City: Chengdu
Region: Sichuan
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 45.40.192.0 - 45.40.255.255
CIDR: 45.40.192.0/18
NetName: APNIC
NetHandle: NET-45-40-192-0-1
Parent: NET45 (NET-45-0-0-0-0)
NetType: Early Registrations, Transferred to APNIC
OriginAS:
Organization: Asia Pacific Network Information Centre (APNIC)
RegDate: 2017-06-28
Updated: 2017-06-28
Ref: https://rdap.arin.net/registry/ip/45.40.192.0
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
ResourceLink: whois://whois.apnic.net
OrgName: Asia Pacific Network Information Centre
OrgId: APNIC
Address: PO Box 3646
City: South Brisbane
StateProv: QLD
PostalCode: 4101
Country: AU
RegDate:
Updated: 2012-01-24
Ref: https://rdap.arin.net/registry/entity/APNIC
ReferralServer: whois://whois.apnic.net
ResourceLink: http://wq.apnic.net/whois-search/static/search.html
OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3188
OrgTechEmail: search-apnic-not-arin@apnic.net
OrgTechRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
OrgAbuseHandle: AWC12-ARIN
OrgAbuseName: APNIC Whois Contact
OrgAbusePhone: +61 7 3858 3188
OrgAbuseEmail: search-apnic-not-arin@apnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to whois.apnic.net.
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '45.40.192.0 - 45.40.255.255'
% Abuse contact for '45.40.192.0 - 45.40.255.255' is 'abuse@tencent.com'
inetnum: 45.40.192.0 - 45.40.255.255
netname: TENCENT-CN
descr: Tencent Cloud Computing (Beijing) Co., Ltd
descr: Floor 6, Yinke Building, 38 Haidian St, Haidian District
country: CN
org: ORG-TCCC1-AP
admin-c: TCA15-AP
tech-c: TCA15-AP
abuse-c: AT992-AP
status: ALLOCATED PORTABLE
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
mnt-by: APNIC-HM
mnt-lower: MAINT-TENCENT-CN
mnt-routes: MAINT-TENCENT-CN
mnt-irt: IRT-TENCENT-CN
last-modified: 2020-07-22T13:10:58Z
source: APNIC
irt: IRT-TENCENT-CN
address: Floor 6, Yinke Building, 38 Haidian St, Haidian District, Beijing Beijing 100080
e-mail: tencent_noc@tencent.com
abuse-mailbox: abuse@tencent.com
admin-c: TCA15-AP
tech-c: TCA15-AP
auth: # Filtered
remarks: abuse@tencent.com was validated on 2026-05-15
remarks: tencent_noc@tencent.com was validated on 2026-06-05
mnt-by: MAINT-COMSENZ1-CN
last-modified: 2026-06-05T07:58:46Z
source: APNIC
organisation: ORG-TCCC1-AP
org-name: Tencent Cloud Computing (Beijing) Co., Ltd
org-type: LIR
country: CN
address: 309 West Zone, 3F. 49 Zhichun Road. Haidian District.
phone: +86-10-62671299
fax-no: +86-10-82602088-41299
e-mail: tencent_idc@tencent.com
mnt-ref: APNIC-HM
mnt-by: APNIC-HM
last-modified: 2023-09-05T02:16:21Z
source: APNIC
role: ABUSE TENCENTCN
country: ZZ
address: Floor 6, Yinke Building, 38 Haidian St, Haidian District, Beijing Beijing 100080
phone: +000000000
e-mail: tencent_noc@tencent.com
admin-c: TCA15-AP
tech-c: TCA15-AP
nic-hdl: AT992-AP
remarks: Generated from irt object IRT-TENCENT-CN
remarks: abuse@tencent.com was validated on 2026-05-15
remarks: tencent_noc@tencent.com was validated on 2026-06-05
abuse-mailbox: abuse@tencent.com
mnt-by: APNIC-ABUSE
last-modified: 2026-06-05T07:59:01Z
source: APNIC
role: Tencent Cloud administrator
address: Floor 6, Yinke Building, 38 Haidian St, Haidian District, Beijing Beijing 100080
country: CN
phone: +86-10-62671299
e-mail: tencent_idc@tencent.com
admin-c: TCA15-AP
tech-c: TCA15-AP
nic-hdl: TCA15-AP
mnt-by: MAINT-AP-DIALPAD
fax-no: +86-10-62671299
last-modified: 2017-04-04T10:34:03Z
source: APNIC
% Information related to '45.40.192.0/18AS45090'
route: 45.40.192.0/18
origin: AS45090
descr: Tencent Cloud Computing (Beijing) Co., Ltd
Floor 6, Yinke Building, 38 Haidian St, Haidian District
mnt-by: MAINT-TENCENT-CN
last-modified: 2017-07-09T23:17:47Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.40.254.119
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60619
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;45.40.254.119. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026080200 1800 900 604800 86400
;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Aug 02 15:00:53 CST 2026
;; MSG SIZE rcvd: 106Host 119.254.40.45.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 119.254.40.45.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 185.175.93.15 | attack | Apr 24 00:00:51 debian-2gb-nbg1-2 kernel: \[9938198.527251\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.175.93.15 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=62170 PROTO=TCP SPT=45252 DPT=7399 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-04-24 06:12:14 |
| 52.224.162.27 | attackbotsspam | RDP Bruteforce |
2020-04-24 05:54:45 |
| 222.186.175.23 | attackspam | Apr 23 23:52:57 srv01 sshd[17666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.23 user=root Apr 23 23:52:58 srv01 sshd[17666]: Failed password for root from 222.186.175.23 port 30614 ssh2 Apr 23 23:53:01 srv01 sshd[17666]: Failed password for root from 222.186.175.23 port 30614 ssh2 Apr 23 23:52:57 srv01 sshd[17666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.23 user=root Apr 23 23:52:58 srv01 sshd[17666]: Failed password for root from 222.186.175.23 port 30614 ssh2 Apr 23 23:53:01 srv01 sshd[17666]: Failed password for root from 222.186.175.23 port 30614 ssh2 Apr 23 23:52:57 srv01 sshd[17666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.23 user=root Apr 23 23:52:58 srv01 sshd[17666]: Failed password for root from 222.186.175.23 port 30614 ssh2 Apr 23 23:53:01 srv01 sshd[17666]: Failed password for root from 222.186. ... |
2020-04-24 05:55:34 |
| 185.202.1.27 | attackbots | RDPBrutePLe |
2020-04-24 06:15:48 |
| 67.218.145.167 | attackbotsspam | SASL PLAIN auth failed: ruser=... |
2020-04-24 06:17:36 |
| 66.249.64.30 | attackspam | Automatic report - Banned IP Access |
2020-04-24 06:10:07 |
| 189.126.168.43 | attack | firewall-block, port(s): 1433/tcp |
2020-04-24 06:19:22 |
| 92.63.194.79 | attack | VNC brute force attack detected by fail2ban |
2020-04-24 06:03:31 |
| 118.89.221.36 | attackspam | Invalid user test3 from 118.89.221.36 port 46780 |
2020-04-24 06:30:15 |
| 223.244.83.13 | attack | SASL PLAIN auth failed: ruser=... |
2020-04-24 06:25:05 |
| 222.186.15.158 | attackspam | The IP address [222.186.15.158] experienced 10 failed attempts when attempting to log into SSH running on NAS within 5 minutes, and was blocked at Thu Apr 23 23:14:39 2020. |
2020-04-24 06:05:47 |
| 65.52.233.250 | attackspambots | Repeated RDP login failures. Last user: administrator |
2020-04-24 06:10:25 |
| 220.178.75.153 | attackbots | Apr 21 07:12:29 : SSH login attempts with invalid user |
2020-04-24 06:07:05 |
| 40.115.113.251 | attackspam | Repeated RDP login failures. Last user: admin |
2020-04-24 05:59:42 |
| 194.55.132.250 | attackbotsspam | [2020-04-23 18:14:48] NOTICE[1170][C-000044f3] chan_sip.c: Call from '' (194.55.132.250:50892) to extension '46842002301' rejected because extension not found in context 'public'. [2020-04-23 18:14:48] SECURITY[1184] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-23T18:14:48.210-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="46842002301",SessionID="0x7f6c08664b48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/194.55.132.250/50892",ACLName="no_extension_match" [2020-04-23 18:15:29] NOTICE[1170][C-000044f5] chan_sip.c: Call from '' (194.55.132.250:57029) to extension '01146842002301' rejected because extension not found in context 'public'. [2020-04-23 18:15:29] SECURITY[1184] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-23T18:15:29.698-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="01146842002301",SessionID="0x7f6c08664b48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/194.55. ... |
2020-04-24 06:24:03 |