City: Los Angeles
Region: California
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the AfriNIC Whois server.
% The AFRINIC whois database is subject to the following terms of Use. See https://afrinic.net/whois/terms
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '154.64.0.0 - 154.64.255.255'
% No abuse contact registered for 154.64.0.0 - 154.64.255.255
inetnum: 154.64.0.0 - 154.64.255.255
netname: NET-154-64-0-0
descr: __________________________
descr: This block is allocated to an organization in the ARIN
descr: region. Please query whois.arin.net for more
descr: information on the registrant.
descr: __________________________
country: MU
org: ORG-AFNC1-AFRINIC
admin-c: TEAM-AFRINIC
tech-c: TEAM-AFRINIC
status: ALLOCATED UNSPECIFIED
mnt-by: AFRINIC-HM-MNT
source: AFRINIC # Filtered
parent: 154.0.0.0 - 154.255.255.255
organisation: ORG-AFNC1-AFRINIC
org-name: African Network Information Center - (AfriNIC) Ltd
org-type: RIR
country: MU
address: 11th Floor, Standard Chartered Tower
address: 19, Cybercity
address: Ebène
phone: tel:+230-466-6758
phone: tel:+230-403-5100
admin-c: CA15-AFRINIC
tech-c: IT7-AFRINIC
mnt-ref: AFRINIC-HM-MNT
mnt-ref: AFRINIC-IT-MNT
mnt-ref: AFRINIC-DB-MNT
mnt-by: AFRINIC-HM-MNT
remarks: =======================================
remarks: For more information on AFRINIC assigned blocks,
remarks: querry whois.afrinic.net port 43, or the web based
remarks: query at http://whois.afrinic.net or www.afrinic.net
remarks: website: www.afrinic.net
remarks: Other Contacts:
remarks: ===============
remarks: hostmaster@afrinic.net - for IP resources
remarks: new-member@afrinic.net - for new members and other
remarks: inquiries.
source: AFRINIC # Filtered
role: AfriNIC TEAM
address: Raffles Tower - 11th Floor
address: Cybercity
address: Mauritius
phone: tel:+230-403-5100
fax-no: tel:+230-466-6758
admin-c: CA15-AFRINIC
tech-c: CA15-AFRINIC
nic-hdl: TEAM-AFRINIC
mnt-by: AFRINIC-DB-MNT
source: AFRINIC # Filtered
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 154.64.242.71
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36659
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;154.64.242.71. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026041200 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Apr 12 18:16:25 CST 2026
;; MSG SIZE rcvd: 106
Host 71.242.64.154.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 71.242.64.154.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.12.38.231 | attackspambots | Jul 24 14:48:11 george sshd[8733]: Failed password for invalid user rodrigo from 106.12.38.231 port 46344 ssh2 Jul 24 14:50:40 george sshd[8762]: Invalid user teste from 106.12.38.231 port 48228 Jul 24 14:50:40 george sshd[8762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.38.231 Jul 24 14:50:42 george sshd[8762]: Failed password for invalid user teste from 106.12.38.231 port 48228 ssh2 Jul 24 14:52:56 george sshd[8798]: Invalid user system from 106.12.38.231 port 50102 ... |
2020-07-25 03:25:52 |
| 70.35.198.115 | attackspam | 2020-07-24T17:24:55+0000 Failed SSH Authentication/Brute Force Attack. (Server 6) |
2020-07-25 03:15:22 |
| 41.139.5.197 | attackbots | Jul 24 10:27:29 mail.srvfarm.net postfix/smtps/smtpd[2165660]: warning: unknown[41.139.5.197]: SASL PLAIN authentication failed: Jul 24 10:27:29 mail.srvfarm.net postfix/smtps/smtpd[2165660]: lost connection after AUTH from unknown[41.139.5.197] Jul 24 10:29:19 mail.srvfarm.net postfix/smtps/smtpd[2179031]: warning: unknown[41.139.5.197]: SASL PLAIN authentication failed: Jul 24 10:29:20 mail.srvfarm.net postfix/smtps/smtpd[2179031]: lost connection after AUTH from unknown[41.139.5.197] Jul 24 10:29:47 mail.srvfarm.net postfix/smtps/smtpd[2184263]: warning: unknown[41.139.5.197]: SASL PLAIN authentication failed: |
2020-07-25 03:01:40 |
| 103.237.57.245 | attackbotsspam | Jul 24 10:45:14 mail.srvfarm.net postfix/smtps/smtpd[2188735]: warning: unknown[103.237.57.245]: SASL PLAIN authentication failed: Jul 24 10:45:14 mail.srvfarm.net postfix/smtps/smtpd[2188735]: lost connection after AUTH from unknown[103.237.57.245] Jul 24 10:46:29 mail.srvfarm.net postfix/smtps/smtpd[2188730]: warning: unknown[103.237.57.245]: SASL PLAIN authentication failed: Jul 24 10:46:29 mail.srvfarm.net postfix/smtps/smtpd[2188730]: lost connection after AUTH from unknown[103.237.57.245] Jul 24 10:52:55 mail.srvfarm.net postfix/smtps/smtpd[2187427]: warning: unknown[103.237.57.245]: SASL PLAIN authentication failed: |
2020-07-25 02:59:05 |
| 182.75.225.82 | attack | Unauthorized connection attempt from IP address 182.75.225.82 on Port 445(SMB) |
2020-07-25 03:12:45 |
| 163.142.99.50 | attackbotsspam | Jul 24 11:36:45 mail.srvfarm.net postfix/smtpd[2210862]: lost connection after RCPT from unknown[163.142.99.50] Jul 24 11:36:45 mail.srvfarm.net postfix/smtpd[2210830]: lost connection after RCPT from unknown[163.142.99.50] Jul 24 11:36:45 mail.srvfarm.net postfix/smtpd[2210828]: lost connection after RCPT from unknown[163.142.99.50] Jul 24 11:36:45 mail.srvfarm.net postfix/smtpd[2210860]: lost connection after RCPT from unknown[163.142.99.50] Jul 24 11:36:46 mail.srvfarm.net postfix/smtpd[2210864]: lost connection after RCPT from unknown[163.142.99.50] |
2020-07-25 02:49:53 |
| 122.152.248.27 | attack | Jul 24 21:48:54 lukav-desktop sshd\[17955\]: Invalid user tito from 122.152.248.27 Jul 24 21:48:54 lukav-desktop sshd\[17955\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.152.248.27 Jul 24 21:48:56 lukav-desktop sshd\[17955\]: Failed password for invalid user tito from 122.152.248.27 port 27931 ssh2 Jul 24 21:52:20 lukav-desktop sshd\[18155\]: Invalid user sona from 122.152.248.27 Jul 24 21:52:20 lukav-desktop sshd\[18155\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.152.248.27 |
2020-07-25 03:07:59 |
| 140.186.181.21 | attackspam | Telnet brute force and port scan |
2020-07-25 03:12:59 |
| 104.131.97.47 | attackbots | Jul 24 16:28:35 ncomp sshd[32738]: Invalid user belen from 104.131.97.47 Jul 24 16:28:35 ncomp sshd[32738]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.97.47 Jul 24 16:28:35 ncomp sshd[32738]: Invalid user belen from 104.131.97.47 Jul 24 16:28:36 ncomp sshd[32738]: Failed password for invalid user belen from 104.131.97.47 port 48374 ssh2 |
2020-07-25 03:13:42 |
| 161.35.4.190 | attackbots |
|
2020-07-25 03:02:19 |
| 118.89.229.84 | attack | (sshd) Failed SSH login from 118.89.229.84 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 24 22:12:34 s1 sshd[13467]: Invalid user postgres from 118.89.229.84 port 57350 Jul 24 22:12:36 s1 sshd[13467]: Failed password for invalid user postgres from 118.89.229.84 port 57350 ssh2 Jul 24 22:24:02 s1 sshd[13899]: Invalid user bobi from 118.89.229.84 port 45744 Jul 24 22:24:05 s1 sshd[13899]: Failed password for invalid user bobi from 118.89.229.84 port 45744 ssh2 Jul 24 22:29:41 s1 sshd[14124]: Invalid user salim from 118.89.229.84 port 51486 |
2020-07-25 03:30:00 |
| 178.44.253.3 | attack | Unauthorized connection attempt from IP address 178.44.253.3 on Port 445(SMB) |
2020-07-25 03:20:24 |
| 139.199.14.128 | attack | Jul 24 18:15:30 ns381471 sshd[8782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128 Jul 24 18:15:32 ns381471 sshd[8782]: Failed password for invalid user dcadmin from 139.199.14.128 port 51676 ssh2 |
2020-07-25 03:29:41 |
| 68.183.178.162 | attackspam | 2020-07-25T00:50:28.625408billing sshd[3993]: Invalid user fw from 68.183.178.162 port 50034 2020-07-25T00:50:30.771457billing sshd[3993]: Failed password for invalid user fw from 68.183.178.162 port 50034 ssh2 2020-07-25T00:54:46.984077billing sshd[12786]: Invalid user test from 68.183.178.162 port 35038 ... |
2020-07-25 03:06:50 |
| 182.156.209.222 | attackbots | Connection to SSH Honeypot - Detected by HoneypotDB |
2020-07-25 03:21:43 |