City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 72.22.104.0 - 72.22.111.255
CIDR: 72.22.104.0/21
NetName: LOGIC-32
NetHandle: NET-72-22-104-0-1
Parent: NET72 (NET-72-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Logicalis (LOGIC-32)
RegDate: 2005-01-19
Updated: 2015-08-04
Ref: https://rdap.arin.net/registry/ip/72.22.104.0
OrgName: Logicalis
OrgId: LOGIC-32
Address: 1750 S. Telegraph Rd.
Address: Suite 300
City: Bloomfield Hills
StateProv: MI
PostalCode: 48302
Country: US
RegDate: 2008-11-06
Updated: 2015-08-05
Ref: https://rdap.arin.net/registry/entity/LOGIC-32
OrgAbuseHandle: LOGIC3-ARIN
OrgAbuseName: LogicalisIT
OrgAbusePhone: +1-248-957-5600
OrgAbuseEmail: ITSupport@us.logicalis.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/LOGIC3-ARIN
OrgTechHandle: LOGIC3-ARIN
OrgTechName: LogicalisIT
OrgTechPhone: +1-248-957-5600
OrgTechEmail: ITSupport@us.logicalis.com
OrgTechRef: https://rdap.arin.net/registry/entity/LOGIC3-ARIN
# end
# start
NetRange: 72.22.106.0 - 72.22.107.255
CIDR: 72.22.106.0/23
NetName: ST-JOSEPH-CPL
NetHandle: NET-72-22-106-0-1
Parent: LOGIC-32 (NET-72-22-104-0-1)
NetType: Reassigned
OriginAS:
Organization: St Joseph County Public Library (STJOS-10)
RegDate: 2010-11-15
Updated: 2010-11-15
Ref: https://rdap.arin.net/registry/ip/72.22.106.0
OrgName: St Joseph County Public Library
OrgId: STJOS-10
Address: 304 S Main St
City: South Bend
StateProv: IN
PostalCode: 46601
Country: US
RegDate: 2010-11-15
Updated: 2011-09-24
Ref: https://rdap.arin.net/registry/entity/STJOS-10
OrgTechHandle: DCSEN-ARIN
OrgTechName: DCS Engineers
OrgTechPhone: +1-877-963-8279
OrgTechEmail: dcs@netarx.com
OrgTechRef: https://rdap.arin.net/registry/entity/DCSEN-ARIN
OrgAbuseHandle: DCSEN-ARIN
OrgAbuseName: DCS Engineers
OrgAbusePhone: +1-877-963-8279
OrgAbuseEmail: dcs@netarx.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/DCSEN-ARIN
RAbuseHandle: DCSEN-ARIN
RAbuseName: DCS Engineers
RAbusePhone: +1-877-963-8279
RAbuseEmail: dcs@netarx.com
RAbuseRef: https://rdap.arin.net/registry/entity/DCSEN-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 72.22.107.155
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44961
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;72.22.107.155. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026083001 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Aug 31 04:32:56 CST 2026
;; MSG SIZE rcvd: 106Host 155.107.22.72.in-addr.arpa not found: 2(SERVFAIL)
server can't find 72.22.107.155.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.12.219.184 | attackbotsspam | Banned for a week because repeated abuses, for example SSH, but not only |
2020-08-09 08:20:59 |
| 108.190.190.48 | attack | Ssh brute force |
2020-08-09 08:13:55 |
| 31.220.3.108 | attackspambots | Aug 7 20:22:38 m2 sshd[22181]: Invalid user admin from 31.220.3.108 Aug 7 20:22:40 m2 sshd[22181]: Failed password for invalid user admin from 31.220.3.108 port 36797 ssh2 Aug 7 20:22:41 m2 sshd[22215]: Invalid user admin from 31.220.3.108 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=31.220.3.108 |
2020-08-09 08:14:10 |
| 81.68.141.71 | attackbotsspam | Aug 9 08:53:12 gw1 sshd[24094]: Failed password for root from 81.68.141.71 port 59486 ssh2 ... |
2020-08-09 12:05:56 |
| 84.180.236.164 | attack | SSH Brute Force |
2020-08-09 08:28:01 |
| 141.98.9.161 | attackspam | Aug 8 06:06:24 XXX sshd[676]: Invalid user admin from 141.98.9.161 port 35723 |
2020-08-09 08:32:51 |
| 218.18.161.186 | attack | 2020-08-09T10:52:52.084707hostname sshd[27836]: Failed password for root from 218.18.161.186 port 33598 ssh2 2020-08-09T10:55:13.269109hostname sshd[28180]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.18.161.186 user=root 2020-08-09T10:55:14.606395hostname sshd[28180]: Failed password for root from 218.18.161.186 port 32873 ssh2 ... |
2020-08-09 12:05:14 |
| 222.186.42.137 | attackspambots | Aug 9 04:09:06 IngegnereFirenze sshd[29085]: User root from 222.186.42.137 not allowed because not listed in AllowUsers ... |
2020-08-09 12:10:21 |
| 153.101.167.242 | attackbots | 2020-08-09T01:44:43.423581vps773228.ovh.net sshd[5409]: Failed password for root from 153.101.167.242 port 33976 ssh2 2020-08-09T01:49:09.862221vps773228.ovh.net sshd[5427]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.101.167.242 user=root 2020-08-09T01:49:12.360720vps773228.ovh.net sshd[5427]: Failed password for root from 153.101.167.242 port 36846 ssh2 2020-08-09T01:53:43.534156vps773228.ovh.net sshd[5449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.101.167.242 user=root 2020-08-09T01:53:45.646407vps773228.ovh.net sshd[5449]: Failed password for root from 153.101.167.242 port 39738 ssh2 ... |
2020-08-09 08:13:07 |
| 78.17.166.244 | attack | 2020-08-09 02:15:23,005 fail2ban.actions: WARNING [ssh] Ban 78.17.166.244 |
2020-08-09 08:23:49 |
| 192.241.236.86 | attackspambots | Port scan: Attack repeated for 24 hours |
2020-08-09 08:12:55 |
| 118.25.139.201 | attackbots | Aug 9 08:49:28 gw1 sshd[23983]: Failed password for root from 118.25.139.201 port 33200 ssh2 ... |
2020-08-09 12:07:38 |
| 165.3.86.114 | attack | 2020-08-08T22:23:47.515555+02:00 lumpi kernel: [22207820.542006] INPUT:DROP:SPAMHAUS_DROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=165.3.86.114 DST=78.46.199.189 LEN=48 TOS=0x00 PREC=0x00 TTL=116 ID=5059 DF PROTO=TCP SPT=25780 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... |
2020-08-09 08:32:28 |
| 106.12.109.165 | attackbots | Aug 8 16:18:08 NPSTNNYC01T sshd[9643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.109.165 Aug 8 16:18:10 NPSTNNYC01T sshd[9643]: Failed password for invalid user p@SSw0Rd from 106.12.109.165 port 60386 ssh2 Aug 8 16:24:06 NPSTNNYC01T sshd[10602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.109.165 ... |
2020-08-09 08:18:10 |
| 198.100.145.89 | attack | 198.100.145.89 - - [09/Aug/2020:01:30:33 +0200] "GET /wp-login.php HTTP/1.1" 200 6310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 198.100.145.89 - - [09/Aug/2020:01:30:34 +0200] "POST /wp-login.php HTTP/1.1" 200 6627 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 198.100.145.89 - - [09/Aug/2020:01:30:36 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-08-09 08:19:08 |