City: Lahore
Region: Punjab
Country: Pakistan
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 119.63.138.25 | attack | php WP PHPmyadamin ABUSE blocked for 12h |
2020-09-02 05:08:33 |
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '119.63.128.0 - 119.63.143.255'
% Abuse contact for '119.63.128.0 - 119.63.143.255' is 'abuse@tw1.com'
inetnum: 119.63.128.0 - 119.63.143.255
netname: TWA
descr: Transworld Associates (Pvt.) Ltd.
descr: 6th Floor, Executive Tower, Dolmen City
descr: Marine Drive, Clifton Block 4
descr: Karachi, Pakistan
country: PK
org: ORG-TAL1-AP
admin-c: TM701-AP
tech-c: TM701-AP
abuse-c: AT1273-AP
status: ALLOCATED PORTABLE
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
mnt-by: APNIC-HM
mnt-lower: MAINT-PK-TWA
mnt-routes: MAINT-PK-TWA
mnt-irt: IRT-TWA-PK
last-modified: 2020-08-05T13:03:19Z
source: APNIC
irt: IRT-TWA-PK
address: Transworld Associates (Pvt) Ltd.
address: 6th Floor, Executive Tower, Dolmen City
address: Marine Drive, Clifton Block 4
address: Karachi
e-mail: abuse@tw1.com
abuse-mailbox: abuse@tw1.com
admin-c: TM701-AP
tech-c: TM701-AP
auth: # Filtered
remarks: abuse@tw1.com was validated on 2025-10-03
mnt-by: MAINT-PK-TWA
last-modified: 2025-11-17T23:08:37Z
source: APNIC
organisation: ORG-TAL1-AP
org-name: TRANS WORLD ASSOCIATES (PVT) LIMITED
org-type: LIR
country: PK
address: 6th Floor, Executive Tower, Dolmen City
address: Marine Drive, Clifton Block 4
phone: +92-51-2871623
fax-no: +92-51-2871625
e-mail: ipcontrol@tw1.com
mnt-ref: APNIC-HM
mnt-by: APNIC-HM
last-modified: 2024-11-20T12:56:19Z
source: APNIC
role: ABUSE TWAPK
country: ZZ
address: Transworld Associates (Pvt) Ltd.
address: 6th Floor, Executive Tower, Dolmen City
address: Marine Drive, Clifton Block 4
address: Karachi
phone: +000000000
e-mail: abuse@tw1.com
admin-c: TM701-AP
tech-c: TM701-AP
nic-hdl: AT1273-AP
remarks: Generated from irt object IRT-TWA-PK
remarks: abuse@tw1.com was validated on 2025-10-03
abuse-mailbox: abuse@tw1.com
mnt-by: APNIC-ABUSE
last-modified: 2025-10-03T04:21:15Z
source: APNIC
person: Technical Manager
address: Transworld (Pvt) ltd.
address: 6th Floor, Executive Tower, Dolmen City
address: Marine Drive, Clifton Block 4
address: Karachi
country: PK
phone: +92-21-5824951 - 4
fax-no: +92-21-5824957
e-mail: ipcontrol@tw1.com
nic-hdl: TM701-AP
mnt-by: MAINT-PK-TWA
last-modified: 2010-06-12T12:10:01Z
source: APNIC
% Information related to '119.63.138.0/24AS38193'
route: 119.63.138.0/24
descr: TW Route Obj.
origin: AS38193
mnt-by: MAINT-PK-TWA
country: PK
last-modified: 2008-09-04T07:55:11Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.36-SNAPSHOT (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.63.138.57
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31270
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;119.63.138.57. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026041901 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Apr 20 03:00:20 CST 2026
;; MSG SIZE rcvd: 106Host 57.138.63.119.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 57.138.63.119.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 78.94.119.186 | attackbotsspam | Oct 10 08:33:19 ns41 sshd[26299]: Failed password for root from 78.94.119.186 port 56718 ssh2 Oct 10 08:37:10 ns41 sshd[26473]: Failed password for root from 78.94.119.186 port 39990 ssh2 |
2019-10-10 14:52:14 |
| 111.225.204.32 | attack | Fail2Ban - FTP Abuse Attempt |
2019-10-10 14:50:11 |
| 222.186.42.241 | attackspam | $f2bV_matches |
2019-10-10 14:47:40 |
| 139.59.78.236 | attackspam | Oct 10 04:11:15 *** sshd[16137]: User root from 139.59.78.236 not allowed because not listed in AllowUsers |
2019-10-10 14:45:55 |
| 222.186.190.65 | attackspam | $f2bV_matches |
2019-10-10 14:37:00 |
| 51.68.189.69 | attack | Oct 10 08:40:22 SilenceServices sshd[3187]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.189.69 Oct 10 08:40:24 SilenceServices sshd[3187]: Failed password for invalid user Auto@2017 from 51.68.189.69 port 47842 ssh2 Oct 10 08:44:18 SilenceServices sshd[4233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.189.69 |
2019-10-10 14:56:20 |
| 171.96.239.200 | attackspam | 171.96.239.200 - - \[09/Oct/2019:20:51:41 -0700\] "POST /index.php/admin HTTP/1.1" 404 20595171.96.239.200 - ROOT1 \[09/Oct/2019:20:51:41 -0700\] "GET /rss/catalog/notifystock/ HTTP/1.1" 401 25171.96.239.200 - - \[09/Oct/2019:20:51:44 -0700\] "POST /index.php/admin/sales_order/ HTTP/1.1" 404 20647 ... |
2019-10-10 14:42:15 |
| 134.209.17.42 | attack | Oct 10 06:45:07 web8 sshd\[21548\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.17.42 user=root Oct 10 06:45:10 web8 sshd\[21548\]: Failed password for root from 134.209.17.42 port 60065 ssh2 Oct 10 06:49:07 web8 sshd\[23445\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.17.42 user=root Oct 10 06:49:09 web8 sshd\[23445\]: Failed password for root from 134.209.17.42 port 51959 ssh2 Oct 10 06:53:05 web8 sshd\[25355\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.17.42 user=root |
2019-10-10 15:03:46 |
| 182.18.208.27 | attack | Oct 10 05:50:55 DAAP sshd[3480]: Invalid user !@#$%^&ZXCVBNM from 182.18.208.27 port 37864 Oct 10 05:50:55 DAAP sshd[3480]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.18.208.27 Oct 10 05:50:55 DAAP sshd[3480]: Invalid user !@#$%^&ZXCVBNM from 182.18.208.27 port 37864 Oct 10 05:50:57 DAAP sshd[3480]: Failed password for invalid user !@#$%^&ZXCVBNM from 182.18.208.27 port 37864 ssh2 ... |
2019-10-10 15:10:21 |
| 37.59.107.100 | attackspambots | Oct 9 18:53:56 friendsofhawaii sshd\[28461\]: Invalid user Miss2017 from 37.59.107.100 Oct 9 18:53:56 friendsofhawaii sshd\[28461\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=100.ip-37-59-107.eu Oct 9 18:53:58 friendsofhawaii sshd\[28461\]: Failed password for invalid user Miss2017 from 37.59.107.100 port 59684 ssh2 Oct 9 18:58:11 friendsofhawaii sshd\[28835\]: Invalid user 1234@qwer from 37.59.107.100 Oct 9 18:58:11 friendsofhawaii sshd\[28835\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=100.ip-37-59-107.eu |
2019-10-10 14:41:44 |
| 2.152.192.52 | attackspam | Oct 10 08:10:11 nginx sshd[22924]: Invalid user test from 2.152.192.52 Oct 10 08:10:12 nginx sshd[22924]: Connection closed by 2.152.192.52 port 59938 [preauth] |
2019-10-10 14:55:46 |
| 37.252.78.205 | attackbots | Automatic report - Port Scan Attack |
2019-10-10 14:37:39 |
| 123.247.87.209 | attackspambots | Automatic report - Port Scan Attack |
2019-10-10 14:46:25 |
| 183.7.176.64 | attack | Automatic report - Port Scan |
2019-10-10 14:43:31 |
| 217.65.27.132 | attack | Oct 10 08:11:20 hosting sshd[12027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.65.27.132 user=root Oct 10 08:11:22 hosting sshd[12027]: Failed password for root from 217.65.27.132 port 37246 ssh2 ... |
2019-10-10 15:11:32 |