City: Accra
Region: Greater Accra Region
Country: Ghana
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the AfriNIC Whois server.
% The AFRINIC whois database is subject to the following terms of Use. See https://afrinic.net/whois/terms
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '154.160.0.0 - 154.175.255.255'
% No abuse contact registered for 154.160.0.0 - 154.175.255.255
inetnum: 154.160.0.0 - 154.175.255.255
netname: GH-SPACEFON
descr: Scancom Ltd.
country: GH
org: ORG-SL39-AFRINIC
admin-c: MM7054-AFRINIC
admin-c: HSR11-AFRINIC
tech-c: MM7054-AFRINIC
tech-c: HSR11-AFRINIC
status: ALLOCATED PA
mnt-by: AFRINIC-HM-MNT
mnt-lower: Srinivas-mnt
mnt-domains: Srinivas-mnt
source: AFRINIC # Filtered
parent: 154.0.0.0 - 154.255.255.255
organisation: ORG-SL39-AFRINIC
org-name: Scancom Limited
org-type: LIR
country: GH
remarks: data has been transferred from RIPE Whois Database 20050221
address: Scancom Ltd.
address: Plot OER 6
address: Independence Avenue,
address: West Ridge,
address: Accra
phone: tel:+233-24-430-0000
fax-no: tel:+233-21248507
admin-c: MM7054-AFRINIC
admin-c: HSR11-AFRINIC
tech-c: MM7054-AFRINIC
tech-c: HSR11-AFRINIC
mnt-ref: AFRINIC-HM-MNT
mnt-ref: Srinivas-mnt
mnt-by: AFRINIC-HM-MNT
source: AFRINIC # Filtered
person: H Srinivas Rao
address: Scancom Limited,
address: Plot OER 6
address: Independence Avenue,
address: West Ridge, Accra
address: Accra 281 ITF
address: Ghana
phone: tel:+233-24-430-0000
fax-no: tel:+233-21248507
nic-hdl: HSR11-AFRINIC
remarks: Technical Contact NIC Handle
remarks: data has been transferred from RIPE Whois Database 20050221
mnt-by: GENERATED-1QYMZOKPJXREKOHGCAGSLHHTHMVBU7XE-MNT
source: AFRINIC # Filtered
person: Mazen Mroue
address: 41 A, Auto Parts Building,
address: Graphic Road,
address: South Industrial Area.
address: P.O. Box 281 International Trade Fair LA,
address: Accra, Ghana. West Africa.
address: Accra 281 ITF
address: Ghana
phone: tel:+233-24-430-0000
fax-no: tel:+233-21248507
nic-hdl: MM7054-AFRINIC
remarks: Administrative Contact NIC Handle
remarks: data has been transferred from RIPE Whois Database 20050221
mnt-by: GENERATED-OVAJFZYMDCZ01CXI9DXWTQDNMNUTEJFY-MNT
source: AFRINIC # Filtered
% Information related to '154.161.128.0/17AS30986'
route: 154.161.128.0/17
origin: AS30986
descr: Scancom [MTNGhana] Mobile Subscribers
mnt-by: Srinivas-mnt
source: AFRINIC # Filtered; <<>> DiG 9.10.3-P4-Ubuntu <<>> 154.161.170.143
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27708
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;154.161.170.143. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026072001 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jul 21 14:32:59 CST 2026
;; MSG SIZE rcvd: 108Host 143.170.161.154.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 143.170.161.154.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 185.47.65.30 | attack | Sep 5 20:15:35 pixelmemory sshd[3967974]: Failed password for root from 185.47.65.30 port 40302 ssh2 Sep 5 20:19:15 pixelmemory sshd[3968424]: Invalid user david from 185.47.65.30 port 54998 Sep 5 20:19:15 pixelmemory sshd[3968424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.47.65.30 Sep 5 20:19:15 pixelmemory sshd[3968424]: Invalid user david from 185.47.65.30 port 54998 Sep 5 20:19:17 pixelmemory sshd[3968424]: Failed password for invalid user david from 185.47.65.30 port 54998 ssh2 ... |
2020-09-06 12:30:47 |
| 213.32.23.58 | attackbots | Sep 6 05:15:07 sshgateway sshd\[425\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.ip-213-32-23.eu user=root Sep 6 05:15:09 sshgateway sshd\[425\]: Failed password for root from 213.32.23.58 port 56696 ssh2 Sep 6 05:20:26 sshgateway sshd\[2357\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.ip-213-32-23.eu user=root |
2020-09-06 12:27:53 |
| 85.206.165.172 | attackbotsspam | malicious Brute-Force reported by https://www.patrick-binder.de ... |
2020-09-06 12:56:58 |
| 177.203.210.209 | attackspam | Sep 6 05:19:39 sshgateway sshd\[2021\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177-203-210-209.user3p.brasiltelecom.net.br user=root Sep 6 05:19:41 sshgateway sshd\[2021\]: Failed password for root from 177.203.210.209 port 42494 ssh2 Sep 6 05:28:19 sshgateway sshd\[5282\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177-203-210-209.user3p.brasiltelecom.net.br user=root |
2020-09-06 13:03:51 |
| 45.142.120.83 | attackspam | Sep 6 06:30:52 v22019058497090703 postfix/smtpd[18973]: warning: unknown[45.142.120.83]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 6 06:31:34 v22019058497090703 postfix/smtpd[22631]: warning: unknown[45.142.120.83]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 6 06:32:16 v22019058497090703 postfix/smtpd[20610]: warning: unknown[45.142.120.83]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-09-06 12:33:55 |
| 128.199.232.120 | attackbotsspam | Scanning unused Default website or suspicious access to valid sites from IP marked as abusive |
2020-09-06 12:37:01 |
| 51.83.98.104 | attackspambots | Sep 6 01:03:37 firewall sshd[22942]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.98.104 user=root Sep 6 01:03:39 firewall sshd[22942]: Failed password for root from 51.83.98.104 port 42266 ssh2 Sep 6 01:07:37 firewall sshd[23068]: Invalid user user7 from 51.83.98.104 ... |
2020-09-06 12:46:27 |
| 106.54.123.84 | attack | Invalid user courier from 106.54.123.84 port 45856 |
2020-09-06 13:01:08 |
| 59.127.253.45 | attack | Tried our host z. |
2020-09-06 12:41:19 |
| 183.166.137.124 | attackbots | Sep 5 19:41:29 srv01 postfix/smtpd\[30709\]: warning: unknown\[183.166.137.124\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 5 19:41:41 srv01 postfix/smtpd\[30709\]: warning: unknown\[183.166.137.124\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 5 19:41:57 srv01 postfix/smtpd\[30709\]: warning: unknown\[183.166.137.124\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 5 19:42:17 srv01 postfix/smtpd\[30709\]: warning: unknown\[183.166.137.124\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 5 19:42:28 srv01 postfix/smtpd\[30709\]: warning: unknown\[183.166.137.124\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-09-06 12:29:07 |
| 14.199.206.183 | attack | Automatically reported by fail2ban report script (powermetal_old) |
2020-09-06 12:53:36 |
| 218.92.0.251 | attackspam | 2020-09-06T04:27:55.569446shield sshd\[25918\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.251 user=root 2020-09-06T04:27:57.613823shield sshd\[25918\]: Failed password for root from 218.92.0.251 port 1750 ssh2 2020-09-06T04:28:00.646908shield sshd\[25918\]: Failed password for root from 218.92.0.251 port 1750 ssh2 2020-09-06T04:28:04.107631shield sshd\[25918\]: Failed password for root from 218.92.0.251 port 1750 ssh2 2020-09-06T04:28:07.435366shield sshd\[25918\]: Failed password for root from 218.92.0.251 port 1750 ssh2 |
2020-09-06 12:35:31 |
| 61.177.172.142 | attackbots | 2020-09-06T04:14:54.437910shield sshd\[24532\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.142 user=root 2020-09-06T04:14:56.597931shield sshd\[24532\]: Failed password for root from 61.177.172.142 port 16861 ssh2 2020-09-06T04:14:59.428557shield sshd\[24532\]: Failed password for root from 61.177.172.142 port 16861 ssh2 2020-09-06T04:15:03.010796shield sshd\[24532\]: Failed password for root from 61.177.172.142 port 16861 ssh2 2020-09-06T04:15:06.475946shield sshd\[24532\]: Failed password for root from 61.177.172.142 port 16861 ssh2 |
2020-09-06 12:39:14 |
| 111.93.235.74 | attack | ssh brute force |
2020-09-06 12:32:55 |
| 197.34.20.76 | attackbotsspam | port scan and connect, tcp 23 (telnet) |
2020-09-06 12:23:19 |