City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 45.116.108.0 - 45.116.167.255
CIDR: 45.116.112.0/20, 45.116.160.0/21, 45.116.128.0/19, 45.116.108.0/22
NetName: APNIC
NetHandle: NET-45-116-108-0-1
Parent: NET45 (NET-45-0-0-0-0)
NetType: Early Registrations, Transferred to APNIC
OriginAS:
Organization: Asia Pacific Network Information Centre (APNIC)
RegDate: 2014-09-05
Updated: 2024-09-12
Comment: "This IP address range is not registered in the ARIN database.
Comment: This range was transferred to the APNIC Whois Database as
Comment: part of the ERX (Early Registration Transfer) project.
Comment: For details, refer to the APNIC Whois Database via
Comment: WHOIS.APNIC.NET or http://wq.apnic.net/apnic-bin/whois.pl
Comment:
Comment: ** IMPORTANT NOTE: APNIC is the Regional Internet Registry
Comment: for the Asia Pacific region. APNIC does not operate networks
Comment: using this IP address range and is not able to investigate
Comment: spam or abuse reports relating to these addresses. For more
Comment: help, refer to http://www.apnic.net/apnic-info/whois_search2/abuse-and-spamming"
Ref: https://rdap.arin.net/registry/ip/45.116.108.0
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
ResourceLink: whois://whois.apnic.net
OrgName: Asia Pacific Network Information Centre
OrgId: APNIC
Address: PO Box 3646
City: South Brisbane
StateProv: QLD
PostalCode: 4101
Country: AU
RegDate:
Updated: 2012-01-24
Ref: https://rdap.arin.net/registry/entity/APNIC
ReferralServer: whois://whois.apnic.net
ResourceLink: http://wq.apnic.net/whois-search/static/search.html
OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3188
OrgTechEmail: search-apnic-not-arin@apnic.net
OrgTechRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
OrgAbuseHandle: AWC12-ARIN
OrgAbuseName: APNIC Whois Contact
OrgAbusePhone: +61 7 3858 3188
OrgAbuseEmail: search-apnic-not-arin@apnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to whois.apnic.net.
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '45.116.152.0 - 45.116.155.255'
% Abuse contact for '45.116.152.0 - 45.116.155.255' is 'kandyx5@163.com'
inetnum: 45.116.152.0 - 45.116.155.255
netname: IMBTVN
descr: INNER MONGOLIA BROADCAST&TV NETWORK GROUP CORPORATION
country: CN
admin-c: YP625-AP
tech-c: KH706-AP
abuse-c: AC1601-AP
status: ALLOCATED PORTABLE
mnt-by: MAINT-CNNIC-AP
mnt-irt: IRT-IMBTVN-CN
mnt-lower: MAINT-CNNIC-AP
mnt-routes: MAINT-CNNIC-AP
last-modified: 2023-11-28T00:58:07Z
source: APNIC
irt: IRT-IMBTVN-CN
address: No.88,XingAn North Road,Xincheng District,Huhhot,China.
e-mail: kandyx5@163.com
abuse-mailbox: kandyx5@163.com
admin-c: YP625-AP
tech-c: YP625-AP
auth: # Filtered
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-11-18T00:35:03Z
source: APNIC
role: ABUSE CNNICCN
country: ZZ
address: Beijing, China
phone: +000000000
e-mail: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
nic-hdl: AC1601-AP
remarks: Generated from irt object IRT-CNNIC-CN
remarks: ipas@cnnic.cn is invalid
abuse-mailbox: ipas@cnnic.cn
mnt-by: APNIC-ABUSE
last-modified: 2025-09-19T17:20:32Z
source: APNIC
person: Kang Hongyu
address: No.88,XingAn North Road,Xincheng District,
address: Huhhot,China.
country: CN
phone: +86-0471-6607965
e-mail: kandyx5@163.com
nic-hdl: KH706-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2013-08-29T06:44:01Z
source: APNIC
person: Yang Peichuan
address: No.88,XingAn North Road,Xincheng District,
address: Huhhot,China.
country: CN
phone: +86-0471-6607965
e-mail: yangpeichuan@163.com
nic-hdl: YP625-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2013-08-29T06:44:01Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-US2); <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.116.153.191
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2723
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;45.116.153.191. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026082700 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Aug 28 00:30:04 CST 2026
;; MSG SIZE rcvd: 107Host 191.153.116.45.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 191.153.116.45.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 177.21.198.221 | attackspambots | failed_logins |
2019-08-07 02:48:51 |
| 94.176.64.125 | attack | (Aug 6) LEN=40 TTL=244 ID=57156 DF TCP DPT=23 WINDOW=14600 SYN (Aug 6) LEN=40 TTL=244 ID=50096 DF TCP DPT=23 WINDOW=14600 SYN (Aug 6) LEN=40 TTL=244 ID=49677 DF TCP DPT=23 WINDOW=14600 SYN (Aug 6) LEN=40 TTL=244 ID=5166 DF TCP DPT=23 WINDOW=14600 SYN (Aug 6) LEN=40 TTL=244 ID=28923 DF TCP DPT=23 WINDOW=14600 SYN (Aug 6) LEN=40 TTL=244 ID=16108 DF TCP DPT=23 WINDOW=14600 SYN (Aug 6) LEN=40 TTL=244 ID=39580 DF TCP DPT=23 WINDOW=14600 SYN (Aug 6) LEN=40 TTL=244 ID=25313 DF TCP DPT=23 WINDOW=14600 SYN (Aug 6) LEN=40 TTL=244 ID=41403 DF TCP DPT=23 WINDOW=14600 SYN (Aug 6) LEN=40 TTL=244 ID=9983 DF TCP DPT=23 WINDOW=14600 SYN (Aug 6) LEN=40 TTL=244 ID=20644 DF TCP DPT=23 WINDOW=14600 SYN (Aug 5) LEN=40 TTL=244 ID=25875 DF TCP DPT=23 WINDOW=14600 SYN (Aug 5) LEN=40 TTL=244 ID=32034 DF TCP DPT=23 WINDOW=14600 SYN (Aug 5) LEN=40 TTL=244 ID=15637 DF TCP DPT=23 WINDOW=14600 SYN (Aug 5) LEN=40 TTL=244 ID=347 DF TCP DPT=23 WINDOW=14600 SYN ... |
2019-08-07 03:19:20 |
| 218.92.0.174 | attack | Aug 6 19:47:22 Ubuntu-1404-trusty-64-minimal sshd\[7496\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.174 user=root Aug 6 19:47:24 Ubuntu-1404-trusty-64-minimal sshd\[7496\]: Failed password for root from 218.92.0.174 port 50386 ssh2 Aug 6 19:47:27 Ubuntu-1404-trusty-64-minimal sshd\[7496\]: Failed password for root from 218.92.0.174 port 50386 ssh2 Aug 6 19:47:30 Ubuntu-1404-trusty-64-minimal sshd\[7496\]: Failed password for root from 218.92.0.174 port 50386 ssh2 Aug 6 19:47:32 Ubuntu-1404-trusty-64-minimal sshd\[7496\]: Failed password for root from 218.92.0.174 port 50386 ssh2 |
2019-08-07 03:21:06 |
| 203.251.202.106 | attackspam | Aug 6 18:09:56 lcl-usvr-02 sshd[28033]: Invalid user test from 203.251.202.106 port 45146 Aug 6 18:09:56 lcl-usvr-02 sshd[28033]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.251.202.106 Aug 6 18:09:56 lcl-usvr-02 sshd[28033]: Invalid user test from 203.251.202.106 port 45146 Aug 6 18:09:58 lcl-usvr-02 sshd[28033]: Failed password for invalid user test from 203.251.202.106 port 45146 ssh2 Aug 6 18:14:58 lcl-usvr-02 sshd[29159]: Invalid user joshua from 203.251.202.106 port 38684 ... |
2019-08-07 02:58:07 |
| 189.211.85.194 | attack | Aug 6 16:16:12 srv-4 sshd\[23065\]: Invalid user ts3 from 189.211.85.194 Aug 6 16:16:12 srv-4 sshd\[23065\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.211.85.194 Aug 6 16:16:15 srv-4 sshd\[23065\]: Failed password for invalid user ts3 from 189.211.85.194 port 37642 ssh2 ... |
2019-08-07 02:46:40 |
| 154.92.17.211 | attack | Aug 6 17:29:14 sshgateway sshd\[29580\]: Invalid user melisenda from 154.92.17.211 Aug 6 17:29:14 sshgateway sshd\[29580\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.92.17.211 Aug 6 17:29:16 sshgateway sshd\[29580\]: Failed password for invalid user melisenda from 154.92.17.211 port 38532 ssh2 |
2019-08-07 02:49:49 |
| 1.255.242.238 | attackspambots | detected by Fail2Ban |
2019-08-07 02:56:21 |
| 119.147.152.111 | attack | 19/8/6@07:15:15: FAIL: Alarm-Intrusion address from=119.147.152.111 ... |
2019-08-07 02:51:01 |
| 62.150.131.191 | attackbotsspam | Automatic report - Port Scan Attack |
2019-08-07 02:53:30 |
| 103.207.36.97 | attackspam | Rude login attack (17 tries in 1d) |
2019-08-07 03:22:27 |
| 213.32.39.236 | attackspam | Aug 6 13:14:28 [munged] sshd[354]: Invalid user vicky from 213.32.39.236 port 33616 Aug 6 13:14:28 [munged] sshd[354]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.32.39.236 |
2019-08-07 03:13:02 |
| 82.221.105.7 | attackbotsspam | MultiHost/MultiPort Probe, Scan, Hack - |
2019-08-07 02:42:05 |
| 124.131.112.56 | attack | Aug 6 11:15:15 DDOS Attack: SRC=124.131.112.56 DST=[Masked] LEN=40 TOS=0x00 PREC=0x00 TTL=48 DF PROTO=TCP SPT=29285 DPT=80 WINDOW=0 RES=0x00 RST URGP=0 |
2019-08-07 02:50:40 |
| 66.7.148.40 | attackbotsspam | Rude login attack (16 tries in 1d) |
2019-08-07 03:20:34 |
| 206.189.229.112 | attackbotsspam | Invalid user pi from 206.189.229.112 port 33226 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.229.112 Failed password for invalid user pi from 206.189.229.112 port 33226 ssh2 Invalid user celery from 206.189.229.112 port 54114 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.229.112 |
2019-08-07 03:09:49 |