City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '84.200.16.0 - 84.200.16.255'
% Abuse contact for '84.200.16.0 - 84.200.16.255' is 'u-abuse@ultahost.com'
inetnum: 84.200.16.0 - 84.200.16.255
netname: ULTAHOST
country: DE
remarks: UltaHost Inc
org: ORG-UI47-RIPE
admin-c: UI48110-RIPE
tech-c: COLO-RIPE
abuse-c: UI48110-RIPE
mnt-by: ACCELERATED-MNT
status: ASSIGNED PA
created: 2025-09-03T10:00:18Z
last-modified: 2025-09-03T10:17:37Z
source: RIPE
organisation: ORG-UI47-RIPE
org-name: UltaHost Inc
org-type: OTHER
address: 651 N Broad St. Suite 206, 19709 Middletown/Delaware, USA
country: US
abuse-c: UI48110-RIPE
mnt-ref: MNT-FIRSTCOLO
mnt-by: MNT-FIRSTCOLO
created: 2025-09-03T10:16:14Z
last-modified: 2025-09-03T10:16:14Z
source: RIPE # Filtered
role: First Colo Ripe Coordination
address: First Colo GmbH
address: Hanauer Landstr. 291b
address: D-60314 Frankfurt am Main
address: Germany
phone: +49-(0)69-120069-0
fax-no: +49-(0)69-120069-55
abuse-mailbox: abuse@first-colo.net
remarks:
remarks: * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
remarks: * Complaints about internet abuse like spam, hack attacks, scans, etc. *
remarks: * please mail to: --> abuse [@] first-colo [.] net <-- *
remarks: * Requests from law enforcement (only!), send fax to: +49 (0) 69 1200 69 55 *
remarks: * Inquiries can only be processed, if sent to the correct address. *
remarks: * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
remarks:
admin-c: LEKR-RIPE
admin-c: NKA-RIPE
tech-c: LEKR-RIPE
tech-c: NKA-RIPE
nic-hdl: COLO-RIPE
mnt-by: MNT-FIRSTCOLO
created: 2007-09-28T19:01:39Z
last-modified: 2021-01-27T12:48:26Z
source: RIPE # Filtered
role: UltaHost Inc
address: 651 N Broad St. Suite 206, 19709 Middletown/Delaware, USA
abuse-mailbox: u-abuse@ultahost.com
nic-hdl: UI48110-RIPE
mnt-by: MNT-FIRSTCOLO
mnt-by: ACCELERATED-MNT
created: 2025-09-03T09:52:16Z
last-modified: 2025-09-03T09:52:16Z
source: RIPE # Filtered
% Information related to '84.200.16.0/24AS214036'
route: 84.200.16.0/24
origin: AS214036
mnt-by: MNT-FIRSTCOLO
created: 2025-08-29T12:56:32Z
last-modified: 2025-08-29T12:56:32Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.124.1 (SHETLAND); <<>> DiG 9.10.3-P4-Ubuntu <<>> 84.200.16.127
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21169
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;84.200.16.127. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026090402 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Sep 05 13:00:45 CST 2026
;; MSG SIZE rcvd: 106Host 127.16.200.84.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 127.16.200.84.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 14.234.112.32 | attackbots | Attempt to attack host OS, exploiting network vulnerabilities, on 26-11-2019 06:25:37. |
2019-11-26 18:17:40 |
| 171.250.97.84 | attack | Attempt to attack host OS, exploiting network vulnerabilities, on 26-11-2019 06:25:38. |
2019-11-26 18:13:51 |
| 117.214.4.97 | attack | Fail2Ban Ban Triggered |
2019-11-26 18:20:23 |
| 123.19.119.3 | attackspambots | Attempt to attack host OS, exploiting network vulnerabilities, on 26-11-2019 06:25:35. |
2019-11-26 18:19:49 |
| 171.100.3.58 | attackspam | Attempt to attack host OS, exploiting network vulnerabilities, on 26-11-2019 06:25:37. |
2019-11-26 18:15:15 |
| 222.252.118.216 | attack | Attempt to attack host OS, exploiting network vulnerabilities, on 26-11-2019 06:25:43. |
2019-11-26 18:04:47 |
| 180.183.57.91 | attackbots | Attempt to attack host OS, exploiting network vulnerabilities, on 26-11-2019 06:25:39. |
2019-11-26 18:12:29 |
| 140.143.59.171 | attackspambots | Nov 26 09:17:13 thevastnessof sshd[25377]: Failed password for invalid user soidc from 140.143.59.171 port 16246 ssh2 ... |
2019-11-26 18:14:28 |
| 115.110.207.116 | attack | Nov 26 10:13:48 localhost sshd\[120952\]: Invalid user guest from 115.110.207.116 port 39806 Nov 26 10:13:48 localhost sshd\[120952\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.110.207.116 Nov 26 10:13:49 localhost sshd\[120952\]: Failed password for invalid user guest from 115.110.207.116 port 39806 ssh2 Nov 26 10:21:08 localhost sshd\[121138\]: Invalid user max from 115.110.207.116 port 47784 Nov 26 10:21:08 localhost sshd\[121138\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.110.207.116 ... |
2019-11-26 18:27:54 |
| 1.1.203.58 | attackbots | Attempt to attack host OS, exploiting network vulnerabilities, on 26-11-2019 06:25:26. |
2019-11-26 18:33:59 |
| 190.19.77.250 | attackspam | Brute force attempt |
2019-11-26 18:18:21 |
| 202.137.142.28 | attackspam | Email IMAP login failure |
2019-11-26 18:15:48 |
| 181.123.90.147 | attack | Nov 26 05:29:33 ahost sshd[9215]: reveeclipse mapping checking getaddrinfo for pool-147-90-123-181.telecel.com.py [181.123.90.147] failed - POSSIBLE BREAK-IN ATTEMPT! Nov 26 05:29:33 ahost sshd[9215]: Invalid user schymanietz from 181.123.90.147 Nov 26 05:29:33 ahost sshd[9215]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.123.90.147 Nov 26 05:29:36 ahost sshd[9215]: Failed password for invalid user schymanietz from 181.123.90.147 port 55222 ssh2 Nov 26 05:29:36 ahost sshd[9215]: Received disconnect from 181.123.90.147: 11: Bye Bye [preauth] Nov 26 05:54:58 ahost sshd[11539]: reveeclipse mapping checking getaddrinfo for pool-147-90-123-181.telecel.com.py [181.123.90.147] failed - POSSIBLE BREAK-IN ATTEMPT! Nov 26 05:54:58 ahost sshd[11539]: Invalid user apache from 181.123.90.147 Nov 26 05:54:58 ahost sshd[11539]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.123.90.147 Nov 26 ........ ------------------------------ |
2019-11-26 18:23:27 |
| 103.123.43.42 | attackspambots | Attempt to attack host OS, exploiting network vulnerabilities, on 26-11-2019 06:25:27. |
2019-11-26 18:32:23 |
| 193.8.82.16 | attack | Nov 26 15:23:50 w sshd[10130]: Invalid user grigor from 193.8.82.16 Nov 26 15:23:50 w sshd[10130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.8.82.16 Nov 26 15:23:52 w sshd[10130]: Failed password for invalid user grigor from 193.8.82.16 port 46890 ssh2 Nov 26 15:23:52 w sshd[10130]: Received disconnect from 193.8.82.16: 11: Bye Bye [preauth] Nov 26 16:03:38 w sshd[10474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.8.82.16 user=r.r Nov 26 16:03:40 w sshd[10474]: Failed password for r.r from 193.8.82.16 port 49960 ssh2 Nov 26 16:03:40 w sshd[10474]: Received disconnect from 193.8.82.16: 11: Bye Bye [preauth] Nov 26 16:11:04 w sshd[10598]: Invalid user ankeny from 193.8.82.16 Nov 26 16:11:04 w sshd[10598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.8.82.16 Nov 26 16:11:07 w sshd[10598]: Failed password for invalid user anken........ ------------------------------- |
2019-11-26 18:30:46 |