City: Bursa
Region: Bursa
Country: Turkey
Internet Service Provider: ETC
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '94.154.40.0 - 94.154.46.255'
% Abuse contact for '94.154.40.0 - 94.154.46.255' is 'abusep@kharkiv.com'
inetnum: 94.154.40.0 - 94.154.46.255
netname: NET-94-15-40
country: US
org: ORG-VED1-RIPE
admin-c: VED7-RIPE
tech-c: VED7-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-END-MNT
mnt-by: ISP5HAT-MNT
mnt-by: PITLINE-MNT
mnt-routes: PITLINE-MNT
mnt-domains: PITLINE-MNT
geofeed: https://pitline.net/geofeed.csv
abuse-c: PCAM5-RIPE
created: 2018-03-06T15:17:48Z
last-modified: 2026-08-09T10:09:11Z
source: RIPE
sponsoring-org: ORG-LA684-RIPE
organisation: ORG-VED1-RIPE
org-name: FOP Danik Vyacheslav Evgenievich
country: UA
reg-nr: Not Applicable
org-type: OTHER
address: 61000, Ukraine, Kharkiv
abuse-c: PTLN-RIPE
mnt-ref: ISP5HAT-MNT
mnt-by: ISP5HAT-MNT
created: 2009-09-24T08:57:02Z
last-modified: 2026-05-13T06:03:36Z
source: RIPE # Filtered
person: Vyacheslav E. Danik
address: Ukraine, Kharkiv
phone: +380675746805
nic-hdl: VED7-RIPE
mnt-by: ISP5HAT-MNT
created: 2009-09-24T07:59:31Z
last-modified: 2014-11-06T05:59:23Z
source: RIPE # Filtered
% Information related to '94.154.43.0/24AS219502'
route: 94.154.43.0/24
origin: AS219502
created: 2026-06-25T09:38:19Z
last-modified: 2026-06-25T09:38:19Z
source: RIPE
mnt-by: PITLINE-MNT
% This query was served by the RIPE Database Query Service version 1.124.1 (ABERDEEN); <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.154.43.95
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41964
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;94.154.43.95. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026083100 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Aug 31 23:31:05 CST 2026
;; MSG SIZE rcvd: 105Host 95.43.154.94.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 95.43.154.94.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 81.28.100.228 | attackspambots | Oct 14 13:52:19 web01 postfix/smtpd[19744]: connect from phoenix.reicodev.com[81.28.100.228] Oct 14 13:52:19 web01 policyd-spf[25087]: None; identhostnamey=helo; client-ip=81.28.100.228; helo=debonair.tooslaser.co; envelope-from=x@x Oct 14 13:52:19 web01 policyd-spf[25087]: Pass; identhostnamey=mailfrom; client-ip=81.28.100.228; helo=debonair.tooslaser.co; envelope-from=x@x Oct x@x Oct 14 13:52:20 web01 postfix/smtpd[19744]: disconnect from phoenix.reicodev.com[81.28.100.228] Oct 14 14:00:17 web01 postfix/smtpd[26263]: connect from phoenix.reicodev.com[81.28.100.228] Oct 14 14:00:17 web01 policyd-spf[26323]: None; identhostnamey=helo; client-ip=81.28.100.228; helo=debonair.tooslaser.co; envelope-from=x@x Oct 14 14:00:17 web01 policyd-spf[26323]: Pass; identhostnamey=mailfrom; client-ip=81.28.100.228; helo=debonair.tooslaser.co; envelope-from=x@x Oct x@x Oct 14 14:00:17 web01 postfix/smtpd[26263]: disconnect from phoenix.reicodev.com[81.28.100.228] Oct 14 14:01:06 web01 ........ ------------------------------- |
2019-10-15 02:49:01 |
| 204.186.24.223 | attackspambots | Port 1433 Scan |
2019-10-15 03:01:25 |
| 137.74.171.160 | attack | 2019-10-14T18:26:30.525502abusebot.cloudsearch.cf sshd\[20159\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.ip-137-74-171.eu user=root |
2019-10-15 02:44:46 |
| 220.117.175.165 | attackspambots | Oct 14 19:09:03 venus sshd\[6881\]: Invalid user pass from 220.117.175.165 port 35196 Oct 14 19:09:03 venus sshd\[6881\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.117.175.165 Oct 14 19:09:04 venus sshd\[6881\]: Failed password for invalid user pass from 220.117.175.165 port 35196 ssh2 ... |
2019-10-15 03:11:09 |
| 103.197.92.174 | attackbotsspam | Automatic report - XMLRPC Attack |
2019-10-15 02:58:22 |
| 78.46.228.220 | attackbotsspam | *Port Scan* detected from 78.46.228.220 (DE/Germany/static.220.228.46.78.clients.your-server.de). 4 hits in the last 105 seconds |
2019-10-15 03:10:24 |
| 89.109.23.190 | attack | $f2bV_matches |
2019-10-15 03:15:55 |
| 222.187.200.229 | attackbotsspam | Oct 14 13:27:57 123flo sshd[30698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.187.200.229 user=root Oct 14 13:28:00 123flo sshd[30698]: Failed password for root from 222.187.200.229 port 49892 ssh2 |
2019-10-15 02:51:53 |
| 122.55.212.211 | attack | 2 pkts, ports: TCP:1433 |
2019-10-15 03:09:19 |
| 122.114.250.150 | attackspam | 10/14/2019-13:42:50.879922 122.114.250.150 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433 |
2019-10-15 03:11:53 |
| 210.12.202.206 | attack | Lines containing failures of 210.12.202.206 Oct 14 12:43:26 www sshd[12795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.12.202.206 user=r.r Oct 14 12:43:28 www sshd[12795]: Failed password for r.r from 210.12.202.206 port 52722 ssh2 Oct 14 12:43:29 www sshd[12795]: Received disconnect from 210.12.202.206 port 52722:11: Bye Bye [preauth] Oct 14 12:43:29 www sshd[12795]: Disconnected from authenticating user r.r 210.12.202.206 port 52722 [preauth] Oct 14 12:48:31 www sshd[13281]: Invalid user aldevino from 210.12.202.206 port 45347 Oct 14 12:48:31 www sshd[13281]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.12.202.206 Oct 14 12:48:32 www sshd[13281]: Failed password for invalid user aldevino from 210.12.202.206 port 45347 ssh2 Oct 14 12:48:33 www sshd[13281]: Received disconnect from 210.12.202.206 port 45347:11: Bye Bye [preauth] Oct 14 12:48:33 www sshd[13281]: Disconnected ........ ------------------------------ |
2019-10-15 03:00:55 |
| 62.234.190.190 | attack | Oct 14 10:54:46 keyhelp sshd[22179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.190.190 user=r.r Oct 14 10:54:49 keyhelp sshd[22179]: Failed password for r.r from 62.234.190.190 port 51066 ssh2 Oct 14 10:54:49 keyhelp sshd[22179]: Received disconnect from 62.234.190.190 port 51066:11: Bye Bye [preauth] Oct 14 10:54:49 keyhelp sshd[22179]: Disconnected from 62.234.190.190 port 51066 [preauth] Oct 14 11:14:40 keyhelp sshd[26997]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.190.190 user=r.r Oct 14 11:14:42 keyhelp sshd[26997]: Failed password for r.r from 62.234.190.190 port 43060 ssh2 Oct 14 11:14:43 keyhelp sshd[26997]: Received disconnect from 62.234.190.190 port 43060:11: Bye Bye [preauth] Oct 14 11:14:43 keyhelp sshd[26997]: Disconnected from 62.234.190.190 port 43060 [preauth] Oct 14 11:19:46 keyhelp sshd[27864]: pam_unix(sshd:auth): authentication failure; lognam........ ------------------------------- |
2019-10-15 02:55:45 |
| 197.253.124.151 | attackbotsspam | Port 1433 Scan |
2019-10-15 03:09:50 |
| 192.168.7.123 | attackspam | Port 1433 Scan |
2019-10-15 03:13:49 |
| 81.183.213.222 | attackbots | Oct 14 17:55:25 MK-Soft-VM3 sshd[12482]: Failed password for root from 81.183.213.222 port 59074 ssh2 ... |
2019-10-15 02:43:07 |