City: unknown
Region: unknown
Country: Romania
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '80.94.92.0 - 80.94.92.255'
% Abuse contact for '80.94.92.0 - 80.94.92.255' is 'dmzhostabuse@gmail.com'
inetnum: 80.94.92.0 - 80.94.92.255
org: ORG-TSL73-RIPE
netname: DMZHOST
descr: https://dmzhost.co
country: NL
admin-c: AD18161-RIPE
tech-c: AD18161-RIPE
mnt-routes: TECHOFF-MNT
mnt-lower: TECHOFF-MNT
mnt-domains: TECHOFF-MNT
status: ASSIGNED PA
mnt-by: ro-btel2-1-mnt
mnt-by: TECHOFF-MNT
created: 2020-07-15T22:20:31Z
last-modified: 2024-11-21T09:38:42Z
source: RIPE
organisation: ORG-TSL73-RIPE
org-name: TECHOFF SRV LIMITED
country: GB
reg-nr: 16090235
org-type: OTHER
address: 35 Firs Avenue, London N11 3NE
abuse-c: AD18161-RIPE
mnt-ref: TECHOFF-MNT
mnt-ref: MNT-NETERRA
mnt-by: TECHOFF-MNT
created: 2024-11-20T13:01:40Z
last-modified: 2026-05-13T05:55:49Z
source: RIPE # Filtered
role: ABUSE DEP
address: 35 Firs Avenue, London N11 3NE
abuse-mailbox: dmzhostabuse@gmail.com
nic-hdl: AD18161-RIPE
mnt-by: TECHOFF-MNT
created: 2024-11-20T13:00:28Z
last-modified: 2024-11-21T09:45:52Z
source: RIPE # Filtered
% Information related to '80.94.92.0/24AS35478'
route: 80.94.92.0/24
origin: AS35478
mnt-by: ro-btel2-1-mnt
created: 2020-07-31T19:36:59Z
last-modified: 2020-07-31T19:36:59Z
source: RIPE
% Information related to '80.94.92.0/24AS47890'
route: 80.94.92.0/24
origin: AS47890
mnt-by: UNMANAGED
mnt-by: ro-btel2-1-mnt
created: 2022-08-06T20:29:26Z
last-modified: 2022-08-06T20:29:26Z
source: RIPE
% Information related to '80.94.92.0/24AS48090'
route: 80.94.92.0/24
origin: AS48090
mnt-by: UNMANAGED
mnt-by: ro-btel2-1-mnt
created: 2021-03-30T10:00:28Z
last-modified: 2021-03-30T10:00:28Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.124 (ABERDEEN)
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 80.94.92.175
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65458
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;80.94.92.175. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026083000 1800 900 604800 86400
;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Aug 31 00:01:43 CST 2026
;; MSG SIZE rcvd: 105
Host 175.92.94.80.in-addr.arpa not found: 2(SERVFAIL)
server can't find 80.94.92.175.in-addr.arpa: SERVFAIL
| IP | Type | Details | Datetime |
|---|---|---|---|
| 118.238.4.201 | attack | Automatic report - Banned IP Access |
2019-11-03 05:54:52 |
| 198.0.253.144 | attackbotsspam | Lines containing failures of 198.0.253.144 Oct 28 17:14:56 kopano sshd[8494]: Invalid user puser from 198.0.253.144 port 60558 Oct 28 17:14:56 kopano sshd[8494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.0.253.144 Oct 28 17:14:58 kopano sshd[8494]: Failed password for invalid user puser from 198.0.253.144 port 60558 ssh2 Oct 28 17:14:58 kopano sshd[8494]: Received disconnect from 198.0.253.144 port 60558:11: Bye Bye [preauth] Oct 28 17:14:58 kopano sshd[8494]: Disconnected from invalid user puser 198.0.253.144 port 60558 [preauth] Oct 28 17:15:12 kopano sshd[8500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.0.253.144 user=r.r Oct 28 17:15:13 kopano sshd[8500]: Failed password for r.r from 198.0.253.144 port 60992 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=198.0.253.144 |
2019-11-03 05:48:35 |
| 94.102.57.169 | attack | 2019-11-02T21:18:10.200335host3.slimhost.com.ua dovecot[2479259]: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user= |
2019-11-03 05:42:46 |
| 88.241.44.243 | attackbotsspam | SMB Server BruteForce Attack |
2019-11-03 05:54:16 |
| 152.136.122.130 | attackbots | Nov 2 23:32:16 server sshd\[5498\]: Invalid user pico from 152.136.122.130 port 51948 Nov 2 23:32:16 server sshd\[5498\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.122.130 Nov 2 23:32:18 server sshd\[5498\]: Failed password for invalid user pico from 152.136.122.130 port 51948 ssh2 Nov 2 23:36:04 server sshd\[7063\]: User root from 152.136.122.130 not allowed because listed in DenyUsers Nov 2 23:36:04 server sshd\[7063\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.122.130 user=root |
2019-11-03 05:44:52 |
| 222.186.169.194 | attackbots | Nov 2 22:43:56 meumeu sshd[14139]: Failed password for root from 222.186.169.194 port 15796 ssh2 Nov 2 22:44:11 meumeu sshd[14139]: error: maximum authentication attempts exceeded for root from 222.186.169.194 port 15796 ssh2 [preauth] Nov 2 22:44:17 meumeu sshd[14193]: Failed password for root from 222.186.169.194 port 29938 ssh2 ... |
2019-11-03 05:49:03 |
| 45.79.110.218 | attack | 11/02/2019-21:18:50.061101 45.79.110.218 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 44 |
2019-11-03 05:45:31 |
| 49.145.105.142 | attack | php WP PHPmyadamin ABUSE blocked for 12h |
2019-11-03 05:39:42 |
| 121.78.129.147 | attackspam | Nov 2 21:04:59 web8 sshd\[32760\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.78.129.147 user=root Nov 2 21:05:01 web8 sshd\[32760\]: Failed password for root from 121.78.129.147 port 53066 ssh2 Nov 2 21:09:13 web8 sshd\[3000\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.78.129.147 user=root Nov 2 21:09:15 web8 sshd\[3000\]: Failed password for root from 121.78.129.147 port 43426 ssh2 Nov 2 21:13:29 web8 sshd\[5139\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.78.129.147 user=root |
2019-11-03 05:20:26 |
| 5.101.156.251 | attackbotsspam | fail2ban honeypot |
2019-11-03 05:32:57 |
| 90.5.174.199 | attackspam | LGS,WP GET /wp-login.php |
2019-11-03 05:42:07 |
| 173.239.139.38 | attack | Nov 2 21:30:39 localhost sshd\[6343\]: Invalid user 2wsxcde34rfv from 173.239.139.38 Nov 2 21:30:39 localhost sshd\[6343\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.239.139.38 Nov 2 21:30:41 localhost sshd\[6343\]: Failed password for invalid user 2wsxcde34rfv from 173.239.139.38 port 49170 ssh2 Nov 2 21:34:44 localhost sshd\[6400\]: Invalid user kl6351122 from 173.239.139.38 Nov 2 21:34:44 localhost sshd\[6400\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.239.139.38 ... |
2019-11-03 05:38:27 |
| 185.80.54.34 | attackspambots | slow and persistent scanner |
2019-11-03 05:46:25 |
| 51.68.230.25 | attack | Nov 2 22:59:39 server sshd\[1749\]: User root from 51.68.230.25 not allowed because listed in DenyUsers Nov 2 22:59:39 server sshd\[1749\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.230.25 user=root Nov 2 22:59:41 server sshd\[1749\]: Failed password for invalid user root from 51.68.230.25 port 39026 ssh2 Nov 2 23:05:46 server sshd\[7792\]: User root from 51.68.230.25 not allowed because listed in DenyUsers Nov 2 23:05:46 server sshd\[7792\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.230.25 user=root |
2019-11-03 05:24:12 |
| 51.91.48.22 | attackspambots | Nov 2 22:28:14 ks10 sshd[23862]: Failed password for root from 51.91.48.22 port 56266 ssh2 Nov 2 22:28:25 ks10 sshd[23864]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.48.22 ... |
2019-11-03 05:41:42 |