城市(city): unknown
省份(region): unknown
国家(country): IANA Special-Purpose Address
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#
NetRange: 192.168.0.0 - 192.168.255.255
CIDR: 192.168.0.0/16
NetName: PRIVATE-ADDRESS-CBLK-RFC1918-IANA-RESERVED
NetHandle: NET-192-168-0-0-1
Parent: NET192 (NET-192-0-0-0-0)
NetType: IANA Special Use
OriginAS:
Organization: Internet Assigned Numbers Authority (IANA)
RegDate: 1994-03-15
Updated: 2024-05-24
Comment: These addresses are in use by many millions of independently operated networks, which might be as small as a single computer connected to a home gateway, and are automatically configured in hundreds of millions of devices. They are only intended for use within a private context and traffic that needs to cross the Internet will need to use a different, unique address.
Comment:
Comment: These addresses can be used by anyone without any need to coordinate with IANA or an Internet registry. The traffic from these addresses does not come from ICANN or IANA. We are not the source of activity you may see on logs or in e-mail records. Please refer to http://www.iana.org/abuse/answers
Comment:
Comment: These addresses were assigned by the IETF, the organization that develops Internet protocols, in the Best Current Practice document, RFC 1918 which can be found at:
Comment: http://datatracker.ietf.org/doc/rfc1918
Ref: https://rdap.arin.net/registry/ip/192.168.0.0
OrgName: Internet Assigned Numbers Authority
OrgId: IANA
Address: 12025 Waterfront Drive
Address: Suite 300
City: Los Angeles
StateProv: CA
PostalCode: 90292
Country: US
RegDate:
Updated: 2024-05-24
Ref: https://rdap.arin.net/registry/entity/IANA
OrgAbuseHandle: IANA-IP-ARIN
OrgAbuseName: ICANN
OrgAbusePhone: +1-310-301-5820
OrgAbuseEmail: abuse@iana.org
OrgAbuseRef: https://rdap.arin.net/registry/entity/IANA-IP-ARIN
OrgTechHandle: IANA-IP-ARIN
OrgTechName: ICANN
OrgTechPhone: +1-310-301-5820
OrgTechEmail: abuse@iana.org
OrgTechRef: https://rdap.arin.net/registry/entity/IANA-IP-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 192.168.34.15
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15867
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;192.168.34.15. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025100302 1800 900 604800 86400
;; Query time: 150 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 04 05:40:05 CST 2025
;; MSG SIZE rcvd: 106Host 15.34.168.192.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 15.34.168.192.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 111.231.225.80 | attack | Feb 18 01:27:00 pkdns2 sshd\[50471\]: Invalid user kjs from 111.231.225.80Feb 18 01:27:02 pkdns2 sshd\[50471\]: Failed password for invalid user kjs from 111.231.225.80 port 43756 ssh2Feb 18 01:29:14 pkdns2 sshd\[50554\]: Invalid user vhost from 111.231.225.80Feb 18 01:29:16 pkdns2 sshd\[50554\]: Failed password for invalid user vhost from 111.231.225.80 port 34460 ssh2Feb 18 01:31:31 pkdns2 sshd\[50663\]: Invalid user admin from 111.231.225.80Feb 18 01:31:33 pkdns2 sshd\[50663\]: Failed password for invalid user admin from 111.231.225.80 port 53398 ssh2 ... |
2020-02-18 07:54:00 |
| 83.97.20.33 | attackbotsspam | 02/18/2020-00:50:11.009426 83.97.20.33 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2020-02-18 08:04:01 |
| 222.186.175.217 | attackspambots | Feb 18 00:47:57 web2 sshd[8871]: Failed password for root from 222.186.175.217 port 31204 ssh2 Feb 18 00:48:00 web2 sshd[8871]: Failed password for root from 222.186.175.217 port 31204 ssh2 |
2020-02-18 07:56:39 |
| 37.120.249.77 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2020-02-18 08:06:51 |
| 222.186.175.181 | attackbots | 2020-02-18T00:42:30.987494 sshd[14528]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.181 user=root 2020-02-18T00:42:33.481219 sshd[14528]: Failed password for root from 222.186.175.181 port 22774 ssh2 2020-02-18T00:42:37.232569 sshd[14528]: Failed password for root from 222.186.175.181 port 22774 ssh2 2020-02-18T00:42:30.987494 sshd[14528]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.181 user=root 2020-02-18T00:42:33.481219 sshd[14528]: Failed password for root from 222.186.175.181 port 22774 ssh2 2020-02-18T00:42:37.232569 sshd[14528]: Failed password for root from 222.186.175.181 port 22774 ssh2 ... |
2020-02-18 07:52:53 |
| 211.72.239.243 | attackspam | Ssh brute force |
2020-02-18 08:22:01 |
| 185.176.27.246 | attackspam | Feb 17 23:51:20 h2177944 kernel: \[5177781.891472\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.246 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=53057 PROTO=TCP SPT=40930 DPT=6850 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 17 23:51:20 h2177944 kernel: \[5177781.891487\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.246 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=53057 PROTO=TCP SPT=40930 DPT=6850 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 18 00:52:05 h2177944 kernel: \[5181426.610493\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.246 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=48889 PROTO=TCP SPT=40930 DPT=7397 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 18 00:52:05 h2177944 kernel: \[5181426.610506\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.246 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=48889 PROTO=TCP SPT=40930 DPT=7397 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 18 00:52:05 h2177944 kernel: \[5181426.709513\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.246 DST=85.214. |
2020-02-18 07:57:13 |
| 118.24.208.253 | attackspam | Feb 18 00:21:04 legacy sshd[1025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.208.253 Feb 18 00:21:06 legacy sshd[1025]: Failed password for invalid user p4sSw0rd from 118.24.208.253 port 45650 ssh2 Feb 18 00:24:49 legacy sshd[1276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.208.253 ... |
2020-02-18 07:54:59 |
| 78.112.62.191 | attackspam | 2020-01-16T04:09:43.817197suse-nuc sshd[15909]: Invalid user ardi from 78.112.62.191 port 40630 ... |
2020-02-18 07:49:45 |
| 37.123.143.120 | attackspambots | MultiHost/MultiPort Probe, Scan, Hack - |
2020-02-18 07:53:46 |
| 181.199.255.154 | attack | php WP PHPmyadamin ABUSE blocked for 12h |
2020-02-18 08:07:52 |
| 140.143.93.31 | attackspam | $f2bV_matches |
2020-02-18 07:47:09 |
| 78.106.46.67 | attackbots | 2020-02-16T03:57:47.631891suse-nuc sshd[3079]: Invalid user absalom from 78.106.46.67 port 48074 ... |
2020-02-18 07:50:42 |
| 36.45.183.185 | attackbotsspam | Port probing on unauthorized port 1433 |
2020-02-18 08:20:55 |
| 117.173.67.119 | attack | Brute-force attempt banned |
2020-02-18 08:02:07 |