City: Salt Lake City
Region: Utah
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 216.238.52.0 - 216.238.55.255
CIDR: 216.238.52.0/22
NetName: ZYC-IPV4-01
NetHandle: NET-216-238-52-0-1
Parent: NET216 (NET-216-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: ZYC Network LLC (ZNL-20)
RegDate: 2025-07-01
Updated: 2025-07-01
Ref: https://rdap.arin.net/registry/ip/216.238.52.0
OrgName: ZYC Network LLC
OrgId: ZNL-20
Address: 1500 N. GRANT ST, STE R
City: Denver
StateProv: CO
PostalCode: 80203
Country: US
RegDate: 2023-06-11
Updated: 2025-03-15
Ref: https://rdap.arin.net/registry/entity/ZNL-20
OrgRoutingHandle: ZNN-ARIN
OrgRoutingName: ZYC Network NOC
OrgRoutingPhone: +1-800-591-1234
OrgRoutingEmail: zyc@zyc.name
OrgRoutingRef: https://rdap.arin.net/registry/entity/ZNN-ARIN
OrgTechHandle: ZNN-ARIN
OrgTechName: ZYC Network NOC
OrgTechPhone: +1-800-591-1234
OrgTechEmail: zyc@zyc.name
OrgTechRef: https://rdap.arin.net/registry/entity/ZNN-ARIN
OrgNOCHandle: ZNN-ARIN
OrgNOCName: ZYC Network NOC
OrgNOCPhone: +1-800-591-1234
OrgNOCEmail: zyc@zyc.name
OrgNOCRef: https://rdap.arin.net/registry/entity/ZNN-ARIN
OrgAbuseHandle: ZNN-ARIN
OrgAbuseName: ZYC Network NOC
OrgAbusePhone: +1-800-591-1234
OrgAbuseEmail: zyc@zyc.name
OrgAbuseRef: https://rdap.arin.net/registry/entity/ZNN-ARIN
# end
# start
NetRange: 216.238.52.0 - 216.238.53.255
CIDR: 216.238.52.0/23
NetName: MOEDOVE-BROADBAND---UNITED-STATES
NetHandle: NET-216-238-52-0-2
Parent: ZYC-IPV4-01 (NET-216-238-52-0-1)
NetType: Reassigned
OriginAS:
Customer: MoeDove Broadband - United States (C11258723)
RegDate: 2025-07-01
Updated: 2025-07-23
Comment: Geofeed https://www.moedove.com/geofeed.csv
Ref: https://rdap.arin.net/registry/ip/216.238.52.0
CustName: MoeDove Broadband - United States
Address: Private Facility
City: Salt Lake City
StateProv: UT
PostalCode: 84101
Country: US
RegDate: 2025-07-01
Updated: 2025-07-23
Ref: https://rdap.arin.net/registry/entity/C11258723
OrgRoutingHandle: ZNN-ARIN
OrgRoutingName: ZYC Network NOC
OrgRoutingPhone: +1-800-591-1234
OrgRoutingEmail: zyc@zyc.name
OrgRoutingRef: https://rdap.arin.net/registry/entity/ZNN-ARIN
OrgTechHandle: ZNN-ARIN
OrgTechName: ZYC Network NOC
OrgTechPhone: +1-800-591-1234
OrgTechEmail: zyc@zyc.name
OrgTechRef: https://rdap.arin.net/registry/entity/ZNN-ARIN
OrgNOCHandle: ZNN-ARIN
OrgNOCName: ZYC Network NOC
OrgNOCPhone: +1-800-591-1234
OrgNOCEmail: zyc@zyc.name
OrgNOCRef: https://rdap.arin.net/registry/entity/ZNN-ARIN
OrgAbuseHandle: ZNN-ARIN
OrgAbuseName: ZYC Network NOC
OrgAbusePhone: +1-800-591-1234
OrgAbuseEmail: zyc@zyc.name
OrgAbuseRef: https://rdap.arin.net/registry/entity/ZNN-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 216.238.52.56
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29390
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;216.238.52.56. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026092800 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Sep 28 15:55:35 CST 2026
;; MSG SIZE rcvd: 106
Host 56.52.238.216.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 56.52.238.216.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 52.200.193.56 | attackbotsspam | Message ID |
2019-12-09 06:30:22 |
| 92.118.37.74 | attack | 32598/tcp 13698/tcp 38349/tcp... [2019-12-06/08]2704pkt,2510pt.(tcp) |
2019-12-09 06:10:09 |
| 45.136.110.24 | attackbotsspam | 389/tcp 7080/tcp 3040/tcp... [2019-11-12/12-07]130pkt,31pt.(tcp) |
2019-12-09 06:16:57 |
| 106.12.84.115 | attackspambots | 2019-12-08T20:51:41.444301shield sshd\[20447\]: Invalid user vcsa from 106.12.84.115 port 39394 2019-12-08T20:51:41.452508shield sshd\[20447\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.84.115 2019-12-08T20:51:43.991368shield sshd\[20447\]: Failed password for invalid user vcsa from 106.12.84.115 port 39394 ssh2 2019-12-08T20:57:40.640521shield sshd\[24096\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.84.115 user=root 2019-12-08T20:57:42.130608shield sshd\[24096\]: Failed password for root from 106.12.84.115 port 38196 ssh2 |
2019-12-09 06:15:17 |
| 121.67.246.141 | attackspambots | [Aegis] @ 2019-12-08 17:07:26 0000 -> Attempted Administrator Privilege Gain: ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack |
2019-12-09 06:15:46 |
| 188.239.149.214 | attack | Honeypot attack, port: 23, PTR: 214.149.239.188.dynamic.jazztel.es. |
2019-12-09 06:34:18 |
| 85.138.72.21 | attackspam | Honeypot attack, port: 23, PTR: a85-138-72-21.cpe.netcabo.pt. |
2019-12-09 06:05:02 |
| 35.161.163.56 | attackbotsspam | www.pic4rame.com = www.czyswter.com = www.ptpns.com = www.mshshlf.com = www.eightsouthice.com = northninewest.com = jillmar8.com = www.ninewesttech.com = (35.161.163.56) |
2019-12-09 06:26:45 |
| 180.250.205.114 | attackbotsspam | Dec 8 23:13:31 tux-35-217 sshd\[12171\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.205.114 user=root Dec 8 23:13:33 tux-35-217 sshd\[12171\]: Failed password for root from 180.250.205.114 port 37788 ssh2 Dec 8 23:20:27 tux-35-217 sshd\[12258\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.205.114 user=backup Dec 8 23:20:29 tux-35-217 sshd\[12258\]: Failed password for backup from 180.250.205.114 port 41890 ssh2 ... |
2019-12-09 06:22:27 |
| 218.144.166.212 | attackbots | Dec 8 19:05:27 mail sshd[14077]: Invalid user admin from 218.144.166.212 Dec 8 19:05:27 mail sshd[14077]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.144.166.212 Dec 8 19:05:27 mail sshd[14077]: Invalid user admin from 218.144.166.212 Dec 8 19:05:29 mail sshd[14077]: Failed password for invalid user admin from 218.144.166.212 port 45850 ssh2 Dec 8 19:34:33 mail sshd[17714]: Invalid user chooy from 218.144.166.212 ... |
2019-12-09 06:19:06 |
| 221.152.64.178 | attackspam | Dec 8 22:09:27 areeb-Workstation sshd[18386]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.152.64.178 Dec 8 22:09:29 areeb-Workstation sshd[18386]: Failed password for invalid user guest from 221.152.64.178 port 34822 ssh2 ... |
2019-12-09 06:32:15 |
| 185.36.81.248 | attackspambots | Rude login attack (9 tries in 1d) |
2019-12-09 06:20:58 |
| 95.42.32.119 | attackspambots | 1433/tcp 445/tcp... [2019-11-03/12-07]6pkt,2pt.(tcp) |
2019-12-09 06:14:53 |
| 179.232.1.254 | attackspam | Dec 8 23:51:27 areeb-Workstation sshd[27899]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.232.1.254 Dec 8 23:51:29 areeb-Workstation sshd[27899]: Failed password for invalid user cturner from 179.232.1.254 port 57491 ssh2 ... |
2019-12-09 06:02:31 |
| 113.22.11.139 | attack | Bruteforce on SSH Honeypot |
2019-12-09 06:33:34 |