城市(city): Chicago
省份(region): Illinois
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 164.155.0.0 - 164.155.255.255
CIDR: 164.155.0.0/16
NetName: AFRINIC-164-155-0-0
NetHandle: NET-164-155-0-0-1
Parent: NET164 (NET-164-0-0-0-0)
NetType: Transferred to AfriNIC
OriginAS:
Organization: African Network Information Center (AFRINIC)
RegDate: 2005-02-21
Updated: 2005-02-21
Comment: This IP address range is under AFRINIC responsibility.
Comment: Please see http://www.afrinic.net/ for further details,
Comment: or check the WHOIS server located at whois.afrinic.net.
Ref: https://rdap.arin.net/registry/ip/164.155.0.0
ResourceLink: http://afrinic.net/en/services/whois-query
ResourceLink: whois.afrinic.net
OrgName: African Network Information Center
OrgId: AFRINIC
Address: Level 11ABC
Address: Raffles Tower
Address: Lot 19, Cybercity
City: Ebene
StateProv:
PostalCode:
Country: MU
RegDate: 2004-05-17
Updated: 2015-05-04
Comment: AfriNIC - http://www.afrinic.net
Comment: The African & Indian Ocean Internet Registry
Ref: https://rdap.arin.net/registry/entity/AFRINIC
ReferralServer: whois://whois.afrinic.net
ResourceLink: http://afrinic.net/en/services/whois-query
OrgAbuseHandle: GENER11-ARIN
OrgAbuseName: Generic POC
OrgAbusePhone: +230 4666616
OrgAbuseEmail: abusepoc@afrinic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/GENER11-ARIN
OrgTechHandle: GENER11-ARIN
OrgTechName: Generic POC
OrgTechPhone: +230 4666616
OrgTechEmail: abusepoc@afrinic.net
OrgTechRef: https://rdap.arin.net/registry/entity/GENER11-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to whois.afrinic.net.
% This is the AfriNIC Whois server.
% The AFRINIC whois database is subject to the following terms of Use. See https://afrinic.net/whois/terms
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '164.155.0.0 - 164.155.255.255'
% No abuse contact registered for 164.155.0.0 - 164.155.255.255
inetnum: 164.155.0.0 - 164.155.255.255
netname: SENTRACHEM
descr: Sentrachem Limited
descr: PO BOX 781811
descr: Sandton, 2146
country: ZA
org: ORG-SL72-AFRINIC
admin-c: ALH1-AFRINIC
tech-c: ALH1-AFRINIC
status: ASSIGNED PI
remarks: ============REMARK===================
remarks: The custodianship of this IP prefix is presently
remarks: deemed to be in dispute. Consequently,
remarks: no change request pertaining to this particular
remarks: prefix will be entertained by AFRINIC until the
remarks: issue is finally resolved between the disputants
remarks: themselves or by a competent authority.
remarks: Further, whilst the current holder of the said prefix
remarks: continues to hold same, AFRINIC shall bear no
remarks: responsibility whatsoever in relation thereto and
remarks: disputants are encouraged to resolve the said
remarks: dispute expeditiously.
remarks: ============REMARK====================
mnt-by: AFRINIC-HM-MNT
mnt-lower: AFRINIC-LH-MNT
source: AFRINIC # Filtered
parent: 0.0.0.0 - 255.255.255.255
organisation: ORG-SL72-AFRINIC
org-name: Sentrachem Limited
org-type: EU-PI
country: ZA
address: PO BOX 781811
address: Sandton, 2146
address: Johannesburg
phone: tel:+230-403-5100
admin-c: ALH1-AFRINIC
tech-c: ALH1-AFRINIC
mnt-ref: AFRINIC-HM-MNT
mnt-ref: AFRINIC-LH-MNT
mnt-by: AFRINIC-HM-MNT
source: AFRINIC # Filtered
role: AFRINIC LH HOSTMASTERS
address: 11th Floor, Standard Chartered Tower
address: 19, Cybercity
address: Ebène, Mauritius
admin-c: JC17-AFRINIC
tech-c: JC17-AFRINIC
tech-c: NMB1-AFRINIC
nic-hdl: ALH1-AFRINIC
mnt-by: AFRINIC-LH-MNT
source: AFRINIC # Filtered; <<>> DiG 9.10.3-P4-Ubuntu <<>> 164.155.74.72
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35941
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;164.155.74.72. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026042402 1800 900 604800 86400
;; Query time: 30 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Apr 25 07:30:51 CST 2026
;; MSG SIZE rcvd: 106Host 72.74.155.164.in-addr.arpa not found: 2(SERVFAIL)
server can't find 164.155.74.72.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 37.59.224.39 | attackspambots | 5x Failed Password |
2020-09-12 20:38:26 |
| 178.34.162.154 | attackbots | 1599843561 - 09/11/2020 18:59:21 Host: 178.34.162.154/178.34.162.154 Port: 445 TCP Blocked |
2020-09-12 20:28:03 |
| 162.243.232.174 | attack | Invalid user it from 162.243.232.174 port 53592 |
2020-09-12 20:51:41 |
| 54.36.190.245 | attack | Tried sshing with brute force. |
2020-09-12 20:15:21 |
| 212.47.238.207 | attack | Bruteforce detected by fail2ban |
2020-09-12 20:47:02 |
| 197.40.217.116 | attack | Threat Management Alert 1: Attempted Administrator Privilege Gain. Signature ET EXPLOIT MVPower DVR Shell UCE. From: 197.40.217.116:40747, to: 192.168.4.99:80, protocol: TCP |
2020-09-12 20:37:09 |
| 106.52.102.190 | attackspambots | Invalid user afirouz from 106.52.102.190 port 35025 |
2020-09-12 20:15:49 |
| 206.189.231.196 | attackspam | 206.189.231.196 - - [12/Sep/2020:07:36:30 +0100] "POST /wp-login.php HTTP/1.1" 200 2221 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 206.189.231.196 - - [12/Sep/2020:07:36:32 +0100] "POST /wp-login.php HTTP/1.1" 200 2171 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 206.189.231.196 - - [12/Sep/2020:07:36:32 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-09-12 20:20:55 |
| 187.188.111.161 | attackbots | Dovecot Invalid User Login Attempt. |
2020-09-12 20:49:21 |
| 124.137.205.59 | attack | fail2ban detected brute force on sshd |
2020-09-12 20:30:45 |
| 92.167.25.241 | attackbotsspam | Hits on port : 445 |
2020-09-12 20:41:59 |
| 179.113.67.230 | attackspambots | php WP PHPmyadamin ABUSE blocked for 12h |
2020-09-12 20:43:07 |
| 203.95.220.39 | attackspambots | 1599843574 - 09/11/2020 18:59:34 Host: 203.95.220.39/203.95.220.39 Port: 445 TCP Blocked |
2020-09-12 20:20:14 |
| 212.70.149.68 | attackspambots | Sep 12 14:24:09 cho postfix/smtps/smtpd[2755991]: warning: unknown[212.70.149.68]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 12 14:26:13 cho postfix/smtps/smtpd[2755991]: warning: unknown[212.70.149.68]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 12 14:28:16 cho postfix/smtps/smtpd[2755991]: warning: unknown[212.70.149.68]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 12 14:30:18 cho postfix/smtps/smtpd[2755991]: warning: unknown[212.70.149.68]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 12 14:32:22 cho postfix/smtps/smtpd[2755991]: warning: unknown[212.70.149.68]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-09-12 20:46:32 |
| 177.16.98.132 | attackspam | Sep 11 00:16:42 v26 sshd[16306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.16.98.132 user=r.r Sep 11 00:16:44 v26 sshd[16306]: Failed password for r.r from 177.16.98.132 port 37870 ssh2 Sep 11 00:16:45 v26 sshd[16306]: Received disconnect from 177.16.98.132 port 37870:11: Bye Bye [preauth] Sep 11 00:16:45 v26 sshd[16306]: Disconnected from 177.16.98.132 port 37870 [preauth] Sep 11 00:40:04 v26 sshd[18607]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.16.98.132 user=r.r Sep 11 00:40:06 v26 sshd[18607]: Failed password for r.r from 177.16.98.132 port 42662 ssh2 Sep 11 00:40:06 v26 sshd[18607]: Received disconnect from 177.16.98.132 port 42662:11: Bye Bye [preauth] Sep 11 00:40:06 v26 sshd[18607]: Disconnected from 177.16.98.132 port 42662 [preauth] Sep 11 00:49:31 v26 sshd[19564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.16......... ------------------------------- |
2020-09-12 20:12:54 |