City: Barcelona
Region: Catalunya
Country: Spain
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '92.56.0.0 - 92.56.255.255'
% Abuse contact for '92.56.0.0 - 92.56.255.255' is 'abuse.es@masorange.es'
inetnum: 92.56.0.0 - 92.56.255.255
netname: YACOMNET
descr: Ya.com Internet Factory
country: ES
admin-c: YADM-RIPE
tech-c: YNOC1-RIPE
remarks: For complaints of abuse from these addresses
remarks: send a mail to abuse@orange.es
status: ASSIGNED PA
mnt-by: YACOM-NET-MNT
mnt-lower: YACOM-NET-MNT
mnt-routes: YACOM-NET-MNT
created: 2008-04-11T12:30:15Z
last-modified: 2009-03-09T16:40:15Z
source: RIPE
role: RIPE ADMIN
address: Paseo del Club Deporivo , 1 , Edif 8, La Finca
address: 28223 Pozuelo de Alarcon - Madrid
address: SPAIN
abuse-mailbox: abuse.es@orange.com
admin-c: HLF7-RIPE
tech-c: ALG7-RIPE
nic-hdl: YADM-RIPE
created: 2007-10-29T15:26:39Z
last-modified: 2024-01-22T13:57:09Z
source: RIPE # Filtered
mnt-by: YACOM-NET-MNT
mnt-by: UNI2-MNT
role: YA.COM - NOC
address: Paseo de clun deportivo 1, Edif 8
address: 28223 Pozuelo de Alarcon- Madrid
address: SPAIN
abuse-mailbox: abuse.es@orange.com
admin-c: HAF10-RIPE
tech-c: HAF10-RIPE
tech-c: HAF10-RIPE
nic-hdl: YNOC1-RIPE
created: 2007-10-29T15:38:13Z
last-modified: 2024-01-22T13:58:18Z
source: RIPE # Filtered
mnt-by: YACOM-NET-MNT
mnt-by: UNI2-MNT
% Information related to '92.56.0.0/20AS20838'
route: 92.56.0.0/20
descr: YIF Autonomous System Network
descr: Ya.com Internet Factory
origin: AS20838
remarks: For complaints of abuse from these addresses
remarks: send a mail to abuse@orange.es
mnt-by: YACOM-NET-MNT
created: 2008-04-14T15:11:08Z
last-modified: 2009-03-09T16:41:47Z
source: RIPE # Filtered
% This query was served by the RIPE Database Query Service version 1.123 (ABERDEEN); <<>> DiG 9.10.3-P4-Ubuntu <<>> 92.56.3.252
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42096
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;92.56.3.252. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026081501 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Aug 16 02:00:10 CST 2026
;; MSG SIZE rcvd: 104252.3.56.92.in-addr.arpa domain name pointer 252.pool92-56-3.dynamic.orange.es.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
252.3.56.92.in-addr.arpa name = 252.pool92-56-3.dynamic.orange.es.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 95.180.141.31 | attackbots | Automated report - ssh fail2ban: Aug 7 11:44:49 wrong password, user=merlin, port=34148, ssh2 Aug 7 12:17:00 authentication failure Aug 7 12:17:02 wrong password, user=webb666, port=55738, ssh2 |
2019-08-08 01:16:18 |
| 89.248.162.168 | attackspambots | 08/07/2019-13:47:23.257440 89.248.162.168 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-08-08 01:55:20 |
| 216.218.191.102 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2019-08-08 01:06:51 |
| 92.63.194.90 | attackspambots | Aug 7 19:20:56 srv-4 sshd\[3619\]: Invalid user admin from 92.63.194.90 Aug 7 19:20:56 srv-4 sshd\[3619\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.90 Aug 7 19:20:56 srv-4 sshd\[3618\]: Invalid user admin from 92.63.194.90 Aug 7 19:20:56 srv-4 sshd\[3618\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.90 ... |
2019-08-08 01:12:03 |
| 91.214.211.187 | attack | Automatic report - Port Scan Attack |
2019-08-08 01:54:54 |
| 199.229.249.158 | attackbots | B: Magento admin pass test (wrong country) |
2019-08-08 01:03:06 |
| 107.170.237.126 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2019-08-08 00:56:59 |
| 162.247.74.216 | attackspam | Aug 5 17:13:20 tuxlinux sshd[8833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.247.74.216 user=root Aug 5 17:13:22 tuxlinux sshd[8833]: Failed password for root from 162.247.74.216 port 50724 ssh2 Aug 5 17:13:20 tuxlinux sshd[8833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.247.74.216 user=root Aug 5 17:13:22 tuxlinux sshd[8833]: Failed password for root from 162.247.74.216 port 50724 ssh2 Aug 5 17:13:20 tuxlinux sshd[8833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.247.74.216 user=root Aug 5 17:13:22 tuxlinux sshd[8833]: Failed password for root from 162.247.74.216 port 50724 ssh2 Aug 5 17:13:24 tuxlinux sshd[8833]: Failed password for root from 162.247.74.216 port 50724 ssh2 ... |
2019-08-08 01:13:31 |
| 105.73.80.91 | attackbots | SSH Brute-Force attacks |
2019-08-08 01:11:28 |
| 49.234.13.249 | attackspam | 2019-08-07T15:12:51.996215centos sshd\[12900\]: Invalid user squid from 49.234.13.249 port 35412 2019-08-07T15:12:52.002475centos sshd\[12900\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.13.249 2019-08-07T15:12:54.151571centos sshd\[12900\]: Failed password for invalid user squid from 49.234.13.249 port 35412 ssh2 |
2019-08-08 01:36:41 |
| 177.66.52.209 | attackspam | Aug 7 16:09:32 our-server-hostname postfix/smtpd[10390]: connect from unknown[177.66.52.209] Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=177.66.52.209 |
2019-08-08 01:42:15 |
| 117.4.113.160 | attackbots | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-07 05:12:35,404 INFO [amun_request_handler] PortScan Detected on Port: 445 (117.4.113.160) |
2019-08-08 00:58:14 |
| 156.199.35.98 | attackspam | Aug 7 06:48:02 DDOS Attack: SRC=156.199.35.98 DST=[Masked] LEN=40 TOS=0x00 PREC=0x00 TTL=52 DF PROTO=TCP SPT=34119 DPT=80 WINDOW=0 RES=0x00 RST URGP=0 |
2019-08-08 01:46:02 |
| 5.39.95.228 | attackbotsspam | 5.39.95.228 - - [07/Aug/2019:19:47:05 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 5.39.95.228 - - [07/Aug/2019:19:47:05 +0200] "POST /wp-login.php HTTP/1.1" 200 1503 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 5.39.95.228 - - [07/Aug/2019:19:47:05 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 5.39.95.228 - - [07/Aug/2019:19:47:05 +0200] "POST /wp-login.php HTTP/1.1" 200 1489 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 5.39.95.228 - - [07/Aug/2019:19:47:05 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 5.39.95.228 - - [07/Aug/2019:19:47:06 +0200] "POST /wp-login.php HTTP/1.1" 200 1491 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-08-08 02:01:49 |
| 198.71.225.141 | attackbotsspam | fail2ban honeypot |
2019-08-08 01:56:34 |