City: Bursa
Region: Bursa
Country: Turkey
Internet Service Provider: ETC
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '94.154.40.0 - 94.154.46.255'
% Abuse contact for '94.154.40.0 - 94.154.46.255' is 'abusep@kharkiv.com'
inetnum: 94.154.40.0 - 94.154.46.255
netname: NET-94-15-40
country: TR
org: ORG-VED1-RIPE
admin-c: VED7-RIPE
tech-c: VED7-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-END-MNT
mnt-by: ISP5HAT-MNT
mnt-by: PITLINE-MNT
mnt-routes: PITLINE-MNT
mnt-domains: PITLINE-MNT
geofeed: https://pitline.net/geofeed.csv
abuse-c: PCAM5-RIPE
created: 2018-03-06T15:17:48Z
last-modified: 2025-08-13T10:06:48Z
source: RIPE
sponsoring-org: ORG-LA684-RIPE
organisation: ORG-VED1-RIPE
org-name: FOP Danik Vyacheslav Evgenievich
country: UA
reg-nr: Not Applicable
org-type: OTHER
address: 61000, Ukraine, Kharkiv
abuse-c: PTLN-RIPE
mnt-ref: ISP5HAT-MNT
mnt-by: ISP5HAT-MNT
created: 2009-09-24T08:57:02Z
last-modified: 2026-05-13T06:03:36Z
source: RIPE # Filtered
person: Vyacheslav E. Danik
address: Ukraine, Kharkiv
phone: +380675746805
nic-hdl: VED7-RIPE
mnt-by: ISP5HAT-MNT
created: 2009-09-24T07:59:31Z
last-modified: 2014-11-06T05:59:23Z
source: RIPE # Filtered
% Information related to '94.154.43.0/24AS219502'
route: 94.154.43.0/24
origin: AS219502
created: 2026-06-25T09:38:19Z
last-modified: 2026-06-25T09:38:19Z
source: RIPE
mnt-by: PITLINE-MNT
% This query was served by the RIPE Database Query Service version 1.123 (BUSA)
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.154.43.187
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30627
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;94.154.43.187. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026071502 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jul 16 09:30:19 CST 2026
;; MSG SIZE rcvd: 106
Host 187.43.154.94.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 187.43.154.94.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 5.67.162.211 | attack | Brute-force attempt banned |
2020-05-09 05:39:08 |
| 163.44.150.247 | attackspambots | May 8 23:14:47 vps647732 sshd[2843]: Failed password for root from 163.44.150.247 port 34038 ssh2 ... |
2020-05-09 05:24:58 |
| 210.113.7.61 | attackbotsspam | May 8 23:06:16 server sshd[1414]: Failed password for root from 210.113.7.61 port 59162 ssh2 May 8 23:09:14 server sshd[4064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.113.7.61 May 8 23:09:16 server sshd[4064]: Failed password for invalid user art from 210.113.7.61 port 49890 ssh2 ... |
2020-05-09 05:12:26 |
| 140.246.155.37 | attackbots | May 8 20:50:44 scw-6657dc sshd[32420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.155.37 user=root May 8 20:50:44 scw-6657dc sshd[32420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.155.37 user=root May 8 20:50:46 scw-6657dc sshd[32420]: Failed password for root from 140.246.155.37 port 59773 ssh2 ... |
2020-05-09 05:20:56 |
| 185.36.81.150 | attackspam | firewall-block, port(s): 8088/tcp |
2020-05-09 05:37:22 |
| 182.61.12.12 | attackbotsspam | Triggered by Fail2Ban at Ares web server |
2020-05-09 05:37:38 |
| 94.129.242.223 | attackspambots | SMB Server BruteForce Attack |
2020-05-09 05:14:06 |
| 139.186.73.65 | attack | May 8 17:21:49 ny01 sshd[19584]: Failed password for root from 139.186.73.65 port 34064 ssh2 May 8 17:27:38 ny01 sshd[20726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.186.73.65 May 8 17:27:40 ny01 sshd[20726]: Failed password for invalid user cody from 139.186.73.65 port 40086 ssh2 |
2020-05-09 05:31:12 |
| 167.71.158.148 | attackspambots | " " |
2020-05-09 05:19:57 |
| 54.38.53.251 | attackbotsspam | May 8 22:34:38 ns382633 sshd\[10061\]: Invalid user nginx from 54.38.53.251 port 36810 May 8 22:34:38 ns382633 sshd\[10061\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.53.251 May 8 22:34:40 ns382633 sshd\[10061\]: Failed password for invalid user nginx from 54.38.53.251 port 36810 ssh2 May 8 22:50:44 ns382633 sshd\[13237\]: Invalid user maria from 54.38.53.251 port 35976 May 8 22:50:44 ns382633 sshd\[13237\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.53.251 |
2020-05-09 05:20:20 |
| 45.143.220.163 | attackbotsspam | " " |
2020-05-09 05:14:38 |
| 45.14.150.52 | attack | RO_Parfumuri Femei.com SRL_<177>1588971058 [1:2403348:57130] ET CINS Active Threat Intelligence Poor Reputation IP TCP group 25 [Classification: Misc Attack] [Priority: 2]: |
2020-05-09 05:10:27 |
| 195.56.187.26 | attack | firewall-block, port(s): 19536/tcp |
2020-05-09 05:34:35 |
| 54.36.148.33 | attack | [Sat May 09 03:50:39.250483 2020] [:error] [pid 6964:tid 139913166591744] [client 54.36.148.33:56566] [client 54.36.148.33] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "183"] [id "913102"] [msg "Found User-Agent associated with web crawler/bot"] [data "Matched Data: AhrefsBot found within REQUEST_HEADERS:User-Agent: mozilla/5.0 (compatible; ahrefsbot/6.1; +http://ahrefs.com/robot/)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-crawler"] [tag "OWASP_CRS"] [tag "OWASP_CRS/AUTOMATION/CRAWLER"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/pelayanan-jasa/1638-klimatologi/agroklimatologi/kalender-tanam-katam-terpadu/kalender-tan ... |
2020-05-09 05:26:23 |
| 171.245.241.249 | attackspam | Port probing on unauthorized port 9530 |
2020-05-09 05:15:08 |