City: Amsterdam
Region: Noord Holland
Country: The Netherlands
Internet Service Provider: ETC
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '94.154.40.0 - 94.154.46.255'
% Abuse contact for '94.154.40.0 - 94.154.46.255' is 'abusep@kharkiv.com'
inetnum: 94.154.40.0 - 94.154.46.255
netname: NET-94-15-40
country: US
org: ORG-VED1-RIPE
admin-c: VED7-RIPE
tech-c: VED7-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-END-MNT
mnt-by: ISP5HAT-MNT
mnt-by: PITLINE-MNT
mnt-routes: PITLINE-MNT
mnt-domains: PITLINE-MNT
geofeed: https://pitline.net/geofeed.csv
abuse-c: PCAM5-RIPE
created: 2018-03-06T15:17:48Z
last-modified: 2026-08-09T10:09:11Z
source: RIPE
sponsoring-org: ORG-LA684-RIPE
organisation: ORG-VED1-RIPE
org-name: FOP Danik Vyacheslav Evgenievich
country: UA
reg-nr: Not Applicable
org-type: OTHER
address: 61000, Ukraine, Kharkiv
abuse-c: PTLN-RIPE
mnt-ref: ISP5HAT-MNT
mnt-by: ISP5HAT-MNT
created: 2009-09-24T08:57:02Z
last-modified: 2026-05-13T06:03:36Z
source: RIPE # Filtered
person: Vyacheslav E. Danik
address: Ukraine, Kharkiv
phone: +380675746805
nic-hdl: VED7-RIPE
mnt-by: ISP5HAT-MNT
created: 2009-09-24T07:59:31Z
last-modified: 2014-11-06T05:59:23Z
source: RIPE # Filtered
% Information related to '94.154.43.0/24AS219502'
route: 94.154.43.0/24
origin: AS219502
created: 2026-06-25T09:38:19Z
last-modified: 2026-06-25T09:38:19Z
source: RIPE
mnt-by: PITLINE-MNT
% This query was served by the RIPE Database Query Service version 1.124.1 (SHETLAND)
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.154.43.222
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31672
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;94.154.43.222. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026092802 1800 900 604800 86400
;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Sep 29 08:00:21 CST 2026
;; MSG SIZE rcvd: 106
Host 222.43.154.94.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 222.43.154.94.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.129.18.198 | attackbots | Sent phishing email to user then stole credentials and used them to send more phishing emails as user from that IP. Probably will do it again. |
2020-01-09 05:36:34 |
| 219.80.0.35 | attack | Unauthorized connection attempt detected from IP address 219.80.0.35 to port 445 [T] |
2020-01-09 05:17:53 |
| 125.124.152.59 | attackbotsspam | Jan 8 21:03:27 ip-172-31-62-245 sshd\[27909\]: Invalid user test2 from 125.124.152.59\ Jan 8 21:03:30 ip-172-31-62-245 sshd\[27909\]: Failed password for invalid user test2 from 125.124.152.59 port 48380 ssh2\ Jan 8 21:07:40 ip-172-31-62-245 sshd\[27988\]: Invalid user test10 from 125.124.152.59\ Jan 8 21:07:43 ip-172-31-62-245 sshd\[27988\]: Failed password for invalid user test10 from 125.124.152.59 port 49136 ssh2\ Jan 8 21:11:45 ip-172-31-62-245 sshd\[28116\]: Invalid user wat from 125.124.152.59\ |
2020-01-09 05:37:47 |
| 58.213.48.218 | attackbots | Unauthorized connection attempt detected from IP address 58.213.48.218 to port 1433 [T] |
2020-01-09 05:30:05 |
| 218.145.176.58 | attackspambots | Unauthorized IMAP connection attempt |
2020-01-09 05:10:46 |
| 164.132.197.108 | attackbotsspam | Jan 9 00:03:24 server sshd\[26778\]: Invalid user bmaina from 164.132.197.108 Jan 9 00:03:24 server sshd\[26778\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=108.ip-164-132-197.eu Jan 9 00:03:25 server sshd\[26778\]: Failed password for invalid user bmaina from 164.132.197.108 port 33852 ssh2 Jan 9 00:11:48 server sshd\[28968\]: Invalid user azureuser from 164.132.197.108 Jan 9 00:11:48 server sshd\[28968\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=108.ip-164-132-197.eu ... |
2020-01-09 05:33:34 |
| 139.59.3.151 | attack | Jan 8 22:11:37 vps670341 sshd[9413]: Invalid user jboss from 139.59.3.151 port 35710 |
2020-01-09 05:44:43 |
| 222.186.42.136 | attackspambots | SSH Brute Force, server-1 sshd[10331]: Failed password for root from 222.186.42.136 port 54923 ssh2 |
2020-01-09 05:34:23 |
| 222.186.15.166 | attackbotsspam | Unauthorized connection attempt detected from IP address 222.186.15.166 to port 22 [T] |
2020-01-09 05:16:18 |
| 118.25.54.60 | attack | Jan 8 22:11:46 icinga sshd[3110]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.54.60 Jan 8 22:11:49 icinga sshd[3110]: Failed password for invalid user cz from 118.25.54.60 port 33536 ssh2 ... |
2020-01-09 05:33:52 |
| 165.227.69.39 | attackbots | Jan 8 21:11:37 pi sshd[9785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.69.39 Jan 8 21:11:38 pi sshd[9785]: Failed password for invalid user testftp from 165.227.69.39 port 55197 ssh2 |
2020-01-09 05:43:11 |
| 94.139.101.230 | attackspam | 1578488597 - 01/08/2020 14:03:17 Host: 94.139.101.230/94.139.101.230 Port: 445 TCP Blocked |
2020-01-09 05:05:48 |
| 222.186.169.194 | attack | Jan 8 22:37:43 dedicated sshd[32702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.194 user=root Jan 8 22:37:45 dedicated sshd[32702]: Failed password for root from 222.186.169.194 port 57730 ssh2 |
2020-01-09 05:40:04 |
| 176.32.34.90 | attackbots | Unauthorized connection attempt detected from IP address 176.32.34.90 to port 1080 [T] |
2020-01-09 05:22:13 |
| 47.98.155.119 | attack | Port Scan |
2020-01-09 05:38:16 |