City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 11.0.0.0 - 11.255.255.255
CIDR: 11.0.0.0/8
NetName: DODIIS
NetHandle: NET-11-0-0-0-1
Parent: ()
NetType: Direct Allocation
OriginAS:
Organization: United States Department of Defense (DoD) (USDDD)
RegDate: 1984-01-19
Updated: 2025-08-27
Ref: https://rdap.arin.net/registry/ip/11.0.0.0
OrgName: United States Department of Defense (DoD)
OrgId: USDDD
Address: 3990 E. Broad Street
City: Columbus
StateProv: OH
PostalCode: 43218
Country: US
RegDate: 2007-01-12
Updated: 2025-03-13
Ref: https://rdap.arin.net/registry/entity/USDDD
OrgAbuseHandle: MIL-HSTMST-ARIN
OrgAbuseName: Network DoD
OrgAbusePhone: +1-844-347-2457
OrgAbuseEmail: disa.columbus.ns.mbx.hostmaster-dod-nic@mail.mil
OrgAbuseRef: https://rdap.arin.net/registry/entity/MIL-HSTMST-ARIN
OrgTechHandle: MIL-HSTMST-ARIN
OrgTechName: Network DoD
OrgTechPhone: +1-844-347-2457
OrgTechEmail: disa.columbus.ns.mbx.hostmaster-dod-nic@mail.mil
OrgTechRef: https://rdap.arin.net/registry/entity/MIL-HSTMST-ARIN
OrgTechHandle: REGIS10-ARIN
OrgTechName: Registration
OrgTechPhone: +1-844-347-2457
OrgTechEmail: disa.columbus.ns.mbx.arin-registrations@mail.mil
OrgTechRef: https://rdap.arin.net/registry/entity/REGIS10-ARIN
OrgNOCHandle: MIL-HSTMST-ARIN
OrgNOCName: Network DoD
OrgNOCPhone: +1-844-347-2457
OrgNOCEmail: disa.columbus.ns.mbx.hostmaster-dod-nic@mail.mil
OrgNOCRef: https://rdap.arin.net/registry/entity/MIL-HSTMST-ARIN
# end
# start
NetRange: 11.0.0.0 - 11.255.255.255
CIDR: 11.0.0.0/8
NetName: DODIIS
NetHandle: NET-11-0-0-0-2
Parent: DODIIS (NET-11-0-0-0-1)
NetType: Reallocated
OriginAS:
Organization: DoD Network Information Center (DNIC)
RegDate: 2025-08-27
Updated: 2025-08-27
Ref: https://rdap.arin.net/registry/ip/11.0.0.0
OrgName: DoD Network Information Center
OrgId: DNIC
Address: 3990 E. Broad Street
City: Columbus
StateProv: OH
PostalCode: 43218
Country: US
RegDate:
Updated: 2025-03-13
Ref: https://rdap.arin.net/registry/entity/DNIC
OrgAbuseHandle: REGIS10-ARIN
OrgAbuseName: Registration
OrgAbusePhone: +1-844-347-2457
OrgAbuseEmail: disa.columbus.ns.mbx.arin-registrations@mail.mil
OrgAbuseRef: https://rdap.arin.net/registry/entity/REGIS10-ARIN
OrgTechHandle: MIL-HSTMST-ARIN
OrgTechName: Network DoD
OrgTechPhone: +1-844-347-2457
OrgTechEmail: disa.columbus.ns.mbx.hostmaster-dod-nic@mail.mil
OrgTechRef: https://rdap.arin.net/registry/entity/MIL-HSTMST-ARIN
OrgTechHandle: REGIS10-ARIN
OrgTechName: Registration
OrgTechPhone: +1-844-347-2457
OrgTechEmail: disa.columbus.ns.mbx.arin-registrations@mail.mil
OrgTechRef: https://rdap.arin.net/registry/entity/REGIS10-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 11.11.8.4
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50040
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;11.11.8.4. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025101101 1800 900 604800 86400
;; Query time: 127 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 12 12:19:51 CST 2025
;; MSG SIZE rcvd: 102Host 4.8.11.11.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 4.8.11.11.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 185.56.153.236 | attackbots | Feb 9 04:38:17 hpm sshd\[21799\]: Invalid user nmq from 185.56.153.236 Feb 9 04:38:17 hpm sshd\[21799\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.56.153.236 Feb 9 04:38:19 hpm sshd\[21799\]: Failed password for invalid user nmq from 185.56.153.236 port 39178 ssh2 Feb 9 04:47:56 hpm sshd\[23189\]: Invalid user rsh from 185.56.153.236 Feb 9 04:47:56 hpm sshd\[23189\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.56.153.236 |
2020-02-09 22:56:25 |
| 122.102.33.222 | attackspambots | 23/tcp 23/tcp [2020-02-07/09]2pkt |
2020-02-09 22:36:28 |
| 49.235.49.150 | attackspam | SSH Brute-Force reported by Fail2Ban |
2020-02-09 22:55:58 |
| 197.43.123.185 | attackspambots | 23/tcp [2020-02-09]1pkt |
2020-02-09 23:06:23 |
| 113.161.94.6 | attackbots | failed_logins |
2020-02-09 22:40:25 |
| 185.175.93.34 | attack | 02/09/2020-14:50:29.819936 185.175.93.34 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2020-02-09 23:08:16 |
| 42.118.3.29 | attackbotsspam | 20/2/9@08:36:20: FAIL: Alarm-Network address from=42.118.3.29 20/2/9@08:36:21: FAIL: Alarm-Network address from=42.118.3.29 ... |
2020-02-09 23:11:12 |
| 109.184.43.12 | attackspam | 8080/tcp [2020-02-09]1pkt |
2020-02-09 23:03:31 |
| 185.234.219.64 | attack | Feb 9 14:19:44 h2829583 postfix/smtpd[16119]: lost connection after EHLO from unknown[185.234.219.64] Feb 9 14:36:48 h2829583 postfix/smtpd[16128]: lost connection after EHLO from unknown[185.234.219.64] |
2020-02-09 22:42:16 |
| 222.85.110.51 | attack | Feb 9 15:36:58 vmanager6029 postfix/smtpd\[17136\]: warning: unknown\[222.85.110.51\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 9 15:37:19 vmanager6029 postfix/smtpd\[17030\]: warning: unknown\[222.85.110.51\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-02-09 22:49:34 |
| 159.203.161.141 | attackspam | Lines containing failures of 159.203.161.141 Feb 6 14:52:53 kvm05 sshd[9694]: Did not receive identification string from 159.203.161.141 port 59626 Feb 6 14:53:29 kvm05 sshd[9765]: Received disconnect from 159.203.161.141 port 33908:11: Normal Shutdown, Thank you for playing [preauth] Feb 6 14:53:29 kvm05 sshd[9765]: Disconnected from authenticating user r.r 159.203.161.141 port 33908 [preauth] Feb 6 14:54:08 kvm05 sshd[9839]: Received disconnect from 159.203.161.141 port 47584:11: Normal Shutdown, Thank you for playing [preauth] Feb 6 14:54:08 kvm05 sshd[9839]: Disconnected from authenticating user r.r 159.203.161.141 port 47584 [preauth] Feb 6 14:54:46 kvm05 sshd[9964]: Received disconnect from 159.203.161.141 port 33024:11: Normal Shutdown, Thank you for playing [preauth] Feb 6 14:54:46 kvm05 sshd[9964]: Disconnected from authenticating user r.r 159.203.161.141 port 33024 [preauth] Feb 6 14:55:22 kvm05 sshd[10161]: Invalid user admin from 159.203.161.141 port ........ ------------------------------ |
2020-02-09 22:55:15 |
| 45.183.193.1 | attackbots | Feb 9 11:38:02 firewall sshd[21902]: Invalid user xzr from 45.183.193.1 Feb 9 11:38:05 firewall sshd[21902]: Failed password for invalid user xzr from 45.183.193.1 port 52808 ssh2 Feb 9 11:41:49 firewall sshd[22074]: Invalid user obf from 45.183.193.1 ... |
2020-02-09 23:07:31 |
| 49.234.87.24 | attackbots | Feb 9 15:15:55 mout sshd[32541]: Invalid user rpy from 49.234.87.24 port 46582 |
2020-02-09 22:36:51 |
| 89.248.160.150 | attack | 89.248.160.150 was recorded 22 times by 12 hosts attempting to connect to the following ports: 1038,1035,1033. Incident counter (4h, 24h, all-time): 22, 140, 3107 |
2020-02-09 22:44:12 |
| 36.226.89.117 | attackbots | 5555/tcp 5555/tcp [2020-02-07/08]2pkt |
2020-02-09 22:41:18 |