城市(city): London
省份(region): England
国家(country): United Kingdom
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 104.218.160.0 - 104.218.167.255
CIDR: 104.218.160.0/21
NetName: ZEN-X-003
NetHandle: NET-104-218-160-0-1
Parent: NET104 (NET-104-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Zenlayer Inc (ZENLA-7)
RegDate: 2014-10-09
Updated: 2018-02-27
Ref: https://rdap.arin.net/registry/ip/104.218.160.0
OrgName: Zenlayer Inc
OrgId: ZENLA-7
Address: 21700 Copley Dr Suite 350
City: Diamond Bar
StateProv: CA
PostalCode: 91765
Country: US
RegDate: 2017-12-27
Updated: 2026-06-09
Ref: https://rdap.arin.net/registry/entity/ZENLA-7
OrgNOCHandle: IPADM641-ARIN
OrgNOCName: IP ADMIN
OrgNOCPhone: +1-909-718-3558
OrgNOCEmail: ipadmin@zenlayer.com
OrgNOCRef: https://rdap.arin.net/registry/entity/IPADM641-ARIN
OrgAbuseHandle: SOCOP-ARIN
OrgAbuseName: SOC Ops
OrgAbusePhone: +1-909-718-3558
OrgAbuseEmail: abuse@zenlayer.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/SOCOP-ARIN
OrgTechHandle: CHUAN32-ARIN
OrgTechName: Chuang, Zoe
OrgTechPhone: +1-909-718-3558
OrgTechEmail: zoe.chuang@zenlayer.com
OrgTechRef: https://rdap.arin.net/registry/entity/CHUAN32-ARIN
OrgNOCHandle: IPNOC27-ARIN
OrgNOCName: IPNOC
OrgNOCPhone: +1-800-858-7986
OrgNOCEmail: ipnoc-t3@zenlayer.com
OrgNOCRef: https://rdap.arin.net/registry/entity/IPNOC27-ARIN
OrgTechHandle: IPNOC27-ARIN
OrgTechName: IPNOC
OrgTechPhone: +1-800-858-7986
OrgTechEmail: ipnoc-t3@zenlayer.com
OrgTechRef: https://rdap.arin.net/registry/entity/IPNOC27-ARIN
OrgTechHandle: TANGR16-ARIN
OrgTechName: Tang, Ruifan
OrgTechPhone: +1-800-858-7986
OrgTechEmail: ruifan.tang@zenlayer.com
OrgTechRef: https://rdap.arin.net/registry/entity/TANGR16-ARIN
OrgTechHandle: IPADM641-ARIN
OrgTechName: IP ADMIN
OrgTechPhone: +1-909-718-3558
OrgTechEmail: ipadmin@zenlayer.com
OrgTechRef: https://rdap.arin.net/registry/entity/IPADM641-ARIN
# end
# start
NetRange: 104.218.165.0 - 104.218.165.255
CIDR: 104.218.165.0/24
NetName: ZL-LAX-UCLOUD-0068
NetHandle: NET-104-218-165-0-1
Parent: ZEN-X-003 (NET-104-218-160-0-1)
NetType: Reassigned
OriginAS:
Organization: UCLOUD (UCLOU-1)
RegDate: 2019-03-29
Updated: 2019-03-29
Comment: Abuse please contact:unoc@ucloud.cn ，unom@ucloud.cn，hegui@ucloud.cn
Ref: https://rdap.arin.net/registry/ip/104.218.165.0
OrgName: UCLOUD
OrgId: UCLOU-1
Address: FLAT/RM 603 6/ FLAWS COMMERCIAL PLAZA 788 CHEUNG SHA WAN ROAD KL
City: Hong Kong
StateProv:
PostalCode:
Country: HK
RegDate: 2019-02-28
Updated: 2019-02-28
Ref: https://rdap.arin.net/registry/entity/UCLOU-1
OrgAbuseHandle: IAU2-ARIN
OrgAbuseName: IP ABUSE Ucloud
OrgAbusePhone: +86 4000188113
OrgAbuseEmail: hegui@ucloud.cn
OrgAbuseRef: https://rdap.arin.net/registry/entity/IAU2-ARIN
OrgTechHandle: IAU2-ARIN
OrgTechName: IP ABUSE Ucloud
OrgTechPhone: +86 4000188113
OrgTechEmail: hegui@ucloud.cn
OrgTechRef: https://rdap.arin.net/registry/entity/IAU2-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.218.165.188
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61298
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.218.165.188. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026082601 1800 900 604800 86400
;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Aug 27 00:00:25 CST 2026
;; MSG SIZE rcvd: 108Host 188.165.218.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 188.165.218.104.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 154.8.185.122 | attackspambots | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.8.185.122 user=root Failed password for root from 154.8.185.122 port 39332 ssh2 Invalid user pos from 154.8.185.122 port 42436 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.8.185.122 Failed password for invalid user pos from 154.8.185.122 port 42436 ssh2 |
2019-11-05 07:06:32 |
| 189.102.141.212 | attackbots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/189.102.141.212/ AU - 1H : (34) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : AU NAME ASN : ASN28573 IP : 189.102.141.212 CIDR : 189.102.0.0/16 PREFIX COUNT : 1254 UNIQUE IP COUNT : 9653760 ATTACKS DETECTED ASN28573 : 1H - 2 3H - 4 6H - 5 12H - 12 24H - 24 DateTime : 2019-11-04 15:26:01 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-05 06:28:58 |
| 85.128.142.121 | attackbotsspam | Automatic report - XMLRPC Attack |
2019-11-05 06:42:56 |
| 140.143.142.190 | attack | Lines containing failures of 140.143.142.190 (max 1000) Nov 4 00:22:35 localhost sshd[2651]: Invalid user mythtv from 140.143.142.190 port 38292 Nov 4 00:22:35 localhost sshd[2651]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.142.190 Nov 4 00:22:37 localhost sshd[2651]: Failed password for invalid user mythtv from 140.143.142.190 port 38292 ssh2 Nov 4 00:22:37 localhost sshd[2651]: Received disconnect from 140.143.142.190 port 38292:11: Bye Bye [preauth] Nov 4 00:22:37 localhost sshd[2651]: Disconnected from invalid user mythtv 140.143.142.190 port 38292 [preauth] Nov 4 00:37:24 localhost sshd[3443]: User r.r from 140.143.142.190 not allowed because listed in DenyUsers Nov 4 00:37:24 localhost sshd[3443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.142.190 user=r.r Nov 4 00:37:26 localhost sshd[3443]: Failed password for invalid user r.r from 140.143.142.190 ........ ------------------------------ |
2019-11-05 06:37:17 |
| 178.222.193.248 | attackspam | web exploits ... |
2019-11-05 06:48:00 |
| 62.65.78.89 | attackbotsspam | Nov 4 23:41:52 MK-Soft-Root2 sshd[12152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.65.78.89 Nov 4 23:41:52 MK-Soft-Root2 sshd[12154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.65.78.89 ... |
2019-11-05 06:51:20 |
| 52.230.127.59 | attackbots | Wordpress brute-force |
2019-11-05 06:36:55 |
| 94.29.249.47 | attackspam | " " |
2019-11-05 06:53:26 |
| 45.82.153.34 | attack | ET CINS Active Threat Intelligence Poor Reputation IP group 33 - port: 5261 proto: TCP cat: Misc Attack |
2019-11-05 06:26:24 |
| 149.202.218.7 | attack | Nov 4 23:41:42 mail sshd\[10230\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.218.7 user=daemon Nov 4 23:41:44 mail sshd\[10230\]: Failed password for daemon from 149.202.218.7 port 41310 ssh2 Nov 4 23:41:45 mail sshd\[10232\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.218.7 user=bin ... |
2019-11-05 06:55:11 |
| 201.209.184.192 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/201.209.184.192/ VE - 1H : (35) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : VE NAME ASN : ASN8048 IP : 201.209.184.192 CIDR : 201.209.160.0/19 PREFIX COUNT : 467 UNIQUE IP COUNT : 2731520 ATTACKS DETECTED ASN8048 : 1H - 3 3H - 6 6H - 9 12H - 14 24H - 32 DateTime : 2019-11-04 15:25:52 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-05 06:34:46 |
| 93.174.93.26 | attackbots | 11/04/2019-17:41:58.135110 93.174.93.26 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-11-05 06:47:45 |
| 61.216.142.160 | attackspam | 11/04/2019-17:41:48.421168 61.216.142.160 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 63 |
2019-11-05 06:56:57 |
| 148.72.208.74 | attackspam | Nov 4 23:41:56 jane sshd[24860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.72.208.74 Nov 4 23:41:58 jane sshd[24860]: Failed password for invalid user xl from 148.72.208.74 port 58362 ssh2 ... |
2019-11-05 06:46:07 |
| 192.144.129.168 | attackspambots | Lines containing failures of 192.144.129.168 Nov 4 23:26:09 srv02 sshd[16719]: Invalid user admin from 192.144.129.168 port 43932 Nov 4 23:26:09 srv02 sshd[16719]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.129.168 Nov 4 23:26:11 srv02 sshd[16719]: Failed password for invalid user admin from 192.144.129.168 port 43932 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=192.144.129.168 |
2019-11-05 06:54:18 |