City: unknown
Region: unknown
Country: Ghana
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the AfriNIC Whois server.
% The AFRINIC whois database is subject to the following terms of Use. See https://afrinic.net/whois/terms
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '154.160.0.0 - 154.175.255.255'
% No abuse contact registered for 154.160.0.0 - 154.175.255.255
inetnum: 154.160.0.0 - 154.175.255.255
netname: GH-SPACEFON
descr: Scancom Ltd.
country: GH
org: ORG-SL39-AFRINIC
admin-c: MM7054-AFRINIC
admin-c: HSR11-AFRINIC
tech-c: MM7054-AFRINIC
tech-c: HSR11-AFRINIC
status: ALLOCATED PA
mnt-by: AFRINIC-HM-MNT
mnt-lower: Srinivas-mnt
mnt-domains: Srinivas-mnt
source: AFRINIC # Filtered
parent: 154.0.0.0 - 154.255.255.255
organisation: ORG-SL39-AFRINIC
org-name: Scancom Limited
org-type: LIR
country: GH
remarks: data has been transferred from RIPE Whois Database 20050221
address: Scancom Ltd.
address: Plot OER 6
address: Independence Avenue,
address: West Ridge,
address: Accra
phone: tel:+233-24-430-0000
fax-no: tel:+233-21248507
admin-c: MM7054-AFRINIC
admin-c: HSR11-AFRINIC
tech-c: MM7054-AFRINIC
tech-c: HSR11-AFRINIC
mnt-ref: AFRINIC-HM-MNT
mnt-ref: Srinivas-mnt
mnt-by: AFRINIC-HM-MNT
source: AFRINIC # Filtered
person: H Srinivas Rao
address: Scancom Limited,
address: Plot OER 6
address: Independence Avenue,
address: West Ridge, Accra
address: Accra 281 ITF
address: Ghana
phone: tel:+233-24-430-0000
fax-no: tel:+233-21248507
nic-hdl: HSR11-AFRINIC
remarks: Technical Contact NIC Handle
remarks: data has been transferred from RIPE Whois Database 20050221
mnt-by: GENERATED-1QYMZOKPJXREKOHGCAGSLHHTHMVBU7XE-MNT
source: AFRINIC # Filtered
person: Mazen Mroue
address: 41 A, Auto Parts Building,
address: Graphic Road,
address: South Industrial Area.
address: P.O. Box 281 International Trade Fair LA,
address: Accra, Ghana. West Africa.
address: Accra 281 ITF
address: Ghana
phone: tel:+233-24-430-0000
fax-no: tel:+233-21248507
nic-hdl: MM7054-AFRINIC
remarks: Administrative Contact NIC Handle
remarks: data has been transferred from RIPE Whois Database 20050221
mnt-by: GENERATED-OVAJFZYMDCZ01CXI9DXWTQDNMNUTEJFY-MNT
source: AFRINIC # Filtered
% Information related to '154.160.0.0/12AS19905'
route: 154.160.0.0/12
origin: AS19905
descr: Scancom[MTNGhana] Prefix
mnt-by: Srinivas-mnt
source: AFRINIC # Filtered
remarks: For Arbor Cloud DDoS Mitigation
% Information related to '154.160.0.0/12AS30986'
route: 154.160.0.0/12
origin: AS30986
descr: MTN Ghana IP Block
mnt-by: Srinivas-mnt
source: AFRINIC # Filtered
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 154.167.137.174
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26580
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;154.167.137.174. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026081000 1800 900 604800 86400
;; Query time: 4 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Aug 10 20:49:27 CST 2026
;; MSG SIZE rcvd: 108
Host 174.137.167.154.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 174.137.167.154.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 36.80.42.153 | attack | Sep 28 18:02:52 gw1 sshd[2084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.80.42.153 Sep 28 18:02:55 gw1 sshd[2084]: Failed password for invalid user admIndian from 36.80.42.153 port 45934 ssh2 ... |
2019-09-28 21:19:44 |
| 222.186.31.145 | attackbotsspam | Sep 28 15:37:27 jane sshd[25908]: Failed password for root from 222.186.31.145 port 64486 ssh2 Sep 28 15:37:29 jane sshd[25908]: Failed password for root from 222.186.31.145 port 64486 ssh2 ... |
2019-09-28 21:40:46 |
| 222.186.180.20 | attackspam | 09/28/2019-09:37:33.269796 222.186.180.20 Protocol: 6 ET SCAN Potential SSH Scan |
2019-09-28 21:42:55 |
| 132.148.104.134 | attackbots | xmlrpc attack |
2019-09-28 21:53:04 |
| 140.143.30.191 | attackspam | Sep 28 15:25:30 pkdns2 sshd\[38159\]: Invalid user fy from 140.143.30.191Sep 28 15:25:32 pkdns2 sshd\[38159\]: Failed password for invalid user fy from 140.143.30.191 port 34698 ssh2Sep 28 15:30:22 pkdns2 sshd\[38454\]: Invalid user www from 140.143.30.191Sep 28 15:30:23 pkdns2 sshd\[38454\]: Failed password for invalid user www from 140.143.30.191 port 44348 ssh2Sep 28 15:35:05 pkdns2 sshd\[38676\]: Invalid user ab from 140.143.30.191Sep 28 15:35:08 pkdns2 sshd\[38676\]: Failed password for invalid user ab from 140.143.30.191 port 53990 ssh2 ... |
2019-09-28 21:23:39 |
| 79.160.45.35 | attackspam | Sep 28 18:52:47 areeb-Workstation sshd[4375]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.160.45.35 Sep 28 18:52:48 areeb-Workstation sshd[4375]: Failed password for invalid user smbguest from 79.160.45.35 port 40698 ssh2 ... |
2019-09-28 21:37:18 |
| 42.113.114.82 | attackspam | Attempt to attack host OS, exploiting network vulnerabilities, on 28-09-2019 13:35:18. |
2019-09-28 21:09:19 |
| 106.12.96.95 | attackbots | Sep 28 15:37:33 MK-Soft-VM7 sshd[5105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.96.95 Sep 28 15:37:36 MK-Soft-VM7 sshd[5105]: Failed password for invalid user tphan from 106.12.96.95 port 38842 ssh2 ... |
2019-09-28 21:40:31 |
| 213.32.18.189 | attack | Sep 28 03:35:01 hcbb sshd\[10310\]: Invalid user ftp from 213.32.18.189 Sep 28 03:35:01 hcbb sshd\[10310\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.32.18.189 Sep 28 03:35:03 hcbb sshd\[10310\]: Failed password for invalid user ftp from 213.32.18.189 port 47656 ssh2 Sep 28 03:38:15 hcbb sshd\[10587\]: Invalid user ec from 213.32.18.189 Sep 28 03:38:15 hcbb sshd\[10587\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.32.18.189 |
2019-09-28 21:45:29 |
| 91.121.109.45 | attackspam | Sep 28 09:17:44 ny01 sshd[25269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.109.45 Sep 28 09:17:46 ny01 sshd[25269]: Failed password for invalid user order from 91.121.109.45 port 46549 ssh2 Sep 28 09:21:42 ny01 sshd[25917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.109.45 |
2019-09-28 21:31:28 |
| 51.75.122.191 | attackbots | Sep 28 15:16:52 vps01 sshd[31957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.122.191 Sep 28 15:16:54 vps01 sshd[31957]: Failed password for invalid user 1234 from 51.75.122.191 port 53688 ssh2 |
2019-09-28 21:44:54 |
| 139.155.112.94 | attack | fail2ban |
2019-09-28 21:47:34 |
| 217.41.38.19 | attackbotsspam | Sep 28 02:47:47 wbs sshd\[31417\]: Invalid user in from 217.41.38.19 Sep 28 02:47:47 wbs sshd\[31417\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host217-41-38-19.in-addr.btopenworld.com Sep 28 02:47:49 wbs sshd\[31417\]: Failed password for invalid user in from 217.41.38.19 port 49306 ssh2 Sep 28 02:52:13 wbs sshd\[31801\]: Invalid user pos from 217.41.38.19 Sep 28 02:52:13 wbs sshd\[31801\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host217-41-38-19.in-addr.btopenworld.com |
2019-09-28 21:13:50 |
| 128.252.167.163 | attackbots | Sep 28 15:03:24 markkoudstaal sshd[21476]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.252.167.163 Sep 28 15:03:26 markkoudstaal sshd[21476]: Failed password for invalid user stephan from 128.252.167.163 port 49950 ssh2 Sep 28 15:07:20 markkoudstaal sshd[21856]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.252.167.163 |
2019-09-28 21:20:00 |
| 5.215.126.123 | attack | Attempt to attack host OS, exploiting network vulnerabilities, on 28-09-2019 13:35:19. |
2019-09-28 21:07:00 |