City: Walkerville
Region: Gauteng
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the AfriNIC Whois server.
% The AFRINIC whois database is subject to the following terms of Use. See https://afrinic.net/whois/terms
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '41.168.0.0 - 41.168.255.255'
% No abuse contact registered for 41.168.0.0 - 41.168.255.255
inetnum: 41.168.0.0 - 41.168.255.255
netname: NeoHost
descr: Neotel_Hosting_Alloction
country: ZA
org: ORG-LTOL1-AFRINIC
admin-c: DH19-AFRINIC
admin-c: RD10-AFRINIC
admin-c: AS116-AFRINIC
admin-c: CM53-AFRINIC
tech-c: DH19-AFRINIC
tech-c: KR12-AFRINIC
tech-c: AA110-AFRINIC
tech-c: DV5-AFRINIC
tech-c: AS116-AFRINIC
tech-c: CM53-AFRINIC
status: ASSIGNED PA
mnt-by: LIQUID-TOL-MNT
mnt-lower: LIQUID-TOL-MNT
mnt-domains: LIQUID-TOL-MNT
source: AFRINIC # Filtered
parent: 41.160.0.0 - 41.175.255.255
organisation: ORG-LTOL1-AFRINIC
org-name: Liquid Telecommunications Operations Limited
org-type: LIR
country: MU
address: 10th Floor,
address: Raffles Tower,
address: 19 Cybercity
address: Ebene
phone: tel:+254-733-222204
phone: tel:+230-466-7620
phone: tel:+263-8677-033306
phone: tel:+254-731-033754
admin-c: RD10-AFRINIC
admin-c: CM53-AFRINIC
admin-c: MC69-AFRINIC
admin-c: AS116-AFRINIC
tech-c: PS44-AFRINIC
tech-c: CM53-AFRINIC
tech-c: DV5-AFRINIC
tech-c: MC69-AFRINIC
tech-c: AS116-AFRINIC
tech-c: MK122-AFRINIC
mnt-ref: AFRINIC-HM-MNT
mnt-ref: LIQUID-TOL-MNT
mnt-by: AFRINIC-HM-MNT
source: AFRINIC # Filtered
person: Andrew Alston
address: Block A, Sameer Business Park,
address: Mombasa Road,
address: Nairobi
address: Kenya
phone: tel:+254-20-5000000
nic-hdl: AA110-AFRINIC
mnt-by: AA110-MNTR
source: AFRINIC # Filtered
person: Anthony Somerset
nic-hdl: AS116-AFRINIC
address: 401 Old Pretoria Main Road
address: Midrand 1685
address: South Africa
phone: tel:+27-11-774-1220
phone: tel:+44-20-7101-6280
mnt-by: GENERATED-DB3XY0TSHJSHK8INFM8CE2CBOLXRIPLB-MNT
source: AFRINIC # Filtered
person: Christopher Mwangi
nic-hdl: CM53-AFRINIC
address: Block A,
address: Sameer Office Business Park, address: Mombasa Road,
address: Nairobi
address: Kenya
address: Nairobi 00200
address: Kenya
phone: tel:+254-20-5000000
phone: tel:+254-731-033754
mnt-by: GENERATED-GLVPMCUSF8ULWB1RP1HOUAFIHRDTZM7C-MNT
source: AFRINIC # Filtered
person: Daniam Henriques
address: 401 Old Pretoria Rd, Midrand, 1685, Johannesburg
phone: tel:+27-11-585-0000
nic-hdl: DH19-AFRINIC
mnt-by: GENERATED-443VOOYYHDDCWRGJKQUOZ7GSUONIRP0O-MNT
source: AFRINIC # Filtered
person: Damian Vermeulen
address: 408 Old Pretoria Main Road
address: Midrand
address: Postal Code 1685
address: South Africa
phone: tel:+27-10-120-0471
nic-hdl: DV5-AFRINIC
mnt-by: GENERATED-PYQ649OOF2EJAA6CRQKT8VTPFEDCSU9I-MNT
source: AFRINIC # Filtered
person: Keith Rose
address: Liquid Telecom Zimbabwe
address: Sam Levy Office Park
address: Borrowdale
address: Postal Code 263
address: Harare
address: Zimbabwe
phone: tel:+263-8677-033501
nic-hdl: KR12-AFRINIC
mnt-by: GENERATED-S3BT6PUQHKPPIUYTXK5FFIAHEISW9HVT-MNT
source: AFRINIC # Filtered
person: Rob Davelaar
address: Ebene
address: MU
phone: tel:+230-466-7620
nic-hdl: RD10-AFRINIC
mnt-by: GENERATED-CCFCCEXBPZYR7IUANY1SUKTIVIPPULTV-MNT
source: AFRINIC # Filtered
% Information related to '41.168.105.0/24AS36937'
route: 41.168.105.0/24
descr: AS36937 Route Object
origin: AS36937
source: AFRINIC # Filtered
mnt-by: LIQUID-TOL-MNT
mnt-lower: LIQUID-TOL-MNT; <<>> DiG 9.10.3-P4-Ubuntu <<>> 41.168.105.25
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19686
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;41.168.105.25. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026090102 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 02 12:43:21 CST 2026
;; MSG SIZE rcvd: 106Host 25.105.168.41.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 25.105.168.41.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 154.66.218.218 | attackbotsspam | 2020-09-17T16:58:11.673790paragon sshd[124050]: Invalid user future from 154.66.218.218 port 60931 2020-09-17T16:58:11.677621paragon sshd[124050]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.66.218.218 2020-09-17T16:58:11.673790paragon sshd[124050]: Invalid user future from 154.66.218.218 port 60931 2020-09-17T16:58:13.467655paragon sshd[124050]: Failed password for invalid user future from 154.66.218.218 port 60931 ssh2 2020-09-17T17:03:16.179843paragon sshd[124118]: Invalid user 123edc from 154.66.218.218 port 39838 ... |
2020-09-18 00:08:06 |
| 119.254.12.66 | attack | Sep 17 11:28:22 Tower sshd[43643]: Connection from 119.254.12.66 port 39844 on 192.168.10.220 port 22 rdomain "" Sep 17 11:28:26 Tower sshd[43643]: Failed password for root from 119.254.12.66 port 39844 ssh2 Sep 17 11:28:26 Tower sshd[43643]: Received disconnect from 119.254.12.66 port 39844:11: Bye Bye [preauth] Sep 17 11:28:26 Tower sshd[43643]: Disconnected from authenticating user root 119.254.12.66 port 39844 [preauth] |
2020-09-18 00:09:32 |
| 180.247.192.102 | attackbotsspam | Sep 16 16:18:33 XXX sshd[5027]: Invalid user user from 180.247.192.102 port 57679 |
2020-09-18 00:06:45 |
| 104.236.228.46 | attack | 2020-09-17T13:58:55.039462abusebot-7.cloudsearch.cf sshd[462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.228.46 user=root 2020-09-17T13:58:56.752345abusebot-7.cloudsearch.cf sshd[462]: Failed password for root from 104.236.228.46 port 36364 ssh2 2020-09-17T14:03:06.981797abusebot-7.cloudsearch.cf sshd[557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.228.46 user=root 2020-09-17T14:03:08.819993abusebot-7.cloudsearch.cf sshd[557]: Failed password for root from 104.236.228.46 port 48040 ssh2 2020-09-17T14:07:17.596399abusebot-7.cloudsearch.cf sshd[613]: Invalid user morgan from 104.236.228.46 port 59732 2020-09-17T14:07:17.601200abusebot-7.cloudsearch.cf sshd[613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.228.46 2020-09-17T14:07:17.596399abusebot-7.cloudsearch.cf sshd[613]: Invalid user morgan from 104.236.228.46 port 59732 2020 ... |
2020-09-17 23:53:31 |
| 77.247.181.162 | attackspam | Triggered by Fail2Ban at Ares web server |
2020-09-17 23:54:36 |
| 103.111.81.58 | attack | RDP Bruteforce |
2020-09-17 23:42:55 |
| 167.71.93.165 | attackspambots | Sep 17 17:50:57 vps647732 sshd[13469]: Failed password for root from 167.71.93.165 port 56576 ssh2 ... |
2020-09-17 23:56:49 |
| 115.99.180.12 | attack | Honeypot attack, port: 5555, PTR: PTR record not found |
2020-09-18 00:22:54 |
| 186.154.37.55 | attackbots | Listed on zen-spamhaus also abuseat.org and dnsbl-sorbs / proto=6 . srcport=54261 . dstport=23 . (1112) |
2020-09-18 00:13:36 |
| 185.68.78.166 | attack | SSH_scan |
2020-09-17 23:55:37 |
| 77.226.243.219 | attackbotsspam | Unauthorized connection attempt from IP address 77.226.243.219 on Port 445(SMB) |
2020-09-17 23:50:21 |
| 89.219.10.74 | attack | Unauthorized connection attempt from IP address 89.219.10.74 on Port 3389(RDP) |
2020-09-17 23:43:59 |
| 27.7.103.121 | attackbotsspam | DATE:2020-09-16 18:59:58, IP:27.7.103.121, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc) |
2020-09-18 00:12:38 |
| 140.143.248.182 | attackspambots | Sep 17 13:20:55 XXX sshd[28457]: Invalid user kompa from 140.143.248.182 port 33134 |
2020-09-18 00:08:48 |
| 128.199.212.15 | attackbots | Sep 17 15:00:51 XXXXXX sshd[64478]: Invalid user qwe123 from 128.199.212.15 port 52600 |
2020-09-18 00:09:03 |