City: Lviv
Region: L'viv
Country: Ukraine
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '91.245.72.0 - 91.245.79.255'
% Abuse contact for '91.245.72.0 - 91.245.79.255' is 'noc@astra.in.ua'
inetnum: 91.245.72.0 - 91.245.79.255
netname: Astra-net
country: UA
geofeed: https://raw.githubusercontent.com/iCra5h/as49824-geo-feeds/refs/heads/main/as49824.csv
org: ORG-OP11-RIPE
admin-c: OP1283-RIPE
tech-c: OP1283-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-END-MNT
mnt-by: OP-MNT
mnt-routes: OP-MNT
mnt-domains: OP-MNT
created: 2012-08-17T13:15:17Z
last-modified: 2026-02-16T08:02:19Z
source: RIPE # Filtered
sponsoring-org: ORG-LA1753-RIPE
organisation: ORG-OP11-RIPE
org-name: PC "Astra-net"
country: UA
reg-nr: 36929664
org-type: OTHER
address: Lazarenka 36
address: Lviv, 79003, Ukraine
abuse-c: AR30591-RIPE
admin-c: AR53206-RIPE
mnt-ref: OP-MNT
mnt-ref: mnt-ua-ppunimedia-1
mnt-ref: mnt-ua-astra-lviv-1
mnt-by: OP-MNT
created: 2009-09-14T11:17:48Z
last-modified: 2026-05-13T05:35:45Z
source: RIPE # Filtered
person: Oleksandr Pasichnyk
address: Lazarenka 36
address: Lviv, 79003, Ukraine
phone: +380 32 2367491
nic-hdl: OP1283-RIPE
created: 2009-09-14T11:17:48Z
last-modified: 2016-04-06T19:45:14Z
mnt-by: RIPE-NCC-LOCKED-MNT
source: RIPE # Filtered
% Information related to '91.245.72.0/21AS49824'
route: 91.245.72.0/21
origin: AS49824
mnt-by: OP-MNT
mnt-by: vissado-mnt
created: 2012-08-18T07:24:04Z
last-modified: 2024-01-26T14:35:22Z
source: RIPE # Filtered
descr: Astra-net
% This query was served by the RIPE Database Query Service version 1.124.1 (DEXTER); <<>> DiG 9.10.3-P4-Ubuntu <<>> 91.245.74.31
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59820
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;91.245.74.31. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026090402 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Sep 05 12:00:42 CST 2026
;; MSG SIZE rcvd: 105Host 31.74.245.91.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 31.74.245.91.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 52.162.35.176 | attack | Jul 18 07:34:21 localhost sshd[3507692]: Invalid user admin from 52.162.35.176 port 32150 ... |
2020-07-18 05:49:49 |
| 40.81.145.233 | attack | SSH invalid-user multiple login try |
2020-07-18 06:15:54 |
| 176.31.105.136 | attackbots | 2020-07-17T21:46:12.293225shield sshd\[20415\]: Invalid user test from 176.31.105.136 port 55214 2020-07-17T21:46:12.301853shield sshd\[20415\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns392265.ip-176-31-105.eu 2020-07-17T21:46:14.356782shield sshd\[20415\]: Failed password for invalid user test from 176.31.105.136 port 55214 ssh2 2020-07-17T21:49:54.670142shield sshd\[21561\]: Invalid user reporting from 176.31.105.136 port 41388 2020-07-17T21:49:54.678723shield sshd\[21561\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns392265.ip-176-31-105.eu |
2020-07-18 05:53:56 |
| 3.129.87.14 | attackspambots | mue-0 : Trying access unauthorized files=>/images/jdownloads/screenshots/update.php() |
2020-07-18 05:47:14 |
| 70.35.201.143 | attackbots | 2020-07-18T00:29:26.766699mail.standpoint.com.ua sshd[2301]: Invalid user operations from 70.35.201.143 port 36876 2020-07-18T00:29:26.769940mail.standpoint.com.ua sshd[2301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=70.35.201.143 2020-07-18T00:29:26.766699mail.standpoint.com.ua sshd[2301]: Invalid user operations from 70.35.201.143 port 36876 2020-07-18T00:29:29.025671mail.standpoint.com.ua sshd[2301]: Failed password for invalid user operations from 70.35.201.143 port 36876 ssh2 2020-07-18T00:33:25.251803mail.standpoint.com.ua sshd[2864]: Invalid user admin from 70.35.201.143 port 51622 ... |
2020-07-18 05:59:12 |
| 51.143.183.35 | attackspambots | 2020-07-17 16:50:21.383949-0500 localhost sshd[41593]: Failed password for invalid user admin from 51.143.183.35 port 5797 ssh2 |
2020-07-18 06:11:30 |
| 52.163.240.162 | attack | SSH bruteforce |
2020-07-18 06:13:12 |
| 52.185.159.59 | attackspam | Jul 17 23:51:25 jane sshd[24198]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.185.159.59 Jul 17 23:51:27 jane sshd[24198]: Failed password for invalid user admin from 52.185.159.59 port 26964 ssh2 ... |
2020-07-18 06:01:12 |
| 148.223.120.122 | attack | 2020-07-17T22:01:41.428218shield sshd\[24241\]: Invalid user sergey from 148.223.120.122 port 33839 2020-07-17T22:01:41.439559shield sshd\[24241\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.223.120.122 2020-07-17T22:01:44.006116shield sshd\[24241\]: Failed password for invalid user sergey from 148.223.120.122 port 33839 ssh2 2020-07-17T22:05:48.011627shield sshd\[24752\]: Invalid user administrator from 148.223.120.122 port 36490 2020-07-17T22:05:48.024851shield sshd\[24752\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.223.120.122 |
2020-07-18 06:09:15 |
| 185.143.72.16 | attackbots | 2020-07-17 23:56:26 dovecot_login authenticator failed for \(User\) \[185.143.72.16\]: 535 Incorrect authentication data \(set_id=tactics@hosting1.no-server.de\) 2020-07-17 23:57:32 dovecot_login authenticator failed for \(User\) \[185.143.72.16\]: 535 Incorrect authentication data \(set_id=button@hosting1.no-server.de\) 2020-07-17 23:57:42 dovecot_login authenticator failed for \(User\) \[185.143.72.16\]: 535 Incorrect authentication data \(set_id=button@hosting1.no-server.de\) 2020-07-17 23:57:49 dovecot_login authenticator failed for \(User\) \[185.143.72.16\]: 535 Incorrect authentication data \(set_id=button@hosting1.no-server.de\) 2020-07-17 23:58:04 dovecot_login authenticator failed for \(User\) \[185.143.72.16\]: 535 Incorrect authentication data \(set_id=button@hosting1.no-server.de\) ... |
2020-07-18 06:05:40 |
| 185.39.9.30 | attack | firewall-block, port(s): 12037/tcp, 12064/tcp, 12109/tcp, 12119/tcp, 12142/tcp, 12151/tcp, 12242/tcp, 12266/tcp, 12342/tcp, 12379/tcp, 12415/tcp, 12488/tcp, 12534/tcp, 12535/tcp, 12606/tcp, 12618/tcp, 12641/tcp, 12660/tcp, 12688/tcp, 12718/tcp |
2020-07-18 06:08:17 |
| 13.65.243.121 | attack | Jul 17 23:17:22 ns382633 sshd\[13179\]: Invalid user admin from 13.65.243.121 port 10571 Jul 17 23:17:22 ns382633 sshd\[13179\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.65.243.121 Jul 17 23:17:24 ns382633 sshd\[13179\]: Failed password for invalid user admin from 13.65.243.121 port 10571 ssh2 Jul 17 23:34:44 ns382633 sshd\[16881\]: Invalid user admin from 13.65.243.121 port 13596 Jul 17 23:34:44 ns382633 sshd\[16881\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.65.243.121 |
2020-07-18 05:45:42 |
| 158.69.110.31 | attackspambots | Invalid user sp from 158.69.110.31 port 36304 |
2020-07-18 06:03:28 |
| 101.251.197.238 | attackbotsspam | Jul 17 21:36:13 localhost sshd[70468]: Invalid user es_user from 101.251.197.238 port 36908 Jul 17 21:36:13 localhost sshd[70468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.251.197.238 Jul 17 21:36:13 localhost sshd[70468]: Invalid user es_user from 101.251.197.238 port 36908 Jul 17 21:36:15 localhost sshd[70468]: Failed password for invalid user es_user from 101.251.197.238 port 36908 ssh2 Jul 17 21:39:26 localhost sshd[70860]: Invalid user cy from 101.251.197.238 port 60625 ... |
2020-07-18 05:46:42 |
| 178.128.83.1 | attackspam | 178.128.83.1 - - [17/Jul/2020:23:34:33 +0200] "GET /wp-login.php HTTP/1.1" 200 6060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 178.128.83.1 - - [17/Jul/2020:23:34:34 +0200] "POST /wp-login.php HTTP/1.1" 200 6311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 178.128.83.1 - - [17/Jul/2020:23:34:36 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-07-18 05:58:33 |