City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '176.100.39.80 - 176.100.39.95'
% Abuse contact for '176.100.39.80 - 176.100.39.95' is 'abuse@datalix.de'
inetnum: 176.100.39.80 - 176.100.39.95
netname: DATALIX
descr: DATALIX
country: DE
admin-c: iRC4-RIPE
tech-c: ICMG-RIPE
org: ORG-DA1262-RIPE
mnt-by: MNT-INTERCOLO
status: ASSIGNED PA
mnt-by: DATALIX-MNT
created: 2024-10-15T16:09:48Z
last-modified: 2024-10-30T12:41:25Z
source: RIPE
organisation: ORG-DA1262-RIPE
org-name: Datalix
org-type: OTHER
address: Theodor-Heuss-Str. 1, 97230 Estenfeld, Deutschland
abuse-c: ACRO47748-RIPE
mnt-ref: DATALIX-MNT
mnt-by: DATALIX-MNT
created: 2022-06-14T17:48:09Z
last-modified: 2022-06-14T17:48:09Z
source: RIPE # Filtered
role: intercolo Ripe Coordination
address: INTERCOLO GMBH
address: Carl-Goerdeler-Strae 114
address: 60320 FRAKFURT
address: GERMANY
phone: +49.69564060
remarks:
remarks: * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
remarks: * In case of abuse like SPAM, Hack Attacks, Scans, etc. *
remarks: * please mail to: --> abuse [@] intercolo.net <-- *
remarks: * Inquiries can only be processed, *
remarks: * if sent to the correct address *
remarks: * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
remarks:
abuse-mailbox: abuse@intercolo.net
admin-c: ICMG-RIPE
tech-c: ICMG-RIPE
nic-hdl: iRC4-RIPE
mnt-by: MNT-INTERCOLO
created: 2011-06-16T12:35:42Z
last-modified: 2024-03-18T14:09:13Z
source: RIPE # Filtered
person: Max Gade
address: Carl-Goerdeler-Strae 114
address: DE-60320 Frankfurt am Main
address: Germany
phone: +49.69348783700
nic-hdl: ICMG-RIPE
mnt-by: MNT-INTERCOLO
created: 2011-05-23T20:52:47Z
last-modified: 2013-03-16T21:29:34Z
source: RIPE # Filtered
% Information related to '176.100.39.0/24AS58087'
route: 176.100.39.0/24
origin: AS58087
mnt-by: MNT-INTERCOLO
created: 2024-10-15T15:31:46Z
last-modified: 2024-10-15T15:31:46Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.121 (ABERDEEN); <<>> DiG 9.10.3-P4-Ubuntu <<>> 176.100.39.92
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62645
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;176.100.39.92. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026030900 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Mar 09 19:29:31 CST 2026
;; MSG SIZE rcvd: 10692.39.100.176.in-addr.arpa domain name pointer 92.39.100.176.in-addr.arpa.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
92.39.100.176.in-addr.arpa name = 92.39.100.176.in-addr.arpa.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 179.110.189.96 | attack | 20/4/24@23:47:29: FAIL: Alarm-Telnet address from=179.110.189.96 20/4/24@23:47:29: FAIL: Alarm-Telnet address from=179.110.189.96 ... |
2020-04-25 19:55:07 |
| 116.236.109.90 | attackbotsspam | Apr 25 12:19:14 *host* sshd\[10302\]: Unable to negotiate with 116.236.109.90 port 45799: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 \[preauth\] |
2020-04-25 19:49:36 |
| 118.89.173.215 | attack | Apr 25 05:22:32 firewall sshd[16958]: Failed password for invalid user jhesrhel from 118.89.173.215 port 5008 ssh2 Apr 25 05:26:27 firewall sshd[17096]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.173.215 user=root Apr 25 05:26:28 firewall sshd[17096]: Failed password for root from 118.89.173.215 port 46644 ssh2 ... |
2020-04-25 19:52:53 |
| 196.52.43.129 | attackspam | Unauthorized connection attempt from IP address 196.52.43.129 on Port 139(NETBIOS) |
2020-04-25 20:15:57 |
| 80.82.77.139 | attackspam | Apr 25 13:20:42 debian-2gb-nbg1-2 kernel: \[10072582.568113\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=80.82.77.139 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=120 ID=32840 PROTO=TCP SPT=29011 DPT=50050 WINDOW=22065 RES=0x00 SYN URGP=0 |
2020-04-25 20:05:28 |
| 119.8.7.11 | attackbots | 2020-04-25T12:11:11.180068shield sshd\[15970\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.8.7.11 user=ftp 2020-04-25T12:11:12.632441shield sshd\[15970\]: Failed password for ftp from 119.8.7.11 port 35822 ssh2 2020-04-25T12:15:42.976128shield sshd\[17073\]: Invalid user ubuntu from 119.8.7.11 port 50130 2020-04-25T12:15:42.980857shield sshd\[17073\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.8.7.11 2020-04-25T12:15:44.965266shield sshd\[17073\]: Failed password for invalid user ubuntu from 119.8.7.11 port 50130 ssh2 |
2020-04-25 20:24:08 |
| 104.148.41.102 | attackbots | jannisjulius.de 104.148.41.102 [25/Apr/2020:08:39:54 +0200] "POST /wp-login.php HTTP/1.1" 200 11917 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:69.0) Gecko/20100101 Firefox/69.0" jannisjulius.de 104.148.41.102 [25/Apr/2020:08:39:55 +0200] "POST /wp-login.php HTTP/1.1" 200 12304 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:69.0) Gecko/20100101 Firefox/69.0" |
2020-04-25 19:56:34 |
| 12.191.251.20 | attackspambots | Unauthorized connection attempt detected from IP address 12.191.251.20 to port 8089 |
2020-04-25 20:06:27 |
| 85.209.0.77 | attackspambots | Apr 25 09:16:07 firewall sshd[3490]: Failed password for root from 85.209.0.77 port 20898 ssh2 Apr 25 09:16:05 firewall sshd[3488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.209.0.77 user=root Apr 25 09:16:07 firewall sshd[3488]: Failed password for root from 85.209.0.77 port 14244 ssh2 ... |
2020-04-25 20:21:38 |
| 111.229.78.120 | attackbots | Apr 25 11:52:19 nextcloud sshd\[3435\]: Invalid user redmine from 111.229.78.120 Apr 25 11:52:19 nextcloud sshd\[3435\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.78.120 Apr 25 11:52:21 nextcloud sshd\[3435\]: Failed password for invalid user redmine from 111.229.78.120 port 50974 ssh2 |
2020-04-25 20:08:02 |
| 222.64.88.206 | attackbots | Honeypot attack, port: 445, PTR: 206.88.64.222.broad.xw.sh.dynamic.163data.com.cn. |
2020-04-25 20:22:32 |
| 140.143.56.61 | attackbotsspam | Apr 25 13:08:08 srv-ubuntu-dev3 sshd[110734]: Invalid user mamainvacanta from 140.143.56.61 Apr 25 13:08:08 srv-ubuntu-dev3 sshd[110734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.56.61 Apr 25 13:08:08 srv-ubuntu-dev3 sshd[110734]: Invalid user mamainvacanta from 140.143.56.61 Apr 25 13:08:10 srv-ubuntu-dev3 sshd[110734]: Failed password for invalid user mamainvacanta from 140.143.56.61 port 35990 ssh2 Apr 25 13:12:30 srv-ubuntu-dev3 sshd[111432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.56.61 user=root Apr 25 13:12:32 srv-ubuntu-dev3 sshd[111432]: Failed password for root from 140.143.56.61 port 57620 ssh2 Apr 25 13:16:57 srv-ubuntu-dev3 sshd[112279]: Invalid user openerp from 140.143.56.61 Apr 25 13:16:57 srv-ubuntu-dev3 sshd[112279]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.56.61 Apr 25 13:16:57 srv-ubuntu-dev3 sshd[1122 ... |
2020-04-25 19:51:25 |
| 222.186.42.7 | attackbots | 2020-04-25T14:21:52.600642sd-86998 sshd[30910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.7 user=root 2020-04-25T14:21:55.046797sd-86998 sshd[30910]: Failed password for root from 222.186.42.7 port 20901 ssh2 2020-04-25T14:21:57.289447sd-86998 sshd[30910]: Failed password for root from 222.186.42.7 port 20901 ssh2 2020-04-25T14:21:52.600642sd-86998 sshd[30910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.7 user=root 2020-04-25T14:21:55.046797sd-86998 sshd[30910]: Failed password for root from 222.186.42.7 port 20901 ssh2 2020-04-25T14:21:57.289447sd-86998 sshd[30910]: Failed password for root from 222.186.42.7 port 20901 ssh2 2020-04-25T14:21:52.600642sd-86998 sshd[30910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.7 user=root 2020-04-25T14:21:55.046797sd-86998 sshd[30910]: Failed password for root from 222.186.42.7 p ... |
2020-04-25 20:25:06 |
| 59.10.5.156 | attackbotsspam | Apr 25 11:53:22 icinga sshd[27335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.10.5.156 Apr 25 11:53:24 icinga sshd[27335]: Failed password for invalid user db2fenc1 from 59.10.5.156 port 55142 ssh2 Apr 25 12:04:04 icinga sshd[44253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.10.5.156 ... |
2020-04-25 20:14:58 |
| 95.55.165.63 | attack | 0,31-05/33 [bc70/m157] PostRequest-Spammer scoring: Durban01 |
2020-04-25 19:51:12 |