城市(city): Dammam
省份(region): Ash Sharqiyah (Eastern Province)
国家(country): Saudi Arabia
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 51.223.8.249 | attack | Unauthorized connection attempt detected from IP address 51.223.8.249 to port 80 [J] |
2020-01-23 21:14:30 |
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '51.223.0.0 - 51.223.31.255'
% Abuse contact for '51.223.0.0 - 51.223.31.255' is 'registry@stc.com.sa'
inetnum: 51.223.0.0 - 51.223.31.255
netname: STC_FBB
country: SA
admin-c: STCR1-RIPE
tech-c: STCR2-RIPE
status: ASSIGNED PA
mnt-by: SAUDINET-STC
created: 2023-07-16T08:40:02Z
last-modified: 2023-07-16T08:40:02Z
source: RIPE
role: Saudi Telecom Co. Registry Admin-C contact
address: STC complex, murslat, Riyadh
address: P.O.Box: 295997
address: Riyadh 11351
address: Saudi Arabia
phone: +966-11-4525020
fax-no: +966114433639
abuse-mailbox: registry@stc.com.sa
admin-c: AR5383-RIPE
tech-c: AR5383-RIPE
remarks: For any Abuse or Spamming please send your requests directly to registry@stc.com.sa
mnt-by: SAUDINET-STC
nic-hdl: STCR1-RIPE
created: 2003-12-29T20:33:34Z
last-modified: 2015-11-04T06:35:37Z
source: RIPE # Filtered
role: Saudi Telecom Co. Registry Tech-C contact
address: Murslat Campus, Riyadh
address: P.O.Box: 295997
address: Riyadh 11351
address: Saudi Arabia
phone: +966114525020
fax-no: +966114433639
abuse-mailbox: registry@stc.com.sa
admin-c: STCR1-RIPE
tech-c: STCR1-RIPE
remarks: For any Abuse or Spamming please send your requests directly to registry@stc.com.sa
mnt-by: SAUDINET-STC
nic-hdl: STCR2-RIPE
created: 2003-12-29T20:56:08Z
last-modified: 2015-11-04T06:37:15Z
source: RIPE # Filtered
% Information related to '51.223.0.0/20AS25019'
route: 51.223.0.0/20
descr: Saudinet, Saudi Telecom Company ISP
origin: AS25019
mnt-by: SAUDINET-STC
created: 2017-05-10T05:55:19Z
last-modified: 2017-05-10T05:55:19Z
source: RIPE
% Information related to '51.223.0.0/20AS39386'
route: 51.223.0.0/20
descr: Saudinet, Saudi Telecom Company ISP
origin: AS39386
mnt-by: SAUDINET-STC
created: 2017-05-10T05:56:28Z
last-modified: 2017-05-10T05:56:28Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.121.2 (BUSA); <<>> DiG 9.10.3-P4-Ubuntu <<>> 51.223.8.32
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11285
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;51.223.8.32. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026041001 1800 900 604800 86400
;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Apr 11 14:28:39 CST 2026
;; MSG SIZE rcvd: 104Host 32.8.223.51.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 32.8.223.51.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 190.237.52.233 | attackspam | May 4 22:25:01 fed sshd[9071]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.237.52.233 May 4 22:25:03 fed sshd[9071]: Failed password for invalid user user1 from 190.237.52.233 port 54932 ssh2 |
2020-05-05 06:45:02 |
| 61.252.141.83 | attack | May 4 22:20:43 Ubuntu-1404-trusty-64-minimal sshd\[25978\]: Invalid user brix from 61.252.141.83 May 4 22:20:43 Ubuntu-1404-trusty-64-minimal sshd\[25978\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.252.141.83 May 4 22:20:45 Ubuntu-1404-trusty-64-minimal sshd\[25978\]: Failed password for invalid user brix from 61.252.141.83 port 28607 ssh2 May 4 22:30:01 Ubuntu-1404-trusty-64-minimal sshd\[30889\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.252.141.83 user=root May 4 22:30:03 Ubuntu-1404-trusty-64-minimal sshd\[30889\]: Failed password for root from 61.252.141.83 port 57049 ssh2 |
2020-05-05 06:44:48 |
| 122.170.5.123 | attackspam | DATE:2020-05-05 00:32:02, IP:122.170.5.123, PORT:ssh SSH brute force auth (docker-dc) |
2020-05-05 06:34:37 |
| 119.40.33.22 | attackspambots | (sshd) Failed SSH login from 119.40.33.22 (CN/China/-): 5 in the last 3600 secs |
2020-05-05 06:27:21 |
| 61.183.144.188 | attackbotsspam | $f2bV_matches |
2020-05-05 07:02:23 |
| 123.235.36.26 | attackspam | 2020-05-04T16:46:52.168295server.mjenks.net sshd[32201]: Invalid user t7inst from 123.235.36.26 port 44269 2020-05-04T16:46:52.175588server.mjenks.net sshd[32201]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.235.36.26 2020-05-04T16:46:52.168295server.mjenks.net sshd[32201]: Invalid user t7inst from 123.235.36.26 port 44269 2020-05-04T16:46:54.105570server.mjenks.net sshd[32201]: Failed password for invalid user t7inst from 123.235.36.26 port 44269 ssh2 2020-05-04T16:49:58.082398server.mjenks.net sshd[32550]: Invalid user tanya from 123.235.36.26 port 23345 ... |
2020-05-05 07:04:57 |
| 159.65.14.194 | attack | May 4 12:16:34 dns-1 sshd[26507]: Invalid user dorothea from 159.65.14.194 port 37239 May 4 12:16:34 dns-1 sshd[26507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.14.194 May 4 12:16:36 dns-1 sshd[26507]: Failed password for invalid user dorothea from 159.65.14.194 port 37239 ssh2 May 4 12:16:38 dns-1 sshd[26507]: Received disconnect from 159.65.14.194 port 37239:11: Bye Bye [preauth] May 4 12:16:38 dns-1 sshd[26507]: Disconnected from invalid user dorothea 159.65.14.194 port 37239 [preauth] May 4 12:18:33 dns-1 sshd[26614]: Invalid user lab from 159.65.14.194 port 63675 May 4 12:18:33 dns-1 sshd[26614]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.14.194 May 4 12:18:35 dns-1 sshd[26614]: Failed password for invalid user lab from 159.65.14.194 port 63675 ssh2 May 4 12:18:35 dns-1 sshd[26614]: Received disconnect from 159.65.14.194 port 63675:11: Bye Bye [preau........ ------------------------------- |
2020-05-05 06:31:15 |
| 111.229.15.130 | attack | 2020-05-04T17:16:23.087441server.mjenks.net sshd[35785]: Failed password for invalid user git from 111.229.15.130 port 37856 ssh2 2020-05-04T17:20:14.644012server.mjenks.net sshd[36248]: Invalid user wwwadmin from 111.229.15.130 port 38349 2020-05-04T17:20:14.651347server.mjenks.net sshd[36248]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.15.130 2020-05-04T17:20:14.644012server.mjenks.net sshd[36248]: Invalid user wwwadmin from 111.229.15.130 port 38349 2020-05-04T17:20:16.751955server.mjenks.net sshd[36248]: Failed password for invalid user wwwadmin from 111.229.15.130 port 38349 ssh2 ... |
2020-05-05 06:37:50 |
| 92.63.194.26 | attackbotsspam | attempting to connect to our DC |
2020-05-05 06:38:19 |
| 177.75.1.168 | attackbotsspam | PHISHING SPAM ! |
2020-05-05 06:32:12 |
| 114.143.141.98 | attackspam | May 5 08:20:01 web1 sshd[27453]: Invalid user dell from 114.143.141.98 port 33708 May 5 08:20:01 web1 sshd[27453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.143.141.98 May 5 08:20:01 web1 sshd[27453]: Invalid user dell from 114.143.141.98 port 33708 May 5 08:20:04 web1 sshd[27453]: Failed password for invalid user dell from 114.143.141.98 port 33708 ssh2 May 5 08:25:09 web1 sshd[28768]: Invalid user dsg from 114.143.141.98 port 57046 May 5 08:25:09 web1 sshd[28768]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.143.141.98 May 5 08:25:09 web1 sshd[28768]: Invalid user dsg from 114.143.141.98 port 57046 May 5 08:25:11 web1 sshd[28768]: Failed password for invalid user dsg from 114.143.141.98 port 57046 ssh2 May 5 08:29:01 web1 sshd[29625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.143.141.98 user=root May 5 08:29:03 web1 sshd[29625]: ... |
2020-05-05 06:47:02 |
| 116.196.90.116 | attack | May 4 23:33:45 host sshd[15187]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.90.116 user=root May 4 23:33:47 host sshd[15187]: Failed password for root from 116.196.90.116 port 60558 ssh2 ... |
2020-05-05 06:32:43 |
| 187.10.130.23 | attackspam | 1588623877 - 05/04/2020 22:24:37 Host: 187.10.130.23/187.10.130.23 Port: 445 TCP Blocked |
2020-05-05 07:00:14 |
| 198.108.67.22 | attackbotsspam | nft/Honeypot/22/73e86 |
2020-05-05 06:42:57 |
| 45.70.179.130 | attackbotsspam | 04.05.2020 22:25:14 - SMTP Spam without Auth on hMailserver Detected by ELinOX-hMail-A2F |
2020-05-05 06:38:53 |