City: Dallas
Region: Texas
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b'#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 192.204.0.0 - 192.204.255.255
CIDR: 192.204.0.0/16
NetName: NTTA-192-204
NetHandle: NET-192-204-0-0-1
Parent: NET192 (NET-192-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: NTT America, Inc. (NTTAM-1)
RegDate: 1992-08-03
Updated: 2026-02-10
Comment: Geofeed https://geo.ip.gin.ntt.net/geofeeds/geofeeds.csv
Comment:
Comment: Reassignment information for this block is
Comment: available at rwhois.gin.ntt.net port 4321
Ref: https://rdap.arin.net/registry/ip/192.204.0.0
OrgName: NTT America, Inc.
OrgId: NTTAM-1
Address: 15809 Bear Creek Pkwy
Address: Suite 320
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US
RegDate: 2005-12-08
Updated: 2024-03-04
Ref: https://rdap.arin.net/registry/entity/NTTAM-1
ReferralServer: rwhois://rwhois.gin.ntt.net:4321
OrgTechHandle: VIPAR-ARIN
OrgTechName: VIPAR
OrgTechPhone: +1-877-688-6625
OrgTechEmail: ipr@gin.ntt.net
OrgTechRef: https://rdap.arin.net/registry/entity/VIPAR-ARIN
OrgAbuseHandle: NAAC-ARIN
OrgAbuseName: NTT America Abuse Contact
OrgAbusePhone: +1-877-688-6625
OrgAbuseEmail: abuse@ntt.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/NAAC-ARIN
OrgTechHandle: CANDE70-ARIN
OrgTechName: Candela, Massimo
OrgTechPhone: +1-214-915-1366
OrgTechEmail: massimo@ntt.net
OrgTechRef: https://rdap.arin.net/registry/entity/CANDE70-ARIN
OrgNOCHandle: NASC-ARIN
OrgNOCName: NTT America Support Contact
OrgNOCPhone: +1-877-688-6625
OrgNOCEmail: ce-support@gin.ntt.net
OrgNOCRef: https://rdap.arin.net/registry/entity/NASC-ARIN
OrgRoutingHandle: PEERI-ARIN
OrgRoutingName: Peering
OrgRoutingPhone: +1-877-688-6625
OrgRoutingEmail: peering@ntt.net
OrgRoutingRef: https://rdap.arin.net/registry/entity/PEERI-ARIN
RTechHandle: VIA4-ORG-ARIN
RTechName: VIPAR
RTechPhone: +1-877-688-6625
RTechEmail: ipr@gin.ntt.net
RTechRef: https://rdap.arin.net/registry/entity/VIA4-ORG-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to rwhois.gin.ntt.net:4321.
%rwhois V-1.5:0078b6:00 rwhois.gin.ntt.net (Vipar 0.1a. Comments to ipr@gin.ntt.net)
network:Class-Name:network
network:Auth-Area:192.204.64.0/18
network:ID:NETBLK-USV4-192-204-064.127.0.0.1/32
network:Handle:NETBLK-USV4-192-204-064
network:Network-Name:USV4-192-204-064
network:IP-Network:192.204.64.0/18
network:In-Addr-Server;I:GIN1-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN2-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN3-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN4-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN5-HST.127.0.0.1/32
network:IP-Network-Block:192.204.64.0 - 192.204.127.255
network:Org-Name:NTT DATA
network:Street-Address:8300 E Maplewood Ave. Suite 400
network:City:Greenwood Village
network:State:CO
network:Postal-Code:80111
network:Country-Code:US
network:Tech-Contact;I:GIN-BBV4.127.0.0.1/32
network:Created:2025-04-01 17:16:21.113669+00
network:Updated:2025-04-01 17:17:33.04336+00
network:Class-Name:network
network:Auth-Area:192.204.64.0/18
network:ID:NETBLK-NTTA-192-204.127.0.0.1/32
network:Handle:NETBLK-NTTA-192-204
network:Network-Name:NTTA-192-204
network:IP-Network:192.204.0.0/16
network:In-Addr-Server;I:AUTH21-GIN-HST.127.0.0.1/32
network:In-Addr-Server;I:AUTH22-GIN-HST.127.0.0.1/32
network:In-Addr-Server;I:AUTH23-GIN-HST.127.0.0.1/32
network:In-Addr-Server;I:AUTH24-GIN-HST.127.0.0.1/32
network:In-Addr-Server;I:AUTH25-GIN-HST.127.0.0.1/32
network:IP-Network-Block:192.204.0.0 - 192.204.255.255
network:Org-Name:NTT America, Inc.
network:Street-Address:8300 E Maplewood Ave. Suite 400
network:City:Greenwood Village
network:State:CO
network:Postal-Code:80111
network:Country-Code:US
network:Tech-Contact;I:VIA4-ORG-ARIN.127.0.0.1/32
network:Created:1999-12-13 18:39:31+00
network:Updated:2025-04-10 17:16:41.106097+00
%ok'; <<>> DiG 9.10.3-P4-Ubuntu <<>> 192.204.91.0
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1148
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;192.204.91.0. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026102902 1800 900 604800 86400
;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 30 13:42:49 CST 2026
;; MSG SIZE rcvd: 105b'Host 0.91.204.192.in-addr.arpa not found: 2(SERVFAIL)
'server can't find 192.204.91.0.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 207.46.13.24 | attack | Automatic report - Banned IP Access |
2020-08-09 08:20:43 |
| 201.48.40.153 | attack | Scanned 6 times in the last 24 hours on port 22 |
2020-08-09 08:14:29 |
| 222.186.175.150 | attackbots | Aug 9 01:59:40 * sshd[8007]: Failed password for root from 222.186.175.150 port 44482 ssh2 Aug 9 01:59:54 * sshd[8007]: error: maximum authentication attempts exceeded for root from 222.186.175.150 port 44482 ssh2 [preauth] |
2020-08-09 08:03:59 |
| 51.158.70.82 | attackbotsspam | Aug 8 23:29:32 sip sshd[1239993]: Failed password for root from 51.158.70.82 port 60848 ssh2 Aug 8 23:33:20 sip sshd[1240018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.70.82 user=root Aug 8 23:33:22 sip sshd[1240018]: Failed password for root from 51.158.70.82 port 44054 ssh2 ... |
2020-08-09 08:01:16 |
| 111.229.128.9 | attackspambots | Aug 8 17:18:43 vps46666688 sshd[4550]: Failed password for root from 111.229.128.9 port 33238 ssh2 ... |
2020-08-09 07:55:15 |
| 107.189.11.160 | attack | Aug 9 01:22:17 OPSO sshd\[31408\]: Invalid user test from 107.189.11.160 port 54988 Aug 9 01:22:17 OPSO sshd\[31411\]: Invalid user postgres from 107.189.11.160 port 54986 Aug 9 01:22:17 OPSO sshd\[31405\]: Invalid user ubuntu from 107.189.11.160 port 54980 Aug 9 01:22:17 OPSO sshd\[31410\]: Invalid user vagrant from 107.189.11.160 port 54984 Aug 9 01:22:17 OPSO sshd\[31407\]: Invalid user centos from 107.189.11.160 port 54982 Aug 9 01:22:17 OPSO sshd\[31409\]: Invalid user oracle from 107.189.11.160 port 54990 |
2020-08-09 08:19:23 |
| 193.165.236.213 | attackbots | 193.165.236.213 - - [08/Aug/2020:22:30:28 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 193.165.236.213 - - [08/Aug/2020:22:30:29 +0100] "POST /wp-login.php HTTP/1.1" 200 5695 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 193.165.236.213 - - [08/Aug/2020:22:32:12 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" ... |
2020-08-09 07:59:13 |
| 103.254.73.98 | attackspambots | SSH Brute Force |
2020-08-09 08:23:05 |
| 183.92.214.38 | attack | Aug 8 23:33:27 cosmoit sshd[27918]: Failed password for root from 183.92.214.38 port 44870 ssh2 |
2020-08-09 07:55:35 |
| 140.143.195.181 | attack | Aug 9 01:06:31 melroy-server sshd[22987]: Failed password for root from 140.143.195.181 port 39864 ssh2 ... |
2020-08-09 08:17:39 |
| 106.12.109.165 | attackbots | Aug 8 16:18:08 NPSTNNYC01T sshd[9643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.109.165 Aug 8 16:18:10 NPSTNNYC01T sshd[9643]: Failed password for invalid user p@SSw0Rd from 106.12.109.165 port 60386 ssh2 Aug 8 16:24:06 NPSTNNYC01T sshd[10602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.109.165 ... |
2020-08-09 08:18:10 |
| 40.70.133.92 | attack | (mod_security) mod_security (id:930130) triggered by 40.70.133.92 (US/-/-): 1 in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/08/08 23:39:28 [error] 3682#0: *2677 [client 40.70.133.92] ModSecurity: Access denied with code 406 (phase 2). Matched "Operator `PmFromFile' with parameter `restricted-files.data' against variable `REQUEST_FILENAME' (Value: `/.env' ) [file "/etc/modsecurity.d/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "105"] [id "930130"] [rev ""] [msg "Restricted File Access Attempt"] [redacted] [severity "2"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [redacted] [uri "/.env"] [unique_id "159692276821.941514"] [ref "o0,5v4,5t:utf8toUnicode,t:urlDecodeUni,t:normalizePathWin,t:lowercase"], client: 40.70.133.92, [redacted] request: "GET /.env HTTP/1.1" [redacted] |
2020-08-09 07:52:30 |
| 108.190.190.48 | attack | Ssh brute force |
2020-08-09 08:13:55 |
| 106.54.14.42 | attackspam | Aug 9 00:11:17 ns381471 sshd[4676]: Failed password for root from 106.54.14.42 port 56288 ssh2 |
2020-08-09 08:01:36 |
| 104.248.126.170 | attackspambots | 11061/tcp 24014/tcp 8062/tcp... [2020-06-22/08-08]93pkt,35pt.(tcp) |
2020-08-09 08:04:59 |