城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 66.160.128.0 - 66.160.207.255
CIDR: 66.160.192.0/20, 66.160.128.0/18
NetName: HURRICANE-7
NetHandle: NET-66-160-128-0-1
Parent: NET66 (NET-66-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Hurricane Electric LLC (HURC)
RegDate: 2003-10-09
Updated: 2012-02-24
Ref: https://rdap.arin.net/registry/ip/66.160.128.0
OrgName: Hurricane Electric LLC
OrgId: HURC
Address: 760 Mission Court
City: Fremont
StateProv: CA
PostalCode: 94539
Country: US
RegDate:
Updated: 2024-11-25
Ref: https://rdap.arin.net/registry/entity/HURC
ReferralServer: rwhois://rwhois.he.net:4321
OrgTechHandle: ZH17-ARIN
OrgTechName: Hurricane Electric
OrgTechPhone: +1-510-580-4100
OrgTechEmail: hostmaster@he.net
OrgTechRef: https://rdap.arin.net/registry/entity/ZH17-ARIN
OrgAbuseHandle: ABUSE1036-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-510-580-4100
OrgAbuseEmail: abuse@he.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE1036-ARIN
RAbuseHandle: ABUSE1036-ARIN
RAbuseName: Abuse Department
RAbusePhone: +1-510-580-4100
RAbuseEmail: abuse@he.net
RAbuseRef: https://rdap.arin.net/registry/entity/ABUSE1036-ARIN
RTechHandle: ZH17-ARIN
RTechName: Hurricane Electric
RTechPhone: +1-510-580-4100
RTechEmail: hostmaster@he.net
RTechRef: https://rdap.arin.net/registry/entity/ZH17-ARIN
RNOCHandle: ZH17-ARIN
RNOCName: Hurricane Electric
RNOCPhone: +1-510-580-4100
RNOCEmail: hostmaster@he.net
RNOCRef: https://rdap.arin.net/registry/entity/ZH17-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to rwhois.he.net:4321.
%rwhois V-1.5:0012b7:00 concierge.he.net (HE-RWHOISd v:dd31ac8)
network:ID;I:NET-66.160.191.0/24
network:Auth-Area:nets
network:Class-Name:network
network:Network-Name;I:NET-66.160.191.0/24
network:Parent;I:NET-66.160.128.0/18
network:IP-Network:66.160.191.0/24
network:Org-Contact;I:POC-DC-3683
network:Tech-Contact;I:POC-HE-NOC
network:Abuse-Contact;I:POC-HE-ABUSE
network:NOC-Contact;I:POC-HE-NOC
network:Created:20220519163022000
network:Updated:20220519163022000
contact:ID;I:POC-DC-3683
contact:Auth-Area:contacts
contact:Class-Name:contact
contact:Name:Wang Heng
contact:Company:Enjoyvc Cloud Group Limited
contact:Street-Address:Rm 601, Building No 10 Xianlie Zhong Rd, Yuexiu District
contact:City:Guangdong
contact:Province:N/A
contact:Postal-Code:
contact:Country-Code:CN
contact:Phone:-
contact:E-Mail:-
contact:Created:20220513203003000
contact:Updated:20220513203003000
contact:ID;I:POC-HE-NOC
contact:Auth-Area:contacts
contact:Class-Name:contact
contact:Name:Network Operations Center
contact:Company:Hurricane Electric
contact:Street-Address:760 Mission Ct
contact:City:Fremont
contact:Province:CA
contact:Postal-Code:94539
contact:Country-Code:US
contact:Phone:+1-510-580-4100
contact:E-Mail:noc@he.net
contact:Created:20100901200738000
contact:Updated:20100901200738000
contact:ID;I:POC-HE-ABUSE
contact:Auth-Area:contacts
contact:Class-Name:contact
contact:Name:Abuse Department
contact:Company:Hurricane Electric
contact:Street-Address:760 Mission Ct
contact:City:Fremont
contact:Province:CA
contact:Postal-Code:94539
contact:Country-Code:US
contact:Phone:+1-510-580-4100
contact:E-Mail:abuse@he.net
contact:Created:20100901200738000
contact:Updated:20100901200738000
contact:Comment:For email abuse (spam) only
%ok
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 66.160.191.0
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11267
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;66.160.191.0. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026070703 1800 900 604800 86400
;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jul 08 14:26:41 CST 2026
;; MSG SIZE rcvd: 105
Host 0.191.160.66.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 0.191.160.66.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 218.92.0.182 | attackspam | 2019-07-15T05:19:04.470208wiz-ks3 sshd[17984]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.182 user=root 2019-07-15T05:19:05.897524wiz-ks3 sshd[17984]: Failed password for root from 218.92.0.182 port 57852 ssh2 2019-07-15T05:19:08.697171wiz-ks3 sshd[17984]: Failed password for root from 218.92.0.182 port 57852 ssh2 2019-07-15T05:19:04.470208wiz-ks3 sshd[17984]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.182 user=root 2019-07-15T05:19:05.897524wiz-ks3 sshd[17984]: Failed password for root from 218.92.0.182 port 57852 ssh2 2019-07-15T05:19:08.697171wiz-ks3 sshd[17984]: Failed password for root from 218.92.0.182 port 57852 ssh2 2019-07-15T05:19:04.470208wiz-ks3 sshd[17984]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.182 user=root 2019-07-15T05:19:05.897524wiz-ks3 sshd[17984]: Failed password for root from 218.92.0.182 port 57852 ssh2 2019-07-15T05:19: |
2019-07-18 09:17:08 |
| 188.127.230.7 | attack | 188.127.230.7 - - [18/Jul/2019:03:31:00 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 188.127.230.7 - - [18/Jul/2019:03:31:00 +0200] "POST /wp-login.php HTTP/1.1" 200 1704 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 188.127.230.7 - - [18/Jul/2019:03:31:01 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 188.127.230.7 - - [18/Jul/2019:03:31:02 +0200] "POST /wp-login.php HTTP/1.1" 200 1684 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 188.127.230.7 - - [18/Jul/2019:03:31:02 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 188.127.230.7 - - [18/Jul/2019:03:31:03 +0200] "POST /wp-login.php HTTP/1.1" 200 1678 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-07-18 09:36:05 |
| 71.16.217.158 | attackbots | firewall-block, port(s): 445/tcp |
2019-07-18 09:35:05 |
| 198.108.67.44 | attackbots | SPLUNK port scan detected: Jul 17 12:19:19 testbed kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=82:c6:52:d1:6e:53:c0:42:d0:39:2c:30:08:00 SRC=198.108.67.44 DST=104.248.11.191 LEN=40 TOS=0x00 PREC=0x00 TTL=39 ID=34447 PROTO=TCP SPT=16697 DPT=9606 WINDOW=1024 RES=0x00 SYN URGP=0 |
2019-07-18 09:23:48 |
| 134.73.161.251 | attackspam | Jul 17 17:26:28 MK-Soft-VM5 sshd\[30270\]: Invalid user wordpress from 134.73.161.251 port 51420 Jul 17 17:26:28 MK-Soft-VM5 sshd\[30270\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.161.251 Jul 17 17:26:30 MK-Soft-VM5 sshd\[30270\]: Failed password for invalid user wordpress from 134.73.161.251 port 51420 ssh2 ... |
2019-07-18 09:27:55 |
| 153.36.232.139 | attack | 2019-07-04T16:29:01.067361wiz-ks3 sshd[5066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.36.232.139 user=root 2019-07-04T16:29:03.143939wiz-ks3 sshd[5066]: Failed password for root from 153.36.232.139 port 56901 ssh2 2019-07-04T16:29:05.935328wiz-ks3 sshd[5066]: Failed password for root from 153.36.232.139 port 56901 ssh2 2019-07-04T16:29:01.067361wiz-ks3 sshd[5066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.36.232.139 user=root 2019-07-04T16:29:03.143939wiz-ks3 sshd[5066]: Failed password for root from 153.36.232.139 port 56901 ssh2 2019-07-04T16:29:05.935328wiz-ks3 sshd[5066]: Failed password for root from 153.36.232.139 port 56901 ssh2 2019-07-04T16:29:01.067361wiz-ks3 sshd[5066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.36.232.139 user=root 2019-07-04T16:29:03.143939wiz-ks3 sshd[5066]: Failed password for root from 153.36.232.139 port 56901 ssh2 2019-07-0 |
2019-07-18 09:14:31 |
| 192.42.116.16 | attack | Jul 18 03:30:42 giegler sshd[7043]: Failed password for root from 192.42.116.16 port 51530 ssh2 Jul 18 03:30:44 giegler sshd[7043]: Failed password for root from 192.42.116.16 port 51530 ssh2 Jul 18 03:30:47 giegler sshd[7043]: Failed password for root from 192.42.116.16 port 51530 ssh2 Jul 18 03:30:49 giegler sshd[7043]: Failed password for root from 192.42.116.16 port 51530 ssh2 Jul 18 03:30:52 giegler sshd[7043]: Failed password for root from 192.42.116.16 port 51530 ssh2 |
2019-07-18 09:46:31 |
| 159.65.230.135 | attackspam | Jul 17 21:30:44 bilbo sshd\[24596\]: Invalid user admin from 159.65.230.135\ Jul 17 21:30:45 bilbo sshd\[24600\]: Invalid user admin from 159.65.230.135\ Jul 17 21:30:45 bilbo sshd\[24602\]: Invalid user user from 159.65.230.135\ Jul 17 21:30:45 bilbo sshd\[24604\]: Invalid user admin from 159.65.230.135\ |
2019-07-18 09:39:05 |
| 67.160.238.143 | attackspam | Jul 18 02:06:55 minden010 sshd[24869]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.160.238.143 Jul 18 02:06:57 minden010 sshd[24869]: Failed password for invalid user sabrina from 67.160.238.143 port 54908 ssh2 Jul 18 02:12:11 minden010 sshd[26748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.160.238.143 ... |
2019-07-18 09:02:40 |
| 122.195.200.36 | attackbots | Jul 17 21:30:35 TORMINT sshd\[8972\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.195.200.36 user=root Jul 17 21:30:37 TORMINT sshd\[8972\]: Failed password for root from 122.195.200.36 port 55525 ssh2 Jul 17 21:30:45 TORMINT sshd\[8989\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.195.200.36 user=root ... |
2019-07-18 09:37:01 |
| 37.238.255.148 | attackspam | 2019-07-17T12:19:34.063701stt-1.[munged] kernel: [7411993.542835] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:97:36:58:84:78:ac:57:a8:41:08:00 SRC=37.238.255.148 DST=[mungedIP1] LEN=52 TOS=0x00 PREC=0x00 TTL=111 ID=12210 DF PROTO=TCP SPT=54730 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 2019-07-17T12:19:37.074258stt-1.[munged] kernel: [7411996.553380] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:97:36:58:84:78:ac:57:a8:41:08:00 SRC=37.238.255.148 DST=[mungedIP1] LEN=52 TOS=0x00 PREC=0x00 TTL=111 ID=12387 DF PROTO=TCP SPT=54730 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 2019-07-17T12:19:43.083171stt-1.[munged] kernel: [7412002.559501] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:97:36:58:84:78:ac:57:a8:41:08:00 SRC=37.238.255.148 DST=[mungedIP1] LEN=48 TOS=0x00 PREC=0x00 TTL=111 ID=12787 DF PROTO=TCP SPT=54730 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 |
2019-07-18 09:17:40 |
| 89.35.39.188 | attackspambots | firewall-block, port(s): 11211/tcp |
2019-07-18 09:10:32 |
| 185.222.211.244 | attackspambots | Jul 18 01:49:36 relay postfix/smtpd\[7827\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.244\]: 554 5.7.1 \ |
2019-07-18 09:18:56 |
| 202.77.121.70 | attackspam | Unauthorized connection attempt from IP address 202.77.121.70 on Port 445(SMB) |
2019-07-18 09:40:48 |
| 178.62.224.96 | attackbotsspam | Automatic report - Banned IP Access |
2019-07-18 09:05:21 |