城市(city): Cali
省份(region): Valle del Cauca
国家(country): Colombia
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 131.196.0.0 - 131.196.255.255
CIDR: 131.196.0.0/16
NetName: LACNIC-ERX-131-196-0-0
NetHandle: NET-131-196-0-0-1
Parent: NET131 (NET-131-0-0-0-0)
NetType: Transferred to LACNIC
OriginAS:
Organization: Latin American and Caribbean IP address Regional Registry (LACNIC)
RegDate: 2015-09-04
Updated: 2015-09-04
Comment: This IP address range is under LACNIC responsibility
Comment: for further allocations to users in LACNIC region.
Comment: Please see http://www.lacnic.net/ for further details,
Comment: or check the WHOIS server located at http://whois.lacnic.net
Ref: https://rdap.arin.net/registry/ip/131.196.0.0
ResourceLink: http://lacnic.net/cgi-bin/lacnic/whois
ResourceLink: whois.lacnic.net
OrgName: Latin American and Caribbean IP address Regional Registry
OrgId: LACNIC
Address: Rambla Republica de Mexico 6125
City: Montevideo
StateProv:
PostalCode: 11400
Country: UY
RegDate: 2002-07-27
Updated: 2018-03-15
Ref: https://rdap.arin.net/registry/entity/LACNIC
ReferralServer: whois://whois.lacnic.net
ResourceLink: http://lacnic.net/cgi-bin/lacnic/whois
OrgTechHandle: LACNIC-ARIN
OrgTechName: LACNIC Whois Info
OrgTechPhone: +598-2604-2222
OrgTechEmail: whois-contact@lacnic.net
OrgTechRef: https://rdap.arin.net/registry/entity/LACNIC-ARIN
OrgAbuseHandle: LWI100-ARIN
OrgAbuseName: LACNIC Whois Info
OrgAbusePhone: +598-2604-2222
OrgAbuseEmail: abuse@lacnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/LWI100-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to whois.lacnic.net.
% IP Client: 124.223.158.242
% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries
% LACNIC resource: whois.lacnic.net
% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2026-03-23 09:25:58 (-03 -03:00)
inetnum: 131.196.212.0/22
status: assigned
aut-num: AS265696
owner: Universidad Santiago de Cali
ownerid: CO-USCA-LACNIC
responsible: Departamento de Gestion Tecnologica USC
address: Calle 5 Carrera 62 00, 00, 00
address: NONE - Cali - Valle del Cauca
country: CO
phone: +57 25183000 [238]
owner-c: COT22
tech-c: COT22
abuse-c: COT22
created: 20170704
changed: 20170704
nic-hdl: COT22
person: Coordinador Técnico RUAV
e-mail: director_ejecutivo@ruav.edu.co
address: Unicentro Edificio Oasis Oficina 513D, 5 169, -
address: - - Santiago de Cali - VL
country: CO
phone: +57 3023376123 [0000]
created: 20161010
changed: 20251124
% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.; <<>> DiG 9.10.3-P4-Ubuntu <<>> 131.196.213.63
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1016
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;131.196.213.63. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026032300 1800 900 604800 86400
;; Query time: 31 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Mar 23 20:16:16 CST 2026
;; MSG SIZE rcvd: 107Host 63.213.196.131.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 63.213.196.131.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 210.13.111.26 | attackbots | Scanned 3 times in the last 24 hours on port 22 |
2020-08-11 08:48:31 |
| 185.14.184.143 | attackbotsspam | Aug 10 21:58:33 master sshd[11008]: Failed password for root from 185.14.184.143 port 36038 ssh2 Aug 10 22:06:56 master sshd[11510]: Failed password for root from 185.14.184.143 port 58580 ssh2 Aug 10 22:12:23 master sshd[11640]: Failed password for root from 185.14.184.143 port 42162 ssh2 Aug 10 22:17:42 master sshd[11708]: Failed password for root from 185.14.184.143 port 53850 ssh2 Aug 10 22:22:54 master sshd[11819]: Failed password for root from 185.14.184.143 port 37306 ssh2 Aug 10 22:28:01 master sshd[11871]: Failed password for root from 185.14.184.143 port 49022 ssh2 Aug 10 22:33:16 master sshd[12315]: Failed password for root from 185.14.184.143 port 60680 ssh2 Aug 10 22:38:31 master sshd[12367]: Failed password for root from 185.14.184.143 port 44158 ssh2 Aug 10 22:43:38 master sshd[12497]: Failed password for root from 185.14.184.143 port 55818 ssh2 Aug 10 22:48:48 master sshd[12560]: Failed password for root from 185.14.184.143 port 39210 ssh2 |
2020-08-11 08:49:48 |
| 45.129.33.24 | attack | ET DROP Dshield Block Listed Source group 1 - port: 21900 proto: tcp cat: Misc Attackbytes: 60 |
2020-08-11 08:12:33 |
| 37.49.224.202 | attackspam | ET DROP Dshield Block Listed Source group 1 - port: 8089 proto: tcp cat: Misc Attackbytes: 60 |
2020-08-11 08:14:36 |
| 132.145.90.22 | attackbotsspam | Aug 10 23:20:05 lukav-desktop sshd\[4216\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.90.22 user=root Aug 10 23:20:08 lukav-desktop sshd\[4216\]: Failed password for root from 132.145.90.22 port 57730 ssh2 Aug 10 23:24:32 lukav-desktop sshd\[7405\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.90.22 user=root Aug 10 23:24:34 lukav-desktop sshd\[7405\]: Failed password for root from 132.145.90.22 port 38914 ssh2 Aug 10 23:28:57 lukav-desktop sshd\[10594\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.90.22 user=root |
2020-08-11 08:23:18 |
| 36.112.104.194 | attackbots | Aug 10 22:02:06 master sshd[11466]: Failed password for root from 36.112.104.194 port 58945 ssh2 Aug 10 22:09:00 master sshd[11518]: Failed password for root from 36.112.104.194 port 21313 ssh2 Aug 10 22:12:25 master sshd[11642]: Failed password for root from 36.112.104.194 port 63681 ssh2 Aug 10 22:15:48 master sshd[11697]: Failed password for root from 36.112.104.194 port 43777 ssh2 Aug 10 22:19:12 master sshd[11734]: Failed password for root from 36.112.104.194 port 23137 ssh2 Aug 10 22:22:24 master sshd[11815]: Failed password for root from 36.112.104.194 port 2465 ssh2 Aug 10 22:25:40 master sshd[11865]: Failed password for root from 36.112.104.194 port 44769 ssh2 Aug 10 22:28:53 master sshd[11873]: Failed password for root from 36.112.104.194 port 24161 ssh2 Aug 10 22:32:20 master sshd[12313]: Failed password for root from 36.112.104.194 port 3425 ssh2 Aug 10 22:35:39 master sshd[12361]: Failed password for root from 36.112.104.194 port 45985 ssh2 |
2020-08-11 08:46:44 |
| 222.186.175.151 | attack | SSH Login Bruteforce |
2020-08-11 08:16:26 |
| 105.112.70.131 | spambotsattack | Someone trying to log in my account |
2020-08-11 08:48:11 |
| 220.137.93.40 | attackspam | Aug 10 22:18:41 master sshd[11716]: Failed password for invalid user support from 220.137.93.40 port 50075 ssh2 Aug 10 22:18:55 master sshd[11720]: Failed password for root from 220.137.93.40 port 51494 ssh2 |
2020-08-11 08:38:54 |
| 82.102.91.35 | attackbots | Aug 10 22:17:37 master sshd[11704]: Failed password for root from 82.102.91.35 port 45402 ssh2 |
2020-08-11 08:45:11 |
| 193.228.91.109 | attackbots | Automatic report - Banned IP Access |
2020-08-11 08:31:44 |
| 24.121.227.212 | attackbotsspam | SSH brute force |
2020-08-11 08:16:01 |
| 54.39.138.246 | attack | sshd jail - ssh hack attempt |
2020-08-11 08:43:09 |
| 157.245.78.30 | attackbotsspam | port scan and connect, tcp 8080 (http-proxy) |
2020-08-11 08:30:51 |
| 178.62.51.209 | attack | SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: do-prod-eu-west-clients-0106-1.do.binaryedge.ninja. |
2020-08-11 08:39:51 |