City: unknown
Region: unknown
Country: Ghana
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 45.192.0.0 - 45.222.255.255
CIDR: 45.216.0.0/14, 45.208.0.0/13, 45.222.0.0/16, 45.220.0.0/15, 45.192.0.0/12
NetName: AFRINIC
NetHandle: NET-45-192-0-0-1
Parent: NET45 (NET-45-0-0-0-0)
NetType: Transferred to AfriNIC
OriginAS:
Organization: African Network Information Center (AFRINIC)
RegDate: 2014-05-22
Updated: 2015-02-26
Ref: https://rdap.arin.net/registry/ip/45.192.0.0
ResourceLink: http://afrinic.net/en/services/whois-query
ResourceLink: whois.afrinic.net
OrgName: African Network Information Center
OrgId: AFRINIC
Address: Level 11ABC
Address: Raffles Tower
Address: Lot 19, Cybercity
City: Ebene
StateProv:
PostalCode:
Country: MU
RegDate: 2004-05-17
Updated: 2015-05-04
Comment: AfriNIC - http://www.afrinic.net
Comment: The African & Indian Ocean Internet Registry
Ref: https://rdap.arin.net/registry/entity/AFRINIC
ReferralServer: whois://whois.afrinic.net
ResourceLink: http://afrinic.net/en/services/whois-query
OrgAbuseHandle: GENER11-ARIN
OrgAbuseName: Generic POC
OrgAbusePhone: +230 4666616
OrgAbuseEmail: abusepoc@afrinic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/GENER11-ARIN
OrgTechHandle: GENER11-ARIN
OrgTechName: Generic POC
OrgTechPhone: +230 4666616
OrgTechEmail: abusepoc@afrinic.net
OrgTechRef: https://rdap.arin.net/registry/entity/GENER11-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to whois.afrinic.net.
% This is the AfriNIC Whois server.
% The AFRINIC whois database is subject to the following terms of Use. See https://afrinic.net/whois/terms
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '45.208.0.0 - 45.209.255.255'
% No abuse contact registered for 45.208.0.0 - 45.209.255.255
inetnum: 45.208.0.0 - 45.209.255.255
netname: GPRS_Network_5_11
descr: Used for Airtel Ghana Use
country: GH
admin-c: DA82-AFRINIC
admin-c: EAO1-AFRINIC
admin-c: KS23-AFRINIC
tech-c: DA82-AFRINIC
status: ASSIGNED PA
mnt-by: ZAINGH-MNT
source: AFRINIC # Filtered
parent: 45.208.0.0 - 45.211.255.255
person: David Alema-Mensah
address: Data Centre 1, 19 Dr. Isert Road, 8th avenue, North Ridge, Accra, Ghana.
address: Tema
address: Other
phone: tel:+233-30-700-0000
nic-hdl: DA82-AFRINIC
mnt-by: GENERATED-PIKHV5EHAUIGC9APVEQSNCQOEBMXLHWV-MNT
source: AFRINIC # Filtered
person: E A Otchere
address: Airtel Ghana,
address: GNAT Heights,
address: 30 Independence Avenue, North Ridge
address: Accra
address: Ghana
phone: tel:+233-30-700-0000
phone: tel:+233-30-700-0009
nic-hdl: EAO1-AFRINIC
mnt-by: GENERATED-PZJ4CQABT2WYUHZJ3HZO3IA7G1LHACYW-MNT
source: AFRINIC # Filtered
person: Kola Sonola
address: Airtel Ghana,
address: GNAT Heights,
address: 30 Independence Avenue, North Ridge
address: Accra
address: Ghana
address: Accra
address: Other
phone: tel:+233-30-700-0000
nic-hdl: KS23-AFRINIC
mnt-by: GENERATED-FWPBSDVLSAA4OQD86H8DWFFHNRSMQJBS-MNT
source: AFRINIC # Filtered
% Information related to '45.208.0.0/16AS37140'
route: 45.208.0.0/16
descr: AIRTEL GHANA
origin: AS37140
mnt-by: ZAINGH-MNT
source: AFRINIC # Filtered; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.208.125.233
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50683
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;45.208.125.233. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026042002 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Apr 21 12:41:42 CST 2026
;; MSG SIZE rcvd: 107Host 233.125.208.45.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 233.125.208.45.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 51.77.137.230 | attack | Bruteforce detected by fail2ban |
2020-07-19 12:17:28 |
| 103.250.71.82 | attackbotsspam | 2020-07-19T05:58:49.124227 X postfix/smtpd[1280017]: NOQUEUE: reject: RCPT from unknown[103.250.71.82]: 554 5.7.1 Service unavailable; Client host [103.250.71.82] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?103.250.71.82; from= |
2020-07-19 12:39:29 |
| 42.200.78.78 | attack | Jul 19 05:59:16 rancher-0 sshd[451372]: Invalid user fff from 42.200.78.78 port 55742 ... |
2020-07-19 12:14:30 |
| 182.32.64.78 | attack | SMTP AUTH LOGIN |
2020-07-19 12:49:07 |
| 193.27.228.221 | attack | Jul 19 06:17:55 debian-2gb-nbg1-2 kernel: \[17390821.950079\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=193.27.228.221 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=20481 PROTO=TCP SPT=44117 DPT=57620 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-07-19 12:27:20 |
| 51.141.25.122 | attack | [2020-07-19 00:12:23] NOTICE[1277][C-00000d13] chan_sip.c: Call from '' (51.141.25.122:57297) to extension '00442037693452' rejected because extension not found in context 'public'. [2020-07-19 00:12:23] SECURITY[1295] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-07-19T00:12:23.850-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00442037693452",SessionID="0x7f1754188e58",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.141.25.122/57297",ACLName="no_extension_match" [2020-07-19 00:19:21] NOTICE[1277][C-00000d17] chan_sip.c: Call from '' (51.141.25.122:55584) to extension '+442037693452' rejected because extension not found in context 'public'. [2020-07-19 00:19:21] SECURITY[1295] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-07-19T00:19:21.049-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="+442037693452",SessionID="0x7f17545e5bd8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.141 ... |
2020-07-19 12:26:21 |
| 103.9.0.209 | attackspambots | Invalid user deploy from 103.9.0.209 port 51714 |
2020-07-19 12:15:37 |
| 198.23.48.136 | attackspam | 198.23.48.136 - - [19/Jul/2020:05:59:04 +0200] "POST /xmlrpc.php HTTP/1.1" 403 15316 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 198.23.48.136 - - [19/Jul/2020:05:59:12 +0200] "POST /xmlrpc.php HTTP/1.1" 403 15309 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-07-19 12:16:56 |
| 123.206.7.96 | attack | $f2bV_matches |
2020-07-19 12:25:04 |
| 45.141.84.94 | attack | Jul 19 06:36:45 debian-2gb-nbg1-2 kernel: \[17391951.475452\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.141.84.94 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=24023 PROTO=TCP SPT=42429 DPT=5883 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-07-19 12:46:16 |
| 54.36.148.244 | attack | Bad Web Bot (AhrefsBot). |
2020-07-19 12:50:28 |
| 222.186.169.192 | attackspam | Jul 19 06:16:56 eventyay sshd[22084]: Failed password for root from 222.186.169.192 port 11332 ssh2 Jul 19 06:16:59 eventyay sshd[22084]: Failed password for root from 222.186.169.192 port 11332 ssh2 Jul 19 06:17:02 eventyay sshd[22084]: Failed password for root from 222.186.169.192 port 11332 ssh2 Jul 19 06:17:09 eventyay sshd[22084]: error: maximum authentication attempts exceeded for root from 222.186.169.192 port 11332 ssh2 [preauth] ... |
2020-07-19 12:19:03 |
| 61.177.172.41 | attackspam | 2020-07-19T00:34:51.431132vps2034 sshd[16624]: Failed password for root from 61.177.172.41 port 40442 ssh2 2020-07-19T00:34:54.725835vps2034 sshd[16624]: Failed password for root from 61.177.172.41 port 40442 ssh2 2020-07-19T00:34:58.101290vps2034 sshd[16624]: Failed password for root from 61.177.172.41 port 40442 ssh2 2020-07-19T00:34:58.101667vps2034 sshd[16624]: error: maximum authentication attempts exceeded for root from 61.177.172.41 port 40442 ssh2 [preauth] 2020-07-19T00:34:58.101694vps2034 sshd[16624]: Disconnecting: Too many authentication failures [preauth] ... |
2020-07-19 12:41:23 |
| 122.51.114.51 | attack | Jul 19 06:19:59 fhem-rasp sshd[13071]: Invalid user myuser from 122.51.114.51 port 52096 ... |
2020-07-19 12:28:26 |
| 34.195.178.249 | attackbotsspam | Jul 19 05:59:15 vmd26974 sshd[28308]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.195.178.249 Jul 19 05:59:17 vmd26974 sshd[28308]: Failed password for invalid user ki from 34.195.178.249 port 33744 ssh2 ... |
2020-07-19 12:15:18 |