City: Wallisellen
Region: Zurich
Country: Switzerland
Internet Service Provider: Swisscom
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '188.63.0.0 - 188.63.63.255'
% Abuse contact for '188.63.0.0 - 188.63.63.255' is 'abuse@bluewin.ch'
inetnum: 188.63.0.0 - 188.63.63.255
netname: BLUEWINNET
descr: Swisscom (Schweiz) AG is an LIR and ISP in Switzerland.
descr: This range is used for dynamic customer pools.
country: CH
admin-c: BCR1-RIPE
tech-c: BCR1-RIPE
status: ASSIGNED PA
remarks: ************************************************
remarks: In case of hack attacks, spam, scans etc. please
remarks: send abuse notifications to abuse@bluewin.ch
remarks: E-Mails to the persons below will be IGNORED!
remarks: ************************************************
mnt-by: BLUEWINNET-MNT
mnt-lower: BLUEWINNET-MNT
created: 2013-01-08T12:38:29Z
last-modified: 2016-04-11T07:57:34Z
source: RIPE # Filtered
role: Bluewin Contact Role
address: Swisscom (Switzerland) Ltd.
address: Internet Service Core Networks
address: INI-MBM-BNC
address: Binzring 17
address: CH-8045 Zurich
address: Switzerland
abuse-mailbox: abuse@bluewin.ch
remarks: ***************************************************
remarks: Swisscom (Schweiz) AG / Bluewin is an
remarks: internet service provider and LIR in CH.
remarks: In case of hack attacks, spam, scans etc. please
remarks: send abuse mail notifications to the abuse-mailbox:
remarks:
remarks: abuse@bluewin.ch
remarks:
remarks: E-Mails to the persons below will be IGNORED!
remarks: ***************************************************
org: ORG-BA8-RIPE
admin-c: CE2871-RIPE
admin-c: EG7936-RIPE
admin-c: TG267-RIPE
admin-c: GDM658-RIPE
admin-c: SF3464-RIPE
tech-c: EG7936-RIPE
tech-c: TG267-RIPE
tech-c: GDM658-RIPE
tech-c: SF3464-RIPE
tech-c: CE2871-RIPE
nic-hdl: BCR1-RIPE
mnt-by: BLUEWINNET-MNT
created: 2003-04-08T08:53:32Z
last-modified: 2022-12-05T12:35:44Z
source: RIPE # Filtered
% Information related to '188.63.0.0/16AS3303'
route: 188.63.0.0/16
descr: Swisscom (Schweiz) AG - Bluewin
origin: AS3303
mnt-by: CH-UNISOURCE-MNT
created: 2016-01-26T08:15:40Z
last-modified: 2016-01-26T08:15:40Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.121 (BUSA); <<>> DiG 9.10.3-P4-Ubuntu <<>> 188.63.26.252
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 713
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;188.63.26.252. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026031002 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 11 09:31:04 CST 2026
;; MSG SIZE rcvd: 106252.26.63.188.in-addr.arpa domain name pointer 252.26.63.188.dynamic.cust.swisscom.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
252.26.63.188.in-addr.arpa name = 252.26.63.188.dynamic.cust.swisscom.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 89.100.21.40 | attack | Jul 22 16:03:03 OPSO sshd\[11524\]: Invalid user music from 89.100.21.40 port 40552 Jul 22 16:03:03 OPSO sshd\[11524\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.100.21.40 Jul 22 16:03:05 OPSO sshd\[11524\]: Failed password for invalid user music from 89.100.21.40 port 40552 ssh2 Jul 22 16:08:01 OPSO sshd\[12325\]: Invalid user louis from 89.100.21.40 port 36746 Jul 22 16:08:01 OPSO sshd\[12325\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.100.21.40 |
2019-07-23 07:03:05 |
| 201.210.167.172 | attackbotsspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-20 15:46:27,503 INFO [shellcode_manager] (201.210.167.172) no match, writing hexdump (7bb10315acc5ef26da31ebde007ac662 :2394935) - MS17010 (EternalBlue) |
2019-07-23 06:44:01 |
| 110.22.55.135 | attackbots | 19/7/22@09:09:33: FAIL: IoT-Telnet address from=110.22.55.135 ... |
2019-07-23 06:50:01 |
| 81.30.126.103 | attackspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-20 15:38:38,963 INFO [shellcode_manager] (81.30.126.103) no match, writing hexdump (1c30d73d7373b9bc6e88620bf7bf14e0 :2287282) - MS17010 (EternalBlue) |
2019-07-23 07:09:58 |
| 128.199.133.201 | attackspam | 2019-07-22T13:03:45.914078hub.schaetter.us sshd\[21271\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.133.201 user=root 2019-07-22T13:03:48.192739hub.schaetter.us sshd\[21271\]: Failed password for root from 128.199.133.201 port 42312 ssh2 2019-07-22T13:08:51.051454hub.schaetter.us sshd\[21277\]: Invalid user coder from 128.199.133.201 2019-07-22T13:08:51.092018hub.schaetter.us sshd\[21277\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.133.201 2019-07-22T13:08:53.380582hub.schaetter.us sshd\[21277\]: Failed password for invalid user coder from 128.199.133.201 port 39228 ssh2 ... |
2019-07-23 07:09:27 |
| 154.126.235.38 | attack | Honeypot attack, port: 23, PTR: PTR record not found |
2019-07-23 06:28:34 |
| 181.210.229.229 | attackspambots | [21/Jul/2019:06:35:34 -0400] "GET / HTTP/1.1" Chrome 52.0 UA |
2019-07-23 06:42:41 |
| 200.33.88.81 | attack | $f2bV_matches |
2019-07-23 06:27:38 |
| 46.101.119.94 | attackspam | Jul 22 22:42:31 sshgateway sshd\[24829\]: Invalid user postgres from 46.101.119.94 Jul 22 22:42:31 sshgateway sshd\[24829\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.119.94 Jul 22 22:42:33 sshgateway sshd\[24829\]: Failed password for invalid user postgres from 46.101.119.94 port 60764 ssh2 |
2019-07-23 07:13:02 |
| 200.85.42.42 | attack | Jul 22 18:53:33 TORMINT sshd\[28956\]: Invalid user admin from 200.85.42.42 Jul 22 18:53:33 TORMINT sshd\[28956\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.85.42.42 Jul 22 18:53:35 TORMINT sshd\[28956\]: Failed password for invalid user admin from 200.85.42.42 port 33080 ssh2 ... |
2019-07-23 07:02:45 |
| 170.82.22.38 | attackbots | Automatic report - Port Scan Attack |
2019-07-23 07:08:55 |
| 157.119.227.103 | attackspambots | [21/Jul/2019:02:36:40 -0400] "GET / HTTP/1.1" Chrome 52.0 UA |
2019-07-23 06:59:15 |
| 51.38.40.12 | attackbots | Jul 22 18:55:08 andromeda postfix/smtpd\[23773\]: warning: ns3117215.ip-51-38-40.eu\[51.38.40.12\]: SASL LOGIN authentication failed: authentication failure Jul 22 18:55:09 andromeda postfix/smtpd\[23773\]: warning: ns3117215.ip-51-38-40.eu\[51.38.40.12\]: SASL LOGIN authentication failed: authentication failure Jul 22 18:55:09 andromeda postfix/smtpd\[23773\]: warning: ns3117215.ip-51-38-40.eu\[51.38.40.12\]: SASL LOGIN authentication failed: authentication failure Jul 22 18:55:09 andromeda postfix/smtpd\[23773\]: warning: ns3117215.ip-51-38-40.eu\[51.38.40.12\]: SASL LOGIN authentication failed: authentication failure Jul 22 18:55:09 andromeda postfix/smtpd\[23773\]: warning: ns3117215.ip-51-38-40.eu\[51.38.40.12\]: SASL LOGIN authentication failed: authentication failure |
2019-07-23 07:13:58 |
| 45.64.11.3 | attack | Jul 23 01:05:45 SilenceServices sshd[5747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.64.11.3 Jul 23 01:05:48 SilenceServices sshd[5747]: Failed password for invalid user wwwroot from 45.64.11.3 port 37402 ssh2 Jul 23 01:11:19 SilenceServices sshd[10044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.64.11.3 |
2019-07-23 07:17:30 |
| 94.176.76.188 | attack | Unauthorised access (Jul 22) SRC=94.176.76.188 LEN=40 TTL=244 ID=5222 DF TCP DPT=23 WINDOW=14600 SYN Unauthorised access (Jul 22) SRC=94.176.76.188 LEN=40 TTL=244 ID=48506 DF TCP DPT=23 WINDOW=14600 SYN Unauthorised access (Jul 22) SRC=94.176.76.188 LEN=40 TTL=244 ID=27152 DF TCP DPT=23 WINDOW=14600 SYN Unauthorised access (Jul 22) SRC=94.176.76.188 LEN=40 TTL=244 ID=19046 DF TCP DPT=23 WINDOW=14600 SYN Unauthorised access (Jul 22) SRC=94.176.76.188 LEN=40 TTL=244 ID=41225 DF TCP DPT=23 WINDOW=14600 SYN Unauthorised access (Jul 22) SRC=94.176.76.188 LEN=40 TTL=244 ID=48048 DF TCP DPT=23 WINDOW=14600 SYN Unauthorised access (Jul 22) SRC=94.176.76.188 LEN=40 TTL=244 ID=20024 DF TCP DPT=23 WINDOW=14600 SYN |
2019-07-23 06:47:01 |