City: Buffalo
Region: New York
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 172.245.158.163 | attack | Jan 25 12:59:08 php1 sshd\[5758\]: Invalid user cisco from 172.245.158.163 Jan 25 12:59:08 php1 sshd\[5758\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.245.158.163 Jan 25 12:59:10 php1 sshd\[5758\]: Failed password for invalid user cisco from 172.245.158.163 port 60798 ssh2 Jan 25 13:02:24 php1 sshd\[6210\]: Invalid user law from 172.245.158.163 Jan 25 13:02:24 php1 sshd\[6210\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.245.158.163 |
2020-01-26 07:17:27 |
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 172.245.0.0 - 172.245.255.255
CIDR: 172.245.0.0/16
NetName: CC-14
NetHandle: NET-172-245-0-0-1
Parent: NET172 (NET-172-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: HostPapa (HOSTP-7)
RegDate: 2013-04-22
Updated: 2024-02-02
Comment: Geofeed https://geofeeds.oniaas.io/geofeeds.csv
Ref: https://rdap.arin.net/registry/ip/172.245.0.0
OrgName: HostPapa
OrgId: HOSTP-7
Address: 325 Delaware Avenue
Address: Suite 300
City: Buffalo
StateProv: NY
PostalCode: 14202
Country: US
RegDate: 2016-06-06
Updated: 2025-10-05
Ref: https://rdap.arin.net/registry/entity/HOSTP-7
OrgAbuseHandle: NETAB23-ARIN
OrgAbuseName: NETABUSE
OrgAbusePhone: +1-905-315-3455
OrgAbuseEmail: net-abuse-global@hostpapa.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/NETAB23-ARIN
OrgTechHandle: NETTE9-ARIN
OrgTechName: NETTECH
OrgTechPhone: +1-905-315-3455
OrgTechEmail: net-tech-global@hostpapa.com
OrgTechRef: https://rdap.arin.net/registry/entity/NETTE9-ARIN
RTechHandle: NETTE11-ARIN
RTechName: NETTECH-COLOCROSSING
RTechPhone: +1-800-518-9716
RTechEmail: support@colocrossing.com
RTechRef: https://rdap.arin.net/registry/entity/NETTE11-ARIN
RAbuseHandle: NETAB27-ARIN
RAbuseName: NETABUSE-COLOCROSSING
RAbusePhone: +1-800-518-9716
RAbuseEmail: abuse@colocrossing.com
RAbuseRef: https://rdap.arin.net/registry/entity/NETAB27-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 172.245.158.109
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50818
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;172.245.158.109. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026062300 1800 900 604800 86400
;; Query time: 156 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jun 24 01:00:13 CST 2026
;; MSG SIZE rcvd: 108109.158.245.172.in-addr.arpa domain name pointer 172-245-158-109-host.colocrossing.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
109.158.245.172.in-addr.arpa name = 172-245-158-109-host.colocrossing.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 89.36.215.248 | attackspambots | Jul 20 14:43:04 minden010 sshd[14130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.36.215.248 Jul 20 14:43:06 minden010 sshd[14130]: Failed password for invalid user alexis from 89.36.215.248 port 40752 ssh2 Jul 20 14:49:03 minden010 sshd[16205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.36.215.248 ... |
2019-07-20 20:59:03 |
| 119.28.73.77 | attack | Jul 20 08:55:59 TORMINT sshd\[19076\]: Invalid user admin from 119.28.73.77 Jul 20 08:55:59 TORMINT sshd\[19076\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.73.77 Jul 20 08:56:01 TORMINT sshd\[19076\]: Failed password for invalid user admin from 119.28.73.77 port 46858 ssh2 ... |
2019-07-20 21:14:02 |
| 67.207.81.231 | attackspam | 10s of requests to none existent pages - :443/app-ads.txt - typically bursts of 8 requests per second - undefined node-superagent/4.1.0 |
2019-07-20 21:00:06 |
| 220.130.221.140 | attackspambots | Jul 20 12:27:13 localhost sshd\[93962\]: Invalid user halflife from 220.130.221.140 port 60350 Jul 20 12:27:13 localhost sshd\[93962\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.130.221.140 Jul 20 12:27:15 localhost sshd\[93962\]: Failed password for invalid user halflife from 220.130.221.140 port 60350 ssh2 Jul 20 12:32:18 localhost sshd\[94131\]: Invalid user sam from 220.130.221.140 port 54742 Jul 20 12:32:18 localhost sshd\[94131\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.130.221.140 ... |
2019-07-20 20:57:02 |
| 49.204.221.238 | attackbots | 445/tcp [2019-07-20]1pkt |
2019-07-20 21:04:00 |
| 51.254.47.198 | attackspambots | Probing for vulnerable services |
2019-07-20 21:02:56 |
| 82.208.137.206 | attackbots | 445/tcp [2019-07-20]1pkt |
2019-07-20 21:20:54 |
| 115.28.212.181 | attackbotsspam | Wordpress XMLRPC attack |
2019-07-20 20:59:38 |
| 103.99.113.35 | attackbotsspam | Jul 20 12:35:03 animalibera sshd[21430]: Invalid user julia from 103.99.113.35 port 55138 ... |
2019-07-20 20:43:17 |
| 203.121.116.11 | attackbots | Jul 20 14:09:53 mail sshd\[30982\]: Failed password for invalid user tester from 203.121.116.11 port 39757 ssh2 Jul 20 14:27:29 mail sshd\[31214\]: Invalid user Redistoor from 203.121.116.11 port 37603 ... |
2019-07-20 21:32:04 |
| 118.69.61.65 | attack | 445/tcp 445/tcp 445/tcp [2019-07-20]3pkt |
2019-07-20 20:51:43 |
| 201.123.186.53 | attack | 445/tcp [2019-07-20]1pkt |
2019-07-20 21:24:10 |
| 106.12.205.132 | attackbotsspam | Jul 20 14:14:51 debian sshd\[22110\]: Invalid user pao from 106.12.205.132 port 51574 Jul 20 14:14:51 debian sshd\[22110\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.205.132 ... |
2019-07-20 21:15:05 |
| 222.186.15.28 | attackbotsspam | Jul 20 07:59:30 aat-srv002 sshd[9311]: Failed password for root from 222.186.15.28 port 47501 ssh2 Jul 20 07:59:39 aat-srv002 sshd[9314]: Failed password for root from 222.186.15.28 port 17211 ssh2 Jul 20 07:59:51 aat-srv002 sshd[9316]: Failed password for root from 222.186.15.28 port 42646 ssh2 ... |
2019-07-20 21:07:44 |
| 67.229.237.60 | attackspambots | Postfix RBL failed |
2019-07-20 21:14:35 |