City: City of London
Region: England
Country: United Kingdom
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 165.154.0.0 - 165.154.255.255
CIDR: 165.154.0.0/16
NetName: APNIC
NetHandle: NET-165-154-0-0-1
Parent: NET165 (NET-165-0-0-0-0)
NetType: Early Registrations, Transferred to APNIC
OriginAS:
Organization: Asia Pacific Network Information Centre (APNIC)
RegDate: 2021-02-16
Updated: 2021-02-16
Ref: https://rdap.arin.net/registry/ip/165.154.0.0
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
ResourceLink: whois://whois.apnic.net
OrgName: Asia Pacific Network Information Centre
OrgId: APNIC
Address: PO Box 3646
City: South Brisbane
StateProv: QLD
PostalCode: 4101
Country: AU
RegDate:
Updated: 2012-01-24
Ref: https://rdap.arin.net/registry/entity/APNIC
ReferralServer: whois://whois.apnic.net
ResourceLink: http://wq.apnic.net/whois-search/static/search.html
OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3188
OrgTechEmail: search-apnic-not-arin@apnic.net
OrgTechRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
OrgAbuseHandle: AWC12-ARIN
OrgAbuseName: APNIC Whois Contact
OrgAbusePhone: +61 7 3858 3188
OrgAbuseEmail: search-apnic-not-arin@apnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to whois.apnic.net.
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '165.154.128.0 - 165.154.129.255'
% Abuse contact for '165.154.128.0 - 165.154.129.255' is 'hegui@ucloud.cn'
inetnum: 165.154.128.0 - 165.154.129.255
netname: UCLOUD-GB
descr: UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
country: GB
admin-c: UITH2-AP
tech-c: UITH2-AP
abuse-c: AU164-AP
status: ALLOCATED NON-PORTABLE
mnt-by: MAINT-UCLOUD-HK
mnt-irt: IRT-UCLOUD-HK
last-modified: 2023-03-09T09:32:52Z
source: APNIC
irt: IRT-UCLOUD-HK
address: FLAT/RM 603 6/F, LAWS COMMERCIAL PLAZA, 788 CHEUNG SHA WAN ROAD, KL,, Hong Kong
e-mail: pn-wan@ucloud.cn
abuse-mailbox: hegui@ucloud.cn
admin-c: UITH2-AP
tech-c: UITH2-AP
auth: # Filtered
remarks: pn-wan@ucloud.cn was validated on 2026-09-17
remarks: hegui@ucloud.cn was validated on 2026-09-17
mnt-by: MAINT-UCLOUD-HK
last-modified: 2026-09-17T02:42:18Z
source: APNIC
role: ABUSE UCLOUDHK
country: ZZ
address: FLAT/RM 603 6/F, LAWS COMMERCIAL PLAZA, 788 CHEUNG SHA WAN ROAD, KL,, Hong Kong
phone: +000000000
e-mail: pn-wan@ucloud.cn
admin-c: UITH2-AP
tech-c: UITH2-AP
nic-hdl: AU164-AP
remarks: Generated from irt object IRT-UCLOUD-HK
remarks: pn-wan@ucloud.cn was validated on 2026-09-17
remarks: hegui@ucloud.cn was validated on 2026-09-17
abuse-mailbox: hegui@ucloud.cn
mnt-by: APNIC-ABUSE
last-modified: 2026-09-17T02:42:42Z
source: APNIC
role: UCLOUD INFORMATION TECHNOLOGY HK LIMITED
address: FLAT/RM 603 6/F, LAWS COMMERCIAL PLAZA, 788 CHEUNG SHA WAN ROAD, KL,, Hong Kong
country: HK
phone: +000000000
e-mail: u-ipnic@ucloud.cn
admin-c: UITH2-AP
tech-c: UITH2-AP
nic-hdl: UITH2-AP
notify: hegui@ucloud.cn
mnt-by: MAINT-UCLOUD-HK
last-modified: 2022-05-16T03:54:14Z
source: APNIC
% Information related to '165.154.128.0/24AS135377'
route: 165.154.128.0/24
origin: AS135377
descr: UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
FLAT/RM 603 6/F
LAWS COMMERCIAL PLAZA
788 CHEUNG SHA WAN ROAD, KL,
mnt-by: MAINT-UCLOUD-HK
last-modified: 2022-07-21T17:29:38Z
country: GB
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU4); <<>> DiG 9.10.3-P4-Ubuntu <<>> 165.154.128.199
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6872
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;165.154.128.199. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026091702 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 18 11:00:07 CST 2026
;; MSG SIZE rcvd: 108199.128.154.165.in-addr.arpa domain name pointer mail.qxnqxj.com.cn.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
199.128.154.165.in-addr.arpa name = mail.qxnqxj.com.cn.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.155.213.9 | attackbotsspam | Invalid user admin from 104.155.213.9 port 37184 |
2020-05-30 05:18:33 |
| 222.186.30.35 | attack | May 29 23:05:10 abendstille sshd\[25913\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.35 user=root May 29 23:05:11 abendstille sshd\[25913\]: Failed password for root from 222.186.30.35 port 24491 ssh2 May 29 23:05:13 abendstille sshd\[25913\]: Failed password for root from 222.186.30.35 port 24491 ssh2 May 29 23:05:15 abendstille sshd\[25913\]: Failed password for root from 222.186.30.35 port 24491 ssh2 May 29 23:05:17 abendstille sshd\[26023\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.35 user=root ... |
2020-05-30 05:05:39 |
| 185.153.196.126 | attackspam | May 29 22:21:06 debian-2gb-nbg1-2 kernel: \[13042450.425668\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.153.196.126 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=15894 PROTO=TCP SPT=52205 DPT=22222 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-05-30 04:52:29 |
| 186.208.99.80 | attackbotsspam | (sshd) Failed SSH login from 186.208.99.80 (BR/Brazil/ip186-208-97-80.netjat.com.br): 5 in the last 3600 secs |
2020-05-30 05:18:05 |
| 160.40.49.120 | attack | took down my website |
2020-05-30 05:24:47 |
| 196.61.217.242 | attackbots | May 29 22:51:08 vps639187 sshd\[10427\]: Invalid user linux from 196.61.217.242 port 34670 May 29 22:51:08 vps639187 sshd\[10427\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.61.217.242 May 29 22:51:10 vps639187 sshd\[10427\]: Failed password for invalid user linux from 196.61.217.242 port 34670 ssh2 ... |
2020-05-30 04:57:43 |
| 202.38.153.233 | attackbotsspam | May 29 22:43:59 roki-contabo sshd\[29358\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.38.153.233 user=root May 29 22:44:01 roki-contabo sshd\[29358\]: Failed password for root from 202.38.153.233 port 63574 ssh2 May 29 22:48:46 roki-contabo sshd\[29456\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.38.153.233 user=root May 29 22:48:48 roki-contabo sshd\[29456\]: Failed password for root from 202.38.153.233 port 47192 ssh2 May 29 22:51:16 roki-contabo sshd\[29481\]: Invalid user avanthi from 202.38.153.233 May 29 22:51:16 roki-contabo sshd\[29481\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.38.153.233 ... |
2020-05-30 04:53:45 |
| 91.121.211.34 | attack | May 29 23:03:53 abendstille sshd\[24532\]: Invalid user zhanghua from 91.121.211.34 May 29 23:03:53 abendstille sshd\[24532\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.211.34 May 29 23:03:55 abendstille sshd\[24532\]: Failed password for invalid user zhanghua from 91.121.211.34 port 54052 ssh2 May 29 23:07:08 abendstille sshd\[27871\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.211.34 user=root May 29 23:07:09 abendstille sshd\[27871\]: Failed password for root from 91.121.211.34 port 58578 ssh2 ... |
2020-05-30 05:20:00 |
| 83.149.21.110 | attackspam | 1590785452 - 05/29/2020 22:50:52 Host: 83.149.21.110/83.149.21.110 Port: 445 TCP Blocked |
2020-05-30 05:14:14 |
| 106.12.33.174 | attack | Invalid user thl from 106.12.33.174 port 57852 |
2020-05-30 05:16:30 |
| 222.186.30.59 | attack | May 29 23:22:25 vps639187 sshd\[11042\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.59 user=root May 29 23:22:27 vps639187 sshd\[11042\]: Failed password for root from 222.186.30.59 port 55872 ssh2 May 29 23:22:29 vps639187 sshd\[11042\]: Failed password for root from 222.186.30.59 port 55872 ssh2 ... |
2020-05-30 05:30:02 |
| 104.236.38.182 | attackspam | 2020-05-29T20:47:28.370079shield sshd\[26227\]: Invalid user jmartin from 104.236.38.182 port 35496 2020-05-29T20:47:28.373741shield sshd\[26227\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.38.182 2020-05-29T20:47:29.738684shield sshd\[26227\]: Failed password for invalid user jmartin from 104.236.38.182 port 35496 ssh2 2020-05-29T20:51:09.826097shield sshd\[26846\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.38.182 user=root 2020-05-29T20:51:11.532082shield sshd\[26846\]: Failed password for root from 104.236.38.182 port 41058 ssh2 |
2020-05-30 04:58:36 |
| 54.39.145.123 | attackspambots | May 29 23:02:29 abendstille sshd\[23207\]: Invalid user student from 54.39.145.123 May 29 23:02:29 abendstille sshd\[23207\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.145.123 May 29 23:02:31 abendstille sshd\[23207\]: Failed password for invalid user student from 54.39.145.123 port 44616 ssh2 May 29 23:06:16 abendstille sshd\[26957\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.145.123 user=root May 29 23:06:18 abendstille sshd\[26957\]: Failed password for root from 54.39.145.123 port 48578 ssh2 ... |
2020-05-30 05:09:42 |
| 5.196.8.72 | attack | Invalid user admin from 5.196.8.72 port 39782 |
2020-05-30 05:06:21 |
| 222.41.193.211 | attackspam | k+ssh-bruteforce |
2020-05-30 05:17:47 |