城市(city): Lagos
省份(region): Lagos
国家(country): Nigeria
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 165.154.118.192 | attackproxy | Malicious IP / Malware |
2024-04-29 16:13:58 |
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#
NetRange: 165.154.0.0 - 165.154.255.255
CIDR: 165.154.0.0/16
NetName: APNIC
NetHandle: NET-165-154-0-0-1
Parent: NET165 (NET-165-0-0-0-0)
NetType: Early Registrations, Transferred to APNIC
OriginAS:
Organization: Asia Pacific Network Information Centre (APNIC)
RegDate: 2021-02-16
Updated: 2021-02-16
Ref: https://rdap.arin.net/registry/ip/165.154.0.0
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
ResourceLink: whois://whois.apnic.net
OrgName: Asia Pacific Network Information Centre
OrgId: APNIC
Address: PO Box 3646
City: South Brisbane
StateProv: QLD
PostalCode: 4101
Country: AU
RegDate:
Updated: 2012-01-24
Ref: https://rdap.arin.net/registry/entity/APNIC
ReferralServer: whois://whois.apnic.net
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3188
OrgTechEmail: search-apnic-not-arin@apnic.net
OrgTechRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
OrgAbuseHandle: AWC12-ARIN
OrgAbuseName: APNIC Whois Contact
OrgAbusePhone: +61 7 3858 3188
OrgAbuseEmail: search-apnic-not-arin@apnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#
Found a referral to whois.apnic.net.
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '165.154.10.0 - 165.154.11.255'
% Abuse contact for '165.154.10.0 - 165.154.11.255' is 'hegui@ucloud.cn'
inetnum: 165.154.10.0 - 165.154.11.255
netname: UCLOUD-NG
descr: UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
country: NG
admin-c: UITH2-AP
tech-c: UITH2-AP
abuse-c: AU164-AP
status: ALLOCATED NON-PORTABLE
mnt-by: MAINT-UCLOUD-HK
mnt-irt: IRT-UCLOUD-HK
last-modified: 2023-03-09T09:14:01Z
source: APNIC
irt: IRT-UCLOUD-HK
address: FLAT/RM 603 6/F, LAWS COMMERCIAL PLAZA, 788 CHEUNG SHA WAN ROAD, KL,, Hong Kong
e-mail: pn-wan@ucloud.cn
abuse-mailbox: hegui@ucloud.cn
admin-c: UITH2-AP
tech-c: UITH2-AP
auth: # Filtered
remarks: hegui@ucloud.cn was validated on 2025-07-01
remarks: pn-wan@ucloud.cn was validated on 2025-07-01
mnt-by: MAINT-UCLOUD-HK
last-modified: 2025-09-04T07:41:27Z
source: APNIC
role: ABUSE UCLOUDHK
country: ZZ
address: FLAT/RM 603 6/F, LAWS COMMERCIAL PLAZA, 788 CHEUNG SHA WAN ROAD, KL,, Hong Kong
phone: +000000000
e-mail: pn-wan@ucloud.cn
admin-c: UITH2-AP
tech-c: UITH2-AP
nic-hdl: AU164-AP
remarks: Generated from irt object IRT-UCLOUD-HK
remarks: hegui@ucloud.cn was validated on 2025-07-01
remarks: pn-wan@ucloud.cn was validated on 2025-07-01
abuse-mailbox: hegui@ucloud.cn
mnt-by: APNIC-ABUSE
last-modified: 2025-07-01T09:51:21Z
source: APNIC
role: UCLOUD INFORMATION TECHNOLOGY HK LIMITED
address: FLAT/RM 603 6/F, LAWS COMMERCIAL PLAZA, 788 CHEUNG SHA WAN ROAD, KL,, Hong Kong
country: HK
phone: +000000000
e-mail: u-ipnic@ucloud.cn
admin-c: UITH2-AP
tech-c: UITH2-AP
nic-hdl: UITH2-AP
notify: hegui@ucloud.cn
mnt-by: MAINT-UCLOUD-HK
last-modified: 2022-05-16T03:54:14Z
source: APNIC
% Information related to '165.154.11.0/24AS135377'
route: 165.154.11.0/24
origin: AS135377
descr: UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
FLAT/RM 603 6/F
LAWS COMMERCIAL PLAZA
788 CHEUNG SHA WAN ROAD, KL,
mnt-by: MAINT-UCLOUD-HK
last-modified: 2021-11-17T03:32:34Z
country: NG
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.36-SNAPSHOT (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 165.154.11.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23513
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;165.154.11.52. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025100600 1800 900 604800 86400
;; Query time: 89 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Oct 06 23:02:36 CST 2025
;; MSG SIZE rcvd: 106Host 52.11.154.165.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 52.11.154.165.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 202.29.39.1 | attack | SSH |
2020-09-09 07:32:22 |
| 121.165.94.174 | attackbots | RDP brute force attack detected by fail2ban |
2020-09-09 07:33:40 |
| 112.85.42.67 | attack | Sep 8 19:28:55 plusreed sshd[9367]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.67 user=root Sep 8 19:28:57 plusreed sshd[9367]: Failed password for root from 112.85.42.67 port 51856 ssh2 ... |
2020-09-09 07:34:37 |
| 113.88.248.229 | attack | Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth): user=root |
2020-09-09 07:36:56 |
| 141.98.9.165 | attack | 2020-09-08T06:06:34.683326correo.[domain] sshd[17498]: Invalid user user from 141.98.9.165 port 40635 2020-09-08T06:06:36.306907correo.[domain] sshd[17498]: Failed password for invalid user user from 141.98.9.165 port 40635 ssh2 2020-09-08T06:07:03.124598correo.[domain] sshd[17550]: Invalid user guest from 141.98.9.165 port 33817 ... |
2020-09-09 07:29:01 |
| 219.153.33.234 | attackbots | Sep 8 22:58:28 scw-6657dc sshd[787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.153.33.234 user=root Sep 8 22:58:28 scw-6657dc sshd[787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.153.33.234 user=root Sep 8 22:58:30 scw-6657dc sshd[787]: Failed password for root from 219.153.33.234 port 24091 ssh2 ... |
2020-09-09 07:22:34 |
| 195.146.59.157 | attack | Banned for a week because repeated abuses, for example SSH, but not only |
2020-09-09 07:31:20 |
| 121.100.17.42 | attack | Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth): user=root |
2020-09-09 07:47:09 |
| 72.167.190.212 | attack | Automatic report - XMLRPC Attack |
2020-09-09 07:35:03 |
| 106.55.13.61 | attack | Sep 8 09:52:15 dignus sshd[30185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.13.61 user=root Sep 8 09:52:17 dignus sshd[30185]: Failed password for root from 106.55.13.61 port 52702 ssh2 Sep 8 09:53:25 dignus sshd[30239]: Invalid user Leo from 106.55.13.61 port 34356 Sep 8 09:53:25 dignus sshd[30239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.13.61 Sep 8 09:53:27 dignus sshd[30239]: Failed password for invalid user Leo from 106.55.13.61 port 34356 ssh2 ... |
2020-09-09 07:48:57 |
| 103.217.243.119 | attack | Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth): user=root |
2020-09-09 07:19:46 |
| 49.232.5.122 | attack | Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth): |
2020-09-09 07:20:18 |
| 119.9.86.172 | attack | Sep 9 01:25:02 gw1 sshd[32396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.9.86.172 Sep 9 01:25:03 gw1 sshd[32396]: Failed password for invalid user debian from 119.9.86.172 port 59769 ssh2 ... |
2020-09-09 07:28:24 |
| 45.142.120.209 | attackbotsspam | Sep 9 01:04:25 mail postfix/smtpd\[14987\]: warning: unknown\[45.142.120.209\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Sep 9 01:05:10 mail postfix/smtpd\[14804\]: warning: unknown\[45.142.120.209\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Sep 9 01:05:50 mail postfix/smtpd\[14987\]: warning: unknown\[45.142.120.209\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Sep 9 01:36:06 mail postfix/smtpd\[16321\]: warning: unknown\[45.142.120.209\]: SASL LOGIN authentication failed: VXNlcm5hbWU6\ |
2020-09-09 07:41:36 |
| 103.248.33.51 | attack | 2020-09-08T01:00:56.820326hostname sshd[52497]: Failed password for root from 103.248.33.51 port 37362 ssh2 ... |
2020-09-09 07:38:53 |