城市(city): Milan
省份(region): Lombardy
国家(country): Italy
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 159.147.0.0 - 159.149.255.255
CIDR: 159.148.0.0/15, 159.147.0.0/16
NetName: RIPE-ERX-159-147-0-0
NetHandle: NET-159-147-0-0-1
Parent: NET159 (NET-159-0-0-0-0)
NetType: Early Registrations, Transferred to RIPE NCC
OriginAS:
Organization: RIPE Network Coordination Centre (RIPE)
RegDate: 2003-10-29
Updated: 2025-02-10
Comment: These addresses have been further assigned to users in the RIPE NCC region. Please note that the organization and point of contact details listed below are those of the RIPE NCC not the current address holder. ** You can find user contact information for the current address holder in the RIPE database at http://www.ripe.net/whois.
Ref: https://rdap.arin.net/registry/ip/159.147.0.0
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
ResourceLink: whois.ripe.net
OrgName: RIPE Network Coordination Centre
OrgId: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL
RegDate:
Updated: 2013-07-29
Ref: https://rdap.arin.net/registry/entity/RIPE
ReferralServer: whois.ripe.net
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
OrgAbuseHandle: ABUSE3850-ARIN
OrgAbuseName: Abuse Contact
OrgAbusePhone: +31205354444
OrgAbuseEmail: abuse@ripe.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3850-ARIN
OrgTechHandle: RNO29-ARIN
OrgTechName: RIPE NCC Operations
OrgTechPhone: +31 20 535 4444
OrgTechEmail: hostmaster@ripe.net
OrgTechRef: https://rdap.arin.net/registry/entity/RNO29-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 159.149.163.25
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26227
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;159.149.163.25. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026051500 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri May 15 22:05:18 CST 2026
;; MSG SIZE rcvd: 10725.163.149.159.in-addr.arpa domain name pointer dhcp-163-25.celoria26-16000022-smfn_biodip.unimi.it.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
25.163.149.159.in-addr.arpa name = dhcp-163-25.celoria26-16000022-smfn_biodip.unimi.it.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 118.71.97.191 | attackspambots | Unauthorized connection attempt from IP address 118.71.97.191 on Port 445(SMB) |
2020-04-07 20:46:12 |
| 121.121.42.138 | attackbotsspam | Honeypot attack, port: 445, PTR: PTR record not found |
2020-04-07 21:37:57 |
| 89.218.78.226 | attack | 20/4/7@08:50:59: FAIL: Alarm-Network address from=89.218.78.226 ... |
2020-04-07 21:35:04 |
| 112.120.21.141 | attackbots | Attempted connection to port 88. |
2020-04-07 20:47:46 |
| 185.123.164.52 | attack | Apr 7 14:47:40 eventyay sshd[32457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.123.164.52 Apr 7 14:47:43 eventyay sshd[32457]: Failed password for invalid user admin from 185.123.164.52 port 49058 ssh2 Apr 7 14:51:19 eventyay sshd[32565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.123.164.52 ... |
2020-04-07 21:05:02 |
| 165.22.101.76 | attackbotsspam | Apr 7 14:48:39 markkoudstaal sshd[26592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.101.76 Apr 7 14:48:41 markkoudstaal sshd[26592]: Failed password for invalid user xbox from 165.22.101.76 port 32814 ssh2 Apr 7 14:51:22 markkoudstaal sshd[26997]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.101.76 |
2020-04-07 21:00:18 |
| 51.83.40.227 | attack | SSH Brute-Force attacks |
2020-04-07 21:14:32 |
| 124.166.232.197 | attackspambots | Bad bot/spoofed identity |
2020-04-07 21:27:50 |
| 36.80.64.187 | attackbotsspam | Unauthorized connection attempt from IP address 36.80.64.187 on Port 445(SMB) |
2020-04-07 20:45:17 |
| 37.49.226.10 | attack | Apr 7 14:51:22 debian-2gb-nbg1-2 kernel: \[8522903.243451\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=37.49.226.10 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=1819 PROTO=TCP SPT=56412 DPT=5038 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-04-07 21:01:14 |
| 115.84.112.98 | attack | (sshd) Failed SSH login from 115.84.112.98 (LA/Laos/ftth.laotel.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 7 08:57:38 localhost sshd[26949]: Failed password for postgres from 115.84.112.98 port 37510 ssh2 Apr 7 09:03:11 localhost sshd[27392]: Invalid user logview from 115.84.112.98 port 53064 Apr 7 09:03:13 localhost sshd[27392]: Failed password for invalid user logview from 115.84.112.98 port 53064 ssh2 Apr 7 09:08:09 localhost sshd[27770]: Invalid user deploy from 115.84.112.98 port 33148 Apr 7 09:08:11 localhost sshd[27770]: Failed password for invalid user deploy from 115.84.112.98 port 33148 ssh2 |
2020-04-07 21:09:40 |
| 20.44.32.235 | attack | RDP Brute-Force (Grieskirchen RZ2) |
2020-04-07 21:22:40 |
| 112.85.42.174 | attack | Apr 7 15:27:52 eventyay sshd[1542]: Failed password for root from 112.85.42.174 port 16477 ssh2 Apr 7 15:28:05 eventyay sshd[1542]: error: maximum authentication attempts exceeded for root from 112.85.42.174 port 16477 ssh2 [preauth] Apr 7 15:28:11 eventyay sshd[1545]: Failed password for root from 112.85.42.174 port 44767 ssh2 ... |
2020-04-07 21:35:41 |
| 170.210.214.50 | attack | Apr 7 17:47:03 gw1 sshd[24936]: Failed password for ubuntu from 170.210.214.50 port 38068 ssh2 ... |
2020-04-07 21:20:59 |
| 222.186.175.183 | attackspam | 2020-04-07T13:09:50.594644abusebot-7.cloudsearch.cf sshd[3729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.183 user=root 2020-04-07T13:09:52.934599abusebot-7.cloudsearch.cf sshd[3729]: Failed password for root from 222.186.175.183 port 61440 ssh2 2020-04-07T13:09:56.036982abusebot-7.cloudsearch.cf sshd[3729]: Failed password for root from 222.186.175.183 port 61440 ssh2 2020-04-07T13:09:50.594644abusebot-7.cloudsearch.cf sshd[3729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.183 user=root 2020-04-07T13:09:52.934599abusebot-7.cloudsearch.cf sshd[3729]: Failed password for root from 222.186.175.183 port 61440 ssh2 2020-04-07T13:09:56.036982abusebot-7.cloudsearch.cf sshd[3729]: Failed password for root from 222.186.175.183 port 61440 ssh2 2020-04-07T13:09:50.594644abusebot-7.cloudsearch.cf sshd[3729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ... |
2020-04-07 21:16:22 |