City: Cheung Sha Wan
Region: Sham Shui Po Kowloon
Country: Hong Kong
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the AfriNIC Whois server.
% The AFRINIC whois database is subject to the following terms of Use. See https://afrinic.net/whois/terms
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '154.51.0.0 - 154.51.255.255'
% No abuse contact registered for 154.51.0.0 - 154.51.255.255
inetnum: 154.51.0.0 - 154.51.255.255
netname: NET-154-51-0-0
descr: __________________________
descr: This block is allocated to an organization in the ARIN
descr: region. Please query whois.arin.net for more
descr: information on the registrant.
descr: __________________________
country: MU
org: ORG-AFNC1-AFRINIC
admin-c: TEAM-AFRINIC
tech-c: TEAM-AFRINIC
status: ALLOCATED UNSPECIFIED
mnt-by: AFRINIC-HM-MNT
source: AFRINIC # Filtered
parent: 154.0.0.0 - 154.255.255.255
organisation: ORG-AFNC1-AFRINIC
org-name: African Network Information Center - (AfriNIC) Ltd
org-type: RIR
country: MU
address: 11th Floor, Standard Chartered Tower
address: 19, Cybercity
address: Ebène
phone: tel:+230-466-6758
phone: tel:+230-403-5100
admin-c: CA15-AFRINIC
tech-c: IT7-AFRINIC
mnt-ref: AFRINIC-HM-MNT
mnt-ref: AFRINIC-IT-MNT
mnt-ref: AFRINIC-DB-MNT
mnt-by: AFRINIC-HM-MNT
remarks: =======================================
remarks: For more information on AFRINIC assigned blocks,
remarks: querry whois.afrinic.net port 43, or the web based
remarks: query at http://whois.afrinic.net or www.afrinic.net
remarks: website: www.afrinic.net
remarks: Other Contacts:
remarks: ===============
remarks: hostmaster@afrinic.net - for IP resources
remarks: new-member@afrinic.net - for new members and other
remarks: inquiries.
source: AFRINIC # Filtered
role: AfriNIC TEAM
address: Raffles Tower - 11th Floor
address: Cybercity
address: Mauritius
phone: tel:+230-403-5100
fax-no: tel:+230-466-6758
admin-c: CA15-AFRINIC
tech-c: CA15-AFRINIC
nic-hdl: TEAM-AFRINIC
mnt-by: AFRINIC-DB-MNT
source: AFRINIC # Filtered; <<>> DiG 9.10.3-P4-Ubuntu <<>> 154.51.61.107
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42241
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;154.51.61.107. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026082602 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Aug 27 06:30:59 CST 2026
;; MSG SIZE rcvd: 106Host 107.61.51.154.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 107.61.51.154.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 182.61.43.47 | attackbots | Sep 17 14:19:04 ny01 sshd[30426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.43.47 Sep 17 14:19:05 ny01 sshd[30426]: Failed password for invalid user discovery from 182.61.43.47 port 39974 ssh2 Sep 17 14:24:00 ny01 sshd[31274]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.43.47 |
2019-09-18 02:35:48 |
| 50.239.140.1 | attack | Sep 17 04:19:02 hcbb sshd\[14486\]: Invalid user default from 50.239.140.1 Sep 17 04:19:02 hcbb sshd\[14486\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.239.140.1 Sep 17 04:19:05 hcbb sshd\[14486\]: Failed password for invalid user default from 50.239.140.1 port 50278 ssh2 Sep 17 04:23:16 hcbb sshd\[14837\]: Invalid user qn from 50.239.140.1 Sep 17 04:23:16 hcbb sshd\[14837\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.239.140.1 |
2019-09-18 02:49:34 |
| 124.133.52.153 | attackbotsspam | Sep 17 18:16:03 hcbbdb sshd\[29226\]: Invalid user aklilu from 124.133.52.153 Sep 17 18:16:03 hcbbdb sshd\[29226\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.133.52.153 Sep 17 18:16:04 hcbbdb sshd\[29226\]: Failed password for invalid user aklilu from 124.133.52.153 port 40009 ssh2 Sep 17 18:20:51 hcbbdb sshd\[29776\]: Invalid user andy from 124.133.52.153 Sep 17 18:20:51 hcbbdb sshd\[29776\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.133.52.153 |
2019-09-18 02:47:58 |
| 183.131.22.206 | attackspambots | Sep 17 15:48:20 hcbbdb sshd\[12144\]: Invalid user test from 183.131.22.206 Sep 17 15:48:20 hcbbdb sshd\[12144\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.131.22.206 Sep 17 15:48:22 hcbbdb sshd\[12144\]: Failed password for invalid user test from 183.131.22.206 port 48474 ssh2 Sep 17 15:54:08 hcbbdb sshd\[12794\]: Invalid user test from 183.131.22.206 Sep 17 15:54:08 hcbbdb sshd\[12794\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.131.22.206 |
2019-09-18 02:40:47 |
| 35.220.199.231 | attackbots | Sep 17 20:23:05 dedicated sshd[3767]: Invalid user sienna123 from 35.220.199.231 port 53988 |
2019-09-18 02:27:33 |
| 31.166.94.148 | attackbotsspam | Unauthorized connection attempt from IP address 31.166.94.148 on Port 445(SMB) |
2019-09-18 02:22:37 |
| 37.193.108.101 | attackbots | Sep 17 18:18:46 MK-Soft-VM7 sshd\[4428\]: Invalid user admin from 37.193.108.101 port 61674 Sep 17 18:18:46 MK-Soft-VM7 sshd\[4428\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.193.108.101 Sep 17 18:18:49 MK-Soft-VM7 sshd\[4428\]: Failed password for invalid user admin from 37.193.108.101 port 61674 ssh2 ... |
2019-09-18 02:39:40 |
| 185.255.46.25 | attack | proto=tcp . spt=36889 . dpt=25 . (listed on Blocklist de Sep 16) (640) |
2019-09-18 03:01:54 |
| 76.72.8.136 | attackspam | DATE:2019-09-17 18:11:20,IP:76.72.8.136,MATCHES:10,PORT:ssh |
2019-09-18 02:42:22 |
| 117.6.133.123 | attack | Unauthorized connection attempt from IP address 117.6.133.123 on Port 445(SMB) |
2019-09-18 03:02:58 |
| 103.45.99.214 | attackspam | Sep 17 16:47:46 www sshd\[211456\]: Invalid user digi-user from 103.45.99.214 Sep 17 16:47:46 www sshd\[211456\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.45.99.214 Sep 17 16:47:47 www sshd\[211456\]: Failed password for invalid user digi-user from 103.45.99.214 port 55288 ssh2 ... |
2019-09-18 02:48:51 |
| 103.9.159.59 | attackbotsspam | Sep 17 20:00:46 tuxlinux sshd[17723]: Invalid user kramer from 103.9.159.59 port 48339 Sep 17 20:00:46 tuxlinux sshd[17723]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.9.159.59 Sep 17 20:00:46 tuxlinux sshd[17723]: Invalid user kramer from 103.9.159.59 port 48339 Sep 17 20:00:46 tuxlinux sshd[17723]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.9.159.59 Sep 17 20:00:46 tuxlinux sshd[17723]: Invalid user kramer from 103.9.159.59 port 48339 Sep 17 20:00:46 tuxlinux sshd[17723]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.9.159.59 Sep 17 20:00:48 tuxlinux sshd[17723]: Failed password for invalid user kramer from 103.9.159.59 port 48339 ssh2 ... |
2019-09-18 02:41:14 |
| 190.7.130.62 | attack | Unauthorized connection attempt from IP address 190.7.130.62 on Port 445(SMB) |
2019-09-18 02:28:04 |
| 117.152.189.215 | attackbots | Sep 17 15:31:17 mail kernel: [840024.526201] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=117.152.189.215 DST=91.205.173.180 LEN=52 TOS=0x04 PREC=0x00 TTL=109 ID=21505 DF PROTO=TCP SPT=9977 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 Sep 17 15:31:20 mail kernel: [840027.534865] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=117.152.189.215 DST=91.205.173.180 LEN=52 TOS=0x04 PREC=0x00 TTL=109 ID=22410 DF PROTO=TCP SPT=9977 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 Sep 17 15:31:26 mail kernel: [840033.529281] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=117.152.189.215 DST=91.205.173.180 LEN=48 TOS=0x04 PREC=0x00 TTL=109 ID=24261 DF PROTO=TCP SPT=11957 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 |
2019-09-18 02:49:55 |
| 61.90.73.192 | attackbotsspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/61.90.73.192/ TH - 1H : (26) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : TH NAME ASN : ASN17552 IP : 61.90.73.192 CIDR : 61.90.64.0/18 PREFIX COUNT : 345 UNIQUE IP COUNT : 1515264 WYKRYTE ATAKI Z ASN17552 : 1H - 1 3H - 3 6H - 3 12H - 4 24H - 7 INFO : SYN Flood DDoS Attack Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery |
2019-09-18 03:00:22 |