City: Los Angeles
Region: California
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 165.254.0.0 - 165.254.255.255
CIDR: 165.254.0.0/16
NetName: NTTA-165-254
NetHandle: NET-165-254-0-0-1
Parent: NET165 (NET-165-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: NTT America, Inc. (NTTAM-1)
RegDate: 1993-10-21
Updated: 2026-02-21
Comment: Geofeed https://geo.gin.ntt.net/geofeeds/geofeeds.csv
Comment: Reassignment information for this block is
Comment: available at rwhois.gin.ntt.net port 4321
Ref: https://rdap.arin.net/registry/ip/165.254.0.0
OrgName: NTT America, Inc.
OrgId: NTTAM-1
Address: 15809 Bear Creek Pkwy
Address: Suite 320
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US
RegDate: 2005-12-08
Updated: 2024-03-04
Ref: https://rdap.arin.net/registry/entity/NTTAM-1
ReferralServer: rwhois://rwhois.gin.ntt.net:4321
OrgTechHandle: VIPAR-ARIN
OrgTechName: VIPAR
OrgTechPhone: +1-877-688-6625
OrgTechEmail: ipr@gin.ntt.net
OrgTechRef: https://rdap.arin.net/registry/entity/VIPAR-ARIN
OrgAbuseHandle: NAAC-ARIN
OrgAbuseName: NTT America Abuse Contact
OrgAbusePhone: +1-877-688-6625
OrgAbuseEmail: abuse@ntt.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/NAAC-ARIN
OrgRoutingHandle: PEERI-ARIN
OrgRoutingName: Peering
OrgRoutingPhone: +1-877-688-6625
OrgRoutingEmail: peering@ntt.net
OrgRoutingRef: https://rdap.arin.net/registry/entity/PEERI-ARIN
OrgNOCHandle: NASC-ARIN
OrgNOCName: NTT America Support Contact
OrgNOCPhone: +1-877-688-6625
OrgNOCEmail: ce-support@gin.ntt.net
OrgNOCRef: https://rdap.arin.net/registry/entity/NASC-ARIN
OrgTechHandle: CANDE70-ARIN
OrgTechName: Candela, Massimo
OrgTechPhone: +1-214-915-1366
OrgTechEmail: massimo@ntt.net
OrgTechRef: https://rdap.arin.net/registry/entity/CANDE70-ARIN
RTechHandle: VIA4-ORG-ARIN
RTechName: VIPAR
RTechPhone: +1-877-688-6625
RTechEmail: ipr@gin.ntt.net
RTechRef: https://rdap.arin.net/registry/entity/VIA4-ORG-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to rwhois.gin.ntt.net:4321.
%rwhois V-1.5:0078b6:00 rwhois.gin.ntt.net (Vipar 0.1a. Comments to ipr@gin.ntt.net)
network:Class-Name:network
network:Auth-Area:165.254.0.0/16
network:ID:BBV4-165-254-154-0.127.0.0.1/32
network:Handle:BBV4-165-254-154-0
network:Network-Name:BBV4-165-254-154-0
network:IP-Network:165.254.154.0/24
network:In-Addr-Server;I:GIN1-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN2-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN3-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN4-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN5-HST.127.0.0.1/32
network:IP-Network-Block:165.254.154.0 - 165.254.154.255
network:Org-Name:Sparktech LTD
network:Street-Address:5205 E Atlantic PI
network:City:Denver
network:State:CO
network:Postal-Code:80222
network:Country-Code:1
network:Tech-Contact;I:NTT-SPARKTECH.127.0.0.1/32
network:Created:2025-10-02 11:46:09.037821+00
network:Updated:2025-10-02 11:46:09.037821+00
network:Class-Name:network
network:Auth-Area:165.254.0.0/16
network:ID:NETBLK-USV4-165-254.127.0.0.1/32
network:Handle:NETBLK-USV4-165-254
network:Network-Name:USV4-165-254
network:IP-Network:165.254.0.0/16
network:In-Addr-Server;I:GIN1-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN2-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN3-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN4-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN5-HST.127.0.0.1/32
network:IP-Network-Block:165.254.0.0 - 165.254.255.255
network:Org-Name:NTT DATA
network:Street-Address:8300 E Maplewood Ave. Suite 400
network:City:Greenwood Village
network:State:CO
network:Postal-Code:80111
network:Country-Code:US
network:Tech-Contact;I:GIN-BBV4.127.0.0.1/32
network:Created:1999-10-21 05:00:00+00
network:Updated:2019-02-26 15:29:11.25021+00
%ok; <<>> DiG 9.10.3-P4-Ubuntu <<>> 165.254.154.109
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35755
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;165.254.154.109. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026061000 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jun 10 19:03:13 CST 2026
;; MSG SIZE rcvd: 108b'Host 109.154.254.165.in-addr.arpa not found: 2(SERVFAIL)
'server can't find 165.254.154.109.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.211.36.133 | attack | [Thu May 21 22:27:29.969082 2020] [authz_core:error] [pid 19581:tid 140202949465856] [client 104.211.36.133:41300] AH01630: client denied by server configuration: /var/www/vhosts/sololinux.es/httpdocs/xmlrpc.php [Thu May 21 22:27:31.238039 2020] [authz_core:error] [pid 19582:tid 140202899109632] [client 104.211.36.133:41326] AH01630: client denied by server configuration: /var/www/vhosts/sololinux.es/httpdocs/xmlrpc.php [Thu May 21 22:27:31.238159 2020] [authz_core:error] [pid 19582:tid 140202966251264] [client 104.211.36.133:41324] AH01630: client denied by server configuration: /var/www/vhosts/sololinux.es/httpdocs/xmlrpc.php [Thu May 21 22:27:32.163849 2020] [authz_core:error] [pid 19583:tid 140202798397184] [client 104.211.36.133:41358] AH01630: client denied by server configuration: /var/www/vhosts/sololinux.es/httpdocs/xmlrpc.php ... |
2020-05-22 05:47:47 |
| 188.166.208.131 | attackspambots | 2020-05-21T20:22:00.471958abusebot-2.cloudsearch.cf sshd[10762]: Invalid user pvb from 188.166.208.131 port 37336 2020-05-21T20:22:00.481132abusebot-2.cloudsearch.cf sshd[10762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.208.131 2020-05-21T20:22:00.471958abusebot-2.cloudsearch.cf sshd[10762]: Invalid user pvb from 188.166.208.131 port 37336 2020-05-21T20:22:02.693346abusebot-2.cloudsearch.cf sshd[10762]: Failed password for invalid user pvb from 188.166.208.131 port 37336 ssh2 2020-05-21T20:27:33.211187abusebot-2.cloudsearch.cf sshd[10774]: Invalid user abf from 188.166.208.131 port 50902 2020-05-21T20:27:33.216341abusebot-2.cloudsearch.cf sshd[10774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.208.131 2020-05-21T20:27:33.211187abusebot-2.cloudsearch.cf sshd[10774]: Invalid user abf from 188.166.208.131 port 50902 2020-05-21T20:27:34.811222abusebot-2.cloudsearch.cf sshd[10774]: Fa ... |
2020-05-22 05:44:47 |
| 213.204.102.106 | attack | TCP Port: 25 invalid blocked abuseat-org also barracuda and zen-spamhaus (259) |
2020-05-22 05:32:27 |
| 68.183.190.86 | attack | May 22 02:13:14 gw1 sshd[2606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.190.86 May 22 02:13:16 gw1 sshd[2606]: Failed password for invalid user aun from 68.183.190.86 port 59280 ssh2 ... |
2020-05-22 05:16:48 |
| 27.78.14.83 | attack | SSH Invalid Login |
2020-05-22 05:47:15 |
| 116.105.195.243 | attackspambots | Invalid user admin from 116.105.195.243 port 56122 |
2020-05-22 05:42:21 |
| 109.232.109.58 | attackspam | May 21 17:30:01 ws19vmsma01 sshd[181547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.232.109.58 May 21 17:30:02 ws19vmsma01 sshd[181547]: Failed password for invalid user gfr from 109.232.109.58 port 50990 ssh2 ... |
2020-05-22 05:33:29 |
| 87.226.165.143 | attack | May 22 00:27:46 ift sshd\[35703\]: Invalid user gwl from 87.226.165.143May 22 00:27:48 ift sshd\[35703\]: Failed password for invalid user gwl from 87.226.165.143 port 48854 ssh2May 22 00:31:17 ift sshd\[36254\]: Invalid user bes from 87.226.165.143May 22 00:31:20 ift sshd\[36254\]: Failed password for invalid user bes from 87.226.165.143 port 53252 ssh2May 22 00:34:48 ift sshd\[36839\]: Invalid user eno from 87.226.165.143 ... |
2020-05-22 05:45:11 |
| 209.97.134.47 | attack | May 21 23:07:40 vmd48417 sshd[31417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.134.47 |
2020-05-22 05:59:57 |
| 144.34.210.56 | attack | May 21 21:04:40 onepixel sshd[750733]: Invalid user zhushuaishuai from 144.34.210.56 port 45516 May 21 21:04:40 onepixel sshd[750733]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.34.210.56 May 21 21:04:40 onepixel sshd[750733]: Invalid user zhushuaishuai from 144.34.210.56 port 45516 May 21 21:04:42 onepixel sshd[750733]: Failed password for invalid user zhushuaishuai from 144.34.210.56 port 45516 ssh2 May 21 21:08:04 onepixel sshd[751220]: Invalid user jvm from 144.34.210.56 port 51600 |
2020-05-22 05:22:58 |
| 195.54.167.8 | attack | [MK-VM6] Blocked by UFW |
2020-05-22 05:56:06 |
| 173.234.181.115 | attackspam | Unauthorized access detected from black listed ip! |
2020-05-22 05:32:02 |
| 189.202.204.230 | attack | May 21 23:30:22 legacy sshd[24408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.202.204.230 May 21 23:30:24 legacy sshd[24408]: Failed password for invalid user shc from 189.202.204.230 port 47581 ssh2 May 21 23:34:35 legacy sshd[24550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.202.204.230 ... |
2020-05-22 05:41:55 |
| 51.38.126.75 | attackbotsspam | May 21 23:13:37 abendstille sshd\[16471\]: Invalid user aix from 51.38.126.75 May 21 23:13:37 abendstille sshd\[16471\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.126.75 May 21 23:13:40 abendstille sshd\[16471\]: Failed password for invalid user aix from 51.38.126.75 port 56962 ssh2 May 21 23:18:33 abendstille sshd\[21369\]: Invalid user ych from 51.38.126.75 May 21 23:18:33 abendstille sshd\[21369\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.126.75 ... |
2020-05-22 05:28:25 |
| 182.75.216.74 | attack | SSH Invalid Login |
2020-05-22 06:00:14 |