City: London
Region: England
Country: United Kingdom
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '81.19.219.192 - 81.19.219.255'
% Abuse contact for '81.19.219.192 - 81.19.219.255' is 'abuse@infrawat.ch'
inetnum: 81.19.219.192 - 81.19.219.255
netname: INFRAWATCH
remarks: -----------------------------------------------------
remarks: Real time internet intelligence data
remarks: infrawat.ch
remarks: -----------------------------------------------------
country: GB
geoloc: 51.494840911758295 -0.018682268947961784
org: ORG-IL948-RIPE
admin-c: LD7399-RIPE
tech-c: LD7399-RIPE
status: ASSIGNED PA
created: 2026-04-26T03:15:02Z
last-modified: 2026-04-26T03:15:02Z
source: RIPE
mnt-by: HYDRA-MNT
organisation: ORG-IL948-RIPE
org-name: Infrawatch Limited
org-type: OTHER
address: 128 City Road
address: London
address: EC1V 2NX
country: GB
abuse-c: ACRO64026-RIPE
mnt-ref: HYDRA-MNT
created: 2026-03-26T04:32:13Z
last-modified: 2026-04-27T01:46:41Z
source: RIPE # Filtered
mnt-by: HYDRA-MNT
person: Lloyd Davies
address: 128 City Road
address: London
address: EC1V 2NX
address: United Kingdom
phone: +448000803330
nic-hdl: LD7399-RIPE
created: 2026-03-26T04:34:31Z
last-modified: 2026-04-27T01:47:59Z
source: RIPE # Filtered
mnt-by: HYDRA-MNT
% Information related to '81.19.208.0/20AS25369'
route: 81.19.208.0/20
descr: Bandwidth Technologies Ltd
origin: AS25369
mnt-by: MNT-KILLER
created: 2006-02-23T13:22:52Z
last-modified: 2012-05-01T09:53:35Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.122.1 (DEXTER); <<>> DiG 9.10.3-P4-Ubuntu <<>> 81.19.219.217
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61871
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;81.19.219.217. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026070703 1800 900 604800 86400
;; Query time: 30 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jul 08 14:30:26 CST 2026
;; MSG SIZE rcvd: 106217.219.19.81.in-addr.arpa domain name pointer 81-19-219-217.infrawat.ch.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
217.219.19.81.in-addr.arpa name = 81-19-219-217.infrawat.ch.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 112.85.42.187 | attackbotsspam | Apr 13 11:36:41 vmd38886 sshd\[7199\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.187 user=root Apr 13 11:36:43 vmd38886 sshd\[7199\]: Failed password for root from 112.85.42.187 port 63829 ssh2 Apr 13 11:36:46 vmd38886 sshd\[7199\]: Failed password for root from 112.85.42.187 port 63829 ssh2 |
2020-04-13 17:46:59 |
| 222.173.203.221 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2020-04-13 17:36:55 |
| 121.132.52.31 | attack | Telnet/23 MH Probe, Scan, BF, Hack - |
2020-04-13 17:31:55 |
| 158.174.29.58 | attack | Telnet/23 MH Probe, Scan, BF, Hack - |
2020-04-13 17:48:11 |
| 222.186.180.223 | attack | Apr1310:56:51server6sshd[16497]:refusedconnectfrom222.186.180.223\(222.186.180.223\)Apr1310:56:52server6sshd[16499]:refusedconnectfrom222.186.180.223\(222.186.180.223\)Apr1310:56:52server6sshd[16500]:refusedconnectfrom222.186.180.223\(222.186.180.223\)Apr1310:56:57server6sshd[16511]:refusedconnectfrom222.186.180.223\(222.186.180.223\)Apr1311:24:55server6sshd[20812]:refusedconnectfrom222.186.180.223\(222.186.180.223\) |
2020-04-13 17:27:46 |
| 198.154.112.83 | attackbots | [MonApr1310:45:34.0695712020][:error][pid29015:tid47428147746560][client198.154.112.83:44112][client198.154.112.83]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\(wp-\)\?config\\\\\\\\.\(php\)\?\\\\\\\\.\(\?:bac\?k\|o\(\?:ld\|rig\)\|copy\|tmp\|s\(\?:ave\|wp\)\|vim\?\\\\\\\\.\|~\)"atREQUEST_FILENAME.[file"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf"][line"1254"][id"390597"][rev"2"][msg"Atomicorp.comWAFRules:AttackBlocked-DataLeakage-attempttoaccessbackupsystem/applicationconfigfile\(disablethisruleonlyifyouwanttoallowanyoneaccesstothesebackupfiles\)"][severity"CRITICAL"][hostname"ponzellini.ch"][uri"/.wp-config.php.swp"][unique_id"XpQmrs3bZXiJ1dsfYdtuSgAAAMQ"][MonApr1310:45:35.0552772020][:error][pid28880:tid47428175062784][client198.154.112.83:44542][client198.154.112.83]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\\\\\\\\.php"atARGS:img.[file"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf"][line"803"][id"337479"][rev"2"][msg"Atomicorp.comWA |
2020-04-13 17:25:08 |
| 67.205.142.246 | attackbotsspam | 2020-04-13T09:04:21.536134abusebot-7.cloudsearch.cf sshd[28722]: Invalid user gopher from 67.205.142.246 port 47992 2020-04-13T09:04:21.541503abusebot-7.cloudsearch.cf sshd[28722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.205.142.246 2020-04-13T09:04:21.536134abusebot-7.cloudsearch.cf sshd[28722]: Invalid user gopher from 67.205.142.246 port 47992 2020-04-13T09:04:23.137222abusebot-7.cloudsearch.cf sshd[28722]: Failed password for invalid user gopher from 67.205.142.246 port 47992 ssh2 2020-04-13T09:08:39.097010abusebot-7.cloudsearch.cf sshd[28938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.205.142.246 user=root 2020-04-13T09:08:40.442308abusebot-7.cloudsearch.cf sshd[28938]: Failed password for root from 67.205.142.246 port 57430 ssh2 2020-04-13T09:12:44.491110abusebot-7.cloudsearch.cf sshd[29141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=6 ... |
2020-04-13 17:32:47 |
| 111.230.73.133 | attack | Apr 13 08:38:04 localhost sshd\[17179\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.73.133 user=man Apr 13 08:38:06 localhost sshd\[17179\]: Failed password for man from 111.230.73.133 port 53058 ssh2 Apr 13 08:45:39 localhost sshd\[17300\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.73.133 user=root ... |
2020-04-13 17:19:42 |
| 1.52.124.218 | attackbots | Unauthorized connection attempt from IP address 1.52.124.218 on Port 445(SMB) |
2020-04-13 17:15:25 |
| 110.77.132.196 | attackbotsspam | Unauthorized connection attempt from IP address 110.77.132.196 on Port 445(SMB) |
2020-04-13 17:26:44 |
| 49.235.87.213 | attackspambots | Apr 13 11:38:53 host01 sshd[3706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.87.213 Apr 13 11:38:55 host01 sshd[3706]: Failed password for invalid user desadm from 49.235.87.213 port 36228 ssh2 Apr 13 11:43:20 host01 sshd[5162]: Failed password for root from 49.235.87.213 port 56618 ssh2 ... |
2020-04-13 17:53:17 |
| 27.67.135.23 | attack | 1586767528 - 04/13/2020 10:45:28 Host: 27.67.135.23/27.67.135.23 Port: 445 TCP Blocked |
2020-04-13 17:40:03 |
| 113.125.58.0 | attackspambots | 2020-04-13T03:47:01.578541linuxbox-skyline sshd[87162]: Invalid user juggle from 113.125.58.0 port 41838 ... |
2020-04-13 17:56:39 |
| 94.29.126.116 | attackspam | Unauthorized connection attempt from IP address 94.29.126.116 on Port 445(SMB) |
2020-04-13 17:20:48 |
| 110.181.210.172 | attack | [portscan] Port scan |
2020-04-13 17:32:23 |