城市(city): Hong Kong
省份(region): unknown
国家(country): Hong Kong
运营商(isp): Softcom Internet Communications, Inc
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 70.39.128.0 - 70.39.255.255
CIDR: 70.39.128.0/17
NetName: NETBLK-PACKETEXCHANGE-V4-10
NetHandle: NET-70-39-128-0-1
Parent: NET70 (NET-70-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: PacketExchange, Inc (PACKE-25)
RegDate: 2009-11-24
Updated: 2012-02-24
Ref: https://rdap.arin.net/registry/ip/70.39.128.0
OrgName: PacketExchange, Inc
OrgId: PACKE-25
Address: GTT Communications, Inc.
Address: 8484 Westpark Drive
Address: Suite 720
City: McLean
StateProv: VA
PostalCode: 22102
Country: US
RegDate: 2008-02-26
Updated: 2025-04-17
Ref: https://rdap.arin.net/registry/entity/PACKE-25
OrgTechHandle: GNOC16-ARIN
OrgTechName: GTT Network Operations Center
OrgTechPhone: +1-703-442-5500
OrgTechEmail: noc@gtt.net
OrgTechRef: https://rdap.arin.net/registry/entity/GNOC16-ARIN
OrgTechHandle: GIT5-ARIN
OrgTechName: GTT IPAM Team
OrgTechPhone: +1-703-442-5500
OrgTechEmail: netguard@gtt.net
OrgTechRef: https://rdap.arin.net/registry/entity/GIT5-ARIN
OrgAbuseHandle: GAD46-ARIN
OrgAbuseName: GTT Abuse Department
OrgAbusePhone: +1-703-442-5501
OrgAbuseEmail: abuse@gtt.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/GAD46-ARIN
OrgTechHandle: AS3251-ARIN
OrgTechName: AS3257 Netguard
OrgTechPhone: +49 69 48007422
OrgTechEmail: netguard@gtt.net
OrgTechRef: https://rdap.arin.net/registry/entity/AS3251-ARIN
OrgNOCHandle: GNOC16-ARIN
OrgNOCName: GTT Network Operations Center
OrgNOCPhone: +1-703-442-5500
OrgNOCEmail: noc@gtt.net
OrgNOCRef: https://rdap.arin.net/registry/entity/GNOC16-ARIN
# end
# start
NetRange: 70.39.176.0 - 70.39.183.255
CIDR: 70.39.176.0/21
NetName: GTT-JUNYUU-NET
NetHandle: NET-70-39-176-0-1
Parent: NETBLK-PACKETEXCHANGE-V4-10 (NET-70-39-128-0-1)
NetType: Reallocated
OriginAS:
Organization: NetLab Global (HOSTH-5)
RegDate: 2025-08-06
Updated: 2025-08-06
Ref: https://rdap.arin.net/registry/ip/70.39.176.0
OrgName: NetLab Global
OrgId: HOSTH-5
Address: 110 W 40TH ST STE200
City: NEW YORK
StateProv: NY
PostalCode: 10018
Country: US
RegDate: 2022-02-26
Updated: 2025-07-30
Comment: Geofeed https://ip-allocation.as979.net/geofeed.csv
Ref: https://rdap.arin.net/registry/entity/HOSTH-5
OrgTechHandle: LEERI36-ARIN
OrgTechName: Lee, Richard
OrgTechPhone: +1-213-674-6718
OrgTechEmail: noc@as979.net
OrgTechRef: https://rdap.arin.net/registry/entity/LEERI36-ARIN
OrgAbuseHandle: LIUFR3-ARIN
OrgAbuseName: Liu, Frid
OrgAbusePhone: +1-213-674-6718
OrgAbuseEmail: legal@as979.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/LIUFR3-ARIN
# end
# start
NetRange: 70.39.176.0 - 70.39.183.255
CIDR: 70.39.176.0/21
NetName: GTT
NetHandle: NET-70-39-176-0-2
Parent: GTT-JUNYUU-NET (NET-70-39-176-0-1)
NetType: Reassigned
OriginAS:
Customer: GTT Communications Inc. (C11308732)
RegDate: 2025-08-06
Updated: 2025-08-06
Ref: https://rdap.arin.net/registry/ip/70.39.176.0
CustName: GTT Communications Inc.
Address: 900 N Alameda ST
City: Los Angeles
StateProv: CA
PostalCode: 90014
Country: US
RegDate: 2025-08-06
Updated: 2025-08-06
Ref: https://rdap.arin.net/registry/entity/C11308732
OrgTechHandle: LEERI36-ARIN
OrgTechName: Lee, Richard
OrgTechPhone: +1-213-674-6718
OrgTechEmail: noc@as979.net
OrgTechRef: https://rdap.arin.net/registry/entity/LEERI36-ARIN
OrgAbuseHandle: LIUFR3-ARIN
OrgAbuseName: Liu, Frid
OrgAbusePhone: +1-213-674-6718
OrgAbuseEmail: legal@as979.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/LIUFR3-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 70.39.181.163
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9388
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;70.39.181.163. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026030200 1800 900 604800 86400
;; Query time: 4 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Mar 02 21:00:34 CST 2026
;; MSG SIZE rcvd: 106b'Host 163.181.39.70.in-addr.arpa not found: 2(SERVFAIL)
'server can't find 70.39.181.163.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 194.152.206.93 | attackspambots | Aug 4 08:43:35 xtremcommunity sshd\[12045\]: Invalid user sit from 194.152.206.93 port 51147 Aug 4 08:43:35 xtremcommunity sshd\[12045\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.152.206.93 Aug 4 08:43:38 xtremcommunity sshd\[12045\]: Failed password for invalid user sit from 194.152.206.93 port 51147 ssh2 Aug 4 08:50:07 xtremcommunity sshd\[12220\]: Invalid user friday from 194.152.206.93 port 47990 Aug 4 08:50:07 xtremcommunity sshd\[12220\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.152.206.93 ... |
2019-08-04 20:55:55 |
| 123.168.88.130 | attack | Unauthorized SSH login attempts |
2019-08-04 20:50:41 |
| 108.175.10.234 | attack | Automatic report - Banned IP Access |
2019-08-04 21:16:11 |
| 203.198.185.113 | attackbots | detected by Fail2Ban |
2019-08-04 21:09:15 |
| 157.230.131.33 | attackbotsspam | Aug 4 14:26:52 server2 sshd\[1661\]: User root from 157.230.131.33 not allowed because not listed in AllowUsers Aug 4 14:26:52 server2 sshd\[1663\]: User root from 157.230.131.33 not allowed because not listed in AllowUsers Aug 4 14:26:52 server2 sshd\[1662\]: User root from 157.230.131.33 not allowed because not listed in AllowUsers Aug 4 14:26:52 server2 sshd\[1665\]: User root from 157.230.131.33 not allowed because not listed in AllowUsers Aug 4 14:26:52 server2 sshd\[1664\]: User root from 157.230.131.33 not allowed because not listed in AllowUsers Aug 4 14:26:53 server2 sshd\[1672\]: User root from 157.230.131.33 not allowed because not listed in AllowUsers |
2019-08-04 21:37:14 |
| 104.248.227.80 | attackbotsspam | loopsrockreggae.com 104.248.227.80 \[04/Aug/2019:12:56:07 +0200\] "POST /wp-login.php HTTP/1.1" 200 5615 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" loopsrockreggae.com 104.248.227.80 \[04/Aug/2019:12:56:08 +0200\] "POST /wp-login.php HTTP/1.1" 200 5624 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-08-04 21:02:08 |
| 218.92.0.199 | attackbotsspam | Aug 4 13:57:00 ArkNodeAT sshd\[18885\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.199 user=root Aug 4 13:57:02 ArkNodeAT sshd\[18885\]: Failed password for root from 218.92.0.199 port 12898 ssh2 Aug 4 13:57:04 ArkNodeAT sshd\[18885\]: Failed password for root from 218.92.0.199 port 12898 ssh2 |
2019-08-04 21:44:52 |
| 1.255.147.123 | attackbots | Jul 25 02:17:50 vps65 perl\[29055\]: pam_unix\(webmin:auth\): authentication failure\; logname= uid=0 euid=0 tty=10000 ruser= rhost=1.255.147.123 user=root Jul 25 03:32:02 vps65 perl\[32513\]: pam_unix\(webmin:auth\): authentication failure\; logname= uid=0 euid=0 tty=10000 ruser= rhost=1.255.147.123 user=root ... |
2019-08-04 20:46:58 |
| 218.92.0.207 | attackspam | Aug 4 12:40:23 *** sshd[19107]: User root from 218.92.0.207 not allowed because not listed in AllowUsers |
2019-08-04 21:19:19 |
| 5.63.12.195 | attackspambots | 04.08.2019 12:56:42 - Wordpress fail Detected by ELinOX-ALM |
2019-08-04 21:07:36 |
| 114.220.0.215 | attackspambots | [Aegis] @ 2019-08-04 11:55:08 0100 -> Attempt to use mail server as relay (550: Requested action not taken). |
2019-08-04 21:45:28 |
| 120.88.185.39 | attackspambots | Aug 4 12:56:40 ArkNodeAT sshd\[13317\]: Invalid user exploit from 120.88.185.39 Aug 4 12:56:40 ArkNodeAT sshd\[13317\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.88.185.39 Aug 4 12:56:41 ArkNodeAT sshd\[13317\]: Failed password for invalid user exploit from 120.88.185.39 port 56604 ssh2 |
2019-08-04 21:14:24 |
| 222.10.27.243 | attackbots | Aug 4 13:55:21 microserver sshd[7751]: Invalid user flora from 222.10.27.243 port 36828 Aug 4 13:55:21 microserver sshd[7751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.10.27.243 Aug 4 13:55:23 microserver sshd[7751]: Failed password for invalid user flora from 222.10.27.243 port 36828 ssh2 Aug 4 14:00:32 microserver sshd[8632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.10.27.243 user=mysql Aug 4 14:00:34 microserver sshd[8632]: Failed password for mysql from 222.10.27.243 port 59726 ssh2 Aug 4 14:15:57 microserver sshd[11196]: Invalid user rancid from 222.10.27.243 port 43360 Aug 4 14:15:57 microserver sshd[11196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.10.27.243 Aug 4 14:15:59 microserver sshd[11196]: Failed password for invalid user rancid from 222.10.27.243 port 43360 ssh2 Aug 4 14:21:05 microserver sshd[12165]: Invalid user fucker from 222.10.2 |
2019-08-04 20:47:29 |
| 200.87.95.238 | attackspam | Aug 4 14:36:15 srv206 sshd[12948]: Invalid user tiffany from 200.87.95.238 Aug 4 14:36:15 srv206 sshd[12948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.87.95.238 Aug 4 14:36:15 srv206 sshd[12948]: Invalid user tiffany from 200.87.95.238 Aug 4 14:36:17 srv206 sshd[12948]: Failed password for invalid user tiffany from 200.87.95.238 port 29690 ssh2 ... |
2019-08-04 20:54:52 |
| 83.165.211.178 | attack | SSH Brute Force, server-1 sshd[22022]: Failed password for invalid user jlo from 83.165.211.178 port 54023 ssh2 |
2019-08-04 21:34:39 |