City: unknown
Region: unknown
Country: Czechia
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '95.85.238.0 - 95.85.238.255'
% Abuse contact for '95.85.238.0 - 95.85.238.255' is 'abuse@altawk.com'
inetnum: 95.85.238.0 - 95.85.238.255
netname: ALTAWK-CZ
country: CZ
geofeed: https://geofeed.altawk.net/subnet.csv
org: ORG-PHL16-RIPE
admin-c: NA7789-RIPE
tech-c: NA7789-RIPE
status: ASSIGNED PA
mnt-by: DGTLS-MNT
created: 2025-11-11T08:46:22Z
last-modified: 2025-11-25T23:29:02Z
source: RIPE
organisation: ORG-PHL16-RIPE
org-name: Partner Hosting LTD
country: GB
org-type: OTHER
address: 71-75
address: Shelton Street
address: Covent Garden
address: WC2H 9JQ
address: London
address: United Kingdom
abuse-c: ACRO54981-RIPE
mnt-ref: altawk-com-mnt
mnt-ref: lir-ge-fast-1-MNT
mnt-ref: ch-ifog-1-mnt
mnt-ref: MNT-DGTL
mnt-ref: DGTLS-MNT
mnt-ref: TNM-MNT
mnt-by: altawk-com-mnt
created: 2023-12-06T21:19:34Z
last-modified: 2025-03-31T11:59:46Z
source: RIPE # Filtered
role: NOC
address: Kozatska 75
address: 03118, Kyiv
address: Ukraine
abuse-mailbox: abuse@altawk.net
remarks: *************************************************
remarks: * For spam/abuse/security issues please contact *
remarks: * abuse@altawk.net *
remarks: *************************************************
nic-hdl: NA7789-RIPE
mnt-by: altawk-mnt
created: 2022-07-18T12:16:33Z
last-modified: 2022-12-19T13:13:01Z
source: RIPE # Filtered
% Information related to '95.85.238.0/24AS205775'
route: 95.85.238.0/24
origin: AS205775
created: 2026-03-02T21:50:05Z
last-modified: 2026-03-02T21:50:05Z
source: RIPE
mnt-by: DGTLS-MNT
% This query was served by the RIPE Database Query Service version 1.122.1 (SHETLAND); <<>> DiG 9.10.3-P4-Ubuntu <<>> 95.85.238.22
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59435
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;95.85.238.22. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026060701 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jun 08 14:30:42 CST 2026
;; MSG SIZE rcvd: 105Host 22.238.85.95.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 22.238.85.95.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 62.4.55.67 | attack | Automatic report - Banned IP Access |
2020-10-06 04:23:59 |
| 68.38.175.3 | attack | SSH Bruteforce Attempt on Honeypot |
2020-10-06 03:55:58 |
| 60.185.155.117 | attack | Lines containing failures of 60.185.155.117 Oct 4 16:28:26 neweola postfix/smtpd[21372]: connect from unknown[60.185.155.117] Oct 4 16:28:27 neweola postfix/smtpd[21372]: lost connection after AUTH from unknown[60.185.155.117] Oct 4 16:28:27 neweola postfix/smtpd[21372]: disconnect from unknown[60.185.155.117] ehlo=2 starttls=1 auth=0/1 commands=3/4 Oct 4 16:28:28 neweola postfix/smtpd[21372]: connect from unknown[60.185.155.117] Oct 4 16:28:29 neweola postfix/smtpd[21372]: lost connection after AUTH from unknown[60.185.155.117] Oct 4 16:28:29 neweola postfix/smtpd[21372]: disconnect from unknown[60.185.155.117] ehlo=2 starttls=1 auth=0/1 commands=3/4 Oct 4 16:28:30 neweola postfix/smtpd[21372]: connect from unknown[60.185.155.117] Oct 4 16:28:31 neweola postfix/smtpd[21372]: lost connection after AUTH from unknown[60.185.155.117] Oct 4 16:28:31 neweola postfix/smtpd[21372]: disconnect from unknown[60.185.155.117] ehlo=2 starttls=1 auth=0/1 commands=3/4 Oct 4 1........ ------------------------------ |
2020-10-06 04:24:11 |
| 106.52.47.236 | attack | Multiple SSH authentication failures from 106.52.47.236 |
2020-10-06 04:16:30 |
| 103.83.232.17 | attackspam | Lines containing failures of 103.83.232.17 Oct 4 22:26:19 shared11 sshd[9581]: Did not receive identification string from 103.83.232.17 port 52733 Oct 4 22:26:25 shared11 sshd[9585]: Invalid user system from 103.83.232.17 port 53115 Oct 4 22:26:26 shared11 sshd[9585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.83.232.17 Oct 4 22:26:28 shared11 sshd[9585]: Failed password for invalid user system from 103.83.232.17 port 53115 ssh2 Oct 4 22:26:28 shared11 sshd[9585]: Connection closed by invalid user system 103.83.232.17 port 53115 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=103.83.232.17 |
2020-10-06 04:19:19 |
| 113.173.162.249 | attackspam | Automatic report - Banned IP Access |
2020-10-06 03:55:27 |
| 34.91.150.112 | attackbotsspam | 34.91.150.112 - - [05/Oct/2020:12:42:17 +0100] "POST /wp-login.php HTTP/1.1" 200 2384 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 34.91.150.112 - - [05/Oct/2020:12:42:17 +0100] "POST /wp-login.php HTTP/1.1" 200 2366 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 34.91.150.112 - - [05/Oct/2020:12:42:17 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-10-06 04:01:09 |
| 155.4.208.184 | attack | Automatic report - Banned IP Access |
2020-10-06 04:09:31 |
| 2.57.122.186 | attack | ET COMPROMISED Known Compromised or Hostile Host Traffic group 26 - port: 22 proto: tcp cat: Misc Attackbytes: 60 |
2020-10-06 04:22:02 |
| 36.69.8.73 | attackspam | Honeypot hit. |
2020-10-06 04:13:54 |
| 139.162.112.248 | attack | [N10.H2.VM2] Port Scanner Detected Blocked by UFW |
2020-10-06 04:15:47 |
| 182.61.43.202 | attackspambots | IP blocked |
2020-10-06 03:48:52 |
| 67.79.13.65 | attack | 67.79.13.65 (US/United States/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct 5 07:45:21 server4 sshd[1448]: Failed password for root from 95.169.22.100 port 11594 ssh2 Oct 5 07:44:25 server4 sshd[1419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.79.13.65 user=root Oct 5 07:44:09 server4 sshd[1080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.130.218 user=root Oct 5 07:44:10 server4 sshd[1080]: Failed password for root from 152.136.130.218 port 54430 ssh2 Oct 5 07:44:28 server4 sshd[1419]: Failed password for root from 67.79.13.65 port 39692 ssh2 Oct 5 07:46:49 server4 sshd[2681]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.208.168 user=root IP Addresses Blocked: 95.169.22.100 (US/United States/-) |
2020-10-06 03:49:54 |
| 173.236.146.172 | attackspam | 2020/10/05 21:39:00 [error] 8462#8462: *385948 open() "/usr/share/nginx/html/wp-login.php" failed (2: No such file or directory), client: 173.236.146.172, server: _, request: "GET /wp-login.php HTTP/1.1", host: "kettler-textilkonfektion.de" 2020/10/05 21:47:13 [error] 8462#8462: *387406 open() "/usr/share/nginx/html/wp-login.php" failed (2: No such file or directory), client: 173.236.146.172, server: _, request: "GET /wp-login.php HTTP/1.1", host: "srvfarm.com" |
2020-10-06 04:06:52 |
| 134.209.146.100 | attackspambots | SSH login attempts. |
2020-10-06 04:07:13 |