City: Los Angeles
Region: California
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the AfriNIC Whois server.
% The AFRINIC whois database is subject to the following terms of Use. See https://afrinic.net/whois/terms
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '154.44.0.0 - 154.44.255.255'
% No abuse contact registered for 154.44.0.0 - 154.44.255.255
inetnum: 154.44.0.0 - 154.44.255.255
netname: NET-154-44-0-0
descr: __________________________
descr: This block is allocated to an organization in the ARIN
descr: region. Please query whois.arin.net for more
descr: information on the registrant.
descr: __________________________
country: MU
org: ORG-AFNC1-AFRINIC
admin-c: TEAM-AFRINIC
tech-c: TEAM-AFRINIC
status: ALLOCATED UNSPECIFIED
mnt-by: AFRINIC-HM-MNT
source: AFRINIC # Filtered
parent: 154.0.0.0 - 154.255.255.255
organisation: ORG-AFNC1-AFRINIC
org-name: African Network Information Center - (AfriNIC) Ltd
org-type: RIR
country: MU
address: 11th Floor, Standard Chartered Tower
address: 19, Cybercity
address: Ebène
phone: tel:+230-466-6758
phone: tel:+230-403-5100
admin-c: CA15-AFRINIC
tech-c: IT7-AFRINIC
mnt-ref: AFRINIC-HM-MNT
mnt-ref: AFRINIC-IT-MNT
mnt-ref: AFRINIC-DB-MNT
mnt-by: AFRINIC-HM-MNT
remarks: =======================================
remarks: For more information on AFRINIC assigned blocks,
remarks: querry whois.afrinic.net port 43, or the web based
remarks: query at http://whois.afrinic.net or www.afrinic.net
remarks: website: www.afrinic.net
remarks: Other Contacts:
remarks: ===============
remarks: hostmaster@afrinic.net - for IP resources
remarks: new-member@afrinic.net - for new members and other
remarks: inquiries.
source: AFRINIC # Filtered
role: AfriNIC TEAM
address: Raffles Tower - 11th Floor
address: Cybercity
address: Mauritius
phone: tel:+230-403-5100
fax-no: tel:+230-466-6758
admin-c: CA15-AFRINIC
tech-c: CA15-AFRINIC
nic-hdl: TEAM-AFRINIC
mnt-by: AFRINIC-DB-MNT
source: AFRINIC # Filtered; <<>> DiG 9.10.3-P4-Ubuntu <<>> 154.44.123.245
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38114
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;154.44.123.245. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026062500 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jun 25 17:00:01 CST 2026
;; MSG SIZE rcvd: 107Host 245.123.44.154.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 245.123.44.154.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 87.118.122.30 | attackbots | 02/18/2020-14:21:29.240583 87.118.122.30 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 84 |
2020-02-19 03:13:01 |
| 81.19.208.112 | attackbotsspam | Port 1433 Scan |
2020-02-19 02:52:30 |
| 199.195.250.77 | attack | 02/18/2020-14:21:53.601094 199.195.250.77 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 45 |
2020-02-19 02:50:41 |
| 71.14.37.12 | attackspam | tcp 9530 |
2020-02-19 03:27:16 |
| 145.239.144.188 | attackspambots | GET /wp-content |
2020-02-19 02:57:29 |
| 103.97.124.200 | attackbotsspam | Feb 18 14:21:51 MK-Soft-VM8 sshd[8908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.97.124.200 Feb 18 14:21:53 MK-Soft-VM8 sshd[8908]: Failed password for invalid user user from 103.97.124.200 port 45516 ssh2 ... |
2020-02-19 02:49:42 |
| 68.183.86.89 | attackspambots | Fail2Ban Ban Triggered |
2020-02-19 02:45:20 |
| 103.105.42.35 | attackspam | Automatic report - Port Scan Attack |
2020-02-19 03:03:50 |
| 185.173.35.37 | attackbots | Unauthorized connection attempt detected from IP address 185.173.35.37 to port 2484 |
2020-02-19 03:14:57 |
| 180.178.111.220 | attack | ID_MNT-APJII-ID_<177>1582032108 [1:2010935:3] ET SCAN Suspicious inbound to MSSQL port 1433 [Classification: Potentially Bad Traffic] [Priority: 2] {TCP} 180.178.111.220:42806 |
2020-02-19 02:55:25 |
| 45.247.188.85 | attackbots | Feb 18 14:09:55 olgosrv01 sshd[11650]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.247.188.85 user=r.r Feb 18 14:09:57 olgosrv01 sshd[11650]: Failed password for r.r from 45.247.188.85 port 60287 ssh2 Feb 18 14:10:00 olgosrv01 sshd[11650]: Failed password for r.r from 45.247.188.85 port 60287 ssh2 Feb 18 14:10:01 olgosrv01 sshd[11650]: Failed password for r.r from 45.247.188.85 port 60287 ssh2 Feb 18 14:10:04 olgosrv01 sshd[11650]: Failed password for r.r from 45.247.188.85 port 60287 ssh2 Feb 18 14:10:07 olgosrv01 sshd[11650]: Failed password for r.r from 45.247.188.85 port 60287 ssh2 Feb 18 14:10:09 olgosrv01 sshd[11650]: Failed password for r.r from 45.247.188.85 port 60287 ssh2 Feb 18 14:10:09 olgosrv01 sshd[11650]: PAM 5 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.247.188.85 user=r.r ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=45.247.188.85 |
2020-02-19 03:21:39 |
| 51.178.47.64 | attackspam | Feb 18 15:37:04 server sshd\[11446\]: Invalid user j from 51.178.47.64 Feb 18 15:37:04 server sshd\[11446\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.ip-51-178-47.eu Feb 18 15:37:06 server sshd\[11446\]: Failed password for invalid user j from 51.178.47.64 port 44450 ssh2 Feb 18 16:21:48 server sshd\[20625\]: Invalid user testftp from 51.178.47.64 Feb 18 16:21:48 server sshd\[20625\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.ip-51-178-47.eu ... |
2020-02-19 02:54:40 |
| 190.64.204.140 | attackbots | $f2bV_matches |
2020-02-19 02:48:59 |
| 185.243.53.78 | attackspambots | Feb 18 14:05:28 twattle sshd[26037]: Did not receive identification str= ing from 185.243.53.78 Feb 18 14:05:47 twattle sshd[26038]: Received disconnect from 185.243.5= 3.78: 11: Normal Shutdown, Thank you for playing [preauth] Feb 18 14:06:07 twattle sshd[26040]: Invalid user oracle from 185.243.5= 3.78 Feb 18 14:06:07 twattle sshd[26040]: Received disconnect from 185.243.5= 3.78: 11: Normal Shutdown, Thank you for playing [preauth] Feb 18 14:06:27 twattle sshd[26042]: Received disconnect from 185.243.5= 3.78: 11: Normal Shutdown, Thank you for playing [preauth] Feb 18 14:06:47 twattle sshd[26046]: Invalid user postgres from 185.243= .53.78 Feb 18 14:06:47 twattle sshd[26046]: Received disconnect from 185.243.5= 3.78: 11: Normal Shutdown, Thank you for playing [preauth] Feb 18 14:07:07 twattle sshd[26048]: Received disconnect from 185.243.5= 3.78: 11: Normal Shutdown, Thank you for playing [preauth] Feb 18 14:07:28 twattle sshd[26050]: Invalid user hadoop from 185.243......... ------------------------------- |
2020-02-19 03:25:39 |
| 14.231.139.98 | attackbots | 14.231.139.98 - - \[18/Feb/2020:05:21:46 -0800\] "POST /index.php/admin HTTP/1.1" 404 2057014.231.139.98 - - \[18/Feb/2020:05:21:47 -0800\] "POST /index.php/admin/ HTTP/1.1" 404 2057414.231.139.98 - - \[18/Feb/2020:05:21:47 -0800\] "POST /index.php/admin/index/ HTTP/1.1" 404 20598 ... |
2020-02-19 02:56:42 |