City: Al Qaţīf
Region: Ash Sharqiyah (Eastern Province)
Country: Saudi Arabia
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#
NetRange: 159.0.0.0 - 159.0.255.255
CIDR: 159.0.0.0/16
NetName: RIPE-ERX-159-0-0-0
NetHandle: NET-159-0-0-0-1
Parent: NET159 (NET-159-0-0-0-0)
NetType: Early Registrations, Transferred to RIPE NCC
OriginAS:
Organization: RIPE Network Coordination Centre (RIPE)
RegDate: 2010-11-03
Updated: 2025-02-10
Comment: These addresses have been further assigned to users in the RIPE NCC region. Please note that the organization and point of contact details listed below are those of the RIPE NCC not the current address holder. ** You can find user contact information for the current address holder in the RIPE database at http://www.ripe.net/whois.
Ref: https://rdap.arin.net/registry/ip/159.0.0.0
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
ResourceLink: whois.ripe.net
OrgName: RIPE Network Coordination Centre
OrgId: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL
RegDate:
Updated: 2013-07-29
Ref: https://rdap.arin.net/registry/entity/RIPE
ReferralServer: whois.ripe.net
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
OrgAbuseHandle: ABUSE3850-ARIN
OrgAbuseName: Abuse Contact
OrgAbusePhone: +31205354444
OrgAbuseEmail: abuse@ripe.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3850-ARIN
OrgTechHandle: RNO29-ARIN
OrgTechName: RIPE NCC Operations
OrgTechPhone: +31 20 535 4444
OrgTechEmail: hostmaster@ripe.net
OrgTechRef: https://rdap.arin.net/registry/entity/RNO29-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 159.0.75.209
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52802
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;159.0.75.209. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025101000 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 10 23:24:23 CST 2025
;; MSG SIZE rcvd: 105Host 209.75.0.159.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 209.75.0.159.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 27.72.21.154 | attackbots | Unauthorized connection attempt from IP address 27.72.21.154 on Port 445(SMB) |
2019-10-20 23:24:32 |
| 195.140.224.4 | attackbots | Unauthorized connection attempt from IP address 195.140.224.4 on Port 445(SMB) |
2019-10-20 23:30:23 |
| 111.93.4.174 | attackspambots | Failed password for invalid user stevef from 111.93.4.174 port 33914 ssh2 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.93.4.174 user=root Failed password for root from 111.93.4.174 port 42614 ssh2 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.93.4.174 user=root Failed password for root from 111.93.4.174 port 51304 ssh2 |
2019-10-21 00:14:34 |
| 39.35.12.212 | attack | Unauthorized connection attempt from IP address 39.35.12.212 on Port 445(SMB) |
2019-10-21 00:14:54 |
| 49.75.76.23 | attackspambots | Oct 20 13:56:18 mxgate1 postfix/postscreen[6839]: CONNECT from [49.75.76.23]:52877 to [176.31.12.44]:25 Oct 20 13:56:18 mxgate1 postfix/dnsblog[6952]: addr 49.75.76.23 listed by domain zen.spamhaus.org as 127.0.0.11 Oct 20 13:56:18 mxgate1 postfix/dnsblog[6953]: addr 49.75.76.23 listed by domain b.barracudacentral.org as 127.0.0.2 Oct 20 13:56:24 mxgate1 postfix/postscreen[6839]: DNSBL rank 3 for [49.75.76.23]:52877 Oct x@x Oct 20 13:56:25 mxgate1 postfix/postscreen[6839]: HANGUP after 1.3 from [49.75.76.23]:52877 in tests after SMTP handshake Oct 20 13:56:25 mxgate1 postfix/postscreen[6839]: DISCONNECT [49.75.76.23]:52877 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=49.75.76.23 |
2019-10-20 23:09:36 |
| 159.89.91.20 | attackspambots | port scan and connect, tcp 23 (telnet) |
2019-10-21 00:09:40 |
| 197.50.37.253 | attackbots | Unauthorized connection attempt from IP address 197.50.37.253 on Port 445(SMB) |
2019-10-20 23:16:56 |
| 46.38.144.146 | attack | Oct 20 17:02:54 relay postfix/smtpd\[8531\]: warning: unknown\[46.38.144.146\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 20 17:03:32 relay postfix/smtpd\[29121\]: warning: unknown\[46.38.144.146\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 20 17:04:13 relay postfix/smtpd\[1343\]: warning: unknown\[46.38.144.146\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 20 17:04:51 relay postfix/smtpd\[30173\]: warning: unknown\[46.38.144.146\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 20 17:05:32 relay postfix/smtpd\[8583\]: warning: unknown\[46.38.144.146\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-10-20 23:07:36 |
| 216.218.206.74 | attackbots | firewall-block, port(s): 548/tcp |
2019-10-21 00:01:49 |
| 185.176.27.242 | attackspambots | Oct 20 17:54:39 mc1 kernel: \[2873235.953164\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.242 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=3059 PROTO=TCP SPT=47834 DPT=14365 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 20 17:58:02 mc1 kernel: \[2873439.019882\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.242 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=2187 PROTO=TCP SPT=47834 DPT=55036 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 20 17:59:23 mc1 kernel: \[2873519.930095\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.242 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=52250 PROTO=TCP SPT=47834 DPT=24038 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-10-21 00:12:04 |
| 92.207.166.44 | attackbots | Automatic report - Banned IP Access |
2019-10-21 00:12:36 |
| 188.130.173.9 | attackspam | [portscan] Port scan |
2019-10-20 23:05:07 |
| 79.11.50.196 | attackspambots | Unauthorized connection attempt from IP address 79.11.50.196 on Port 445(SMB) |
2019-10-20 23:43:31 |
| 189.4.2.30 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/189.4.2.30/ BR - 1H : (307) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : BR NAME ASN : ASN28573 IP : 189.4.2.30 CIDR : 189.4.0.0/22 PREFIX COUNT : 1254 UNIQUE IP COUNT : 9653760 ATTACKS DETECTED ASN28573 : 1H - 2 3H - 5 6H - 5 12H - 11 24H - 22 DateTime : 2019-10-20 14:01:43 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-10-20 23:25:10 |
| 14.231.246.170 | attack | Unauthorized connection attempt from IP address 14.231.246.170 on Port 445(SMB) |
2019-10-20 23:13:17 |