城市(city): Köln
省份(region): Nordrhein-Westfalen
国家(country): Germany
运营商(isp): Telekom
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '212.117.64.0 - 212.117.95.255'
% Abuse contact for '212.117.64.0 - 212.117.95.255' is 'abuse@netcologne.de'
inetnum: 212.117.64.0 - 212.117.95.255
org: ORG-NG11-RIPE
netname: DE-NETCOLOGNE-990212
country: DE
admin-c: MR111-RIPE
admin-c: MA1830-RIPE
tech-c: MA1830-RIPE
tech-c: MR111-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-by: NETCOLOGNE-MNT
mnt-routes: NETCOLOGNE-MNT
created: 1970-01-01T00:00:00Z
last-modified: 2016-11-10T16:45:00Z
source: RIPE # Filtered
organisation: ORG-NG11-RIPE
org-name: NetCologne Gesellschaft fur Telekommunikation mbH
country: DE
org-type: LIR
address: Am Coloneum 9
address: 50829
address: Koeln
address: GERMANY
phone: +49 221 2222 0
fax-no: +49 221 2222 5330
admin-c: MR111-RIPE
admin-c: MA1830-RIPE
admin-c: MIS93-RIPE
admin-c: PL9622-RIPE
admin-c: HS10483-RIPE
admin-c: EV4291-RIPE
mnt-ref: NETCOLOGNE-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: NETCOLOGNE-MNT
abuse-c: ACN23-RIPE
created: 2004-04-17T11:10:37Z
last-modified: 2026-02-02T10:05:40Z
source: RIPE # Filtered
person: Michael Adams
address: NetCologne GmbH
address: Am Coloneum 9
address: D-50829 Koeln
address: GERMANY
phone: +49-221-2222-0
fax-no: +49-221-2222-7657
nic-hdl: MA1830-RIPE
remarks: + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
remarks: + +
remarks: + Dear Personal-Firewall-User, +
remarks: + +
remarks: + if this record is shown to you by your firewall please +
remarks: + notice this record does not indicate the name or the +
remarks: + address of the offender attacking your PC. +
remarks: + +
remarks: + This database entry points to a technical contact for +
remarks: + the IP space of NetCologne (AS8422). So don't waste +
remarks: + your time with sending complaints to me. +
remarks: + +
remarks: + If you are certain about a network abuse originating +
remarks: + from an IP address assigned to NetCologne please contact +
remarks: + +
remarks: + +
remarks: + abuse@netcologne.de +
remarks: + +
remarks: + or just visit +
remarks: + +
remarks: + http://www.netcologne.de/abuse/ +
remarks: + +
remarks: + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
mnt-by: NETCOLOGNE-MNT
created: 1970-01-01T00:00:00Z
last-modified: 2017-10-30T21:45:10Z
source: RIPE # Filtered
person: Michael Ruesel
address: NetCologne GmbH
address: Am Coloneum 9
address: D-50829 Koeln
address: Germany
phone: +49 221 2222 0
fax-no: +49 221 2222 7212
nic-hdl: MR111-RIPE
remarks: + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
remarks: + abuse@netcologne.de is contact for criminal use, spam, etc. +
remarks: + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
mnt-by: NETCOLOGNE-MNT
created: 1970-01-01T00:00:00Z
last-modified: 2017-10-30T21:45:09Z
source: RIPE # Filtered
% Information related to '212.117.64.0/19AS8422'
route: 212.117.64.0/19
descr: NetCologne PA Space
origin: AS8422
mnt-by: NETCOLOGNE-MNT
created: 2011-04-07T12:41:34Z
last-modified: 2011-04-07T12:41:34Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.121.2 (ABERDEEN); <<>> DiG 9.10.3-P4-Ubuntu <<>> 212.117.78.120
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4418
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;212.117.78.120. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026032201 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Mar 23 07:54:49 CST 2026
;; MSG SIZE rcvd: 107Host 120.78.117.212.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 120.78.117.212.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 190.145.45.225 | attackspambots | Autoban 190.145.45.225 AUTH/CONNECT |
2020-01-25 00:00:56 |
| 54.37.74.189 | attack | Unauthorized connection attempt detected from IP address 54.37.74.189 to port 2222 |
2020-01-24 23:28:13 |
| 99.250.200.4 | attackspam | Chat Spam |
2020-01-24 23:53:03 |
| 187.19.186.164 | attack | DATE:2020-01-24 13:36:29, IP:187.19.186.164, PORT:1433 MSSQL brute force auth on honeypot server (epe-honey1-hq) |
2020-01-24 23:50:40 |
| 222.186.173.226 | attackspambots | SSH Brute Force, server-1 sshd[20071]: Failed password for root from 222.186.173.226 port 14874 ssh2 |
2020-01-24 23:36:06 |
| 51.15.187.49 | attack | Jan 24 14:48:09 OPSO sshd\[7918\]: Invalid user username from 51.15.187.49 port 44380 Jan 24 14:48:09 OPSO sshd\[7918\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.187.49 Jan 24 14:48:10 OPSO sshd\[7918\]: Failed password for invalid user username from 51.15.187.49 port 44380 ssh2 Jan 24 14:49:29 OPSO sshd\[8103\]: Invalid user user from 51.15.187.49 port 56566 Jan 24 14:49:29 OPSO sshd\[8103\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.187.49 |
2020-01-24 23:37:24 |
| 45.122.222.123 | attackbots | Jan 24 15:53:52 MK-Soft-Root2 sshd[17570]: Failed password for root from 45.122.222.123 port 56762 ssh2 ... |
2020-01-24 23:42:07 |
| 122.51.41.57 | attackspambots | Jan 24 05:47:46 eddieflores sshd\[23678\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.41.57 user=root Jan 24 05:47:48 eddieflores sshd\[23678\]: Failed password for root from 122.51.41.57 port 34966 ssh2 Jan 24 05:53:36 eddieflores sshd\[24581\]: Invalid user user2 from 122.51.41.57 Jan 24 05:53:36 eddieflores sshd\[24581\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.41.57 Jan 24 05:53:38 eddieflores sshd\[24581\]: Failed password for invalid user user2 from 122.51.41.57 port 34166 ssh2 |
2020-01-24 23:57:20 |
| 203.90.80.58 | attackbotsspam | Jan 24 13:36:22 vps670341 sshd[31858]: Invalid user celia from 203.90.80.58 port 51476 |
2020-01-25 00:10:10 |
| 43.250.105.140 | attackspambots | Jan 24 16:42:45 meumeu sshd[3100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.250.105.140 Jan 24 16:42:47 meumeu sshd[3100]: Failed password for invalid user santiago from 43.250.105.140 port 48612 ssh2 Jan 24 16:45:28 meumeu sshd[3503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.250.105.140 ... |
2020-01-25 00:08:52 |
| 185.216.140.252 | attackspambots | 01/24/2020-16:19:38.404244 185.216.140.252 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2020-01-24 23:29:15 |
| 181.14.220.7 | attack | Jan 24 13:31:10 uapps sshd[4940]: Failed password for invalid user web from 181.14.220.7 port 5218 ssh2 Jan 24 13:31:11 uapps sshd[4940]: Received disconnect from 181.14.220.7: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=181.14.220.7 |
2020-01-24 23:34:54 |
| 103.111.83.220 | attackbots | 20/1/24@07:36:12: FAIL: Alarm-Network address from=103.111.83.220 ... |
2020-01-25 00:11:37 |
| 178.62.88.92 | attackbots | Unauthorized connection attempt detected from IP address 178.62.88.92 to port 2220 [J] |
2020-01-25 00:02:04 |
| 120.132.22.92 | attackspambots | Unauthorized connection attempt detected from IP address 120.132.22.92 to port 2220 [J] |
2020-01-25 00:04:12 |