City: São Paulo
Region: Sao Paulo
Country: Brazil
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 104.234.0.0 - 104.234.255.255
CIDR: 104.234.0.0/16
NetName: VELCOM-16
NetHandle: NET-104-234-0-0-1
Parent: NET104 (NET-104-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Velcom (ONTAR-40)
RegDate: 2014-10-27
Updated: 2015-03-23
Ref: https://rdap.arin.net/registry/ip/104.234.0.0
OrgName: Velcom
OrgId: ONTAR-40
Address: 276 Tiffin St
City: Barrie
StateProv: ON
PostalCode: L4N-2N4
Country: CA
RegDate: 2014-12-16
Updated: 2024-11-25
Comment: Please contact abuse@velcom.com in case of any Hacks, Illegal Activity, Violation, Scans, Probes, Spam from our IPS.
Ref: https://rdap.arin.net/registry/entity/ONTAR-40
ReferralServer: rwhois://rwhois.velcom.com:4321
OrgNOCHandle: NETWO548-ARIN
OrgNOCName: Network Administrator
OrgNOCPhone: +1-416-800-7551
OrgNOCEmail: netadmin@velcom.com
OrgNOCRef: https://rdap.arin.net/registry/entity/NETWO548-ARIN
OrgRoutingHandle: IST36-ARIN
OrgRoutingName: IPXO Support Team
OrgRoutingPhone: +1 (650) 564-3425
OrgRoutingEmail: support@ipxo.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/IST36-ARIN
OrgAbuseHandle: ABUSE1200-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-416-800-7551
OrgAbuseEmail: abuse@velcom.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE1200-ARIN
OrgTechHandle: NETWO548-ARIN
OrgTechName: Network Administrator
OrgTechPhone: +1-416-800-7551
OrgTechEmail: netadmin@velcom.com
OrgTechRef: https://rdap.arin.net/registry/entity/NETWO548-ARIN
# end
# start
NetRange: 104.234.184.0 - 104.234.191.255
CIDR: 104.234.184.0/21
NetName: 1042341840-21
NetHandle: NET-104-234-184-0-1
Parent: VELCOM-16 (NET-104-234-0-0-1)
NetType: Reallocated
OriginAS:
Organization: IPXO LLC (IL-845)
RegDate: 2022-05-08
Updated: 2022-05-08
Ref: https://rdap.arin.net/registry/ip/104.234.184.0
OrgName: IPXO LLC
OrgId: IL-845
Address: 3132 State Street
City: Dallas
StateProv: TX
PostalCode: 75204-3500
Country: US
RegDate: 2021-03-25
Updated: 2025-09-10
Comment: Geofeed https://geofeed.ipxo.com/geofeed.txt
Ref: https://rdap.arin.net/registry/entity/IL-845
OrgAbuseHandle: IAMT1-ARIN
OrgAbuseName: IPXO Abuse Management Team
OrgAbusePhone: +1 (650) 934-1667
OrgAbuseEmail: abuse@ipxo.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/IAMT1-ARIN
OrgDNSHandle: IST36-ARIN
OrgDNSName: IPXO Support Team
OrgDNSPhone: +1 (650) 564-3425
OrgDNSEmail: support@ipxo.com
OrgDNSRef: https://rdap.arin.net/registry/entity/IST36-ARIN
OrgTechHandle: IST36-ARIN
OrgTechName: IPXO Support Team
OrgTechPhone: +1 (650) 564-3425
OrgTechEmail: support@ipxo.com
OrgTechRef: https://rdap.arin.net/registry/entity/IST36-ARIN
# end
# start
NetRange: 104.234.184.0 - 104.234.191.255
CIDR: 104.234.184.0/21
NetName: NETUTILS
NetHandle: NET-104-234-184-0-2
Parent: 1042341840-21 (NET-104-234-184-0-1)
NetType: Reallocated
OriginAS:
Organization: Internet Utilities NA LLC (DCL-577)
RegDate: 2025-01-07
Updated: 2025-01-07
Ref: https://rdap.arin.net/registry/ip/104.234.184.0
OrgName: Internet Utilities NA LLC
OrgId: DCL-577
Address: 2711 Centerville Road
City: Wilmington
StateProv: DE
PostalCode: 19808
Country: US
RegDate: 2015-11-18
Updated: 2024-08-23
Ref: https://rdap.arin.net/registry/entity/DCL-577
OrgTechHandle: IUS-ARIN
OrgTechName:; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.234.186.154
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54384
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.234.186.154. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026091201 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Sep 13 10:01:00 CST 2026
;; MSG SIZE rcvd: 108154.186.234.104.in-addr.arpa domain name pointer host-104-234-186-154.br-spo01.hostzone.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
154.186.234.104.in-addr.arpa name = host-104-234-186-154.br-spo01.hostzone.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 81.22.45.219 | attackspambots | Honeypot attack, port: 81, PTR: PTR record not found |
2019-07-23 07:07:21 |
| 110.22.55.135 | attackbots | 19/7/22@09:09:33: FAIL: IoT-Telnet address from=110.22.55.135 ... |
2019-07-23 06:50:01 |
| 71.6.199.23 | attack | 22.07.2019 21:32:21 Connection to port 9200 blocked by firewall |
2019-07-23 06:54:19 |
| 122.228.19.80 | attack | 22.07.2019 22:27:06 Connection to port 9009 blocked by firewall |
2019-07-23 06:57:45 |
| 51.254.182.104 | attackbotsspam | Invalid user postgres from 51.254.182.104 port 56738 |
2019-07-23 07:11:13 |
| 81.22.45.252 | attackspambots | Jul 23 00:15:58 lumpi kernel: INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.252 DST=172.31.1.100 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=4577 PROTO=TCP SPT=43974 DPT=12107 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-07-23 06:34:21 |
| 62.173.149.64 | attack | firewall-block, port(s): 80/tcp |
2019-07-23 06:35:05 |
| 15.164.93.147 | attackspambots | Jul 22 11:37:56 askasleikir sshd[15406]: Failed password for invalid user ftpuser from 15.164.93.147 port 60674 ssh2 Jul 22 11:22:18 askasleikir sshd[14920]: Failed password for invalid user admin from 15.164.93.147 port 43066 ssh2 Jul 22 11:42:58 askasleikir sshd[15561]: Failed password for guest from 15.164.93.147 port 57506 ssh2 |
2019-07-23 06:57:20 |
| 41.67.59.14 | attackbotsspam | 445/tcp 445/tcp 445/tcp... [2019-05-21/07-22]16pkt,1pt.(tcp) |
2019-07-23 07:02:23 |
| 175.44.32.97 | attack | JunkMail rejected - (printingparters.eicp.net) [175.44.32.97]:64121 is in an RBL: Client host blocked using Barracuda Reputation, see http://www.barracudanetworks.com/reputation/?r=1&ip=175.44.32.97 |
2019-07-23 07:16:38 |
| 91.144.216.39 | attackspam | [21/Jul/2019:21:25:02 -0400] "GET /shell?busybox HTTP/1.1" "Mozilla/5.0" |
2019-07-23 07:17:11 |
| 94.176.76.188 | attack | Unauthorised access (Jul 22) SRC=94.176.76.188 LEN=40 TTL=244 ID=5222 DF TCP DPT=23 WINDOW=14600 SYN Unauthorised access (Jul 22) SRC=94.176.76.188 LEN=40 TTL=244 ID=48506 DF TCP DPT=23 WINDOW=14600 SYN Unauthorised access (Jul 22) SRC=94.176.76.188 LEN=40 TTL=244 ID=27152 DF TCP DPT=23 WINDOW=14600 SYN Unauthorised access (Jul 22) SRC=94.176.76.188 LEN=40 TTL=244 ID=19046 DF TCP DPT=23 WINDOW=14600 SYN Unauthorised access (Jul 22) SRC=94.176.76.188 LEN=40 TTL=244 ID=41225 DF TCP DPT=23 WINDOW=14600 SYN Unauthorised access (Jul 22) SRC=94.176.76.188 LEN=40 TTL=244 ID=48048 DF TCP DPT=23 WINDOW=14600 SYN Unauthorised access (Jul 22) SRC=94.176.76.188 LEN=40 TTL=244 ID=20024 DF TCP DPT=23 WINDOW=14600 SYN |
2019-07-23 06:47:01 |
| 35.237.101.161 | attackbotsspam | fail2ban honeypot |
2019-07-23 06:52:05 |
| 162.243.136.225 | attackspam | MultiHost/MultiPort Probe, Scan, Hack - |
2019-07-23 06:34:37 |
| 177.154.239.247 | attackbots | $f2bV_matches |
2019-07-23 06:38:18 |