Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Hong Kong

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
% This is the AfriNIC Whois server.
% The AFRINIC whois database is subject to  the following terms of Use. See https://afrinic.net/whois/terms

% Note: this output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '154.3.0.0 - 154.3.255.255'

% No abuse contact registered for 154.3.0.0 - 154.3.255.255

inetnum:        154.3.0.0 - 154.3.255.255
netname:        NET-154-3-0-0
descr:          __________________________
descr:          This block is allocated to an organization in the ARIN
descr:          region. Please query whois.arin.net for more
descr:          information on the registrant.
descr:          __________________________
country:        MU
org:            ORG-AFNC1-AFRINIC
admin-c:        TEAM-AFRINIC
tech-c:         TEAM-AFRINIC
status:         ALLOCATED UNSPECIFIED
mnt-by:         AFRINIC-HM-MNT
source:         AFRINIC # Filtered
parent:         154.0.0.0 - 154.255.255.255

organisation:   ORG-AFNC1-AFRINIC
org-name:       African Network Information Center - (AfriNIC) Ltd
org-type:       RIR
country:        MU
address:        11th Floor, Standard Chartered Tower
address:        19, Cybercity
address:        Ebène
phone:          tel:+230-466-6758
phone:          tel:+230-403-5100
admin-c:        CA15-AFRINIC
tech-c:         IT7-AFRINIC
mnt-ref:        AFRINIC-HM-MNT
mnt-ref:        AFRINIC-IT-MNT
mnt-ref:        AFRINIC-DB-MNT
mnt-by:         AFRINIC-HM-MNT
remarks:        =======================================
remarks:        For more information on AFRINIC assigned blocks,
remarks:        querry whois.afrinic.net port 43, or the web based
remarks:        query at http://whois.afrinic.net or www.afrinic.net
remarks:        website: www.afrinic.net
remarks:        Other Contacts:
remarks:        ===============
remarks:        hostmaster@afrinic.net  - for IP resources
remarks:        new-member@afrinic.net  - for new members and other
remarks:        inquiries.
source:         AFRINIC # Filtered

role:           AfriNIC TEAM
address:        Raffles Tower - 11th Floor
address:        Cybercity
address:        Mauritius
phone:          tel:+230-403-5100
fax-no:         tel:+230-466-6758
admin-c:        CA15-AFRINIC
tech-c:         CA15-AFRINIC
nic-hdl:        TEAM-AFRINIC
mnt-by:         AFRINIC-DB-MNT
source:         AFRINIC # Filtered
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 154.3.34.121
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51237
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;154.3.34.121.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025100500 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 05 21:31:26 CST 2025
;; MSG SIZE  rcvd: 105
Host info
121.34.3.154.in-addr.arpa domain name pointer Host-By.DMIT.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
121.34.3.154.in-addr.arpa	name = Host-By.DMIT.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
46.9.167.197 attackbotsspam
Aug  2 05:08:31 propaganda sshd[58761]: Connection from 46.9.167.197 port 50337 on 10.0.0.160 port 22 rdomain ""
Aug  2 05:08:31 propaganda sshd[58761]: Connection closed by 46.9.167.197 port 50337 [preauth]
2020-08-03 00:49:49
45.138.172.125 attackbotsspam
(pop3d) Failed POP3 login from 45.138.172.125 (DE/Germany/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Aug  2 16:38:29 ir1 dovecot[3110802]: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=45.138.172.125, lip=5.63.12.44, session=
2020-08-03 00:47:50
185.191.231.247 attackspam
Fail2Ban Ban Triggered
2020-08-03 00:21:40
167.71.128.184 attackspam
Aug  2 15:03:28 debian-2gb-nbg1-2 kernel: \[18631883.797408\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=167.71.128.184 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=29551 PROTO=TCP SPT=32767 DPT=10332 WINDOW=1024 RES=0x00 SYN URGP=0
2020-08-03 00:42:07
5.199.133.47 attackspambots
Jul 30 21:27:19 mxgate1 postfix/postscreen[29132]: CONNECT from [5.199.133.47]:55698 to [176.31.12.44]:25
Jul 30 21:27:25 mxgate1 postfix/postscreen[29132]: PASS NEW [5.199.133.47]:55698
Jul 30 21:27:25 mxgate1 postfix/smtpd[29139]: connect from de133.co47.decobertores.com[5.199.133.47]
Jul x@x
Jul 30 21:27:29 mxgate1 postfix/smtpd[29139]: disconnect from de133.co47.decobertores.com[5.199.133.47] ehlo=2 starttls=1 mail=1 rcpt=0/1 quhostname=1 commands=5/6
Jul 30 21:30:49 mxgate1 postfix/anvil[29141]: statistics: max connection rate 1/60s for (smtpd:5.199.133.47) at Jul 30 21:27:25
Jul 30 21:30:49 mxgate1 postfix/anvil[29141]: statistics: max connection count 1 for (smtpd:5.199.133.47) at Jul 30 21:27:25
Jul 30 21:30:49 mxgate1 postfix/anvil[29141]: statistics: max message rate 1/60s for (smtpd:5.199.133.47) at Jul 30 21:27:25
Jul 30 22:27:28 mxgate1 postfix/postscreen[30741]: CONNECT from [5.199.133.47]:38934 to [176.31.12.44]:25
Jul 30 22:27:28 mxgate1 postfix/postscre........
-------------------------------
2020-08-03 00:42:40
64.227.38.225 attackbots
64.227.38.225 (GB/United Kingdom/-), 12 distributed sshd attacks on account [root] in the last 3600 secs
2020-08-03 00:58:25
35.231.10.33 attackbotsspam
Lines containing failures of 35.231.10.33
Jul 31 18:49:02 neweola sshd[24601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.231.10.33  user=r.r
Jul 31 18:49:04 neweola sshd[24601]: Failed password for r.r from 35.231.10.33 port 2016 ssh2
Jul 31 18:49:04 neweola sshd[24601]: Received disconnect from 35.231.10.33 port 2016:11: Bye Bye [preauth]
Jul 31 18:49:04 neweola sshd[24601]: Disconnected from authenticating user r.r 35.231.10.33 port 2016 [preauth]
Jul 31 19:01:36 neweola sshd[25587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.231.10.33  user=r.r
Jul 31 19:01:38 neweola sshd[25587]: Failed password for r.r from 35.231.10.33 port 1979 ssh2
Jul 31 19:01:38 neweola sshd[25587]: Received disconnect from 35.231.10.33 port 1979:11: Bye Bye [preauth]
Jul 31 19:01:38 neweola sshd[25587]: Disconnected from authenticating user r.r 35.231.10.33 port 1979 [preauth]
Jul 31 19:05:52 neweo........
------------------------------
2020-08-03 00:24:57
36.82.39.242 attack
1596370146 - 08/02/2020 14:09:06 Host: 36.82.39.242/36.82.39.242 Port: 445 TCP Blocked
2020-08-03 00:23:48
121.17.164.15 attack
 TCP (SYN) 121.17.164.15:38983 -> port 23, len 40
2020-08-03 00:43:16
182.75.248.254 attackbots
(sshd) Failed SSH login from 182.75.248.254 (IN/India/nsg-static-254.248.75.182-airtel.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug  2 17:53:49 srv sshd[845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.75.248.254  user=root
Aug  2 17:53:51 srv sshd[845]: Failed password for root from 182.75.248.254 port 27042 ssh2
Aug  2 18:05:08 srv sshd[1007]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.75.248.254  user=root
Aug  2 18:05:10 srv sshd[1007]: Failed password for root from 182.75.248.254 port 63973 ssh2
Aug  2 18:10:02 srv sshd[1081]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.75.248.254  user=root
2020-08-03 00:27:32
172.105.17.67 attack
ICMP MH Probe, Scan /Distributed -
2020-08-03 00:34:18
182.207.182.154 attackbots
20 attempts against mh-ssh on snow
2020-08-03 00:34:06
103.45.120.69 attackspam
Aug  2 15:00:12 lukav-desktop sshd\[13534\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.45.120.69  user=root
Aug  2 15:00:14 lukav-desktop sshd\[13534\]: Failed password for root from 103.45.120.69 port 33010 ssh2
Aug  2 15:04:38 lukav-desktop sshd\[13566\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.45.120.69  user=root
Aug  2 15:04:40 lukav-desktop sshd\[13566\]: Failed password for root from 103.45.120.69 port 46912 ssh2
Aug  2 15:08:26 lukav-desktop sshd\[20769\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.45.120.69  user=root
2020-08-03 00:52:24
101.227.82.60 attackbotsspam
Aug  2 05:23:14 mockhub sshd[12360]: Failed password for root from 101.227.82.60 port 33798 ssh2
...
2020-08-03 00:41:47
181.174.163.112 attack
Automatic report - Banned IP Access
2020-08-03 00:11:55

Recently Reported IPs

116.77.11.197 115.48.79.54 113.5.131.199 224.99.131.145
183.7.151.176 68.183.201.130 14.212.95.79 10.10.0.5
65.49.1.31 65.108.103.103 117.80.117.5 178.62.111.204
42.63.51.235 123.163.114.61 107.173.111.170 2.58.169.104
20.98.128.249 54.235.227.120 217.12.118.227 202.168.2.136