City: London
Region: England
Country: United Kingdom
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '185.38.148.0 - 185.38.151.255'
% Abuse contact for '185.38.148.0 - 185.38.151.255' is 'abuse@zare.com'
inetnum: 185.38.148.0 - 185.38.151.255
netname: UK-HYDRACOM-20131023
country: GB
geofeed: https://hydracom.co.uk/geofeed.csv
org: ORG-HCL11-RIPE
admin-c: HCN11-RIPE
tech-c: HCN11-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-by: HYDRA-MNT
mnt-lower: HYDRA-MNT
mnt-domains: HYDRA-MNT
mnt-routes: HYDRA-MNT
created: 2013-10-23T14:46:04Z
last-modified: 2022-12-19T02:44:07Z
source: RIPE # Filtered
organisation: ORG-HCL11-RIPE
org-name: Hydra Communications Ltd
country: GB
reg-nr: 07780501
org-type: LIR
address: The Enterprise Centre, Earlham Road
address: NR4 7TJ
address: Norwich
address: UNITED KINGDOM
phone: +448000803330
tech-c: HCN11-RIPE
abuse-c: AR17698-RIPE
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: HYDRA-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: HYDRA-MNT
created: 2013-10-16T13:57:51Z
last-modified: 2026-05-13T07:35:13Z
source: RIPE # Filtered
role: Hydra Communications Ltd NOC
address: The Enterprise Centre, Earlham Road
address: Norwich
address: NR4 7TJ
phone: +448000803330
nic-hdl: HCN11-RIPE
mnt-by: HYDRA-MNT
created: 2018-02-20T23:51:47Z
last-modified: 2024-02-06T02:49:45Z
source: RIPE # Filtered
% Information related to '185.38.148.0/22AS25369'
route: 185.38.148.0/22
origin: AS25369
mnt-by: HYDRA-MNT
created: 2018-06-28T01:35:47Z
last-modified: 2018-06-28T01:35:47Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.122.1 (BUSA); <<>> DiG 9.10.3-P4-Ubuntu <<>> 185.38.149.130
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20793
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;185.38.149.130. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026061300 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jun 13 19:00:15 CST 2026
;; MSG SIZE rcvd: 107130.149.38.185.in-addr.arpa domain name pointer 130.149.38.185.baremetal.zare.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
130.149.38.185.in-addr.arpa name = 130.149.38.185.baremetal.zare.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 70.63.181.58 | attackspam | SSH Bruteforce |
2019-11-17 20:12:50 |
| 183.87.157.202 | attackspam | Nov 17 12:30:32 eventyay sshd[28808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.87.157.202 Nov 17 12:30:34 eventyay sshd[28808]: Failed password for invalid user 4444444 from 183.87.157.202 port 60994 ssh2 Nov 17 12:34:51 eventyay sshd[28877]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.87.157.202 ... |
2019-11-17 19:43:37 |
| 184.105.139.67 | attackbotsspam | 21/tcp 50070/tcp 11211/tcp... [2019-09-16/11-17]156pkt,9pt.(tcp),2pt.(udp) |
2019-11-17 20:11:58 |
| 219.239.105.55 | attackbots | Nov 16 20:16:31 web9 sshd\[20587\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.239.105.55 user=mysql Nov 16 20:16:33 web9 sshd\[20587\]: Failed password for mysql from 219.239.105.55 port 40482 ssh2 Nov 16 20:22:21 web9 sshd\[21501\]: Invalid user pat from 219.239.105.55 Nov 16 20:22:21 web9 sshd\[21501\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.239.105.55 Nov 16 20:22:23 web9 sshd\[21501\]: Failed password for invalid user pat from 219.239.105.55 port 57277 ssh2 |
2019-11-17 20:07:48 |
| 73.59.165.164 | attackspam | Nov 17 02:02:24 sachi sshd\[910\]: Invalid user goetzel from 73.59.165.164 Nov 17 02:02:24 sachi sshd\[910\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-73-59-165-164.hsd1.tn.comcast.net Nov 17 02:02:26 sachi sshd\[910\]: Failed password for invalid user goetzel from 73.59.165.164 port 54712 ssh2 Nov 17 02:07:39 sachi sshd\[1570\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-73-59-165-164.hsd1.tn.comcast.net user=root Nov 17 02:07:41 sachi sshd\[1570\]: Failed password for root from 73.59.165.164 port 50254 ssh2 |
2019-11-17 20:11:29 |
| 222.186.173.238 | attack | Nov 17 12:52:53 ovpn sshd\[4169\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.238 user=root Nov 17 12:52:55 ovpn sshd\[4169\]: Failed password for root from 222.186.173.238 port 52580 ssh2 Nov 17 12:52:58 ovpn sshd\[4169\]: Failed password for root from 222.186.173.238 port 52580 ssh2 Nov 17 12:53:01 ovpn sshd\[4169\]: Failed password for root from 222.186.173.238 port 52580 ssh2 Nov 17 12:53:04 ovpn sshd\[4169\]: Failed password for root from 222.186.173.238 port 52580 ssh2 |
2019-11-17 19:58:17 |
| 5.8.10.202 | attack | 2019-11-17 08:05:45 SMTP protocol synchronization error (input sent without waiting for greeting): rejected connection from H=[5.8.10.202] input="\026\003\001" 2019-11-17 08:05:46 SMTP protocol synchronization error (input sent without waiting for greeting): rejected connection from H=[5.8.10.202] input="GET / HTTP/1.1 User-Agent: fast" ... |
2019-11-17 19:39:04 |
| 51.68.198.113 | attackspam | SSH bruteforce (Triggered fail2ban) |
2019-11-17 19:37:39 |
| 52.56.183.140 | attackspam | 52.56.183.140 - - \[17/Nov/2019:10:37:29 +0000\] "POST /wp-login.php HTTP/1.1" 200 4358 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 52.56.183.140 - - \[17/Nov/2019:10:37:30 +0000\] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" ... |
2019-11-17 19:36:10 |
| 86.61.66.59 | attack | SSH Bruteforce |
2019-11-17 19:48:16 |
| 90.84.241.185 | attackbots | SSH Bruteforce |
2019-11-17 19:41:56 |
| 82.64.15.106 | attack | Nov 17 12:24:59 icinga sshd[5819]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.64.15.106 Nov 17 12:25:00 icinga sshd[5821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.64.15.106 Nov 17 12:25:02 icinga sshd[5819]: Failed password for invalid user pi from 82.64.15.106 port 43016 ssh2 ... |
2019-11-17 19:55:45 |
| 49.233.191.204 | attackspam | Port scan detected on ports: 65530[TCP], 65530[TCP], 65530[TCP] |
2019-11-17 20:12:39 |
| 85.209.0.2 | attackspam | SSH Bruteforce |
2019-11-17 19:49:39 |
| 85.244.80.184 | attackbots | SSH Bruteforce |
2019-11-17 19:48:56 |