City: São Paulo
Region: Sao Paulo
Country: Brazil
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '118.26.105.0 - 118.26.105.255'
% Abuse contact for '118.26.105.0 - 118.26.105.255' is 'hegui@ucloud.cn'
inetnum: 118.26.105.0 - 118.26.105.255
netname: UCLOUD-BR
descr: UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
country: BR
admin-c: UITH2-AP
tech-c: UITH2-AP
abuse-c: AU164-AP
status: ALLOCATED NON-PORTABLE
mnt-by: MAINT-UCLOUD-HK
mnt-irt: IRT-UCLOUD-HK
last-modified: 2023-03-09T08:06:59Z
source: APNIC
irt: IRT-UCLOUD-HK
address: FLAT/RM 603 6/F, LAWS COMMERCIAL PLAZA, 788 CHEUNG SHA WAN ROAD, KL,, Hong Kong
e-mail: pn-wan@ucloud.cn
abuse-mailbox: hegui@ucloud.cn
admin-c: UITH2-AP
tech-c: UITH2-AP
auth: # Filtered
remarks: hegui@ucloud.cn was validated on 2025-07-01
remarks: pn-wan@ucloud.cn was validated on 2025-07-01
mnt-by: MAINT-UCLOUD-HK
last-modified: 2025-09-04T07:41:27Z
source: APNIC
role: ABUSE UCLOUDHK
country: ZZ
address: FLAT/RM 603 6/F, LAWS COMMERCIAL PLAZA, 788 CHEUNG SHA WAN ROAD, KL,, Hong Kong
phone: +000000000
e-mail: pn-wan@ucloud.cn
admin-c: UITH2-AP
tech-c: UITH2-AP
nic-hdl: AU164-AP
remarks: Generated from irt object IRT-UCLOUD-HK
remarks: hegui@ucloud.cn was validated on 2025-07-01
remarks: pn-wan@ucloud.cn was validated on 2025-07-01
abuse-mailbox: hegui@ucloud.cn
mnt-by: APNIC-ABUSE
last-modified: 2025-07-01T09:51:21Z
source: APNIC
role: UCLOUD INFORMATION TECHNOLOGY HK LIMITED
address: FLAT/RM 603 6/F, LAWS COMMERCIAL PLAZA, 788 CHEUNG SHA WAN ROAD, KL,, Hong Kong
country: HK
phone: +000000000
e-mail: u-ipnic@ucloud.cn
admin-c: UITH2-AP
tech-c: UITH2-AP
nic-hdl: UITH2-AP
notify: hegui@ucloud.cn
mnt-by: MAINT-UCLOUD-HK
last-modified: 2022-05-16T03:54:14Z
source: APNIC
% Information related to '118.26.105.0/24AS135377'
route: 118.26.105.0/24
origin: AS135377
descr: UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
FLAT/RM 603 6/F
LAWS COMMERCIAL PLAZA
788 CHEUNG SHA WAN ROAD, KL,
mnt-by: MAINT-UCLOUD-HK
last-modified: 2023-03-10T09:28:02Z
country: BR
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.34 (WHOIS-AU4); <<>> DiG 9.10.3-P4-Ubuntu <<>> 118.26.105.155
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47017
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;118.26.105.155. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025111000 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Nov 10 23:00:29 CST 2025
;; MSG SIZE rcvd: 107Host 155.105.26.118.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 155.105.26.118.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 61.12.38.162 | attackbots | Dec 2 12:07:59 sso sshd[9379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.12.38.162 Dec 2 12:08:01 sso sshd[9379]: Failed password for invalid user mikyong from 61.12.38.162 port 55850 ssh2 ... |
2019-12-02 19:08:47 |
| 188.113.174.55 | attack | Dec 2 01:11:08 tdfoods sshd\[17405\]: Invalid user karson from 188.113.174.55 Dec 2 01:11:08 tdfoods sshd\[17405\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.113.174.55 Dec 2 01:11:10 tdfoods sshd\[17405\]: Failed password for invalid user karson from 188.113.174.55 port 35010 ssh2 Dec 2 01:17:50 tdfoods sshd\[17985\]: Invalid user kofuji from 188.113.174.55 Dec 2 01:17:50 tdfoods sshd\[17985\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.113.174.55 |
2019-12-02 19:30:10 |
| 64.52.22.216 | attackbots | Dec 2 09:48:30 lvps92-51-164-246 sshd[4544]: Address 64.52.22.216 maps to 64.52.22.216.static.skysilk.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 2 09:48:30 lvps92-51-164-246 sshd[4544]: Invalid user alusera from 64.52.22.216 Dec 2 09:48:30 lvps92-51-164-246 sshd[4544]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.52.22.216 Dec 2 09:48:32 lvps92-51-164-246 sshd[4544]: Failed password for invalid user alusera from 64.52.22.216 port 45094 ssh2 Dec 2 09:48:32 lvps92-51-164-246 sshd[4544]: Received disconnect from 64.52.22.216: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=64.52.22.216 |
2019-12-02 19:24:26 |
| 36.155.10.19 | attackbotsspam | Dec 2 09:53:24 herz-der-gamer sshd[28445]: Invalid user patricia from 36.155.10.19 port 55166 Dec 2 09:53:24 herz-der-gamer sshd[28445]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.155.10.19 Dec 2 09:53:24 herz-der-gamer sshd[28445]: Invalid user patricia from 36.155.10.19 port 55166 Dec 2 09:53:26 herz-der-gamer sshd[28445]: Failed password for invalid user patricia from 36.155.10.19 port 55166 ssh2 ... |
2019-12-02 19:33:36 |
| 139.59.41.170 | attackspam | Dec 2 00:59:59 php1 sshd\[18993\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.41.170 user=root Dec 2 01:00:01 php1 sshd\[18993\]: Failed password for root from 139.59.41.170 port 34712 ssh2 Dec 2 01:06:18 php1 sshd\[19684\]: Invalid user silberman from 139.59.41.170 Dec 2 01:06:18 php1 sshd\[19684\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.41.170 Dec 2 01:06:21 php1 sshd\[19684\]: Failed password for invalid user silberman from 139.59.41.170 port 46460 ssh2 |
2019-12-02 19:22:30 |
| 134.175.13.90 | attack | 23/tcp 23/tcp 23/tcp... [2019-11-29/12-02]11pkt,1pt.(tcp) |
2019-12-02 19:31:01 |
| 124.228.159.25 | attack | [portscan] Port scan |
2019-12-02 19:04:28 |
| 212.64.51.45 | attackspam | Automatic report - Banned IP Access |
2019-12-02 19:11:58 |
| 154.83.17.97 | attack | Dec 2 00:25:11 php1 sshd\[14792\]: Invalid user com from 154.83.17.97 Dec 2 00:25:11 php1 sshd\[14792\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.83.17.97 Dec 2 00:25:14 php1 sshd\[14792\]: Failed password for invalid user com from 154.83.17.97 port 52993 ssh2 Dec 2 00:31:53 php1 sshd\[15410\]: Invalid user sille from 154.83.17.97 Dec 2 00:31:53 php1 sshd\[15410\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.83.17.97 |
2019-12-02 19:29:06 |
| 5.104.107.28 | attackspambots | Dec 2 09:27:28 sd1 sshd[20599]: Invalid user bonsack from 5.104.107.28 Dec 2 09:27:30 sd1 sshd[20599]: Failed password for invalid user bonsack from 5.104.107.28 port 46626 ssh2 Dec 2 09:40:44 sd1 sshd[21170]: Invalid user ew from 5.104.107.28 Dec 2 09:40:46 sd1 sshd[21170]: Failed password for invalid user ew from 5.104.107.28 port 37958 ssh2 Dec 2 09:48:09 sd1 sshd[21440]: Invalid user test from 5.104.107.28 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=5.104.107.28 |
2019-12-02 19:29:44 |
| 114.67.98.243 | attackspam | Dec 2 17:43:18 webhost01 sshd[3539]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.98.243 Dec 2 17:43:20 webhost01 sshd[3539]: Failed password for invalid user ftp from 114.67.98.243 port 33252 ssh2 ... |
2019-12-02 19:15:23 |
| 49.234.30.33 | attackspam | Dec 2 11:10:53 fr01 sshd[4048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.30.33 user=root Dec 2 11:10:55 fr01 sshd[4048]: Failed password for root from 49.234.30.33 port 34160 ssh2 Dec 2 11:19:42 fr01 sshd[5574]: Invalid user baugstoe from 49.234.30.33 ... |
2019-12-02 19:24:41 |
| 197.37.149.201 | attackbotsspam | $f2bV_matches |
2019-12-02 19:34:02 |
| 112.162.191.160 | attackbotsspam | Dec 2 12:02:03 cvbnet sshd[24931]: Failed password for root from 112.162.191.160 port 34280 ssh2 ... |
2019-12-02 19:14:01 |
| 134.209.207.98 | attack | [portscan] tcp/23 [TELNET] *(RWIN=65535)(12021150) |
2019-12-02 19:39:08 |