City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 134.195.100.0 - 134.195.101.255
CIDR: 134.195.100.0/23
NetName: NET-NATO-2
NetHandle: NET-134-195-100-0-1
Parent: NET134 (NET-134-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Black Mesa Corporation (NRL-25)
RegDate: 2020-06-25
Updated: 2020-06-25
Ref: https://rdap.arin.net/registry/ip/134.195.100.0
OrgName: Black Mesa Corporation
OrgId: NRL-25
Address: 720 University Ave
Address: PO Box 35765
City: Syracuse
StateProv: NY
PostalCode: 13235
Country: US
RegDate: 2017-04-24
Updated: 2024-11-04
Comment: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comment: + Black Mesa Corporation
Comment: +
Comment: + Black Mesa Corporation, a.k.a. Nato Internet Service is a
Comment: + non-profit project for learning, education and research.
Comment: +
Comment: + Our goal is to support the ever-growing internet community
Comment: + that wants to experiment and gain hands-on experience with
Comment: + the real world BGP.
Comment: +
Comment: + Network Information:
Comment: + https://internet.nat.moe
Comment: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Ref: https://rdap.arin.net/registry/entity/NRL-25
ReferralServer: rwhois://whois.nat.moe:43
OrgAbuseHandle: NLN2-ARIN
OrgAbuseName: Nato Laboratory Networking
OrgAbusePhone: +1-315-744-5708
OrgAbuseEmail: noc@nat.moe
OrgAbuseRef: https://rdap.arin.net/registry/entity/NLN2-ARIN
OrgTechHandle: LEETO56-ARIN
OrgTechName: Lee, Tony
OrgTechPhone: +1-971-482-5107
OrgTechEmail: tony@apernet.io
OrgTechRef: https://rdap.arin.net/registry/entity/LEETO56-ARIN
OrgTechHandle: NLN2-ARIN
OrgTechName: Nato Laboratory Networking
OrgTechPhone: +1-315-744-5708
OrgTechEmail: noc@nat.moe
OrgTechRef: https://rdap.arin.net/registry/entity/NLN2-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to whois.nat.moe:43.
% [whois.nat.moe]
% This is the NIS Database query service.
% The objects are in RPSL format.
route: 134.195.101.0/24
descr: NIS US Network (Fremont)
origin: AS46997
notify: nat@nat.moe
mnt-by: MNT-NIS
changed: nat@nat.moe 20200504
source: NIS
inetnum: 134.195.101.0 - 134.195.101.255
netname: NIS-V4-FMT
descr: NIS Fremont
country: US
admin-c: MM-0
tech-c: NH-0
status: ASSIGNED
mnt-by: MNT-NIS
changed: nat@nat.moe 20200701
source: NIS
person: Maho Morichika
nic-hdl: MM-0
address: PO Box 35765
address: 720 University Ave, Syracuse, NY, 13210
address: US
phone: +1 (315) 744-5708
e-mail: nat@nat.moe
mnt-by: MNT-NIS
changed: nat@nat.moe 20170901
source: NIS
role: NIS Helpdesk
nic-hdl: NH-0
address: PO Box 35765
address: 720 University Ave, Syracuse, NY, 13210
address: US
phone: +1 (315) 744-5708
e-mail: support@apernet.io
mnt-by: MNT-NIS
changed: nat@nat.moe 20170901
source: NIS
% Query done in 0.000389 second(s), result size 935 byte(s).
% The current server time is 11/03/26 19:12:06 (UTC).
% This query was served by the NIS whoisd (irrd 3.0.9rc2).; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.195.101.87
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14982
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;134.195.101.87. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026110302 1800 900 604800 86400
;; Query time: 30 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Nov 04 03:12:06 CST 2026
;; MSG SIZE rcvd: 107Host 87.101.195.134.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 87.101.195.134.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 122.51.209.252 | attackspambots | SSH Brute Force |
2020-08-08 03:30:39 |
| 49.35.122.203 | attack | Unauthorized connection attempt from IP address 49.35.122.203 on Port 445(SMB) |
2020-08-08 03:56:18 |
| 85.209.0.85 | attackspambots | [f2b] sshd bruteforce, retries: 1 |
2020-08-08 04:00:07 |
| 77.247.109.20 | attackspam | Aug 7 21:00:43 vps339862 kernel: \[974206.930614\] \[iptables\] PORT DENIED: IN=eth0 OUT= MAC=fa:16:3e:65:a1:f6:32:a5:5e:0d:2c:d7:08:00 SRC=77.247.109.20 DST=51.254.206.43 LEN=442 TOS=0x00 PREC=0x00 TTL=54 ID=551 DF PROTO=UDP SPT=5064 DPT=5061 LEN=422 Aug 7 21:00:43 vps339862 kernel: \[974206.930651\] \[iptables\] PORT DENIED: IN=eth0 OUT= MAC=fa:16:3e:65:a1:f6:32:a5:5e:0d:2c:d7:08:00 SRC=77.247.109.20 DST=51.254.206.43 LEN=442 TOS=0x00 PREC=0x00 TTL=54 ID=553 DF PROTO=UDP SPT=5064 DPT=5063 LEN=422 Aug 7 21:00:43 vps339862 kernel: \[974206.930665\] \[iptables\] PORT DENIED: IN=eth0 OUT= MAC=fa:16:3e:65:a1:f6:32:a5:5e:0d:2c:d7:08:00 SRC=77.247.109.20 DST=51.254.206.43 LEN=442 TOS=0x00 PREC=0x00 TTL=54 ID=552 DF PROTO=UDP SPT=5064 DPT=5062 LEN=422 Aug 7 21:00:43 vps339862 kernel: \[974206.930729\] \[iptables\] PORT DENIED: IN=eth0 OUT= MAC=fa:16:3e:65:a1:f6:32:a5:5e:0d:2c:d7:08:00 SRC=77.247.109.20 DST=51.254.206.43 LEN=440 TOS=0x00 PREC=0x00 TTL=54 ID=554 DF PROTO=UDP SPT=5064 DP ... |
2020-08-08 03:52:28 |
| 148.70.149.39 | attackspam | Aug 7 19:31:33 icinga sshd[38005]: Failed password for root from 148.70.149.39 port 44468 ssh2 Aug 7 19:49:34 icinga sshd[763]: Failed password for root from 148.70.149.39 port 44776 ssh2 ... |
2020-08-08 03:34:30 |
| 13.64.18.118 | attack | \[2020-08-07 16:36:13\] SECURITY\[22163\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-07T16:36:13.093+0200",Severity="Error",Service="SIP",EventVersion="2",AccountID="1310012134311660",SessionID="0x7f0c184496f8",LocalAddress="IPV4/UDP/204.8.216.89/5060",RemoteAddress="IPV4/UDP/13.64.18.118/54892",Challenge="71cfd750",ReceivedChallenge="71cfd750",ReceivedHash="41307493a0647092b11a3474e67514a0" \[2020-08-07 16:47:08\] SECURITY\[22163\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-07T16:47:08.104+0200",Severity="Error",Service="SIP",EventVersion="2",AccountID="1320012134311660",SessionID="0x7f0c18385e28",LocalAddress="IPV4/UDP/204.8.216.89/5060",RemoteAddress="IPV4/UDP/13.64.18.118/58914",Challenge="56699348",ReceivedChallenge="56699348",ReceivedHash="eb55ffb32d25815dcbdf54f42448503b" \[2020-08-07 16:58:03\] SECURITY\[22163\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-07T16:58:03.407+0200",Severity="Error",Service= ... |
2020-08-08 03:34:12 |
| 178.234.147.29 | attackbots | Unauthorized connection attempt from IP address 178.234.147.29 on Port 445(SMB) |
2020-08-08 03:26:01 |
| 78.36.163.132 | attackbots | Unauthorized connection attempt from IP address 78.36.163.132 on Port 445(SMB) |
2020-08-08 03:41:44 |
| 222.186.61.19 | attack |
|
2020-08-08 03:56:39 |
| 217.160.65.177 | attackbots | "URL file extension is restricted by policy - .xsd" |
2020-08-08 03:36:33 |
| 104.223.197.227 | attackspam | SSH Brute Force |
2020-08-08 03:57:38 |
| 157.230.251.115 | attack | Aug 7 09:33:23 mx sshd[20606]: Failed password for root from 157.230.251.115 port 40018 ssh2 |
2020-08-08 03:25:20 |
| 195.155.216.28 | attackbots | Port probing on unauthorized port 445 |
2020-08-08 03:59:07 |
| 157.245.207.191 | attackbotsspam | Too many connections or unauthorized access detected from Arctic banned ip |
2020-08-08 03:26:27 |
| 156.213.75.248 | attack | Aug 7 06:00:33 Host-KLAX-C postfix/smtps/smtpd[30755]: lost connection after CONNECT from unknown[156.213.75.248] ... |
2020-08-08 03:38:28 |