216.118.251.170

Basic Info

City: unknown

Region: unknown

Country: Hong Kong

Internet Service Provider: CSL Limited

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
216.118.251.2	attackspambots	Dovecot Invalid User Login Attempt.	2020-09-17 00:50:12
216.118.251.2	attack	(pop3d) Failed POP3 login from 216.118.251.2 (HK/Hong Kong/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Sep 16 10:39:12 ir1 dovecot[3110802]: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=216.118.251.2, lip=5.63.12.44, session=	2020-09-16 17:04:23
216.118.251.2	attackspambots	Email login attempts - bad mail account name (POP3)	2020-08-25 13:38:59
216.118.251.2	attackspambots	(pop3d) Failed POP3 login from 216.118.251.2 (HK/Hong Kong/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Aug 23 16:52:21 ir1 dovecot[3110802]: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=216.118.251.2, lip=5.63.12.44, session=	2020-08-23 23:27:51
216.118.251.2	attackbotsspam	(pop3d) Failed POP3 login from 216.118.251.2 (HK/Hong Kong/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Aug 4 16:24:39 ir1 dovecot[3110802]: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=216.118.251.2, lip=5.63.12.44, session=	2020-08-04 20:25:44

Whois info:

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       216.118.224.0 - 216.118.255.255
CIDR:           216.118.224.0/19
NetName:        APNIC
NetHandle:      NET-216-118-224-0-1
Parent:         NET216 (NET-216-0-0-0-0)
NetType:        Early Registrations, Transferred to APNIC
OriginAS:       
Organization:   Asia Pacific Network Information Centre (APNIC)
RegDate:        2018-01-22
Updated:        2018-01-22
Ref:            https://rdap.arin.net/registry/ip/216.118.224.0

ResourceLink:  https://apps.db.ripe.net/db-web-ui/query
ResourceLink:  whois://whois.apnic.net


OrgName:        Asia Pacific Network Information Centre
OrgId:          APNIC
Address:        PO Box 3646
City:           South Brisbane
StateProv:      QLD
PostalCode:     4101
Country:        AU
RegDate:        
Updated:        2012-01-24
Ref:            https://rdap.arin.net/registry/entity/APNIC

ReferralServer:  whois://whois.apnic.net
ResourceLink:  http://wq.apnic.net/whois-search/static/search.html

OrgTechHandle: AWC12-ARIN
OrgTechName:   APNIC Whois Contact
OrgTechPhone:  +61 7 3858 3188 
OrgTechEmail:  search-apnic-not-arin@apnic.net
OrgTechRef:    https://rdap.arin.net/registry/entity/AWC12-ARIN

OrgAbuseHandle: AWC12-ARIN
OrgAbuseName:   APNIC Whois Contact
OrgAbusePhone:  +61 7 3858 3188 
OrgAbuseEmail:  search-apnic-not-arin@apnic.net
OrgAbuseRef:    https://rdap.arin.net/registry/entity/AWC12-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#



Found a referral to whois.apnic.net.

% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '216.118.224.0 - 216.118.255.255'

% Abuse contact for '216.118.224.0 - 216.118.255.255' is 'abuse@netsec.com'

inetnum:        216.118.224.0 - 216.118.255.255
netname:        NETSEC-HK
descr:          Netsec Limited
country:        HK
org:            ORG-NASS1-AP
admin-c:        NN541-AP
tech-c:         NN541-AP
status:         ALLOCATED PORTABLE
abuse-c:        AH1002-AP
mnt-by:         APNIC-HM
mnt-lower:      MAINT-NETSEC-HK
mnt-routes:     MAINT-NETSEC-HK
mnt-irt:        IRT-HK-NETSEC
last-modified:  2025-03-14T06:45:24Z
source:         APNIC

irt:            IRT-HK-NETSEC
address:        RM 2607-08, 26/F, Billion Plaza, 8 Cheung Yue St, Cheung Sha Wan, Kowloon, Hong Kong
e-mail:         noc@netsec.com
abuse-mailbox:  abuse@netsec.com
admin-c:        NN411-AP
tech-c:         NN411-AP
auth:           # Filtered
remarks:        noc@netsec.com was validated on 2025-11-25
remarks:        abuse@netsec.com was validated on 2026-03-25
mnt-by:         MAINT-HK-NETSEC
last-modified:  2026-03-25T03:18:33Z
source:         APNIC

organisation:   ORG-NASS1-AP
org-name:       Netsec Limited
org-type:       LIR
country:        HK
address:        RM 2607-08, 26/F, Billion Plaza, 8 Cheung Yue St, Cheung Sha
phone:          +852-27511100
fax-no:         +852-27511199
e-mail:         noc@netsec.com
mnt-ref:        APNIC-HM
mnt-by:         APNIC-HM
last-modified:  2023-09-05T02:15:31Z
source:         APNIC

role:           ABUSE HKNETSEC
country:        ZZ
address:        RM 2607-08, 26/F, Billion Plaza, 8 Cheung Yue St, Cheung Sha Wan, Kowloon, Hong Kong
phone:          +000000000
e-mail:         noc@netsec.com
admin-c:        NN411-AP
tech-c:         NN411-AP
nic-hdl:        AH1002-AP
remarks:        Generated from irt object IRT-HK-NETSEC
remarks:        noc@netsec.com was validated on 2025-11-25
remarks:        abuse@netsec.com was validated on 2026-03-25
abuse-mailbox:  abuse@netsec.com
mnt-by:         APNIC-ABUSE
last-modified:  2026-03-25T03:18:46Z
source:         APNIC

role:           NETSEC NOC
address:        Suite 1007, 10/F, The Bay Hub, 17 Kai Cheung Rd, Kowloon Bay
country:        HK
phone:          +85227511100
e-mail:         noc@netsec.com
admin-c:        NN541-AP
tech-c:         NN541-AP
nic-hdl:        NN541-AP
mnt-by:         MAINT-NETSEC-HK
last-modified:  2025-03-14T05:55:40Z
source:         APNIC

% Information related to '216.118.251.0/24AS45753'

route:          216.118.251.0/24
origin:         AS45753
descr:          Netsec Limited
                RM 2607-08, 26/F, Billion Plaza, 8 Cheung Yue St, Cheung Sha
mnt-by:         MAINT-NETSEC-HK
last-modified:  2021-11-29T08:36:59Z
source:         APNIC

% Information related to '216.118.251.0/24AS9744'

route:          216.118.251.0/24
origin:         AS9744
descr:          Netsec Limited
                RM 2607-08, 26/F, Billion Plaza, 8 Cheung Yue St, Cheung Sha
mnt-by:         MAINT-NETSEC-HK
last-modified:  2021-11-29T07:58:36Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.36-SNAPSHOT (WHOIS-AU5)

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 216.118.251.170
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10616
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;216.118.251.170.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026040501 1800 900 604800 86400

;; Query time: 5 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Apr 06 03:30:08 CST 2026
;; MSG SIZE  rcvd: 108

Host info

Host 170.251.118.216.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 170.251.118.216.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
211.90.39.117	attackspam	Aug 15 15:48:13 PorscheCustomer sshd[28379]: Failed password for root from 211.90.39.117 port 43238 ssh2 Aug 15 15:51:16 PorscheCustomer sshd[28447]: Failed password for root from 211.90.39.117 port 59902 ssh2 ...	2020-08-16 00:11:10
162.243.42.225	attack	srv02 Mass scanning activity detected Target: 31056 ..	2020-08-15 23:54:53
186.138.55.245	attackbotsspam	Aug 15 08:34:15 lanister sshd[13437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.138.55.245 user=root Aug 15 08:34:17 lanister sshd[13437]: Failed password for root from 186.138.55.245 port 57536 ssh2 Aug 15 08:38:50 lanister sshd[13489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.138.55.245 user=root Aug 15 08:38:53 lanister sshd[13489]: Failed password for root from 186.138.55.245 port 57016 ssh2	2020-08-15 23:43:29
103.254.172.204	attackbotsspam	20/8/15@08:20:33: FAIL: Alarm-Intrusion address from=103.254.172.204 ...	2020-08-16 00:18:04
222.186.180.142	attack	Aug 15 12:03:14 ny01 sshd[670]: Failed password for root from 222.186.180.142 port 48150 ssh2 Aug 15 12:03:32 ny01 sshd[712]: Failed password for root from 222.186.180.142 port 62460 ssh2	2020-08-16 00:09:38
213.32.91.71	attackbots	Automatic report generated by Wazuh	2020-08-15 23:55:51
43.229.11.80	attackbots	SSH invalid-user multiple login try	2020-08-16 00:11:59
89.23.11.106	attackspam	Email rejected due to spam filtering	2020-08-16 00:15:49
218.92.0.216	attack	Aug 15 11:54:55 ny01 sshd[31468]: Failed password for root from 218.92.0.216 port 19423 ssh2 Aug 15 11:54:58 ny01 sshd[31468]: Failed password for root from 218.92.0.216 port 19423 ssh2 Aug 15 11:55:00 ny01 sshd[31468]: Failed password for root from 218.92.0.216 port 19423 ssh2	2020-08-15 23:56:20
58.33.49.196	attackspambots	Aug 15 14:42:54 localhost sshd\[8315\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.33.49.196 user=root Aug 15 14:42:56 localhost sshd\[8315\]: Failed password for root from 58.33.49.196 port 51052 ssh2 Aug 15 14:51:44 localhost sshd\[8463\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.33.49.196 user=root ...	2020-08-16 00:10:33
142.93.34.169	attackspam	142.93.34.169 - - [15/Aug/2020:17:16:14 +0200] "POST /xmlrpc.php HTTP/1.1" 403 9492 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.34.169 - - [15/Aug/2020:17:27:12 +0200] "POST /xmlrpc.php HTTP/1.1" 403 613 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-15 23:58:52
104.236.244.98	attackspambots	Aug 15 14:55:31 home sshd[3975886]: Invalid user 960c3dac4fa81b4204779fd16ad7c954f95942876b9c4fb1a255667a9dbe389d from 104.236.244.98 port 44240 Aug 15 14:55:31 home sshd[3975886]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.244.98 Aug 15 14:55:31 home sshd[3975886]: Invalid user 960c3dac4fa81b4204779fd16ad7c954f95942876b9c4fb1a255667a9dbe389d from 104.236.244.98 port 44240 Aug 15 14:55:33 home sshd[3975886]: Failed password for invalid user 960c3dac4fa81b4204779fd16ad7c954f95942876b9c4fb1a255667a9dbe389d from 104.236.244.98 port 44240 ssh2 Aug 15 14:59:26 home sshd[3977177]: Invalid user sagaadministrator1@123 from 104.236.244.98 port 54258 ...	2020-08-16 00:07:47
111.229.120.173	attack	Aug 15 18:14:31 santamaria sshd\[25159\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.120.173 user=root Aug 15 18:14:34 santamaria sshd\[25159\]: Failed password for root from 111.229.120.173 port 40206 ssh2 Aug 15 18:18:13 santamaria sshd\[25235\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.120.173 user=root ...	2020-08-16 00:20:49
222.186.42.137	attack	2020-08-15T19:17:59.957704lavrinenko.info sshd[22556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.137 user=root 2020-08-15T19:18:01.722794lavrinenko.info sshd[22556]: Failed password for root from 222.186.42.137 port 42086 ssh2 2020-08-15T19:17:59.957704lavrinenko.info sshd[22556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.137 user=root 2020-08-15T19:18:01.722794lavrinenko.info sshd[22556]: Failed password for root from 222.186.42.137 port 42086 ssh2 2020-08-15T19:18:03.715414lavrinenko.info sshd[22556]: Failed password for root from 222.186.42.137 port 42086 ssh2 ...	2020-08-16 00:21:13
177.1.214.84	attackspam	frenzy	2020-08-16 00:06:14

Recently Reported IPs

235.109.20.87	164.92.103.98	124.165.80.232	69.3.141.153
192.6.246.43	134.59.154.3	2606:4700:10::6814:7577	2606:4700:10::6814:8984
2606:4700:10::6814:8753	2606:4700:10::6816:2281	2606:4700:10::6814:8707	2606:4700:10::ac43:2788
4.5.179.181	87.251.64.73	3.80.27.62	34.238.240.3
211.49.227.234	2606:4700:10::6814:4922	2606:4700:10::6816:1505	2606:4700:10::6816:1184