City: College Park
Region: Maryland
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b'#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 168.143.0.0 - 168.143.255.255
CIDR: 168.143.0.0/16
NetName: NTTA-168-143
NetHandle: NET-168-143-0-0-1
Parent: NET168 (NET-168-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: NTT America, Inc. (NTTAM-1)
RegDate: 1994-05-13
Updated: 2024-07-26
Comment: Geofeed https://geo.ip.gin.ntt.net/geofeeds/geofeeds.csv
Comment:
Comment: Reassignment information for this block is
Comment: available at rwhois.gin.ntt.net port 4321
Ref: https://rdap.arin.net/registry/ip/168.143.0.0
OrgName: NTT America, Inc.
OrgId: NTTAM-1
Address: 15809 Bear Creek Pkwy
Address: Suite 320
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US
RegDate: 2005-12-08
Updated: 2024-03-04
Ref: https://rdap.arin.net/registry/entity/NTTAM-1
ReferralServer: rwhois://rwhois.gin.ntt.net:4321
OrgNOCHandle: NASC-ARIN
OrgNOCName: NTT America Support Contact
OrgNOCPhone: +1-877-688-6625
OrgNOCEmail: ce-support@gin.ntt.net
OrgNOCRef: https://rdap.arin.net/registry/entity/NASC-ARIN
OrgRoutingHandle: PEERI-ARIN
OrgRoutingName: Peering
OrgRoutingPhone: +1-877-688-6625
OrgRoutingEmail: peering@ntt.net
OrgRoutingRef: https://rdap.arin.net/registry/entity/PEERI-ARIN
OrgTechHandle: VIPAR-ARIN
OrgTechName: VIPAR
OrgTechPhone: +1-877-688-6625
OrgTechEmail: ipr@gin.ntt.net
OrgTechRef: https://rdap.arin.net/registry/entity/VIPAR-ARIN
OrgAbuseHandle: NAAC-ARIN
OrgAbuseName: NTT America Abuse Contact
OrgAbusePhone: +1-877-688-6625
OrgAbuseEmail: abuse@ntt.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/NAAC-ARIN
OrgTechHandle: CANDE70-ARIN
OrgTechName: Candela, Massimo
OrgTechPhone: +1-214-915-1366
OrgTechEmail: massimo@ntt.net
OrgTechRef: https://rdap.arin.net/registry/entity/CANDE70-ARIN
RTechHandle: VIA4-ORG-ARIN
RTechName: VIPAR
RTechPhone: +1-877-688-6625
RTechEmail: ipr@gin.ntt.net
RTechRef: https://rdap.arin.net/registry/entity/VIA4-ORG-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to rwhois.gin.ntt.net:4321.'; <<>> DiG 9.10.3-P4-Ubuntu <<>> 168.143.104.245
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26014
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;168.143.104.245. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026041201 1800 900 604800 86400
;; Query time: 28 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Apr 13 14:01:22 CST 2026
;; MSG SIZE rcvd: 108Host 245.104.143.168.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 245.104.143.168.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 23.101.184.196 | attackbots | Port scan: Attack repeated for 24 hours |
2020-07-16 02:36:22 |
| 14.232.21.198 | attackspam | Unauthorized connection attempt from IP address 14.232.21.198 on Port 445(SMB) |
2020-07-16 02:30:11 |
| 52.151.73.46 | attackbotsspam | Jul 15 12:13:29 mail sshd\[58876\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.151.73.46 user=root ... |
2020-07-16 02:29:40 |
| 52.165.135.206 | attackbots | Jul 15 23:33:31 gw1 sshd[26517]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.165.135.206 Jul 15 23:33:32 gw1 sshd[26517]: Failed password for invalid user ubunto from 52.165.135.206 port 46012 ssh2 ... |
2020-07-16 02:38:23 |
| 104.215.2.190 | attack | Jul 15 12:28:40 mail sshd\[32048\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.215.2.190 user=root ... |
2020-07-16 02:16:10 |
| 212.70.149.35 | attack | 2020-07-15 20:11:50 dovecot_login authenticator failed for \(User\) \[212.70.149.35\]: 535 Incorrect authentication data \(set_id=imageserver@no-server.de\) 2020-07-15 20:11:52 dovecot_login authenticator failed for \(User\) \[212.70.149.35\]: 535 Incorrect authentication data \(set_id=impact@no-server.de\) 2020-07-15 20:12:09 dovecot_login authenticator failed for \(User\) \[212.70.149.35\]: 535 Incorrect authentication data \(set_id=impact@no-server.de\) 2020-07-15 20:12:21 dovecot_login authenticator failed for \(User\) \[212.70.149.35\]: 535 Incorrect authentication data \(set_id=biz@no-server.de\) 2020-07-15 20:12:24 dovecot_login authenticator failed for \(User\) \[212.70.149.35\]: 535 Incorrect authentication data \(set_id=miller@no-server.de\) 2020-07-15 20:12:40 dovecot_login authenticator failed for \(User\) \[212.70.149.35\]: 535 Incorrect authentication data \(set_id=miller@no-server.de\) 2020-07-15 20:12:42 dovecot_login authenticator failed for \(User\) \[212.70.149.35\]: ... |
2020-07-16 02:31:06 |
| 182.232.161.199 | attackbots | Unauthorized connection attempt from IP address 182.232.161.199 on Port 445(SMB) |
2020-07-16 02:44:01 |
| 94.75.27.232 | attackspambots | Spam mails sent to address hacked/leaked from Nexus Mods in July 2013 |
2020-07-16 02:16:37 |
| 23.102.232.247 | attackbotsspam | Jul 15 12:08:16 mail sshd\[50853\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.102.232.247 user=root ... |
2020-07-16 02:14:25 |
| 52.188.150.208 | attackbotsspam | Jul 15 11:29:31 mail sshd\[39239\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.188.150.208 user=root ... |
2020-07-16 02:34:24 |
| 51.104.42.156 | attackspam | Jul 15 15:01:33 ns381471 sshd[6125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.104.42.156 Jul 15 15:01:33 ns381471 sshd[6126]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.104.42.156 Jul 15 15:01:33 ns381471 sshd[6127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.104.42.156 |
2020-07-16 02:48:34 |
| 13.70.89.23 | attackspambots | failed root login |
2020-07-16 02:46:52 |
| 23.100.102.96 | attackspambots | Jul 15 13:18:36 mail sshd\[56117\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.100.102.96 user=root ... |
2020-07-16 02:24:55 |
| 213.158.10.101 | attackbotsspam | Exploited Host. |
2020-07-16 02:44:53 |
| 111.249.107.92 | attack | 1594818101 - 07/15/2020 15:01:41 Host: 111.249.107.92/111.249.107.92 Port: 445 TCP Blocked |
2020-07-16 02:29:26 |