城市(city): Esch-sur-Alzette
省份(region): Canton d'Esch-sur-Alzette
国家(country): Luxembourg
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '193.168.64.0 - 193.168.127.255'
% Abuse contact for '193.168.64.0 - 193.168.127.255' is 'csirt@restena.lu'
inetnum: 193.168.64.0 - 193.168.127.255
netname: LU-RESTENA-193-168-64-127
country: LU
org: ORG-RA11-RIPE
admin-c: RNOC3-RIPE
tech-c: RNOC3-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-by: RESTENA-MNT
mnt-lower: RESTENA-MNT
mnt-irt: IRT-RESTENA-CSIRT
created: 1970-01-01T00:00:00Z
last-modified: 2016-08-26T12:22:44Z
source: RIPE
organisation: ORG-RA11-RIPE
org-name: Fondation RESTENA
country: LU
org-type: LIR
address: 2, Place de l'Universit
address: L-4365
address: Esch-sur-Alzette
address: LUXEMBOURG
phone: +3524244091
fax-no: +352422473
admin-c: MST5-RIPE
admin-c: CT5432-RIPE
admin-c: AF2838-RIPE
admin-c: GM7084-RIPE
tech-c: RNOC3-RIPE
abuse-c: RNOC3-RIPE
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: RESTENA-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: RESTENA-MNT
created: 2004-04-17T11:37:51Z
last-modified: 2026-01-21T14:58:18Z
source: RIPE # Filtered
role: RESTENA Network Operation Center
address: RESTENA-NOC
address: Fondation RESTENA
address: 2, avenue de l'Universite
address: L-4365 Esch-sur-Alzette
phone: +352.4244091
fax-no: +352.422473
abuse-mailbox: csirt@restena.lu
remarks: ----------------------------------------
remarks: see irt:IRT-RESTENA-CSIRT for
remarks: signature and encryption key information
remarks: ----------------------------------------
nic-hdl: RNOC3-RIPE
mnt-by: RESTENA-MNT
created: 2003-09-24T07:49:49Z
last-modified: 2015-11-02T08:18:33Z
source: RIPE # Filtered
% Information related to '193.168.70.0/24AS2602'
route: 193.168.70.0/24
descr: RESTENA registry address pool
origin: AS2602
mnt-by: AS2602-MNT
created: 2018-03-08T14:36:50Z
last-modified: 2018-03-08T14:36:50Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.121.2 (BUSA); <<>> DiG 9.10.3-P4-Ubuntu <<>> 193.168.70.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11289
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;193.168.70.14. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026032901 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Mar 30 13:39:41 CST 2026
;; MSG SIZE rcvd: 106Host 14.70.168.193.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 14.70.168.193.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 157.230.251.115 | attack | SSH Brute-Force attacks |
2019-09-04 05:12:36 |
| 140.249.192.87 | attack | Sep 3 22:59:57 markkoudstaal sshd[7632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.249.192.87 Sep 3 22:59:59 markkoudstaal sshd[7632]: Failed password for invalid user piotr from 140.249.192.87 port 56692 ssh2 Sep 3 23:04:21 markkoudstaal sshd[8093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.249.192.87 |
2019-09-04 05:11:09 |
| 173.208.152.250 | attackbots | Unauthorised access (Sep 3) SRC=173.208.152.250 LEN=40 TTL=241 ID=2990 TCP DPT=445 WINDOW=1024 SYN |
2019-09-04 05:03:05 |
| 27.17.36.254 | attackspambots | Sep 3 11:27:00 eddieflores sshd\[16970\]: Invalid user git from 27.17.36.254 Sep 3 11:27:00 eddieflores sshd\[16970\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.17.36.254 Sep 3 11:27:02 eddieflores sshd\[16970\]: Failed password for invalid user git from 27.17.36.254 port 57111 ssh2 Sep 3 11:31:07 eddieflores sshd\[17304\]: Invalid user lucia from 27.17.36.254 Sep 3 11:31:07 eddieflores sshd\[17304\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.17.36.254 |
2019-09-04 05:32:19 |
| 222.124.129.170 | attack | [English version follows below] Buna ziua, Aceasta este o alerta de securitate cibernetica. Conform informatiilor detinute de WHITEHAT-RO, anumite adrese IP si/sau domenii web detinute, utilizate sau administrate de dvs. (sau organizatia dvs.), au fost identificate ca fiind asociate unor sisteme/servicii informatice vulnerabile, compromise sau implicate in diferite tipuri de atacuri cibernetice. Cu stima, Echipa WhiteHat ---------- English ---------- Dear Sir/Madam, This is a cyber security alert. WHITEHAT-RO has become aware of one or more IP addresses and/or web domains owned, used, or administered by you (or your organisation), that were identified as beeing associated with information systems/services that are vulnerable, compromised or used in different cyber attacks. Kind regards, WhiteHat Team |
2019-09-04 05:34:28 |
| 80.82.67.116 | attackspambots | 03.09.2019 20:39:33 SSH access blocked by firewall |
2019-09-04 05:08:40 |
| 68.116.41.6 | attackbotsspam | Sep 3 22:52:40 meumeu sshd[2272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.116.41.6 Sep 3 22:52:43 meumeu sshd[2272]: Failed password for invalid user nagios from 68.116.41.6 port 34814 ssh2 Sep 3 22:57:07 meumeu sshd[2878]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.116.41.6 ... |
2019-09-04 05:33:33 |
| 218.98.26.172 | attackbots | 2019-09-03T20:55:58.080168abusebot-7.cloudsearch.cf sshd\[29157\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.26.172 user=root |
2019-09-04 04:58:51 |
| 23.129.64.193 | attackspambots | Sep 3 21:13:32 MK-Soft-VM6 sshd\[14970\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.129.64.193 user=root Sep 3 21:13:34 MK-Soft-VM6 sshd\[14970\]: Failed password for root from 23.129.64.193 port 19459 ssh2 Sep 3 21:13:36 MK-Soft-VM6 sshd\[14970\]: Failed password for root from 23.129.64.193 port 19459 ssh2 ... |
2019-09-04 05:21:58 |
| 104.140.188.30 | attackbotsspam | firewall-block, port(s): 23/tcp |
2019-09-04 05:17:35 |
| 218.17.56.50 | attackbots | Sep 3 21:03:29 OPSO sshd\[18339\]: Invalid user hwkim from 218.17.56.50 port 49584 Sep 3 21:03:29 OPSO sshd\[18339\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.17.56.50 Sep 3 21:03:32 OPSO sshd\[18339\]: Failed password for invalid user hwkim from 218.17.56.50 port 49584 ssh2 Sep 3 21:11:20 OPSO sshd\[20508\]: Invalid user www from 218.17.56.50 port 46500 Sep 3 21:11:20 OPSO sshd\[20508\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.17.56.50 |
2019-09-04 05:04:36 |
| 192.42.116.24 | attackspam | v+ssh-bruteforce |
2019-09-04 05:34:51 |
| 103.76.252.6 | attackbotsspam | 2019-09-03T19:56:59.171164hub.schaetter.us sshd\[2069\]: Invalid user sysadmin from 103.76.252.6 2019-09-03T19:56:59.206296hub.schaetter.us sshd\[2069\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.76.252.6 2019-09-03T19:57:00.855288hub.schaetter.us sshd\[2069\]: Failed password for invalid user sysadmin from 103.76.252.6 port 9858 ssh2 2019-09-03T20:01:21.092407hub.schaetter.us sshd\[2110\]: Invalid user appldisc from 103.76.252.6 2019-09-03T20:01:21.151224hub.schaetter.us sshd\[2110\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.76.252.6 ... |
2019-09-04 04:57:26 |
| 14.153.50.201 | attackbots | Sep 3 21:08:18 ip-172-31-1-72 sshd\[28417\]: Invalid user sami from 14.153.50.201 Sep 3 21:08:18 ip-172-31-1-72 sshd\[28417\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.153.50.201 Sep 3 21:08:20 ip-172-31-1-72 sshd\[28417\]: Failed password for invalid user sami from 14.153.50.201 port 44986 ssh2 Sep 3 21:13:14 ip-172-31-1-72 sshd\[28631\]: Invalid user mcm from 14.153.50.201 Sep 3 21:13:14 ip-172-31-1-72 sshd\[28631\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.153.50.201 |
2019-09-04 05:19:57 |
| 94.23.253.88 | attackspambots | 09/03/2019-16:46:27.363992 94.23.253.88 Protocol: 17 ET SCAN Sipvicious Scan |
2019-09-04 05:33:16 |