城市(city): unknown
省份(region): unknown
国家(country): South Africa
运营商(isp): Telkom
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
% This is the AfriNIC Whois server.
% The AFRINIC whois database is subject to the following terms of Use. See https://afrinic.net/whois/terms
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '165.149.0.0 - 165.149.255.255'
% No abuse contact registered for 165.149.0.0 - 165.149.255.255
inetnum: 165.149.0.0 - 165.149.255.255
netname: IPNET-VPNS
descr: Telkom SA Limited
descr: Integrated Network Planning
descr: Private Bag X74
descr: Pretoria
descr: Gauteng
descr: 0001
country: ZA
admin-c: MST95-AFRINIC
tech-c: PB455-AFRINIC
tech-c: JDU24-AFRINIC
status: ASSIGNED PA
remarks: noc e-mail: , phone: +27-12-680-7569
remarks: abuse e-mail: , phone: +27-12-685-4209,fax: +27-12-685-4629
mnt-by: TF-165-143-0-0-165-149-255-255-MNT
mnt-lower: TF-165-143-0-0-165-149-255-255-MNT
source: AFRINIC # Filtered
parent: 165.148.0.0 - 165.149.255.255
person: Johan du Preez
nic-hdl: JDU24-AFRINIC
address: Telkom SA (Openserve)
address: Core Building
address: 61 Oak Avenue
address: Gauteng
address: Centurion 0046
address: South Africa
phone: tel:+27-12-685-4199
remarks: Abuse complaints can be directed to abuse@saix.net
remarks: DNS Issues can be directed to dnsadmin@saix.net
mnt-by: GENERATED-T8XQSG3BCZVRFIRQRGAAWCDUWFUE9GF9-MNT
source: AFRINIC # Filtered
person: Markus Stoltz
address: Integrated Network Planning
address: Private Bag X74
address: Gauteng
address: Pretoria 0001
address: South Africa
phone: tel:+27-12-311-1429
nic-hdl: MST95-AFRINIC
mnt-by: GENERATED-RU7EUWJ5THDNVFDETN3SO4M9QEHEDNIK-MNT
source: AFRINIC # Filtered
person: Pieter Bezuidenhout
address: Telkom SA Ltd
address: PO Box 2753
address: Pretoria
address: Gauteng
address: 0001
address: ZA
phone: tel:+1-111-111-1111
fax-no: tel:+27-21-311-1111
nic-hdl: PB455-AFRINIC
remarks: Abuse complaints can be directed to abuse@saix.net
remarks: DNS Issues can be directed to dnsadmin@saix.net. Alex, can you see this
abuse-mailbox: abuse@saix.net
mnt-by: GENERATED-VBGUTFTPI6D5BTFKNJLKEZOJLKKWX2IX-MNT
source: AFRINIC # Filtered ; <<>> DiG 9.10.3-P4-Ubuntu <<>> 165.149.49.67
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39435
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;165.149.49.67. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026042200 1800 900 604800 86400
;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Apr 22 18:33:31 CST 2026
;; MSG SIZE rcvd: 106b'Host 67.49.149.165.in-addr.arpa not found: 2(SERVFAIL)
'server can't find 165.149.49.67.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 103.208.152.184 | attackbots | Telnet Server BruteForce Attack |
2020-09-29 18:13:46 |
| 198.27.67.87 | attackbots | 198.27.67.87 - - [29/Sep/2020:07:55:19 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 198.27.67.87 - - [29/Sep/2020:08:25:02 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-09-29 18:24:42 |
| 117.4.241.135 | attackspambots | Brute-force attempt banned |
2020-09-29 17:54:28 |
| 157.230.27.30 | attackspambots | michaelklotzbier.de 157.230.27.30 [29/Sep/2020:11:30:08 +0200] "POST /wp-login.php HTTP/1.1" 200 6760 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" michaelklotzbier.de 157.230.27.30 [29/Sep/2020:11:30:11 +0200] "POST /wp-login.php HTTP/1.1" 200 6722 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-09-29 18:23:30 |
| 54.36.190.245 | attackspambots | Invalid user ftp from 54.36.190.245 port 43074 |
2020-09-29 18:08:49 |
| 196.11.81.166 | attackspam | received phishing email |
2020-09-29 18:28:22 |
| 138.97.54.231 | attack | Automatic report - Port Scan Attack |
2020-09-29 17:55:13 |
| 157.245.231.62 | attack | 2020-09-29T11:30:25.718830mail.standpoint.com.ua sshd[13471]: Invalid user db from 157.245.231.62 port 46548 2020-09-29T11:30:25.721778mail.standpoint.com.ua sshd[13471]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.231.62 2020-09-29T11:30:25.718830mail.standpoint.com.ua sshd[13471]: Invalid user db from 157.245.231.62 port 46548 2020-09-29T11:30:27.509644mail.standpoint.com.ua sshd[13471]: Failed password for invalid user db from 157.245.231.62 port 46548 ssh2 2020-09-29T11:34:17.870034mail.standpoint.com.ua sshd[13956]: Invalid user zz12345 from 157.245.231.62 port 55464 ... |
2020-09-29 18:31:50 |
| 162.243.237.90 | attackspambots | Invalid user cssserver from 162.243.237.90 port 41265 |
2020-09-29 18:06:25 |
| 106.13.146.233 | attackspam | frenzy |
2020-09-29 18:20:53 |
| 142.93.8.99 | attack | Automatic report - Banned IP Access |
2020-09-29 18:32:35 |
| 163.172.29.120 | attackbotsspam | 2020-09-29T07:54:35.187285Z 8713e0bd4e94 New connection: 163.172.29.120:58244 (172.17.0.5:2222) [session: 8713e0bd4e94] 2020-09-29T08:01:04.219233Z 220fcfe98afc New connection: 163.172.29.120:52166 (172.17.0.5:2222) [session: 220fcfe98afc] |
2020-09-29 18:00:55 |
| 165.232.39.199 | attackspam | 21 attempts against mh-ssh on stem |
2020-09-29 18:15:30 |
| 36.110.217.140 | attackbots | (sshd) Failed SSH login from 36.110.217.140 (CN/China/Beijing/Beijing/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 29 03:08:26 atlas sshd[30830]: Invalid user ftpuser from 36.110.217.140 port 38176 Sep 29 03:08:28 atlas sshd[30830]: Failed password for invalid user ftpuser from 36.110.217.140 port 38176 ssh2 Sep 29 03:22:45 atlas sshd[2343]: Invalid user admin from 36.110.217.140 port 46968 Sep 29 03:22:47 atlas sshd[2343]: Failed password for invalid user admin from 36.110.217.140 port 46968 ssh2 Sep 29 03:27:21 atlas sshd[3743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.110.217.140 user=root |
2020-09-29 18:09:44 |
| 23.98.40.21 | attackspam | Sep 29 12:05:42 buvik sshd[24851]: Invalid user deployer from 23.98.40.21 Sep 29 12:05:42 buvik sshd[24851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.98.40.21 Sep 29 12:05:44 buvik sshd[24851]: Failed password for invalid user deployer from 23.98.40.21 port 39316 ssh2 ... |
2020-09-29 18:16:23 |