City: unknown
Region: Nordrhein-Westfalen
Country: Germany
Internet Service Provider: Telekom
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '87.78.0.0 - 87.79.255.255'
% Abuse contact for '87.78.0.0 - 87.79.255.255' is 'abuse@netcologne.de'
inetnum: 87.78.0.0 - 87.79.255.255
netname: DE-NETCOLOGNE-20050531
country: DE
org: ORG-NG11-RIPE
admin-c: MR111-RIPE
admin-c: MA1830-RIPE
tech-c: MA1830-RIPE
tech-c: MR111-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-by: NETCOLOGNE-MNT
mnt-routes: NETCOLOGNE-MNT
created: 2005-05-31T15:50:41Z
last-modified: 2016-11-10T16:45:04Z
source: RIPE # Filtered
organisation: ORG-NG11-RIPE
org-name: NetCologne Gesellschaft fur Telekommunikation mbH
country: DE
reg-nr: District court Kln HRB 25580
org-type: LIR
address: Am Coloneum 9
address: 50829
address: Koeln
address: GERMANY
phone: +49 221 2222 0
fax-no: +49 221 2222 5330
admin-c: MR111-RIPE
admin-c: MA1830-RIPE
admin-c: MIS93-RIPE
admin-c: PL9622-RIPE
admin-c: HS10483-RIPE
admin-c: EV4291-RIPE
mnt-ref: NETCOLOGNE-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: NETCOLOGNE-MNT
abuse-c: ACN23-RIPE
created: 2004-04-17T11:10:37Z
last-modified: 2026-05-13T07:23:53Z
source: RIPE # Filtered
person: Michael Adams
address: NetCologne GmbH
address: Am Coloneum 9
address: D-50829 Koeln
address: GERMANY
phone: +49-221-2222-0
fax-no: +49-221-2222-7657
nic-hdl: MA1830-RIPE
remarks: + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
remarks: + +
remarks: + Dear Personal-Firewall-User, +
remarks: + +
remarks: + if this record is shown to you by your firewall please +
remarks: + notice this record does not indicate the name or the +
remarks: + address of the offender attacking your PC. +
remarks: + +
remarks: + This database entry points to a technical contact for +
remarks: + the IP space of NetCologne (AS8422). So don't waste +
remarks: + your time with sending complaints to me. +
remarks: + +
remarks: + If you are certain about a network abuse originating +
remarks: + from an IP address assigned to NetCologne please contact +
remarks: + +
remarks: + +
remarks: + abuse@netcologne.de +
remarks: + +
remarks: + or just visit +
remarks: + +
remarks: + http://www.netcologne.de/abuse/ +
remarks: + +
remarks: + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
mnt-by: NETCOLOGNE-MNT
created: 1970-01-01T00:00:00Z
last-modified: 2017-10-30T21:45:10Z
source: RIPE # Filtered
person: Michael Ruesel
address: NetCologne GmbH
address: Am Coloneum 9
address: D-50829 Koeln
address: Germany
phone: +49 221 2222 0
fax-no: +49 221 2222 7212
nic-hdl: MR111-RIPE
remarks: + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
remarks: + abuse@netcologne.de is contact for criminal use, spam, etc. +
remarks: + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
mnt-by: NETCOLOGNE-MNT
created: 1970-01-01T00:00:00Z
last-modified: 2017-10-30T21:45:09Z
source: RIPE # Filtered
% Information related to '87.78.0.0/15AS8422'
route: 87.78.0.0/15
descr: NetCologne PA space
origin: AS8422
mnt-by: NETCOLOGNE-MNT
created: 2005-06-01T08:35:24Z
last-modified: 2005-06-01T08:35:24Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.123 (ABERDEEN); <<>> DiG 9.10.3-P4-Ubuntu <<>> 87.79.19.214
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14857
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;87.79.19.214. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026082000 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Aug 20 23:18:34 CST 2026
;; MSG SIZE rcvd: 105Host 214.19.79.87.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 214.19.79.87.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 212.166.68.146 | attackspambots | Jul 19 00:52:01 *hidden* sshd[31757]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.166.68.146 Jul 19 00:52:03 *hidden* sshd[31757]: Failed password for invalid user oracle from 212.166.68.146 port 46844 ssh2 Jul 19 00:59:55 *hidden* sshd[616]: Invalid user gc from 212.166.68.146 port 50056 |
2020-07-19 22:59:53 |
| 212.83.141.237 | attack | Jul 19 11:18:33 vmd26974 sshd[22848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.83.141.237 Jul 19 11:18:35 vmd26974 sshd[22848]: Failed password for invalid user sangeeta from 212.83.141.237 port 35376 ssh2 ... |
2020-07-19 22:33:52 |
| 159.65.84.164 | attackbots | Jul 19 06:27:25 master sshd[28529]: Failed password for invalid user buh from 159.65.84.164 port 44456 ssh2 Jul 19 06:31:20 master sshd[28960]: Failed password for invalid user ali from 159.65.84.164 port 59840 ssh2 Jul 19 06:35:17 master sshd[28978]: Failed password for invalid user testuser from 159.65.84.164 port 46998 ssh2 Jul 19 06:40:49 master sshd[29072]: Failed password for invalid user ftpuser from 159.65.84.164 port 34166 ssh2 Jul 19 06:44:46 master sshd[29094]: Failed password for invalid user sport from 159.65.84.164 port 49538 ssh2 Jul 19 06:48:39 master sshd[29152]: Failed password for invalid user sjj from 159.65.84.164 port 36690 ssh2 Jul 19 06:52:43 master sshd[29212]: Failed password for invalid user abc from 159.65.84.164 port 52076 ssh2 Jul 19 06:56:44 master sshd[29234]: Failed password for invalid user alyona from 159.65.84.164 port 39228 ssh2 Jul 19 07:00:35 master sshd[29665]: Failed password for invalid user kw from 159.65.84.164 port 54612 ssh2 |
2020-07-19 22:56:39 |
| 182.61.44.177 | attackbots | no |
2020-07-19 22:54:42 |
| 18.196.153.246 | attack | 2020-07-19T16:27:21.3824761240 sshd\[5087\]: Invalid user kafka from 18.196.153.246 port 54960 2020-07-19T16:27:21.3865211240 sshd\[5087\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.196.153.246 2020-07-19T16:27:22.7250301240 sshd\[5087\]: Failed password for invalid user kafka from 18.196.153.246 port 54960 ssh2 ... |
2020-07-19 22:43:00 |
| 121.132.168.184 | attack | Jul 19 14:43:11 vps-51d81928 sshd[88324]: Invalid user admin1 from 121.132.168.184 port 59468 Jul 19 14:43:11 vps-51d81928 sshd[88324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.132.168.184 Jul 19 14:43:11 vps-51d81928 sshd[88324]: Invalid user admin1 from 121.132.168.184 port 59468 Jul 19 14:43:13 vps-51d81928 sshd[88324]: Failed password for invalid user admin1 from 121.132.168.184 port 59468 ssh2 Jul 19 14:47:56 vps-51d81928 sshd[88456]: Invalid user user02 from 121.132.168.184 port 46968 ... |
2020-07-19 22:56:15 |
| 51.178.83.124 | attack | 2020-07-19T13:57:56.392251shield sshd\[25347\]: Invalid user servicedesk from 51.178.83.124 port 46510 2020-07-19T13:57:56.402495shield sshd\[25347\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.ip-51-178-83.eu 2020-07-19T13:57:58.448711shield sshd\[25347\]: Failed password for invalid user servicedesk from 51.178.83.124 port 46510 ssh2 2020-07-19T14:01:53.324332shield sshd\[25733\]: Invalid user tzhang from 51.178.83.124 port 60428 2020-07-19T14:01:53.336001shield sshd\[25733\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.ip-51-178-83.eu |
2020-07-19 22:49:14 |
| 91.132.85.110 | attack | Wordpress_xmlrpc_attack |
2020-07-19 22:44:10 |
| 103.85.85.186 | attackbotsspam | [ssh] SSH attack |
2020-07-19 22:32:52 |
| 46.38.150.132 | attack | Jul 19 12:17:05 statusweb1.srvfarm.net postfix/smtpd[18082]: warning: unknown[46.38.150.132]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 19 12:17:32 statusweb1.srvfarm.net postfix/smtpd[18082]: warning: unknown[46.38.150.132]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 19 12:17:59 statusweb1.srvfarm.net postfix/smtpd[18082]: warning: unknown[46.38.150.132]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 19 12:18:26 statusweb1.srvfarm.net postfix/smtpd[18082]: warning: unknown[46.38.150.132]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 19 12:18:53 statusweb1.srvfarm.net postfix/smtpd[18082]: warning: unknown[46.38.150.132]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-07-19 22:42:26 |
| 88.214.26.97 | attackspambots | Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-07-19T11:28:14Z and 2020-07-19T13:19:43Z |
2020-07-19 22:59:38 |
| 185.244.27.83 | attackbots | spam |
2020-07-19 22:58:02 |
| 46.245.222.203 | attack | Jul 19 05:34:10 mockhub sshd[6656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.245.222.203 Jul 19 05:34:11 mockhub sshd[6656]: Failed password for invalid user subrat from 46.245.222.203 port 56982 ssh2 ... |
2020-07-19 22:42:02 |
| 102.69.229.87 | attack | Brute force attempt |
2020-07-19 22:44:36 |
| 223.149.182.116 | attack | Automatic report - Port Scan Attack |
2020-07-19 22:58:42 |