城市(city): Lages
省份(region): Santa Catarina
国家(country): Brazil
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 104.234.0.0 - 104.234.255.255
CIDR: 104.234.0.0/16
NetName: VELCOM-16
NetHandle: NET-104-234-0-0-1
Parent: NET104 (NET-104-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Velcom (ONTAR-40)
RegDate: 2014-10-27
Updated: 2015-03-23
Ref: https://rdap.arin.net/registry/ip/104.234.0.0
OrgName: Velcom
OrgId: ONTAR-40
Address: 276 Tiffin St
City: Barrie
StateProv: ON
PostalCode: L4N-2N4
Country: CA
RegDate: 2014-12-16
Updated: 2024-11-25
Comment: Please contact abuse@velcom.com in case of any Hacks, Illegal Activity, Violation, Scans, Probes, Spam from our IPS.
Ref: https://rdap.arin.net/registry/entity/ONTAR-40
ReferralServer: rwhois://rwhois.velcom.com:4321
OrgTechHandle: NETWO548-ARIN
OrgTechName: Network Administrator
OrgTechPhone: +1-416-800-7551
OrgTechEmail: netadmin@velcom.com
OrgTechRef: https://rdap.arin.net/registry/entity/NETWO548-ARIN
OrgRoutingHandle: IST36-ARIN
OrgRoutingName: IPXO Support Team
OrgRoutingPhone: +1 (650) 564-3425
OrgRoutingEmail: support@ipxo.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/IST36-ARIN
OrgAbuseHandle: ABUSE1200-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-416-800-7551
OrgAbuseEmail: abuse@velcom.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE1200-ARIN
OrgNOCHandle: NETWO548-ARIN
OrgNOCName: Network Administrator
OrgNOCPhone: +1-416-800-7551
OrgNOCEmail: netadmin@velcom.com
OrgNOCRef: https://rdap.arin.net/registry/entity/NETWO548-ARIN
# end
# start
NetRange: 104.234.0.0 - 104.234.127.255
CIDR: 104.234.0.0/17
NetName: 104-234-0-0-17
NetHandle: NET-104-234-0-0-2
Parent: VELCOM-16 (NET-104-234-0-0-1)
NetType: Reallocated
OriginAS:
Organization: IPXO LLC (IL-845)
RegDate: 2022-05-08
Updated: 2022-05-08
Ref: https://rdap.arin.net/registry/ip/104.234.0.0
OrgName: IPXO LLC
OrgId: IL-845
Address: 3132 State Street
City: Dallas
StateProv: TX
PostalCode: 75204-3500
Country: US
RegDate: 2021-03-25
Updated: 2025-09-10
Comment: Geofeed https://geofeed.ipxo.com/geofeed.txt
Ref: https://rdap.arin.net/registry/entity/IL-845
OrgTechHandle: IST36-ARIN
OrgTechName: IPXO Support Team
OrgTechPhone: +1 (650) 564-3425
OrgTechEmail: support@ipxo.com
OrgTechRef: https://rdap.arin.net/registry/entity/IST36-ARIN
OrgAbuseHandle: IAMT1-ARIN
OrgAbuseName: IPXO Abuse Management Team
OrgAbusePhone: +1 (650) 934-1667
OrgAbuseEmail: abuse@ipxo.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/IAMT1-ARIN
OrgDNSHandle: IST36-ARIN
OrgDNSName: IPXO Support Team
OrgDNSPhone: +1 (650) 564-3425
OrgDNSEmail: support@ipxo.com
OrgDNSRef: https://rdap.arin.net/registry/entity/IST36-ARIN
# end
# start
NetRange: 104.234.0.0 - 104.234.127.255
CIDR: 104.234.0.0/17
NetName: NETUTILS
NetHandle: NET-104-234-0-0-3
Parent: 104-234-0-0-17 (NET-104-234-0-0-2)
NetType: Reallocated
OriginAS:
Organization: Internet Utilities NA LLC (DCL-577)
RegDate: 2025-01-07
Updated: 2026-09-17
Comment: geofeed: https://geofeed.ipxo.com/geofeed.txt
Comment: -----BEGIN TOKEN-----ae39f6e2c930556a9cccaff38ba904d63ee6fa00242429ec469d18c6e3d5808902806b5ef803f6221b6c82279d10aa6514d80e66e64f5d080b4fe0497241bfae-----END TOKEN-----
Ref: https://rdap.arin.net/registry/ip/104.234.0.0
OrgName: Internet Utilities NA LLC
OrgId: DCL-577
Address: 2711 Centerville Road
City:; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.234.90.160
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15517
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.234.90.160. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026110100 1800 900 604800 86400
;; Query time: 30 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Nov 01 22:31:55 CST 2026
;; MSG SIZE rcvd: 107Host 160.90.234.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 160.90.234.104.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 92.246.76.242 | attackbotsspam | Jul 24 15:48:40 debian-2gb-nbg1-2 kernel: \[17857040.769518\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=92.246.76.242 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=4996 PROTO=TCP SPT=55180 DPT=726 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-07-24 22:01:56 |
| 185.234.219.226 | attackbotsspam | 2020-07-24T06:35:51.083799linuxbox-skyline auth[176285]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=promo rhost=185.234.219.226 ... |
2020-07-24 21:49:59 |
| 91.64.159.122 | attackspambots | Honeypot attack, port: 445, PTR: ip5b409f7a.dynamic.kabel-deutschland.de. |
2020-07-24 21:57:46 |
| 222.186.175.183 | attack | Jul 24 13:17:48 124388 sshd[7365]: Failed password for root from 222.186.175.183 port 61342 ssh2 Jul 24 13:17:51 124388 sshd[7365]: Failed password for root from 222.186.175.183 port 61342 ssh2 Jul 24 13:17:54 124388 sshd[7365]: Failed password for root from 222.186.175.183 port 61342 ssh2 Jul 24 13:17:58 124388 sshd[7365]: Failed password for root from 222.186.175.183 port 61342 ssh2 Jul 24 13:17:58 124388 sshd[7365]: error: maximum authentication attempts exceeded for root from 222.186.175.183 port 61342 ssh2 [preauth] |
2020-07-24 21:19:47 |
| 221.9.140.78 | attackspam | Jul 24 07:14:11 andromeda postfix/smtpd\[40319\]: warning: unknown\[221.9.140.78\]: SASL LOGIN authentication failed: authentication failure Jul 24 07:14:16 andromeda postfix/smtpd\[40319\]: warning: unknown\[221.9.140.78\]: SASL LOGIN authentication failed: authentication failure Jul 24 07:14:19 andromeda postfix/smtpd\[40319\]: warning: unknown\[221.9.140.78\]: SASL LOGIN authentication failed: authentication failure Jul 24 07:14:24 andromeda postfix/smtpd\[49948\]: warning: unknown\[221.9.140.78\]: SASL LOGIN authentication failed: authentication failure Jul 24 07:14:29 andromeda postfix/smtpd\[40319\]: warning: unknown\[221.9.140.78\]: SASL LOGIN authentication failed: authentication failure |
2020-07-24 21:39:23 |
| 117.186.96.54 | attackbotsspam | Invalid user german from 117.186.96.54 port 16274 |
2020-07-24 21:46:58 |
| 114.233.33.196 | attackspam | 20/7/24@09:48:47: FAIL: IoT-Telnet address from=114.233.33.196 ... |
2020-07-24 21:58:29 |
| 106.54.123.84 | attackbots | 2020-07-24T14:13:34.409242mail.broermann.family sshd[28350]: Invalid user alex from 106.54.123.84 port 60720 2020-07-24T14:13:34.415464mail.broermann.family sshd[28350]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.123.84 2020-07-24T14:13:34.409242mail.broermann.family sshd[28350]: Invalid user alex from 106.54.123.84 port 60720 2020-07-24T14:13:36.530774mail.broermann.family sshd[28350]: Failed password for invalid user alex from 106.54.123.84 port 60720 ssh2 2020-07-24T14:14:56.180995mail.broermann.family sshd[28384]: Invalid user vyatta from 106.54.123.84 port 45154 ... |
2020-07-24 21:43:34 |
| 192.99.147.195 | attack | Port probing on unauthorized port 445 |
2020-07-24 21:25:22 |
| 138.68.44.236 | attackspambots | $f2bV_matches |
2020-07-24 21:23:32 |
| 207.244.254.200 | attackspam | DATE:2020-07-24 15:48:40, IP:207.244.254.200, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc) |
2020-07-24 22:05:18 |
| 77.52.196.19 | attackspambots | Port Scan ... |
2020-07-24 22:08:01 |
| 87.251.74.184 | attackbots | Port scan: Attack repeated for 24 hours |
2020-07-24 22:01:44 |
| 79.56.164.48 | attackbots | Jul 24 15:51:30 sip sshd[11883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.56.164.48 Jul 24 15:51:32 sip sshd[11883]: Failed password for invalid user wallet from 79.56.164.48 port 47088 ssh2 Jul 24 15:56:31 sip sshd[13720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.56.164.48 |
2020-07-24 22:02:28 |
| 45.129.33.5 | attackbotsspam | 07/24/2020-09:53:42.646183 45.129.33.5 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-07-24 21:59:15 |