City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b'#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 216.44.0.0 - 216.44.255.255
CIDR: 216.44.0.0/16
NetName: NTTA-216-44
NetHandle: NET-216-44-0-0-1
Parent: NET216 (NET-216-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: NTT America, Inc. (NTTAM-1)
RegDate: 2001-02-08
Updated: 2026-06-15
Comment: Geofeed https://geo.ip.gin.ntt.net/geofeeds/geofeeds.csv
Comment:
Comment: Reassignment information for this block is
Comment: available at rwhois.gin.ntt.net port 4321
Ref: https://rdap.arin.net/registry/ip/216.44.0.0
OrgName: NTT America, Inc.
OrgId: NTTAM-1
Address: 15809 Bear Creek Pkwy
Address: Suite 320
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US
RegDate: 2005-12-08
Updated: 2024-03-04
Ref: https://rdap.arin.net/registry/entity/NTTAM-1
ReferralServer: rwhois://rwhois.gin.ntt.net:4321
OrgTechHandle: VIPAR-ARIN
OrgTechName: VIPAR
OrgTechPhone: +1-877-688-6625
OrgTechEmail: ipr@gin.ntt.net
OrgTechRef: https://rdap.arin.net/registry/entity/VIPAR-ARIN
OrgAbuseHandle: NAAC-ARIN
OrgAbuseName: NTT America Abuse Contact
OrgAbusePhone: +1-877-688-6625
OrgAbuseEmail: abuse@ntt.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/NAAC-ARIN
OrgRoutingHandle: PEERI-ARIN
OrgRoutingName: Peering
OrgRoutingPhone: +1-877-688-6625
OrgRoutingEmail: peering@ntt.net
OrgRoutingRef: https://rdap.arin.net/registry/entity/PEERI-ARIN
OrgNOCHandle: NASC-ARIN
OrgNOCName: NTT America Support Contact
OrgNOCPhone: +1-877-688-6625
OrgNOCEmail: ce-support@gin.ntt.net
OrgNOCRef: https://rdap.arin.net/registry/entity/NASC-ARIN
OrgTechHandle: CANDE70-ARIN
OrgTechName: Candela, Massimo
OrgTechPhone: +1-214-915-1366
OrgTechEmail: massimo@ntt.net
OrgTechRef: https://rdap.arin.net/registry/entity/CANDE70-ARIN
RTechHandle: VIA4-ORG-ARIN
RTechName: VIPAR
RTechPhone: +1-877-688-6625
RTechEmail: ipr@gin.ntt.net
RTechRef: https://rdap.arin.net/registry/entity/VIA4-ORG-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to rwhois.gin.ntt.net:4321.'; <<>> DiG 9.10.3-P4-Ubuntu <<>> 216.44.34.118
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57322
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;216.44.34.118. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026072501 1800 900 604800 86400
;; Query time: 33 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jul 26 11:06:13 CST 2026
;; MSG SIZE rcvd: 106Host 118.34.44.216.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 118.34.44.216.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 223.204.232.71 | attackbots | SIP/5060 Probe, BF, Hack - |
2020-05-23 02:02:03 |
| 209.141.58.185 | attack | SIP/5060 Probe, BF, Hack - |
2020-05-23 02:17:46 |
| 159.203.12.18 | attack | 159.203.12.18 - - \[22/May/2020:18:09:17 +0200\] "POST /wp-login.php HTTP/1.0" 200 7318 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 159.203.12.18 - - \[22/May/2020:18:09:19 +0200\] "POST /wp-login.php HTTP/1.0" 200 7318 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 159.203.12.18 - - \[22/May/2020:18:09:20 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 802 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2020-05-23 02:19:40 |
| 121.69.89.78 | attackbots | 20 attempts against mh-ssh on cloud |
2020-05-23 01:39:41 |
| 14.18.118.64 | attackspambots | May 22 18:33:25 Ubuntu-1404-trusty-64-minimal sshd\[20572\]: Invalid user yuchen from 14.18.118.64 May 22 18:33:25 Ubuntu-1404-trusty-64-minimal sshd\[20572\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.18.118.64 May 22 18:33:27 Ubuntu-1404-trusty-64-minimal sshd\[20572\]: Failed password for invalid user yuchen from 14.18.118.64 port 52282 ssh2 May 22 18:39:46 Ubuntu-1404-trusty-64-minimal sshd\[27476\]: Invalid user mli from 14.18.118.64 May 22 18:39:46 Ubuntu-1404-trusty-64-minimal sshd\[27476\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.18.118.64 |
2020-05-23 01:46:07 |
| 200.89.159.190 | attack | 5x Failed Password |
2020-05-23 02:01:41 |
| 218.230.180.223 | attackbots | Unauthorized connection attempt detected from IP address 218.230.180.223 to port 2323 |
2020-05-23 01:50:50 |
| 187.33.70.102 | attackbotsspam | (smtpauth) Failed SMTP AUTH login from 187.33.70.102 (BR/Brazil/host-33-70-102.hotlink.com.br): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-05-22 16:20:05 plain authenticator failed for ([187.33.70.102]) [187.33.70.102]: 535 Incorrect authentication data (set_id=info) |
2020-05-23 01:42:14 |
| 217.118.81.35 | attackspam | SIP/5060 Probe, BF, Hack - |
2020-05-23 02:09:36 |
| 142.93.108.77 | attackspam | May 22 19:06:50 sso sshd[31894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.108.77 May 22 19:06:52 sso sshd[31894]: Failed password for invalid user sez from 142.93.108.77 port 35300 ssh2 ... |
2020-05-23 02:06:13 |
| 116.25.188.125 | attack | FTP brute-force attack |
2020-05-23 01:58:17 |
| 111.246.167.235 | attackspambots | 1590148202 - 05/22/2020 13:50:02 Host: 111.246.167.235/111.246.167.235 Port: 445 TCP Blocked |
2020-05-23 01:52:25 |
| 51.75.122.213 | attackspam | May 22 15:51:13 lukav-desktop sshd\[18875\]: Invalid user bci from 51.75.122.213 May 22 15:51:13 lukav-desktop sshd\[18875\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.122.213 May 22 15:51:15 lukav-desktop sshd\[18875\]: Failed password for invalid user bci from 51.75.122.213 port 46136 ssh2 May 22 15:54:40 lukav-desktop sshd\[18951\]: Invalid user jke from 51.75.122.213 May 22 15:54:40 lukav-desktop sshd\[18951\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.122.213 |
2020-05-23 02:01:26 |
| 174.138.64.163 | attackspambots | DATE:2020-05-22 19:25:37, IP:174.138.64.163, PORT:ssh SSH brute force auth (docker-dc) |
2020-05-23 01:47:04 |
| 74.82.47.5 | attack | Unauthorized connection attempt detected from IP address 74.82.47.5 to port 5555 |
2020-05-23 01:48:51 |