Centre (APNIC)
RegDate: 2010-11-03
Updated: 2010-11-03
Comment: This IP address range is not registered in the ARIN database.
Comment: This range was transferred to the APNIC Whois Database as
Comment: part of the ERX (Early Registration Transfer) project.
Comment: For details, refer to the APNIC Whois Database via
Comment: WHOIS.APNIC.NET or http://wq.apnic.net/apnic-bin/whois.pl
Comment:
Comment: ** IMPORTANT NOTE: APNIC is the Regional Internet Registry
Comment: for the Asia Pacific region. APNIC does not operate networks
Comment: using this IP address range and is not able to investigate
Comment: spam or abuse reports relating to these addresses. For more
Comment: help, refer to http://www.apnic.net/apnic-info/whois_search2/abuse-and-spamming
Ref: https://rdap.arin.net/registry/ip/157.0.0.0
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
ResourceLink: whois.apnic.net
OrgName: Asia Pacific Network Information Centre
OrgId: APNIC
Address: PO Box 3646
City: South Brisbane
StateProv: QLD
PostalCode: 4101
Country: AU
RegDate:
Updated: 2012-01-24
Ref: https://rdap.arin.net/registry/entity/APNIC
ReferralServer: whois://whois.apnic.net
ResourceLink: http://wq.apnic.net/whois-search/static/search.html
OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3188
OrgTechEmail: search-apnic-not-arin@apnic.net
OrgTechRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
OrgAbuseHandle: AWC12-ARIN
OrgAbuseName: APNIC Whois Contact
OrgAbusePhone: +61 7 3858 3188
OrgAbuseEmail: search-apnic-not-arin@apnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to whois.apnic.net.
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '157.0.0.0 - 157.0.255.255'
% Abuse contact for '157.0.0.0 - 157.0.255.255' is 'hqs-ipabuse@chinaunicom.cn'
inetnum: 157.0.0.0 - 157.0.255.255
netname: UNICOM-JS
descr: China Unicom Jiangsu province network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: LL58-AP
abuse-c: AC1718-AP
status: ALLOCATED PORTABLE
remarks: service provider
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-JS
mnt-routes: MAINT-CNCGROUP-RR
mnt-irt: IRT-CU-CN
last-modified: 2025-01-22T13:10:01Z
source: APNIC
irt: IRT-CU-CN
address: No.21,Financial Street
address: Beijing,100033
address: P.R.China
e-mail: hqs-ipabuse@chinaunicom.cn
abuse-mailbox: hqs-ipabuse@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
auth: # Filtered
remarks: hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
mnt-by: MAINT-CNCGROUP
last-modified: 2026-08-19T00:57:22Z
source: APNIC
role: ABUSE CUCN
country: ZZ
address: No.21,Financial Street
address: Beijing,100033
address: P.R.China
phone: +000000000
e-mail: hqs-ipabuse@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
nic-hdl: AC1718-AP
remarks: Generated from irt object IRT-CU-CN
remarks: hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
abuse-mailbox: hqs-ipabuse@chinaunicom.cn
mnt-by: APNIC-ABUSE
last-modified: 2026-08-20T03:22:23Z
source: APNIC
person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: hqs-ipabuse@chinaunicom.cn
address: No.21,Jin-Rong Street
address: Beijing,100033
address: P.R.China
phone: +86-10-66259764
fax-no: +86-10-66259764
country: CN
mnt-by: MAINT-CNCGROUP
last-modified: 2017-08-17T06:13:16Z
source: APNIC
person: Lan Li
nic-hdl: LL58-AP
e-mail: js-cu-ipmanage@chinaunicom.cn
address: No. 65 Beijing West Road,Nanjing,China
phone: +86257900060
fax-no: +86252900280
country: CN
mnt-by: MAINT-NEW
last-modified: 2013-08-15T02:13:11Z
source: APNIC
% Information related to '157.0.0.0/16AS4837'
route: 157.0.0.0/16
descr: China Unicom Jiangsu Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
last-modified: 2011-04-22T06:46:02Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 157.0.158.243
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12789
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;157.0.158.243. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026100601 1800 900 604800 86400
;; Query time: 4 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Oct 07 03:00:40 CST 2026
;; MSG SIZE rcvd: 106b'Host 243.158.0.157.in-addr.arpa not found: 2(SERVFAIL)
';; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 243.158.0.157.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 122.51.37.26 | attackbotsspam | 2019-12-14T22:35:45.963282Z d75a43562bb0 New connection: 122.51.37.26:36296 (172.17.0.6:2222) [session: d75a43562bb0] 2019-12-14T22:51:52.537033Z fc3a09666dc1 New connection: 122.51.37.26:60390 (172.17.0.6:2222) [session: fc3a09666dc1] |
2019-12-15 07:28:59 |
| 164.132.47.139 | attackspam | Dec 14 23:57:58 meumeu sshd[14731]: Failed password for root from 164.132.47.139 port 42526 ssh2 Dec 15 00:02:52 meumeu sshd[15761]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.47.139 Dec 15 00:02:54 meumeu sshd[15761]: Failed password for invalid user aizlyn from 164.132.47.139 port 48052 ssh2 ... |
2019-12-15 07:18:19 |
| 80.66.146.84 | attackspambots | Dec 14 18:03:20 linuxvps sshd\[4594\]: Invalid user test2 from 80.66.146.84 Dec 14 18:03:20 linuxvps sshd\[4594\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.66.146.84 Dec 14 18:03:23 linuxvps sshd\[4594\]: Failed password for invalid user test2 from 80.66.146.84 port 43852 ssh2 Dec 14 18:09:02 linuxvps sshd\[8566\]: Invalid user ftpuser from 80.66.146.84 Dec 14 18:09:02 linuxvps sshd\[8566\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.66.146.84 |
2019-12-15 07:12:16 |
| 212.142.224.166 | attackbots | Dec 15 01:53:22 server sshd\[19144\]: Invalid user squid from 212.142.224.166 Dec 15 01:53:22 server sshd\[19144\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.212-142-224.static.clientes.euskaltel.es Dec 15 01:53:24 server sshd\[19144\]: Failed password for invalid user squid from 212.142.224.166 port 56478 ssh2 Dec 15 02:19:30 server sshd\[26884\]: Invalid user server from 212.142.224.166 Dec 15 02:19:30 server sshd\[26884\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.212-142-224.static.clientes.euskaltel.es ... |
2019-12-15 07:25:31 |
| 14.63.162.208 | attackspambots | Dec 15 02:14:21 server sshd\[25375\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.63.162.208 user=root Dec 15 02:14:24 server sshd\[25375\]: Failed password for root from 14.63.162.208 port 58200 ssh2 Dec 15 02:26:05 server sshd\[29171\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.63.162.208 user=root Dec 15 02:26:06 server sshd\[29171\]: Failed password for root from 14.63.162.208 port 39660 ssh2 Dec 15 02:32:13 server sshd\[30990\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.63.162.208 user=root ... |
2019-12-15 07:35:17 |
| 104.248.187.179 | attackspambots | Dec 14 22:46:23 game-panel sshd[17070]: Failed password for root from 104.248.187.179 port 60458 ssh2 Dec 14 22:51:55 game-panel sshd[17362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.187.179 Dec 14 22:51:57 game-panel sshd[17362]: Failed password for invalid user manrique from 104.248.187.179 port 40178 ssh2 |
2019-12-15 07:23:36 |
| 222.186.175.217 | attackbotsspam | Dec 15 00:04:49 * sshd[15026]: Failed password for root from 222.186.175.217 port 10400 ssh2 Dec 15 00:05:01 * sshd[15026]: error: maximum authentication attempts exceeded for root from 222.186.175.217 port 10400 ssh2 [preauth] |
2019-12-15 07:08:02 |
| 139.59.77.237 | attackspam | Dec 15 04:22:03 areeb-Workstation sshd[26347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.237 Dec 15 04:22:05 areeb-Workstation sshd[26347]: Failed password for invalid user ritenburgh from 139.59.77.237 port 55821 ssh2 ... |
2019-12-15 07:13:29 |
| 106.12.24.1 | attackspambots | Invalid user eka from 106.12.24.1 port 54524 |
2019-12-15 07:13:43 |
| 27.17.36.254 | attackbotsspam | Dec 15 00:02:14 mail sshd[14584]: Invalid user vincents from 27.17.36.254 Dec 15 00:02:14 mail sshd[14584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.17.36.254 Dec 15 00:02:14 mail sshd[14584]: Invalid user vincents from 27.17.36.254 Dec 15 00:02:17 mail sshd[14584]: Failed password for invalid user vincents from 27.17.36.254 port 62211 ssh2 ... |
2019-12-15 07:07:45 |
| 222.186.169.194 | attackbotsspam | Tried sshing with brute force. |
2019-12-15 07:11:39 |
| 78.220.108.171 | attackspambots | Dec 14 23:52:10 MK-Soft-VM6 sshd[26794]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.220.108.171 Dec 14 23:52:12 MK-Soft-VM6 sshd[26794]: Failed password for invalid user palengat from 78.220.108.171 port 40682 ssh2 ... |
2019-12-15 07:05:10 |
| 202.103.254.181 | attack | Dec 15 00:22:05 lnxmail61 sshd[23924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.103.254.181 Dec 15 00:22:05 lnxmail61 sshd[23924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.103.254.181 |
2019-12-15 07:26:47 |
| 114.40.154.218 | attackbotsspam | Honeypot attack, port: 23, PTR: 114-40-154-218.dynamic-ip.hinet.net. |
2019-12-15 07:10:58 |
| 132.232.4.33 | attack | Dec 14 13:21:09 web9 sshd\[15766\]: Invalid user hartfeldt from 132.232.4.33 Dec 14 13:21:09 web9 sshd\[15766\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.4.33 Dec 14 13:21:12 web9 sshd\[15766\]: Failed password for invalid user hartfeldt from 132.232.4.33 port 57002 ssh2 Dec 14 13:27:10 web9 sshd\[16622\]: Invalid user arge from 132.232.4.33 Dec 14 13:27:10 web9 sshd\[16622\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.4.33 |
2019-12-15 07:31:36 |