City: unknown
Region: unknown
Country: Bulgaria
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '93.152.209.0 - 93.152.209.255'
% Abuse contact for '93.152.209.0 - 93.152.209.255' is 'abuse@dedik.io'
inetnum: 93.152.209.0 - 93.152.209.255
netname: IPv4
org: ORG-DSL56-RIPE
country: CN
admin-c: STE648-RIPE
tech-c: STE648-RIPE
status: ASSIGNED PA
mnt-by: mnt-bg-eurocrypt-1
mnt-by: sinoworldwide-mnt
created: 2025-07-17T10:49:11Z
last-modified: 2026-08-21T11:36:41Z
source: RIPE
organisation: ORG-DSL56-RIPE
org-name: DEDIK SERVICES LIMITED
address: 60 ST. MARTIN& # 039;S LANE
address: WC2N 4JS LONDON, UNITED KINGDOM OF GREAT BRITAIN AND NORTHERN IRELAND*
country: GB
reg-nr: 16506604
org-type: OTHER
admin-c: HE2788-RIPE
tech-c: HE2788-RIPE
abuse-c: AR78383-RIPE
mnt-ref: VIA-REGISTRY-MNT
mnt-ref: netutils-mnt
mnt-ref: mnt-bg-eurocrypt-1
mnt-ref: bg-sofcompany-1-mnt
mnt-ref: lir-bg-telco-1-MNT
mnt-ref: DEDIKIO-MNT
mnt-ref: MNT-ZEXOTEK
mnt-ref: mnt-bg-myacct-1
mnt-ref: GCN-LIR-MNT
mnt-ref: RTMNETWORKS-MNT
mnt-ref: MLNL-MNT
mnt-by: VIA-REGISTRY-MNT
mnt-by: DEDIKIO-MNT
created: 2025-06-11T23:18:45Z
last-modified: 2026-05-28T18:26:19Z
source: RIPE # Filtered
person: Support Team EvroNet
address: Sofia,Bulgaria
phone: +359 700 300 69
nic-hdl: STE648-RIPE
mnt-by: MNT-TelecomAset
created: 2016-03-07T14:12:07Z
last-modified: 2017-10-30T23:09:48Z
source: RIPE # Filtered
% Information related to '93.152.209.0/24AS208185'
route: 93.152.209.0/24
origin: AS208185
created: 2026-08-17T12:54:30Z
last-modified: 2026-08-17T12:54:30Z
source: RIPE
mnt-by: mnt-bg-eurocrypt-1
% Information related to '93.152.209.0/24AS25211'
route: 93.152.209.0/24
origin: AS25211
mnt-by: mnt-bg-eurocrypt-1
created: 2023-11-01T13:45:15Z
last-modified: 2023-11-01T13:45:15Z
source: RIPE
% Information related to '93.152.209.0/24AS58215'
route: 93.152.209.0/24
origin: AS58215
created: 2026-08-21T11:34:59Z
last-modified: 2026-08-21T11:34:59Z
source: RIPE
mnt-by: mnt-bg-eurocrypt-1
% This query was served by the RIPE Database Query Service version 1.124.1 (DEXTER); <<>> DiG 9.10.3-P4-Ubuntu <<>> 93.152.209.6
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32263
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;93.152.209.6. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026093000 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 30 20:30:31 CST 2026
;; MSG SIZE rcvd: 105Host 6.209.152.93.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 6.209.152.93.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 181.48.139.118 | attackspam | Invalid user slavica from 181.48.139.118 port 40628 |
2019-12-14 18:27:09 |
| 140.255.5.36 | attackspam | 2019-12-14 00:25:23 dovecot_login authenticator failed for (txbtbrafuw.com) [140.255.5.36]:53205 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=ler@lerctr.org) 2019-12-14 00:25:33 dovecot_login authenticator failed for (txbtbrafuw.com) [140.255.5.36]:54475 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=ler@lerctr.org) 2019-12-14 00:25:45 dovecot_login authenticator failed for (txbtbrafuw.com) [140.255.5.36]:55250 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=ler@lerctr.org) ... |
2019-12-14 18:38:16 |
| 104.219.232.118 | attackbots | Bruteforce on ftp |
2019-12-14 18:15:25 |
| 94.191.40.166 | attackspam | SSH Login Bruteforce |
2019-12-14 18:32:14 |
| 46.101.48.191 | attackspam | Invalid user pcap from 46.101.48.191 port 59339 |
2019-12-14 18:45:20 |
| 39.96.11.225 | attackspambots | Unauthorised access (Dec 14) SRC=39.96.11.225 LEN=60 TTL=45 ID=17221 DF TCP DPT=8080 WINDOW=29200 SYN |
2019-12-14 18:43:29 |
| 151.69.229.20 | attack | Dec 14 11:01:46 hell sshd[9624]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.69.229.20 Dec 14 11:01:48 hell sshd[9624]: Failed password for invalid user blote from 151.69.229.20 port 55592 ssh2 ... |
2019-12-14 18:40:17 |
| 35.240.119.142 | attackspam | Dec 13 05:14:37 scivo sshd[20983]: Did not receive identification string from 35.240.119.142 Dec 13 05:15:22 scivo sshd[21033]: Did not receive identification string from 35.240.119.142 Dec 13 05:16:45 scivo sshd[21079]: Invalid user ftpuser from 35.240.119.142 Dec 13 05:16:47 scivo sshd[21079]: Failed password for invalid user ftpuser from 35.240.119.142 port 51918 ssh2 Dec 13 05:16:47 scivo sshd[21079]: Received disconnect from 35.240.119.142: 11: Normal Shutdown, Thank you for playing [preauth] Dec 13 05:17:48 scivo sshd[21127]: Invalid user ghostname from 35.240.119.142 Dec 13 05:17:50 scivo sshd[21127]: Failed password for invalid user ghostname from 35.240.119.142 port 55300 ssh2 Dec 13 05:17:50 scivo sshd[21127]: Received disconnect from 35.240.119.142: 11: Normal Shutdown, Thank you for playing [preauth] Dec 13 05:18:48 scivo sshd[21174]: Invalid user oracle from 35.240.119.142 Dec 13 05:18:50 scivo sshd[21174]: Failed password for invalid user oracle from 35.24........ ------------------------------- |
2019-12-14 18:52:46 |
| 178.62.78.183 | attackbotsspam | Dec 14 10:09:52 sd-53420 sshd\[7753\]: User root from 178.62.78.183 not allowed because none of user's groups are listed in AllowGroups Dec 14 10:09:52 sd-53420 sshd\[7753\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.78.183 user=root Dec 14 10:09:54 sd-53420 sshd\[7753\]: Failed password for invalid user root from 178.62.78.183 port 54214 ssh2 Dec 14 10:18:21 sd-53420 sshd\[8343\]: Invalid user yuhua from 178.62.78.183 Dec 14 10:18:21 sd-53420 sshd\[8343\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.78.183 ... |
2019-12-14 18:16:18 |
| 40.117.135.57 | attackbotsspam | Dec 14 11:39:51 localhost sshd\[3810\]: Invalid user ytrehgfdnbvc from 40.117.135.57 port 54442 Dec 14 11:39:51 localhost sshd\[3810\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.117.135.57 Dec 14 11:39:53 localhost sshd\[3810\]: Failed password for invalid user ytrehgfdnbvc from 40.117.135.57 port 54442 ssh2 |
2019-12-14 18:54:40 |
| 128.199.49.23 | attackbots | Dec 14 11:31:51 meumeu sshd[28072]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.49.23 Dec 14 11:31:54 meumeu sshd[28072]: Failed password for invalid user apache from 128.199.49.23 port 34876 ssh2 Dec 14 11:37:26 meumeu sshd[28911]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.49.23 ... |
2019-12-14 18:52:28 |
| 209.17.97.50 | attackspam | Automatic report - Banned IP Access |
2019-12-14 18:40:43 |
| 103.255.5.28 | attackbotsspam | Dec 14 07:25:54 arianus sshd\[20450\]: Invalid user ftp from 103.255.5.28 port 42012 ... |
2019-12-14 18:28:20 |
| 158.69.204.172 | attackbotsspam | Dec 13 23:53:43 auw2 sshd\[5668\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.ip-158-69-204.net user=root Dec 13 23:53:45 auw2 sshd\[5668\]: Failed password for root from 158.69.204.172 port 47482 ssh2 Dec 13 23:58:59 auw2 sshd\[6170\]: Invalid user kofol from 158.69.204.172 Dec 13 23:58:59 auw2 sshd\[6170\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.ip-158-69-204.net Dec 13 23:59:02 auw2 sshd\[6170\]: Failed password for invalid user kofol from 158.69.204.172 port 55584 ssh2 |
2019-12-14 18:13:46 |
| 185.200.118.36 | attackbotsspam | Port scan: Attack repeated for 24 hours |
2019-12-14 18:25:07 |