城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 216.180.128.0 - 216.180.143.255
CIDR: 216.180.128.0/20
NetName: SHADOW-NET2
NetHandle: NET-216-180-128-0-1
Parent: NET216 (NET-216-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Shadow (SU-645)
RegDate: 2018-11-09
Updated: 2021-12-17
Ref: https://rdap.arin.net/registry/ip/216.180.128.0
OrgName: Shadow
OrgId: SU-645
Address: 600 California ST
City: SAN FRANCISCO
StateProv: CA
PostalCode: 94108
Country: US
RegDate: 2021-10-08
Updated: 2026-04-23
Ref: https://rdap.arin.net/registry/entity/SU-645
OrgAbuseHandle: ABUSE8249-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-650-597-2177
OrgAbuseEmail: abuse@shadow.tech
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE8249-ARIN
OrgTechHandle: PRIGE1-ARIN
OrgTechName: Prigent, Yohann
OrgTechPhone: +33613501572
OrgTechEmail: yohann.prigent@shadow.tech
OrgTechRef: https://rdap.arin.net/registry/entity/PRIGE1-ARIN
OrgTechHandle: VANBE19-ARIN
OrgTechName: Vanbelle, Edouard
OrgTechPhone: +33610645611
OrgTechEmail: edouard.vanbelle@shadow.tech
OrgTechRef: https://rdap.arin.net/registry/entity/VANBE19-ARIN
OrgTechHandle: MAUNO-ARIN
OrgTechName: Maunoury, Cedric
OrgTechPhone: +33000000000
OrgTechEmail: cedric.maunoury@shadow.tech
OrgTechRef: https://rdap.arin.net/registry/entity/MAUNO-ARIN
OrgTechHandle: NETWO9549-ARIN
OrgTechName: network
OrgTechPhone: +1-650-597-2177
OrgTechEmail: network@shadow.tech
OrgTechRef: https://rdap.arin.net/registry/entity/NETWO9549-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 216.180.135.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39295
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;216.180.135.149. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026092601 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Sep 27 07:48:48 CST 2026
;; MSG SIZE rcvd: 108149.135.180.216.in-addr.arpa domain name pointer 149-net-216-180-135.shadow.guru.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
149.135.180.216.in-addr.arpa name = 149-net-216-180-135.shadow.guru.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 80.82.77.193 | attackspambots | 06/11/2020-02:59:04.552456 80.82.77.193 Protocol: 17 ET DROP Dshield Block Listed Source group 1 |
2020-06-11 15:31:34 |
| 51.89.191.212 | attackbotsspam | DATE:2020-06-11 05:55:03, IP:51.89.191.212, PORT:1433 MSSQL brute force auth on honeypot server (epe-honey1-hq) |
2020-06-11 15:12:54 |
| 178.137.88.65 | attackspam | $f2bV_matches |
2020-06-11 15:44:31 |
| 188.166.232.14 | attackspambots | Jun 11 05:54:04 PorscheCustomer sshd[18130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.232.14 Jun 11 05:54:06 PorscheCustomer sshd[18130]: Failed password for invalid user vo from 188.166.232.14 port 38358 ssh2 Jun 11 05:55:19 PorscheCustomer sshd[18172]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.232.14 ... |
2020-06-11 15:01:51 |
| 162.243.55.188 | attack | Jun 11 06:58:17 vpn01 sshd[1132]: Failed password for root from 162.243.55.188 port 39833 ssh2 Jun 11 07:08:33 vpn01 sshd[1307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.55.188 ... |
2020-06-11 15:07:26 |
| 180.249.180.138 | attackbots | Jun 11 08:48:42 lvpxxxxxxx88-92-201-20 sshd[15921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.249.180.138 user=r.r Jun 11 08:48:43 lvpxxxxxxx88-92-201-20 sshd[15921]: Failed password for r.r from 180.249.180.138 port 12770 ssh2 Jun 11 08:48:44 lvpxxxxxxx88-92-201-20 sshd[15921]: Received disconnect from 180.249.180.138: 11: Bye Bye [preauth] Jun 11 08:51:32 lvpxxxxxxx88-92-201-20 sshd[16020]: Failed password for invalid user oracle from 180.249.180.138 port 62216 ssh2 Jun 11 08:51:32 lvpxxxxxxx88-92-201-20 sshd[16020]: Received disconnect from 180.249.180.138: 11: Bye Bye [preauth] Jun 11 08:52:40 lvpxxxxxxx88-92-201-20 sshd[16066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.249.180.138 user=r.r Jun 11 08:52:43 lvpxxxxxxx88-92-201-20 sshd[16066]: Failed password for r.r from 180.249.180.138 port 22400 ssh2 Jun 11 08:52:43 lvpxxxxxxx88-92-201-20 sshd[16066]: Received disc........ ------------------------------- |
2020-06-11 15:35:24 |
| 222.186.15.158 | attack | 2020-06-11T07:15:27.010885server.espacesoutien.com sshd[8241]: Failed password for root from 222.186.15.158 port 64310 ssh2 2020-06-11T07:15:29.234901server.espacesoutien.com sshd[8241]: Failed password for root from 222.186.15.158 port 64310 ssh2 2020-06-11T07:15:31.440402server.espacesoutien.com sshd[8252]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.158 user=root 2020-06-11T07:15:32.944573server.espacesoutien.com sshd[8252]: Failed password for root from 222.186.15.158 port 57196 ssh2 ... |
2020-06-11 15:16:00 |
| 35.189.172.158 | attackbots | 'Fail2Ban' |
2020-06-11 15:29:01 |
| 51.38.238.165 | attackspam | Jun 11 09:36:16 piServer sshd[11852]: Failed password for root from 51.38.238.165 port 38310 ssh2 Jun 11 09:39:43 piServer sshd[12164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.238.165 Jun 11 09:39:44 piServer sshd[12164]: Failed password for invalid user fyj from 51.38.238.165 port 41526 ssh2 ... |
2020-06-11 15:45:07 |
| 91.185.53.131 | attackspambots | 20/6/10@23:55:16: FAIL: Alarm-Network address from=91.185.53.131 20/6/10@23:55:16: FAIL: Alarm-Network address from=91.185.53.131 ... |
2020-06-11 15:03:32 |
| 45.55.80.186 | attackbots | $f2bV_matches |
2020-06-11 15:34:58 |
| 51.68.127.137 | attack | Jun 11 06:55:10 hosting sshd[31916]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.ip-51-68-127.eu user=root Jun 11 06:55:12 hosting sshd[31916]: Failed password for root from 51.68.127.137 port 56208 ssh2 ... |
2020-06-11 15:07:03 |
| 122.51.10.222 | attackspambots | Jun 11 08:37:50 mail sshd\[11417\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.10.222 user=root Jun 11 08:37:53 mail sshd\[11417\]: Failed password for root from 122.51.10.222 port 53582 ssh2 Jun 11 08:41:45 mail sshd\[11560\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.10.222 user=root ... |
2020-06-11 15:21:24 |
| 138.68.226.234 | attackbotsspam | Jun 11 09:36:42 legacy sshd[11225]: Failed password for root from 138.68.226.234 port 53094 ssh2 Jun 11 09:38:26 legacy sshd[11302]: Failed password for root from 138.68.226.234 port 51914 ssh2 ... |
2020-06-11 15:44:06 |
| 106.52.55.146 | attackspam | "fail2ban match" |
2020-06-11 15:25:54 |