城市(city): Barcelona
省份(region): Catalunya
国家(country): Spain
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 146.70.0.0 - 146.70.255.255
CIDR: 146.70.0.0/16
NetName: RIPE-ERX-146-70-0-0
NetHandle: NET-146-70-0-0-1
Parent: NET146 (NET-146-0-0-0-0)
NetType: Early Registrations, Transferred to RIPE NCC
OriginAS:
Organization: RIPE Network Coordination Centre (RIPE)
RegDate: 2004-02-04
Updated: 2025-02-10
Comment: These addresses have been further assigned to users in the RIPE NCC region. Please note that the organization and point of contact details listed below are those of the RIPE NCC not the current address holder. ** You can find user contact information for the current address holder in the RIPE database at http://www.ripe.net/whois.
Ref: https://rdap.arin.net/registry/ip/146.70.0.0
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
ResourceLink: whois.ripe.net
OrgName: RIPE Network Coordination Centre
OrgId: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL
RegDate:
Updated: 2013-07-29
Ref: https://rdap.arin.net/registry/entity/RIPE
ReferralServer: whois.ripe.net
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
OrgAbuseHandle: ABUSE3850-ARIN
OrgAbuseName: Abuse Contact
OrgAbusePhone: +31205354444
OrgAbuseEmail: abuse@ripe.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3850-ARIN
OrgTechHandle: RNO29-ARIN
OrgTechName: RIPE NCC Operations
OrgTechPhone: +31 20 535 4444
OrgTechEmail: hostmaster@ripe.net
OrgTechRef: https://rdap.arin.net/registry/entity/RNO29-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 146.70.22.165
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4074
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;146.70.22.165. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026082901 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Aug 30 12:30:39 CST 2026
;; MSG SIZE rcvd: 106Host 165.22.70.146.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 165.22.70.146.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 107.170.178.103 | attack | $f2bV_matches |
2020-10-10 16:25:04 |
| 162.142.125.50 | attackbots | SSH login attempts. |
2020-10-10 16:49:36 |
| 185.132.53.85 | attackspambots | Unauthorized connection attempt detected from IP address 185.132.53.85 to port 22 |
2020-10-10 16:54:57 |
| 78.128.113.119 | attackspam | Oct 10 09:06:58 web01.agentur-b-2.de postfix/smtpd[215842]: warning: unknown[78.128.113.119]: SASL PLAIN authentication failed: Oct 10 09:06:58 web01.agentur-b-2.de postfix/smtpd[215842]: lost connection after AUTH from unknown[78.128.113.119] Oct 10 09:07:03 web01.agentur-b-2.de postfix/smtpd[215170]: lost connection after AUTH from unknown[78.128.113.119] Oct 10 09:07:07 web01.agentur-b-2.de postfix/smtpd[215842]: lost connection after AUTH from unknown[78.128.113.119] Oct 10 09:07:12 web01.agentur-b-2.de postfix/smtpd[198023]: lost connection after AUTH from unknown[78.128.113.119] |
2020-10-10 16:16:18 |
| 66.70.189.203 | attackbotsspam | Oct 10 09:43:01 ns37 sshd[21345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.70.189.203 |
2020-10-10 16:26:55 |
| 167.248.133.51 | attack | SSH login attempts. |
2020-10-10 16:32:28 |
| 114.35.44.253 | attack | Oct 10 06:13:45 srv-ubuntu-dev3 sshd[13728]: Invalid user thomas from 114.35.44.253 Oct 10 06:13:45 srv-ubuntu-dev3 sshd[13728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.35.44.253 Oct 10 06:13:45 srv-ubuntu-dev3 sshd[13728]: Invalid user thomas from 114.35.44.253 Oct 10 06:13:47 srv-ubuntu-dev3 sshd[13728]: Failed password for invalid user thomas from 114.35.44.253 port 52566 ssh2 Oct 10 06:15:39 srv-ubuntu-dev3 sshd[14106]: Invalid user karen from 114.35.44.253 Oct 10 06:15:39 srv-ubuntu-dev3 sshd[14106]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.35.44.253 Oct 10 06:15:39 srv-ubuntu-dev3 sshd[14106]: Invalid user karen from 114.35.44.253 Oct 10 06:15:41 srv-ubuntu-dev3 sshd[14106]: Failed password for invalid user karen from 114.35.44.253 port 37268 ssh2 Oct 10 06:17:37 srv-ubuntu-dev3 sshd[14418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost= ... |
2020-10-10 16:15:12 |
| 149.56.142.1 | attackspam | 149.56.142.1 - - [10/Oct/2020:09:46:40 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 149.56.142.1 - - [10/Oct/2020:09:46:42 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 149.56.142.1 - - [10/Oct/2020:09:46:43 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-10-10 16:24:09 |
| 168.227.88.39 | attackspambots | DATE:2020-10-10 10:20:02, IP:168.227.88.39, PORT:ssh SSH brute force auth (docker-dc) |
2020-10-10 16:35:27 |
| 60.250.23.233 | attackspambots | Oct 10 14:00:03 mx sshd[1318796]: Invalid user amavis from 60.250.23.233 port 36366 Oct 10 14:00:03 mx sshd[1318796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.250.23.233 Oct 10 14:00:03 mx sshd[1318796]: Invalid user amavis from 60.250.23.233 port 36366 Oct 10 14:00:04 mx sshd[1318796]: Failed password for invalid user amavis from 60.250.23.233 port 36366 ssh2 Oct 10 14:04:40 mx sshd[1318891]: Invalid user test from 60.250.23.233 port 38946 ... |
2020-10-10 16:38:13 |
| 165.231.148.189 | attack | IP: 165.231.148.189
Ports affected
Simple Mail Transfer (25)
Abuse Confidence rating 94%
Found in DNSBL('s)
ASN Details
AS37518 FIBERGRID
Sweden (SE)
CIDR 165.231.148.0/23
Log Date: 10/10/2020 2:04:43 AM UTC |
2020-10-10 16:48:45 |
| 27.150.22.155 | attackspambots | k+ssh-bruteforce |
2020-10-10 16:52:30 |
| 212.70.149.36 | attack | 2020-10-10 11:11:15 dovecot_login authenticator failed for \(User\) \[212.70.149.36\]: 535 Incorrect authentication data \(set_id=videos2@org.ua\)2020-10-10 11:11:32 dovecot_login authenticator failed for \(User\) \[212.70.149.36\]: 535 Incorrect authentication data \(set_id=redirect@org.ua\)2020-10-10 11:11:49 dovecot_login authenticator failed for \(User\) \[212.70.149.36\]: 535 Incorrect authentication data \(set_id=cdn1@org.ua\) ... |
2020-10-10 16:15:36 |
| 52.255.166.214 | attackspam | SSH login attempts. |
2020-10-10 16:47:08 |
| 62.234.114.92 | attackbots | Fail2Ban |
2020-10-10 16:45:58 |