City: unknown
Region: unknown
Country: Turkey
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '2.56.152.0 - 2.56.155.255'
% Abuse contact for '2.56.152.0 - 2.56.155.255' is 'abuse@hizhosting.com'
inetnum: 2.56.152.0 - 2.56.155.255
netname: TR-HIZHOSTING-20190314
mnt-routes: tr-hizhosting-1-mnt
country: TR
abuse-c: ACRO54824-RIPE
org: ORG-CBHI1-RIPE
admin-c: CC17922-RIPE
tech-c: CC17922-RIPE
status: ALLOCATED PA
mnt-by: tr-hizhosting-1-mnt
mnt-by: RIPE-NCC-HM-MNT
created: 2022-10-12T08:10:44Z
last-modified: 2023-11-29T22:44:42Z
source: RIPE
organisation: ORG-CBHI1-RIPE
org-name: CNC BILISIM HIZMETLERI INSAAT SANAYI VE TICARET LIMITED SIRKETI
country: TR
org-type: LIR
address: Grsel Mah Namzet Sok No: 15 Eksioglu Plaza
address: 34384
address: Istanbul
address: TURKEY
phone: +908505330262
fax-no: +902122103400
language: TR
admin-c: CBHI2-RIPE
tech-c: CBHI2-RIPE
abuse-c: CBHI2-RIPE
mnt-ref: tr-hizhosting-1-mnt
mnt-ref: GEO-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: tr-hizhosting-1-mnt
created: 2018-01-18T12:41:40Z
last-modified: 2023-11-29T22:12:10Z
source: RIPE # Filtered
person: Caner CAKI
address: Grsel Mah Namzet Sok No: 15 Eksioglu Plaza
address: 34384
address: Istanbul
address: TURKEY
phone: +908505330262
nic-hdl: CC17922-RIPE
mnt-by: tr-hizhosting-1-mnt
created: 2018-01-18T12:41:40Z
last-modified: 2018-01-18T12:41:40Z
source: RIPE
% Information related to '2.56.152.0/24AS207709'
route: 2.56.152.0/24
origin: AS207709
mnt-by: mnt-tr-cncbilisimhizmetleri-1
created: 2022-12-19T19:18:50Z
last-modified: 2022-12-19T19:18:50Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.121.2 (BUSA); <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.56.152.27
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38070
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;2.56.152.27. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026041702 1800 900 604800 86400
;; Query time: 33 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Apr 18 03:48:39 CST 2026
;; MSG SIZE rcvd: 10427.152.56.2.in-addr.arpa domain name pointer mail.whitedisticaret.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
27.152.56.2.in-addr.arpa name = mail.whitedisticaret.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 24.121.238.21 | attackspambots | Automatic report - Port Scan Attack |
2020-09-19 05:26:38 |
| 222.186.180.17 | attackbotsspam | Fail2Ban Ban Triggered (2) |
2020-09-19 05:42:34 |
| 85.209.0.253 | attackbotsspam | ... |
2020-09-19 05:23:05 |
| 103.3.188.119 | attack | 20 attempts against mh-ssh on pluto |
2020-09-19 05:43:16 |
| 94.102.51.28 | attackbots | Sep 18 22:57:23 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.51.28 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=20357 PROTO=TCP SPT=51127 DPT=45783 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 18 23:02:17 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.51.28 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=8605 PROTO=TCP SPT=51127 DPT=44420 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 18 23:13:09 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.51.28 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=40532 PROTO=TCP SPT=51127 DPT=59284 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 18 23:13:46 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.51.28 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=11627 PROTO=TCP SPT=51127 DPT=46727 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 18 23:13:47 *hidd ... |
2020-09-19 05:18:13 |
| 222.186.173.226 | attack | Fail2Ban Ban Triggered (2) |
2020-09-19 05:27:53 |
| 213.27.211.172 | attackspambots | Unauthorized connection attempt from IP address 213.27.211.172 on Port 445(SMB) |
2020-09-19 05:16:30 |
| 132.247.147.98 | attackbotsspam | Unauthorized connection attempt from IP address 132.247.147.98 on Port 445(SMB) |
2020-09-19 05:40:50 |
| 49.7.14.184 | attackspambots | Sep 18 18:59:37 prod4 sshd\[5046\]: Failed password for root from 49.7.14.184 port 32960 ssh2 Sep 18 19:00:50 prod4 sshd\[5660\]: Failed password for root from 49.7.14.184 port 44030 ssh2 Sep 18 19:02:00 prod4 sshd\[6116\]: Failed password for root from 49.7.14.184 port 55098 ssh2 ... |
2020-09-19 05:30:09 |
| 72.19.15.32 | attackspambots | Spam |
2020-09-19 05:10:19 |
| 193.35.51.23 | attack | Sep 18 23:33:36 galaxy event: galaxy/lswi: smtp: manuela@wirtschaftsinformatik-potsdam.de [193.35.51.23] authentication failure using internet password Sep 18 23:33:38 galaxy event: galaxy/lswi: smtp: manuela [193.35.51.23] authentication failure using internet password Sep 18 23:33:39 galaxy event: galaxy/lswi: smtp: niklas@wirtschaftsinformatik-potsdam.de [193.35.51.23] authentication failure using internet password Sep 18 23:33:40 galaxy event: galaxy/lswi: smtp: niklas [193.35.51.23] authentication failure using internet password Sep 18 23:33:46 galaxy event: galaxy/lswi: smtp: katja@wirtschaftsinformatik-potsdam.de [193.35.51.23] authentication failure using internet password ... |
2020-09-19 05:38:59 |
| 189.81.38.250 | attackspam | SSH brutforce |
2020-09-19 05:39:18 |
| 178.33.175.49 | attack | Invalid user wildfly from 178.33.175.49 port 34516 |
2020-09-19 05:24:54 |
| 23.95.96.84 | attack | Sep 18 17:39:02 email sshd\[18740\]: Invalid user deployer from 23.95.96.84 Sep 18 17:39:02 email sshd\[18740\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.95.96.84 Sep 18 17:39:04 email sshd\[18740\]: Failed password for invalid user deployer from 23.95.96.84 port 53822 ssh2 Sep 18 17:45:00 email sshd\[19860\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.95.96.84 user=root Sep 18 17:45:02 email sshd\[19860\]: Failed password for root from 23.95.96.84 port 40632 ssh2 ... |
2020-09-19 05:12:17 |
| 159.65.184.79 | attackbotsspam | 159.65.184.79 - - [18/Sep/2020:22:26:06 +0100] "POST /wp-login.php HTTP/1.1" 200 2252 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 159.65.184.79 - - [18/Sep/2020:22:26:07 +0100] "POST /wp-login.php HTTP/1.1" 200 2231 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 159.65.184.79 - - [18/Sep/2020:22:26:08 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-09-19 05:27:32 |