城市(city): unknown
省份(region): unknown
国家(country): Germany
运营商(isp): Telekom
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '37.88.0.0 - 37.95.255.255'
% Abuse contact for '37.88.0.0 - 37.95.255.255' is 'abuse@telekom.de'
inetnum: 37.88.0.0 - 37.95.255.255
netname: TDMOBILE-2
descr: Telekom Deutschland GmbH
country: DE
admin-c: TH12429-RIPE
tech-c: AS8728-ripe
tech-c: MS47198-RIPE
status: ASSIGNED PA
remarks: ***************************************************************************
remarks: Behoerdenauskuenfte koennen nur ueber folgende Ruf- bzw. Faxnummern beantwortet werden:
remarks: Fax: 0180-18811-66 (0,039 Euro/Minute aus dem Festnetz der Deutschen Telekom AG.)
remarks: Tel.: 0180-18811-77 (0,039 Euro/Minute aus dem Festnetz der Deutschen Telekom AG.)
remarks: Please send any abuse complaints to: abuse@telekom.de
remarks: ***************************************************************************
mnt-by: MNT-TMD
mnt-routes: MNT-TMD
created: 2012-01-31T12:50:15Z
last-modified: 2019-01-24T09:28:43Z
source: RIPE
person: Alexander Schloesser
address: Telekom Deutschland GmbH
address: Landgrabenweg 149
address: D-53227 Bonn
address: Germany
phone: +49 228 181 0
mnt-by: MNT-TMD
nic-hdl: AS8728-RIPE
created: 2005-08-09T11:13:06Z
last-modified: 2025-03-10T08:28:56Z
source: RIPE # Filtered
person: Mirko Sitte
address: Telekom Deutschland GmbH
address: Landgrabenweg 149
address: D-53227 Bonn
address: Germany
phone: +49 228 936 0
nic-hdl: MS47198-RIPE
mnt-by: MNT-TMD
created: 2002-07-08T07:23:50Z
last-modified: 2025-03-10T08:29:48Z
source: RIPE # Filtered
person: Torsten Holst
address: Telekom Deutschland GmbH
address: Landgrabenweg 149
address: D-53227 Bonn
address: Germany
phone: +49 228 181 0
mnt-by: MNT-TMD
nic-hdl: TH12429-RIPE
created: 2002-07-08T07:23:51Z
last-modified: 2025-03-10T08:30:14Z
source: RIPE # Filtered
% Information related to '37.80.0.0/12AS3320'
route: 37.80.0.0/12
descr: Telekom Deutschland GmbH
remarks: secure routing by AS3320 aggregate
origin: AS3320
member-of: AS3320:RS-DTAG-ANNOUNCE4-TMO
mnt-by: DTAG-RR
mnt-lower: MNT-TMD
mnt-routes: MNT-TMD {37.80.0.0/12^-}
created: 2012-02-01T12:30:41Z
last-modified: 2012-02-01T12:30:41Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.123 (ABERDEEN); <<>> DiG 9.10.3-P4-Ubuntu <<>> 37.92.81.99
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48624
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;37.92.81.99. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026081801 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Aug 19 02:57:56 CST 2026
;; MSG SIZE rcvd: 104Host 99.81.92.37.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 99.81.92.37.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 207.246.240.119 | attack | Automatic report - XMLRPC Attack |
2020-08-19 12:13:15 |
| 49.232.100.177 | attack | Invalid user hdfs from 49.232.100.177 port 48210 |
2020-08-19 09:07:30 |
| 188.19.183.135 | attack | [MK-Root1] Blocked by UFW |
2020-08-19 08:56:59 |
| 40.88.144.40 | attackbotsspam | Sql/code injection probe |
2020-08-19 12:11:28 |
| 51.75.241.233 | attackbots | Aug 19 06:07:36 ip106 sshd[31174]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.241.233 Aug 19 06:07:38 ip106 sshd[31174]: Failed password for invalid user administrator from 51.75.241.233 port 48172 ssh2 ... |
2020-08-19 12:15:04 |
| 5.248.254.199 | attackspambots | Automated report (2020-08-19T11:56:39+08:00). Faked user agent detected. |
2020-08-19 12:03:58 |
| 222.232.29.235 | attackspam | 2020-08-19T00:23:52.503952abusebot-8.cloudsearch.cf sshd[14308]: Invalid user victoria from 222.232.29.235 port 60152 2020-08-19T00:23:52.509981abusebot-8.cloudsearch.cf sshd[14308]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.232.29.235 2020-08-19T00:23:52.503952abusebot-8.cloudsearch.cf sshd[14308]: Invalid user victoria from 222.232.29.235 port 60152 2020-08-19T00:23:54.119311abusebot-8.cloudsearch.cf sshd[14308]: Failed password for invalid user victoria from 222.232.29.235 port 60152 ssh2 2020-08-19T00:27:53.085856abusebot-8.cloudsearch.cf sshd[14489]: Invalid user sadmin from 222.232.29.235 port 40526 2020-08-19T00:27:53.098290abusebot-8.cloudsearch.cf sshd[14489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.232.29.235 2020-08-19T00:27:53.085856abusebot-8.cloudsearch.cf sshd[14489]: Invalid user sadmin from 222.232.29.235 port 40526 2020-08-19T00:27:55.460180abusebot-8.cloudsearch.cf s ... |
2020-08-19 09:08:46 |
| 144.34.240.47 | attackspam | Aug 19 00:40:25 cosmoit sshd[16252]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.34.240.47 |
2020-08-19 08:58:15 |
| 42.200.231.27 | attackspambots | Lines containing failures of 42.200.231.27 Aug 18 21:15:36 nemesis sshd[30211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.200.231.27 user=r.r Aug 18 21:15:38 nemesis sshd[30211]: Failed password for r.r from 42.200.231.27 port 59472 ssh2 Aug 18 21:15:38 nemesis sshd[30211]: Received disconnect from 42.200.231.27 port 59472:11: Bye Bye [preauth] Aug 18 21:15:38 nemesis sshd[30211]: Disconnected from authenticating user r.r 42.200.231.27 port 59472 [preauth] Aug 18 21:29:35 nemesis sshd[3022]: Invalid user postmaster from 42.200.231.27 port 32838 Aug 18 21:29:35 nemesis sshd[3022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.200.231.27 Aug 18 21:29:37 nemesis sshd[3022]: Failed password for invalid user postmaster from 42.200.231.27 port 32838 ssh2 Aug 18 21:29:37 nemesis sshd[3022]: Received disconnect from 42.200.231.27 port 32838:11: Bye Bye [preauth] Aug 18 21:29:37 nemesi........ ------------------------------ |
2020-08-19 09:14:45 |
| 47.180.212.134 | attackbotsspam | Aug 19 01:15:37 web-main sshd[1789215]: Failed password for invalid user sftp from 47.180.212.134 port 43182 ssh2 Aug 19 01:23:00 web-main sshd[1790186]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.180.212.134 user=root Aug 19 01:23:02 web-main sshd[1790186]: Failed password for root from 47.180.212.134 port 40900 ssh2 |
2020-08-19 09:09:31 |
| 45.136.108.22 | attackspambots | Fail2Ban Ban Triggered |
2020-08-19 09:11:16 |
| 171.88.21.158 | attack | Aug 18 04:13:59 cumulus sshd[24938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.88.21.158 user=r.r Aug 18 04:14:01 cumulus sshd[24938]: Failed password for r.r from 171.88.21.158 port 33470 ssh2 Aug 18 04:14:02 cumulus sshd[24938]: Received disconnect from 171.88.21.158 port 33470:11: Bye Bye [preauth] Aug 18 04:14:02 cumulus sshd[24938]: Disconnected from 171.88.21.158 port 33470 [preauth] Aug 18 04:19:39 cumulus sshd[25339]: Invalid user admin from 171.88.21.158 port 57908 Aug 18 04:19:39 cumulus sshd[25339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.88.21.158 Aug 18 04:19:41 cumulus sshd[25339]: Failed password for invalid user admin from 171.88.21.158 port 57908 ssh2 Aug 18 04:19:41 cumulus sshd[25339]: Received disconnect from 171.88.21.158 port 57908:11: Bye Bye [preauth] Aug 18 04:19:41 cumulus sshd[25339]: Disconnected from 171.88.21.158 port 57908 [preauth] ........ ---------------------------------- |
2020-08-19 09:05:16 |
| 59.152.62.40 | attack | Aug 19 05:56:38 cosmoit sshd[12261]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.152.62.40 |
2020-08-19 12:05:24 |
| 106.13.63.120 | attack | Aug 19 03:56:35 *** sshd[2067]: User root from 106.13.63.120 not allowed because not listed in AllowUsers |
2020-08-19 12:08:00 |
| 27.148.190.100 | attack | Brute-force attempt banned |
2020-08-19 09:13:54 |