City: Nehalem
Region: Oregon
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 137.118.0.0 - 137.118.255.255
CIDR: 137.118.0.0/16
NetName: NNS-137-118-0-0
NetHandle: NET-137-118-0-0-1
Parent: NET137 (NET-137-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: NeoNova Network Services, LLC (NNSL-156)
RegDate: 1989-11-21
Updated: 2022-10-26
Comment: -----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Ref: https://rdap.arin.net/registry/ip/137.118.0.0
OrgName: NeoNova Network Services, LLC
OrgId: NNSL-156
Address: 1201 Edwards mill rd
Address: Suite 102
City: Raleigh
StateProv: NC
PostalCode: 27607
Country: US
RegDate: 2017-09-27
Updated: 2026-03-06
Comment: NRTC(dba NeoNova Network Services)
Ref: https://rdap.arin.net/registry/entity/NNSL-156
OrgNOCHandle: ZN32-ARIN
OrgNOCName: NeoNova Network Services
OrgNOCPhone: +1-919-460-3330
OrgNOCEmail: ms-neteng@nrtc.coop
OrgNOCRef: https://rdap.arin.net/registry/entity/ZN32-ARIN
OrgTechHandle: ZN32-ARIN
OrgTechName: NeoNova Network Services
OrgTechPhone: +1-919-460-3330
OrgTechEmail: ms-neteng@nrtc.coop
OrgTechRef: https://rdap.arin.net/registry/entity/ZN32-ARIN
OrgAbuseHandle: ZN32-ARIN
OrgAbuseName: NeoNova Network Services
OrgAbusePhone: +1-919-460-3330
OrgAbuseEmail: ms-neteng@nrtc.coop
OrgAbuseRef: https://rdap.arin.net/registry/entity/ZN32-ARIN
# end
# start
NetRange: 137.118.200.0 - 137.118.203.255
CIDR: 137.118.200.0/22
NetName: NEHALEM-1
NetHandle: NET-137-118-200-0-1
Parent: NNS-137-118-0-0 (NET-137-118-0-0-1)
NetType: Reassigned
OriginAS:
Organization: Nehalem Telephone (NEHAL-1)
RegDate: 2018-04-24
Updated: 2018-04-24
Ref: https://rdap.arin.net/registry/ip/137.118.200.0
OrgName: Nehalem Telephone
OrgId: NEHAL-1
Address: P.O. Box 100
City: Nehalem
StateProv: OR
PostalCode: 97131
Country: US
RegDate: 2006-03-23
Updated: 2011-09-24
Ref: https://rdap.arin.net/registry/entity/NEHAL-1
OrgAbuseHandle: MCR43-ARIN
OrgAbuseName: Crist, Michael
OrgAbusePhone: +1-503-368-6518
OrgAbuseEmail: mikec@nehalemtel.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/MCR43-ARIN
OrgTechHandle: MCR43-ARIN
OrgTechName: Crist, Michael
OrgTechPhone: +1-503-368-6518
OrgTechEmail: mikec@nehalemtel.net
OrgTechRef: https://rdap.arin.net/registry/entity/MCR43-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 137.118.201.35
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24671
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;137.118.201.35. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026051500 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri May 15 22:10:27 CST 2026
;; MSG SIZE rcvd: 10735.201.118.137.in-addr.arpa domain name pointer 137-118-201-35.dsl.nehalemtel.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
35.201.118.137.in-addr.arpa name = 137-118-201-35.dsl.nehalemtel.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 211.75.194.80 | attack | Aug 23 12:53:23 friendsofhawaii sshd\[29960\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211-75-194-80.hinet-ip.hinet.net user=root Aug 23 12:53:25 friendsofhawaii sshd\[29960\]: Failed password for root from 211.75.194.80 port 48940 ssh2 Aug 23 12:57:54 friendsofhawaii sshd\[30311\]: Invalid user aliza from 211.75.194.80 Aug 23 12:57:54 friendsofhawaii sshd\[30311\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211-75-194-80.hinet-ip.hinet.net Aug 23 12:57:56 friendsofhawaii sshd\[30311\]: Failed password for invalid user aliza from 211.75.194.80 port 37028 ssh2 |
2019-08-24 07:11:01 |
| 113.236.78.86 | attack | Unauthorised access (Aug 23) SRC=113.236.78.86 LEN=40 TTL=49 ID=3245 TCP DPT=8080 WINDOW=42151 SYN Unauthorised access (Aug 23) SRC=113.236.78.86 LEN=40 TTL=49 ID=42313 TCP DPT=8080 WINDOW=37200 SYN |
2019-08-24 07:21:29 |
| 197.248.10.108 | attackspambots | 2019-08-23T22:53:28.100075ns1.unifynetsol.net sshd\[18271\]: Invalid user bussel from 197.248.10.108 port 33714 2019-08-24T00:01:28.432327ns1.unifynetsol.net sshd\[28378\]: Invalid user gitmaster from 197.248.10.108 port 50776 2019-08-24T01:09:44.837167ns1.unifynetsol.net sshd\[5382\]: Invalid user gitmaster from 197.248.10.108 port 39610 2019-08-24T02:18:15.857608ns1.unifynetsol.net sshd\[15685\]: Invalid user griha from 197.248.10.108 port 56674 2019-08-24T03:27:03.545160ns1.unifynetsol.net sshd\[25628\]: Invalid user griha from 197.248.10.108 port 45510 |
2019-08-24 07:11:35 |
| 51.38.126.92 | attackspam | Aug 23 18:15:54 vpn01 sshd\[17161\]: Invalid user bitbucket from 51.38.126.92 Aug 23 18:15:54 vpn01 sshd\[17161\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.126.92 Aug 23 18:15:56 vpn01 sshd\[17161\]: Failed password for invalid user bitbucket from 51.38.126.92 port 39610 ssh2 |
2019-08-24 06:46:38 |
| 61.177.137.38 | attack | Aug 23 23:20:41 dev0-dcde-rnet sshd[9841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.137.38 Aug 23 23:20:43 dev0-dcde-rnet sshd[9841]: Failed password for invalid user ofsaa from 61.177.137.38 port 2211 ssh2 Aug 23 23:24:41 dev0-dcde-rnet sshd[9857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.137.38 |
2019-08-24 06:50:16 |
| 103.81.69.22 | attackbotsspam | 2019-08-23T22:03:49.518957abusebot.cloudsearch.cf sshd\[14594\]: Invalid user server from 103.81.69.22 port 49732 2019-08-23T22:03:49.523811abusebot.cloudsearch.cf sshd\[14594\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.81.69.22 |
2019-08-24 06:57:34 |
| 62.173.151.34 | attack | SIPVicious Scanner Detection |
2019-08-24 07:15:13 |
| 139.59.128.97 | attackbotsspam | Aug 23 20:02:56 tuxlinux sshd[63909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.128.97 user=root Aug 23 20:02:58 tuxlinux sshd[63909]: Failed password for root from 139.59.128.97 port 47108 ssh2 Aug 23 20:02:56 tuxlinux sshd[63909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.128.97 user=root Aug 23 20:02:58 tuxlinux sshd[63909]: Failed password for root from 139.59.128.97 port 47108 ssh2 Aug 23 20:13:21 tuxlinux sshd[64162]: Invalid user readonly from 139.59.128.97 port 51238 ... |
2019-08-24 07:12:48 |
| 120.197.97.27 | attackspambots | 53413/udp 53413/udp 53413/udp... [2019-06-22/08-23]942pkt,1pt.(udp) |
2019-08-24 07:22:29 |
| 217.133.99.111 | attackspambots | SSH bruteforce (Triggered fail2ban) |
2019-08-24 06:48:58 |
| 90.216.146.133 | attackbotsspam | TCP Port: 443 _ invalid blocked dnsbl-sorbs rbldns-ru _ _ Client xx.xx.4.108 _ _ (984) |
2019-08-24 07:03:50 |
| 177.125.58.145 | attackspambots | Aug 23 18:00:00 aat-srv002 sshd[25618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.125.58.145 Aug 23 18:00:02 aat-srv002 sshd[25618]: Failed password for invalid user emil from 177.125.58.145 port 52383 ssh2 Aug 23 18:04:55 aat-srv002 sshd[25772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.125.58.145 Aug 23 18:04:57 aat-srv002 sshd[25772]: Failed password for invalid user surya from 177.125.58.145 port 49463 ssh2 ... |
2019-08-24 07:09:12 |
| 51.75.27.254 | attackbotsspam | Automatic report - Banned IP Access |
2019-08-24 07:05:15 |
| 187.190.235.43 | attackbots | Aug 24 00:11:43 v22019058497090703 sshd[28661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.190.235.43 Aug 24 00:11:45 v22019058497090703 sshd[28661]: Failed password for invalid user amanda from 187.190.235.43 port 45589 ssh2 Aug 24 00:17:29 v22019058497090703 sshd[29116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.190.235.43 ... |
2019-08-24 06:54:49 |
| 180.123.78.72 | attackspambots | Aug 23 17:54:41 mxgate1 postfix/postscreen[19518]: CONNECT from [180.123.78.72]:4649 to [176.31.12.44]:25 Aug 23 17:54:41 mxgate1 postfix/dnsblog[19530]: addr 180.123.78.72 listed by domain zen.spamhaus.org as 127.0.0.3 Aug 23 17:54:41 mxgate1 postfix/dnsblog[19530]: addr 180.123.78.72 listed by domain zen.spamhaus.org as 127.0.0.4 Aug 23 17:54:41 mxgate1 postfix/dnsblog[19530]: addr 180.123.78.72 listed by domain zen.spamhaus.org as 127.0.0.11 Aug 23 17:54:41 mxgate1 postfix/dnsblog[19526]: addr 180.123.78.72 listed by domain cbl.abuseat.org as 127.0.0.2 Aug 23 17:54:41 mxgate1 postfix/dnsblog[19528]: addr 180.123.78.72 listed by domain b.barracudacentral.org as 127.0.0.2 Aug 23 17:54:47 mxgate1 postfix/postscreen[19518]: DNSBL rank 4 for [180.123.78.72]:4649 Aug x@x Aug 23 17:54:49 mxgate1 postfix/postscreen[19518]: DISCONNECT [180.123.78.72]:4649 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=180.123.78.72 |
2019-08-24 06:56:59 |