城市(city): Helsinki
省份(region): Uusimaa [Finnish] / Nyland [Swedish]
国家(country): Finland
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 144.31.0.0 - 144.31.255.255
CIDR: 144.31.0.0/16
NetName: RIPE
NetHandle: NET-144-31-0-0-1
Parent: NET144 (NET-144-0-0-0-0)
NetType: Early Registrations, Transferred to RIPE NCC
OriginAS:
Organization: RIPE Network Coordination Centre (RIPE)
RegDate: 2025-08-19
Updated: 2025-08-19
Ref: https://rdap.arin.net/registry/ip/144.31.0.0
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
ResourceLink: whois.ripe.net
OrgName: RIPE Network Coordination Centre
OrgId: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL
RegDate:
Updated: 2013-07-29
Ref: https://rdap.arin.net/registry/entity/RIPE
ReferralServer: whois.ripe.net
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
OrgAbuseHandle: ABUSE3850-ARIN
OrgAbuseName: Abuse Contact
OrgAbusePhone: +31205354444
OrgAbuseEmail: abuse@ripe.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3850-ARIN
OrgTechHandle: RNO29-ARIN
OrgTechName: RIPE NCC Operations
OrgTechPhone: +31 20 535 4444
OrgTechEmail: hostmaster@ripe.net
OrgTechRef: https://rdap.arin.net/registry/entity/RNO29-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 144.31.27.158
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60622
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;144.31.27.158. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026080200 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Aug 02 16:31:15 CST 2026
;; MSG SIZE rcvd: 106158.27.31.144.in-addr.arpa domain name pointer vm398056.hosted-by.u1host.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
158.27.31.144.in-addr.arpa name = vm398056.hosted-by.u1host.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 210.211.119.10 | attack | 20 attempts against mh-ssh on echoip |
2020-08-12 19:51:31 |
| 180.110.72.231 | attackspam | Attempted connection to port 80. |
2020-08-12 20:04:47 |
| 82.223.69.101 | attackspambots | 82.223.69.101 - - [12/Aug/2020:07:13:07 +0200] "GET /wp-login.php HTTP/1.1" 200 1901 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 82.223.69.101 - - [12/Aug/2020:07:13:07 +0200] "POST /wp-login.php HTTP/1.1" 200 2031 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 82.223.69.101 - - [12/Aug/2020:07:13:07 +0200] "GET /wp-login.php HTTP/1.1" 200 1901 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 82.223.69.101 - - [12/Aug/2020:07:13:07 +0200] "POST /wp-login.php HTTP/1.1" 200 2030 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 82.223.69.101 - - [12/Aug/2020:07:13:07 +0200] "GET /wp-login.php HTTP/1.1" 200 1901 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 82.223.69.101 - - [12/Aug/2020:07:13:08 +0200] "POST /wp-login.php HTTP/1.1" 200 2030 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Fir ... |
2020-08-12 19:38:56 |
| 49.145.203.172 | attack | Unauthorized connection attempt from IP address 49.145.203.172 on Port 445(SMB) |
2020-08-12 19:37:54 |
| 212.77.147.99 | attack | Unauthorized connection attempt from IP address 212.77.147.99 on Port 445(SMB) |
2020-08-12 19:44:13 |
| 119.36.201.51 | attack | Telnet/23 MH Probe, Scan, BF, Hack - |
2020-08-12 20:23:53 |
| 189.204.140.69 | attack | Unauthorized connection attempt from IP address 189.204.140.69 on Port 445(SMB) |
2020-08-12 19:44:56 |
| 85.209.0.252 | attackspam | Aug 12 19:19:30 itv-usvr-02 sshd[26638]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.209.0.252 user=root Aug 12 19:19:32 itv-usvr-02 sshd[26638]: Failed password for root from 85.209.0.252 port 50596 ssh2 |
2020-08-12 20:23:03 |
| 159.65.100.44 | attackbots | Aug 11 16:09:49 hurricane sshd[16135]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.100.44 user=r.r Aug 11 16:09:50 hurricane sshd[16135]: Failed password for r.r from 159.65.100.44 port 59622 ssh2 Aug 11 16:09:50 hurricane sshd[16135]: Received disconnect from 159.65.100.44 port 59622:11: Bye Bye [preauth] Aug 11 16:09:50 hurricane sshd[16135]: Disconnected from 159.65.100.44 port 59622 [preauth] Aug 11 16:17:21 hurricane sshd[16225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.100.44 user=r.r Aug 11 16:17:23 hurricane sshd[16225]: Failed password for r.r from 159.65.100.44 port 60688 ssh2 Aug 11 16:17:23 hurricane sshd[16225]: Received disconnect from 159.65.100.44 port 60688:11: Bye Bye [preauth] Aug 11 16:17:23 hurricane sshd[16225]: Disconnected from 159.65.100.44 port 60688 [preauth] Aug 11 16:21:13 hurricane sshd[16253]: pam_unix(sshd:auth): authentication failu........ ------------------------------- |
2020-08-12 19:39:48 |
| 35.132.169.13 | attackbotsspam | Aug 11 20:45:42 propaganda sshd[34341]: Connection from 35.132.169.13 port 47086 on 10.0.0.160 port 22 rdomain "" Aug 11 20:45:42 propaganda sshd[34341]: Connection closed by 35.132.169.13 port 47086 [preauth] |
2020-08-12 20:12:38 |
| 180.126.162.118 | attack | Lines containing failures of 180.126.162.118 Aug 12 05:39:13 nbi-636 sshd[23249]: Bad protocol version identification '' from 180.126.162.118 port 57098 Aug 12 05:39:15 nbi-636 sshd[23250]: Invalid user plexuser from 180.126.162.118 port 57175 Aug 12 05:39:15 nbi-636 sshd[23250]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.126.162.118 Aug 12 05:39:18 nbi-636 sshd[23250]: Failed password for invalid user plexuser from 180.126.162.118 port 57175 ssh2 Aug 12 05:39:19 nbi-636 sshd[23250]: Connection closed by invalid user plexuser 180.126.162.118 port 57175 [preauth] Aug 12 05:39:20 nbi-636 sshd[23276]: Invalid user admin from 180.126.162.118 port 57781 Aug 12 05:39:21 nbi-636 sshd[23276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.126.162.118 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=180.126.162.118 |
2020-08-12 20:18:29 |
| 217.27.117.136 | attack | SSH authentication failure x 6 reported by Fail2Ban ... |
2020-08-12 19:45:39 |
| 190.219.2.229 | attackbots | Automatic report - Port Scan Attack |
2020-08-12 20:08:06 |
| 201.68.224.51 | attackbots | Unauthorized connection attempt from IP address 201.68.224.51 on Port 445(SMB) |
2020-08-12 19:51:52 |
| 14.161.11.125 | attack | Port Scan ... |
2020-08-12 20:17:16 |