City: unknown
Region: unknown
Country: Mauritius
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#
NetRange: 45.192.0.0 - 45.222.255.255
CIDR: 45.216.0.0/14, 45.192.0.0/12, 45.222.0.0/16, 45.220.0.0/15, 45.208.0.0/13
NetName: AFRINIC
NetHandle: NET-45-192-0-0-1
Parent: NET45 (NET-45-0-0-0-0)
NetType: Transferred to AfriNIC
OriginAS:
Organization: African Network Information Center (AFRINIC)
RegDate: 2014-05-22
Updated: 2015-02-26
Ref: https://rdap.arin.net/registry/ip/45.192.0.0
ResourceLink: http://afrinic.net/en/services/whois-query
ResourceLink: whois.afrinic.net
OrgName: African Network Information Center
OrgId: AFRINIC
Address: Level 11ABC
Address: Raffles Tower
Address: Lot 19, Cybercity
City: Ebene
StateProv:
PostalCode:
Country: MU
RegDate: 2004-05-17
Updated: 2015-05-04
Comment: AfriNIC - http://www.afrinic.net
Comment: The African & Indian Ocean Internet Registry
Ref: https://rdap.arin.net/registry/entity/AFRINIC
ReferralServer: whois://whois.afrinic.net
ResourceLink: http://afrinic.net/en/services/whois-query
OrgTechHandle: GENER11-ARIN
OrgTechName: Generic POC
OrgTechPhone: +230 4666616
OrgTechEmail: abusepoc@afrinic.net
OrgTechRef: https://rdap.arin.net/registry/entity/GENER11-ARIN
OrgAbuseHandle: GENER11-ARIN
OrgAbuseName: Generic POC
OrgAbusePhone: +230 4666616
OrgAbuseEmail: abusepoc@afrinic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/GENER11-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#
Found a referral to whois.afrinic.net.
% This is the AfriNIC Whois server.
% The AFRINIC whois database is subject to the following terms of Use. See https://afrinic.net/whois/terms
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '45.192.218.0 - 45.192.218.255'
% No abuse contact registered for 45.192.218.0 - 45.192.218.255
inetnum: 45.192.218.0 - 45.192.218.255
netname: Antbox_Network_Limited
descr: Antbox Network Limited
country: HK
admin-c: CIS1-AFRINIC
tech-c: CIS1-AFRINIC
status: ASSIGNED PA
mnt-by: CIL1-MNT
mnt-by: LARUS-SERVICE-MNT
source: AFRINIC # Filtered
parent: 45.192.0.0 - 45.207.255.255
person: Cloud Innovation Support
address: Ebene
address: MU
address: Mahe
address: Seychelles
phone: tel:+248-4-610-795
nic-hdl: CIS1-AFRINIC
abuse-mailbox: abuse@cloudinnovation.org
mnt-by: CIL1-MNT
source: AFRINIC # Filtered; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.192.218.136
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1137
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;45.192.218.136. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025111100 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Nov 11 17:10:53 CST 2025
;; MSG SIZE rcvd: 107Host 136.218.192.45.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 136.218.192.45.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.83.29.122 | attackbotsspam | May 27 00:48:01 debian-2gb-nbg1-2 kernel: \[12792078.439469\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.83.29.122 DST=195.201.40.59 LEN=436 TOS=0x00 PREC=0x00 TTL=48 ID=9227 DF PROTO=UDP SPT=5060 DPT=5060 LEN=416 |
2020-05-27 07:17:55 |
| 178.219.50.205 | attack |
|
2020-05-27 07:33:55 |
| 180.76.246.38 | attack | 2020-05-27T01:16:56.856614struts4.enskede.local sshd\[32336\]: Invalid user brinkley from 180.76.246.38 port 57046 2020-05-27T01:16:56.865339struts4.enskede.local sshd\[32336\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.246.38 2020-05-27T01:17:00.170554struts4.enskede.local sshd\[32336\]: Failed password for invalid user brinkley from 180.76.246.38 port 57046 ssh2 2020-05-27T01:24:23.857216struts4.enskede.local sshd\[32352\]: Invalid user cgadmin from 180.76.246.38 port 51628 2020-05-27T01:24:23.864759struts4.enskede.local sshd\[32352\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.246.38 ... |
2020-05-27 07:40:43 |
| 186.93.153.37 | attack | 1590507987 - 05/26/2020 17:46:27 Host: 186.93.153.37/186.93.153.37 Port: 445 TCP Blocked |
2020-05-27 07:22:50 |
| 212.166.68.146 | attackbots | ... |
2020-05-27 07:17:30 |
| 221.214.74.10 | attack | SSH Login Bruteforce |
2020-05-27 07:15:57 |
| 200.165.72.101 | attackspam | Unauthorized connection attempt from IP address 200.165.72.101 on Port 445(SMB) |
2020-05-27 07:41:45 |
| 77.247.108.42 | attackspam | Triggered: repeated knocking on closed ports. |
2020-05-27 07:29:02 |
| 190.129.2.37 | attackbotsspam | Unauthorized connection attempt detected from IP address 190.129.2.37 to port 445 |
2020-05-27 07:33:25 |
| 157.32.103.78 | attack | Unauthorized connection attempt from IP address 157.32.103.78 on Port 445(SMB) |
2020-05-27 07:41:12 |
| 106.12.148.201 | attack | Invalid user gzuser from 106.12.148.201 port 46714 |
2020-05-27 07:29:59 |
| 185.220.101.213 | attackspam | May 26 18:07:02 *** sshd[7394]: User root from 185.220.101.213 not allowed because not listed in AllowUsers |
2020-05-27 07:21:28 |
| 181.191.241.6 | attackspam | Invalid user rtq from 181.191.241.6 port 46290 |
2020-05-27 07:16:36 |
| 45.230.229.248 | attackbotsspam | Lines containing failures of 45.230.229.248 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=45.230.229.248 |
2020-05-27 07:20:00 |
| 222.186.175.183 | attack | prod6 ... |
2020-05-27 07:35:52 |