城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 142.248.80.0 - 142.248.83.255
CIDR: 142.248.80.0/22
NetName: AMBYRE
NetHandle: NET-142-248-80-0-1
Parent: NET142 (NET-142-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Ambyre LLC (AL-3032)
RegDate: 2025-10-10
Updated: 2025-10-10
Ref: https://rdap.arin.net/registry/ip/142.248.80.0
OrgName: Ambyre LLC
OrgId: AL-3032
Address: 30 N. Gould St. Ste N
City: Sheridan
StateProv: WY
PostalCode: 82801
Country: US
RegDate: 2021-07-15
Updated: 2024-11-25
Ref: https://rdap.arin.net/registry/entity/AL-3032
OrgTechHandle: AMBYR-ARIN
OrgTechName: AMBYRE-ARIN
OrgTechPhone: +1-434-373-7837
OrgTechEmail: admin@ambyre.net
OrgTechRef: https://rdap.arin.net/registry/entity/AMBYR-ARIN
OrgAbuseHandle: ABUSE8544-ARIN
OrgAbuseName: ABUSE
OrgAbusePhone: +1-434-373-7837
OrgAbuseEmail: abuse@ambyrenodes.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE8544-ARIN
# end
# start
NetRange: 142.248.80.0 - 142.248.80.255
CIDR: 142.248.80.0/24
NetName: ADVIN-MCI-1
NetHandle: NET-142-248-80-0-2
Parent: AMBYRE (NET-142-248-80-0-1)
NetType: Reallocated
OriginAS:
Organization: Advin Services LLC (ASL-843)
RegDate: 2026-05-24
Updated: 2026-05-24
Comment: Geofeed https://advinservers.com/geofeed.csv
Ref: https://rdap.arin.net/registry/ip/142.248.80.0
OrgName: Advin Services LLC
OrgId: ASL-843
Address: 3640 Concord Pike #1080
City: Wilmington
StateProv: DE
PostalCode: 19803
Country: US
RegDate: 2021-10-18
Updated: 2024-10-02
Comment: Website: https://advinservers.com
Comment: Abuse Email: abuse@advinservers.com
Comment: Support Email: support@advinservers.com
Ref: https://rdap.arin.net/registry/entity/ASL-843
OrgTechHandle: ADMIN7999-ARIN
OrgTechName: Admin
OrgTechPhone: +1-302-212-0969
OrgTechEmail: abuse@advinservers.com
OrgTechRef: https://rdap.arin.net/registry/entity/ADMIN7999-ARIN
OrgNOCHandle: ADMIN7999-ARIN
OrgNOCName: Admin
OrgNOCPhone: +1-302-212-0969
OrgNOCEmail: abuse@advinservers.com
OrgNOCRef: https://rdap.arin.net/registry/entity/ADMIN7999-ARIN
OrgAbuseHandle: ADMIN7999-ARIN
OrgAbuseName: Admin
OrgAbusePhone: +1-302-212-0969
OrgAbuseEmail: abuse@advinservers.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/ADMIN7999-ARIN
OrgRoutingHandle: ADMIN7999-ARIN
OrgRoutingName: Admin
OrgRoutingPhone: +1-302-212-0969
OrgRoutingEmail: abuse@advinservers.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/ADMIN7999-ARIN
OrgDNSHandle: ADMIN7999-ARIN
OrgDNSName: Admin
OrgDNSPhone: +1-302-212-0969
OrgDNSEmail: abuse@advinservers.com
OrgDNSRef: https://rdap.arin.net/registry/entity/ADMIN7999-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.248.80.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29577
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;142.248.80.138. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026071100 1800 900 604800 86400
;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jul 12 00:00:20 CST 2026
;; MSG SIZE rcvd: 107
Host 138.80.248.142.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 138.80.248.142.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 82.64.250.54 | attackbotsspam | SSH-bruteforce attempts |
2020-01-13 08:03:36 |
| 134.209.175.243 | attackbots | Lines containing failures of 134.209.175.243 (max 1000) Jan 12 19:25:36 localhost sshd[23603]: Invalid user artifactory from 134.209.175.243 port 53016 Jan 12 19:25:36 localhost sshd[23603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.175.243 Jan 12 19:25:39 localhost sshd[23603]: Failed password for invalid user artifactory from 134.209.175.243 port 53016 ssh2 Jan 12 19:25:41 localhost sshd[23603]: Received disconnect from 134.209.175.243 port 53016:11: Bye Bye [preauth] Jan 12 19:25:41 localhost sshd[23603]: Disconnected from invalid user artifactory 134.209.175.243 port 53016 [preauth] Jan 12 19:35:40 localhost sshd[25581]: Invalid user ken from 134.209.175.243 port 58320 Jan 12 19:35:40 localhost sshd[25581]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.175.243 Jan 12 19:35:41 localhost sshd[25581]: Failed password for invalid user ken from 134.209.175.243 port 58........ ------------------------------ |
2020-01-13 07:34:35 |
| 67.247.123.8 | attackbotsspam | Jan 13 04:53:16 gw1 sshd[6771]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.247.123.8 Jan 13 04:53:18 gw1 sshd[6771]: Failed password for invalid user vagrant from 67.247.123.8 port 57598 ssh2 ... |
2020-01-13 07:54:39 |
| 85.93.20.10 | attackbots | Unauthorized connection attempt detected from IP address 85.93.20.10 to port 3307 |
2020-01-13 07:28:32 |
| 203.147.79.174 | attack | Unauthorized connection attempt detected from IP address 203.147.79.174 to port 2220 [J] |
2020-01-13 07:44:52 |
| 106.13.233.4 | attackbots | Jan 13 00:29:33 sso sshd[12703]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.233.4 Jan 13 00:29:35 sso sshd[12703]: Failed password for invalid user ranjbar from 106.13.233.4 port 54124 ssh2 ... |
2020-01-13 07:52:00 |
| 122.51.248.146 | attackspam | 2020-01-10T21:05:20.6490821495-001 sshd[400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.248.146 user=r.r 2020-01-10T21:05:22.4753561495-001 sshd[400]: Failed password for r.r from 122.51.248.146 port 43566 ssh2 2020-01-10T21:13:08.3130331495-001 sshd[772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.248.146 user=r.r 2020-01-10T21:13:10.7217191495-001 sshd[772]: Failed password for r.r from 122.51.248.146 port 56590 ssh2 2020-01-10T21:18:37.3314161495-001 sshd[1036]: Invalid user test6 from 122.51.248.146 port 46748 2020-01-10T21:18:37.3399501495-001 sshd[1036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.248.146 2020-01-10T21:18:37.3314161495-001 sshd[1036]: Invalid user test6 from 122.51.248.146 port 46748 2020-01-10T21:18:39.2469761495-001 sshd[1036]: Failed password for invalid user test6 from 122.51.248.146 port ........ ------------------------------ |
2020-01-13 07:41:34 |
| 217.112.142.21 | attack | postfix (unknown user, SPF fail or relay access denied) |
2020-01-13 07:41:12 |
| 80.89.137.54 | attackspambots | 2020-01-12 15:24:32 H=(gw-internet-as-sz.ll-ang.zsttk.ru) [80.89.137.54]:41270 I=[192.147.25.65]:25 F= |
2020-01-13 08:02:24 |
| 222.186.180.8 | attack | SSH-BruteForce |
2020-01-13 07:52:59 |
| 49.234.51.56 | attackbotsspam | Jan 13 06:35:45 webhost01 sshd[12552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.51.56 Jan 13 06:35:47 webhost01 sshd[12552]: Failed password for invalid user test from 49.234.51.56 port 54828 ssh2 ... |
2020-01-13 07:54:51 |
| 219.93.106.33 | attackspam | Jan 13 00:24:29 ArkNodeAT sshd\[23075\]: Invalid user test from 219.93.106.33 Jan 13 00:24:29 ArkNodeAT sshd\[23075\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.93.106.33 Jan 13 00:24:31 ArkNodeAT sshd\[23075\]: Failed password for invalid user test from 219.93.106.33 port 52281 ssh2 |
2020-01-13 07:30:51 |
| 222.186.190.92 | attackbotsspam | Jan 13 00:22:19 sd-53420 sshd\[23013\]: User root from 222.186.190.92 not allowed because none of user's groups are listed in AllowGroups Jan 13 00:22:19 sd-53420 sshd\[23013\]: Failed none for invalid user root from 222.186.190.92 port 33612 ssh2 Jan 13 00:22:19 sd-53420 sshd\[23013\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.92 user=root Jan 13 00:22:22 sd-53420 sshd\[23013\]: Failed password for invalid user root from 222.186.190.92 port 33612 ssh2 Jan 13 00:22:38 sd-53420 sshd\[23030\]: User root from 222.186.190.92 not allowed because none of user's groups are listed in AllowGroups ... |
2020-01-13 07:26:57 |
| 103.85.220.122 | attackbots | SPF Fail sender not permitted to send mail for @metrasat.co.id |
2020-01-13 08:04:46 |
| 49.88.112.59 | attackspam | Jan 12 20:26:59 firewall sshd[14299]: Failed password for root from 49.88.112.59 port 38764 ssh2 Jan 12 20:27:11 firewall sshd[14299]: error: maximum authentication attempts exceeded for root from 49.88.112.59 port 38764 ssh2 [preauth] Jan 12 20:27:11 firewall sshd[14299]: Disconnecting: Too many authentication failures [preauth] ... |
2020-01-13 07:36:02 |