City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 198.63.0.0 - 198.66.255.255
CIDR: 198.66.0.0/16, 198.63.0.0/16, 198.64.0.0/15
NetName: NTTA-198-63
NetHandle: NET-198-63-0-0-1
Parent: NET198 (NET-198-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: NTT America, Inc. (NTTAM-1)
RegDate: 1993-02-11
Updated: 2026-02-10
Comment: Geofeed https://geo.ip.gin.ntt.net/geofeeds/geofeeds.csv
Comment:
Comment: Reassignment information for this block is
Comment: available at rwhois.gin.ntt.net port 4321
Ref: https://rdap.arin.net/registry/ip/198.63.0.0
OrgName: NTT America, Inc.
OrgId: NTTAM-1
Address: 15809 Bear Creek Pkwy
Address: Suite 320
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US
RegDate: 2005-12-08
Updated: 2024-03-04
Ref: https://rdap.arin.net/registry/entity/NTTAM-1
ReferralServer: rwhois://rwhois.gin.ntt.net:4321
OrgTechHandle: VIPAR-ARIN
OrgTechName: VIPAR
OrgTechPhone: +1-877-688-6625
OrgTechEmail: ipr@gin.ntt.net
OrgTechRef: https://rdap.arin.net/registry/entity/VIPAR-ARIN
OrgAbuseHandle: NAAC-ARIN
OrgAbuseName: NTT America Abuse Contact
OrgAbusePhone: +1-877-688-6625
OrgAbuseEmail: abuse@ntt.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/NAAC-ARIN
OrgRoutingHandle: PEERI-ARIN
OrgRoutingName: Peering
OrgRoutingPhone: +1-877-688-6625
OrgRoutingEmail: peering@ntt.net
OrgRoutingRef: https://rdap.arin.net/registry/entity/PEERI-ARIN
OrgNOCHandle: NASC-ARIN
OrgNOCName: NTT America Support Contact
OrgNOCPhone: +1-877-688-6625
OrgNOCEmail: ce-support@gin.ntt.net
OrgNOCRef: https://rdap.arin.net/registry/entity/NASC-ARIN
OrgTechHandle: CANDE70-ARIN
OrgTechName: Candela, Massimo
OrgTechPhone: +1-214-915-1366
OrgTechEmail: massimo@ntt.net
OrgTechRef: https://rdap.arin.net/registry/entity/CANDE70-ARIN
RTechHandle: VIA4-ORG-ARIN
RTechName: VIPAR
RTechPhone: +1-877-688-6625
RTechEmail: ipr@gin.ntt.net
RTechRef: https://rdap.arin.net/registry/entity/VIA4-ORG-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to rwhois.gin.ntt.net:4321.; <<>> DiG 9.10.3-P4-Ubuntu <<>> 198.65.3.243
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11110
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;198.65.3.243. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026072900 1800 900 604800 86400
;; Query time: 747 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jul 29 19:57:54 CST 2026
;; MSG SIZE rcvd: 105b'Host 243.3.65.198.in-addr.arpa not found: 2(SERVFAIL)
'server can't find 198.65.3.243.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 180.96.27.75 | attack | Apr 20 09:53:43 r.ca sshd[12530]: Failed password for invalid user builder from 180.96.27.75 port 65032 ssh2 |
2020-04-21 03:03:15 |
| 42.200.207.42 | attackbots | $f2bV_matches | Triggered by Fail2Ban at Vostok web server |
2020-04-21 02:32:22 |
| 194.67.196.244 | attackspam | Invalid user ubuntu from 194.67.196.244 port 50116 |
2020-04-21 02:51:44 |
| 51.75.31.33 | attackbots | (sshd) Failed SSH login from 51.75.31.33 (FR/France/33.ip-51-75-31.eu): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 20 19:31:00 amsweb01 sshd[29508]: Invalid user vr from 51.75.31.33 port 48578 Apr 20 19:31:01 amsweb01 sshd[29508]: Failed password for invalid user vr from 51.75.31.33 port 48578 ssh2 Apr 20 19:36:04 amsweb01 sshd[30163]: Invalid user oracle from 51.75.31.33 port 44956 Apr 20 19:36:06 amsweb01 sshd[30163]: Failed password for invalid user oracle from 51.75.31.33 port 44956 ssh2 Apr 20 19:38:45 amsweb01 sshd[30411]: Invalid user ly from 51.75.31.33 port 33878 |
2020-04-21 02:28:11 |
| 192.210.192.165 | attackbots | 22 attempts against mh-ssh on echoip |
2020-04-21 02:53:19 |
| 13.80.69.39 | attackspam | 2020-04-19 16:38:40 server sshd[7065]: Failed password for invalid user admin from 13.80.69.39 port 11753 ssh2 |
2020-04-21 02:38:47 |
| 23.114.84.9 | attackspambots | 2020-04-20T16:04:47.435597abusebot-8.cloudsearch.cf sshd[25793]: Invalid user ls from 23.114.84.9 port 48806 2020-04-20T16:04:47.450760abusebot-8.cloudsearch.cf sshd[25793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23-114-84-9.lightspeed.stlsmo.sbcglobal.net 2020-04-20T16:04:47.435597abusebot-8.cloudsearch.cf sshd[25793]: Invalid user ls from 23.114.84.9 port 48806 2020-04-20T16:04:49.314584abusebot-8.cloudsearch.cf sshd[25793]: Failed password for invalid user ls from 23.114.84.9 port 48806 ssh2 2020-04-20T16:13:31.967408abusebot-8.cloudsearch.cf sshd[26288]: Invalid user tp from 23.114.84.9 port 38164 2020-04-20T16:13:31.978706abusebot-8.cloudsearch.cf sshd[26288]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23-114-84-9.lightspeed.stlsmo.sbcglobal.net 2020-04-20T16:13:31.967408abusebot-8.cloudsearch.cf sshd[26288]: Invalid user tp from 23.114.84.9 port 38164 2020-04-20T16:13:33.777793abusebot-8 ... |
2020-04-21 02:35:13 |
| 178.62.79.227 | attack | Apr 20 16:15:57 prod4 sshd\[11818\]: Failed password for root from 178.62.79.227 port 59514 ssh2 Apr 20 16:22:24 prod4 sshd\[15030\]: Invalid user git from 178.62.79.227 Apr 20 16:22:26 prod4 sshd\[15030\]: Failed password for invalid user git from 178.62.79.227 port 44602 ssh2 ... |
2020-04-21 03:04:19 |
| 186.226.0.106 | attack | Invalid user admin from 186.226.0.106 port 52738 |
2020-04-21 02:56:37 |
| 223.240.84.49 | attackbotsspam | Apr 20 16:00:41 ws25vmsma01 sshd[238531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.240.84.49 Apr 20 16:00:44 ws25vmsma01 sshd[238531]: Failed password for invalid user postgres from 223.240.84.49 port 53414 ssh2 ... |
2020-04-21 02:40:11 |
| 51.83.42.185 | attackspam | 2020-04-20T18:09:02.070789shield sshd\[23732\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.ip-51-83-42.eu user=root 2020-04-20T18:09:04.379411shield sshd\[23732\]: Failed password for root from 51.83.42.185 port 36660 ssh2 2020-04-20T18:13:28.178014shield sshd\[24256\]: Invalid user dj from 51.83.42.185 port 55108 2020-04-20T18:13:28.183279shield sshd\[24256\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.ip-51-83-42.eu 2020-04-20T18:13:30.340966shield sshd\[24256\]: Failed password for invalid user dj from 51.83.42.185 port 55108 ssh2 |
2020-04-21 02:27:34 |
| 14.177.239.168 | attackbots | prod3 ... |
2020-04-21 02:36:08 |
| 171.236.45.157 | attack | Invalid user admin from 171.236.45.157 port 42447 |
2020-04-21 03:06:48 |
| 167.172.154.50 | attackspambots | Invalid user fake from 167.172.154.50 port 38974 |
2020-04-21 03:07:26 |
| 200.17.114.215 | attackspam | 2020-04-20 20:20:58,311 fail2ban.actions: WARNING [ssh] Ban 200.17.114.215 |
2020-04-21 02:47:48 |