City: Karachi
Region: Sindh
Country: Pakistan
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '110.38.254.0 - 110.38.254.255'
% Abuse contact for '110.38.254.0 - 110.38.254.255' is 'whois@wateen.com'
inetnum: 110.38.254.0 - 110.38.254.255
netname: WATEEN-TEL
descr: National Wimax/IMS environment
country: PK
admin-c: WS1673-AP
tech-c: WS1673-AP
abuse-c: AW997-AP
status: ASSIGNED NON-PORTABLE
mnt-by: MAINT-PK-WATEEN
mnt-irt: IRT-WATEENTEL-PK
geoloc: 24.930798602 67.087031334
last-modified: 2025-05-23T10:11:46Z
source: APNIC
irt: IRT-WATEENTEL-PK
address: Wateen Telecom Limited Main Walton Road, Opp. Bab-e-Pakistan, Walton Cantt., Lahore
e-mail: whois@wateen.com
abuse-mailbox: whois@wateen.com
admin-c: WS1673-AP
tech-c: WS1673-AP
auth: # Filtered
remarks: whois@wateen.com was validated on 2026-07-10
mnt-by: MAINT-PK-WATEEN
last-modified: 2026-07-10T05:59:25Z
source: APNIC
role: ABUSE WATEENTELPK
country: ZZ
address: Wateen Telecom Limited Main Walton Road, Opp. Bab-e-Pakistan, Walton Cantt., Lahore
phone: +000000000
e-mail: whois@wateen.com
admin-c: WS1673-AP
tech-c: WS1673-AP
nic-hdl: AW997-AP
remarks: Generated from irt object IRT-WATEENTEL-PK
remarks: whois@wateen.com was validated on 2026-07-10
abuse-mailbox: whois@wateen.com
mnt-by: APNIC-ABUSE
last-modified: 2026-07-10T06:00:00Z
source: APNIC
person: Wateen Support
address: Wateen Telecom Limited Main Walton Road, Opp. Bab-e-Pakistan, Walton Cantt., Lahore
country: PK
phone: +92-111 365 111
e-mail: whois@wateen.com
nic-hdl: WS1673-AP
mnt-by: MAINT-PK-WATEEN
last-modified: 2025-05-13T05:51:27Z
source: APNIC
% Information related to '110.38.254.0/24AS139879'
route: 110.38.254.0/24
origin: AS139879
descr: Wateen Telecom Limited
Main Walton Road
Opp. Bab-e-Pakistan
Walton Cantt
mnt-by: MAINT-PK-WATEEN
last-modified: 2022-11-28T10:34:42Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 110.38.254.156
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2005
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;110.38.254.156. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026091802 1800 900 604800 86400
;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Sep 19 13:31:00 CST 2026
;; MSG SIZE rcvd: 107b'156.254.38.110.in-addr.arpa domain name pointer gponuser38254-156.wateen.net.
'Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
156.254.38.110.in-addr.arpa name = GPONUser38254-156.wateen.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 131.221.247.105 | attackbotsspam | $f2bV_matches |
2020-04-06 06:40:07 |
| 51.38.225.124 | attackspam | Apr 5 23:45:48 santamaria sshd\[20868\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.225.124 user=root Apr 5 23:45:50 santamaria sshd\[20868\]: Failed password for root from 51.38.225.124 port 47130 ssh2 Apr 5 23:50:20 santamaria sshd\[20942\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.225.124 user=root ... |
2020-04-06 06:49:16 |
| 159.65.233.205 | attackspam | Apr 4 23:25:12 XXX sshd[18512]: Did not receive identification string from 159.65.233.205 Apr 4 23:25:28 XXX sshd[18519]: User r.r from 159.65.233.205 not allowed because none of user's groups are listed in AllowGroups Apr 4 23:25:28 XXX sshd[18519]: Received disconnect from 159.65.233.205: 11: Normal Shutdown, Thank you for playing [preauth] Apr 5 02:18:43 XXX sshd[17712]: Did not receive identification string from 159.65.233.205 Apr 5 02:18:43 XXX sshd[17711]: Did not receive identification string from 159.65.233.205 Apr 5 02:18:43 XXX sshd[17710]: Did not receive identification string from 159.65.233.205 Apr 5 02:18:43 XXX sshd[17709]: Did not receive identification string from 159.65.233.205 Apr 5 02:18:43 XXX sshd[17708]: Did not receive identification string from 159.65.233.205 Apr 5 02:18:43 XXX sshd[17707]: Did not receive identification string from 159.65.233.205 Apr 5 02:18:43 XXX sshd[17713]: Did not receive identification string from 159.65.233.205........ ------------------------------- |
2020-04-06 06:56:35 |
| 222.186.30.35 | attackspambots | DATE:2020-04-06 00:54:28, IP:222.186.30.35, PORT:ssh SSH brute force auth on honeypot server (epe-honey1-hq) |
2020-04-06 06:57:20 |
| 51.77.108.92 | attackbotsspam | 04/05/2020-18:57:59.327791 51.77.108.92 Protocol: 6 ET SCAN Potential SSH Scan |
2020-04-06 06:58:39 |
| 200.206.145.124 | attackbotsspam | Automatic report - Port Scan Attack |
2020-04-06 06:33:01 |
| 218.92.0.158 | attackbots | Apr 6 00:07:00 plex sshd[26012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.158 user=root Apr 6 00:07:02 plex sshd[26012]: Failed password for root from 218.92.0.158 port 64813 ssh2 |
2020-04-06 06:31:27 |
| 106.12.174.227 | attackbots | 5x Failed Password |
2020-04-06 06:38:58 |
| 117.27.88.61 | attackbots | SSH Authentication Attempts Exceeded |
2020-04-06 06:34:59 |
| 101.71.28.72 | attack | Fail2Ban - SSH Bruteforce Attempt |
2020-04-06 07:09:09 |
| 153.149.9.127 | attackbots | SASL broute force |
2020-04-06 07:05:31 |
| 132.232.3.234 | attack | Apr 6 00:12:44 legacy sshd[23442]: Failed password for root from 132.232.3.234 port 53654 ssh2 Apr 6 00:17:14 legacy sshd[24229]: Failed password for root from 132.232.3.234 port 36362 ssh2 ... |
2020-04-06 06:36:20 |
| 212.92.250.91 | attackspambots | Apr 5 18:34:50 ws12vmsma01 sshd[30426]: Failed password for root from 212.92.250.91 port 46232 ssh2 Apr 5 18:38:27 ws12vmsma01 sshd[31036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ppp-212-92-250-91.wildpark.net user=root Apr 5 18:38:29 ws12vmsma01 sshd[31036]: Failed password for root from 212.92.250.91 port 56160 ssh2 ... |
2020-04-06 06:34:38 |
| 112.3.30.37 | attack | Apr 5 23:31:11 vps sshd[21552]: Failed password for root from 112.3.30.37 port 45200 ssh2 Apr 5 23:35:11 vps sshd[21740]: Failed password for root from 112.3.30.37 port 50022 ssh2 ... |
2020-04-06 06:38:43 |
| 194.116.228.254 | attack | email spam |
2020-04-06 06:38:24 |