City: unknown
Region: unknown
Country: Russia
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '5.255.231.0 - 5.255.231.255'
% Abuse contact for '5.255.231.0 - 5.255.231.255' is 'abuse@yandex.ru'
inetnum: 5.255.231.0 - 5.255.231.255
netname: YANDEX-5-255-231-0
status: ASSIGNED PA
country: RU
descr: Yandex enterprise network
mnt-by: YANDEX-MNT
admin-c: YNDX1-RIPE
tech-c: YNDX1-RIPE
org: ORG-YA1-RIPE
remarks: INFRA-AW
source: RIPE
created: 2020-11-10T09:34:26Z
last-modified: 2024-10-28T10:36:40Z
organisation: ORG-YA1-RIPE
org-name: YANDEX LLC
country: RU
org-type: LIR
address: LVA TOLSTOY STREET, 16
address: 119021
address: Moscow
address: RUSSIAN FEDERATION
phone: +74957397000
fax-no: +74957397070
admin-c: YNDX1-RIPE
tech-c: YNDX1-RIPE
abuse-c: YAH6-RIPE
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: YANDEX-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: YANDEX-MNT
created: 2004-04-22T14:39:02Z
last-modified: 2025-08-04T11:07:18Z
source: RIPE # Filtered
role: Yandex LLC Network Operations
address: Yandex LLC
address: 16, Leo Tolstoy St.
address: 119021
address: Moscow
address: Russian Federation
phone: +7 495 739 7000
fax-no: +7 495 739 7070
remarks: trouble: ------------------------------------------------------
remarks: trouble: Points of contact for Yandex LLC Network Operations
remarks: trouble: ------------------------------------------------------
remarks: trouble: Routing and peering issues: noc@yandex.net
remarks: trouble: SPAM issues: abuse@yandex.ru
remarks: trouble: Network security issues: abuse@yandex.ru
remarks: trouble: Mail issues: postmaster@yandex.ru
remarks: trouble: General information: info@yandex.ru
remarks: trouble: ------------------------------------------------------
admin-c: MK24579-RIPE
tech-c: EM3673-RIPE
tech-c: AUR2-RIPE
nic-hdl: YNDX1-RIPE
mnt-by: YANDEX-MNT
created: 2002-06-07T05:35:50Z
last-modified: 2025-12-30T09:47:31Z
source: RIPE # Filtered
abuse-mailbox: abuse@yandex.ru
% Information related to '5.255.192.0/18AS13238'
route: 5.255.192.0/18
descr: Yandex enterprise network
origin: AS13238
mnt-by: YANDEX-MNT
created: 2012-10-31T12:52:07Z
last-modified: 2012-10-31T12:52:07Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.121 (BUSA); <<>> DiG 9.10.3-P4-Ubuntu <<>> 5.255.231.198
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41314
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;5.255.231.198. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026030900 1800 900 604800 86400
;; Query time: 29 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 10 00:12:45 CST 2026
;; MSG SIZE rcvd: 106198.231.255.5.in-addr.arpa domain name pointer 5-255-231-198.spider.yandex.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
198.231.255.5.in-addr.arpa name = 5-255-231-198.spider.yandex.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.171.82.169 | attackspam | Oct 29 06:09:48 hcbbdb sshd\[26569\]: Invalid user dc from 222.171.82.169 Oct 29 06:09:48 hcbbdb sshd\[26569\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.171.82.169 Oct 29 06:09:51 hcbbdb sshd\[26569\]: Failed password for invalid user dc from 222.171.82.169 port 41702 ssh2 Oct 29 06:15:46 hcbbdb sshd\[27243\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.171.82.169 user=root Oct 29 06:15:48 hcbbdb sshd\[27243\]: Failed password for root from 222.171.82.169 port 60432 ssh2 |
2019-10-29 18:53:44 |
| 91.213.8.47 | attackspambots | SMB Server BruteForce Attack |
2019-10-29 19:09:35 |
| 40.77.167.53 | attackspam | Automatic report - Banned IP Access |
2019-10-29 18:39:29 |
| 113.110.231.153 | attackbots | [Tue Oct 29 16:09:10.168732 2019] [:error] [pid 16634:tid 140611390797568] [client 113.110.231.153:43364] [client 113.110.231.153] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "147"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/2.7"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "OWASP_CRS/AUTOMATION/SCRIPTING"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "staklim-malang.info"] [uri "/"] [unique_id "XbgBtk55y@WrV8yib8bkowAAAGI"] ... |
2019-10-29 18:40:15 |
| 46.38.144.32 | attackbots | Oct 29 11:42:01 webserver postfix/smtpd\[25280\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 29 11:43:20 webserver postfix/smtpd\[26452\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 29 11:44:37 webserver postfix/smtpd\[25280\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 29 11:45:53 webserver postfix/smtpd\[25280\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 29 11:47:09 webserver postfix/smtpd\[25280\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-10-29 18:52:53 |
| 51.91.158.136 | attackbots | Oct 28 08:14:11 h1637304 sshd[16561]: Failed password for r.r from 51.91.158.136 port 49734 ssh2 Oct 28 08:14:11 h1637304 sshd[16561]: Received disconnect from 51.91.158.136: 11: Bye Bye [preauth] Oct 28 08:32:04 h1637304 sshd[2479]: Failed password for invalid user upload from 51.91.158.136 port 60308 ssh2 Oct 28 08:32:04 h1637304 sshd[2479]: Received disconnect from 51.91.158.136: 11: Bye Bye [preauth] Oct 28 08:37:16 h1637304 sshd[7103]: Failed password for r.r from 51.91.158.136 port 42800 ssh2 Oct 28 08:37:16 h1637304 sshd[7103]: Received disconnect from 51.91.158.136: 11: Bye Bye [preauth] Oct 28 08:41:59 h1637304 sshd[12133]: Failed password for r.r from 51.91.158.136 port 53504 ssh2 Oct 28 08:42:00 h1637304 sshd[12133]: Received disconnect from 51.91.158.136: 11: Bye Bye [preauth] Oct 28 08:46:22 h1637304 sshd[17236]: Failed password for invalid user mini from 51.91.158.136 port 35980 ssh2 Oct 28 08:46:22 h1637304 sshd[17236]: Received disconnect from 51.91.158......... ------------------------------- |
2019-10-29 19:14:36 |
| 217.113.28.7 | attackspam | Oct 29 10:45:35 vps58358 sshd\[10048\]: Invalid user xinchuanbo2010 from 217.113.28.7Oct 29 10:45:38 vps58358 sshd\[10048\]: Failed password for invalid user xinchuanbo2010 from 217.113.28.7 port 38783 ssh2Oct 29 10:49:52 vps58358 sshd\[10097\]: Invalid user hcidc123654 from 217.113.28.7Oct 29 10:49:54 vps58358 sshd\[10097\]: Failed password for invalid user hcidc123654 from 217.113.28.7 port 58516 ssh2Oct 29 10:54:18 vps58358 sshd\[10116\]: Invalid user voicemaster from 217.113.28.7Oct 29 10:54:19 vps58358 sshd\[10116\]: Failed password for invalid user voicemaster from 217.113.28.7 port 50017 ssh2 ... |
2019-10-29 19:03:31 |
| 149.0.154.222 | attackspambots | [portscan] tcp/23 [TELNET] in spfbl.net:'listed' *(RWIN=31662)(10291152) |
2019-10-29 19:00:00 |
| 182.253.196.66 | attackbotsspam | Oct 29 14:06:07 itv-usvr-01 sshd[19118]: Invalid user nl from 182.253.196.66 Oct 29 14:06:07 itv-usvr-01 sshd[19118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.253.196.66 Oct 29 14:06:07 itv-usvr-01 sshd[19118]: Invalid user nl from 182.253.196.66 Oct 29 14:06:09 itv-usvr-01 sshd[19118]: Failed password for invalid user nl from 182.253.196.66 port 47676 ssh2 Oct 29 14:10:21 itv-usvr-01 sshd[19399]: Invalid user liubov from 182.253.196.66 |
2019-10-29 19:09:11 |
| 162.247.74.202 | attackbotsspam | Oct 29 04:46:09 serwer sshd\[10828\]: Invalid user advanced from 162.247.74.202 port 35528 Oct 29 04:46:09 serwer sshd\[10828\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.247.74.202 Oct 29 04:46:11 serwer sshd\[10828\]: Failed password for invalid user advanced from 162.247.74.202 port 35528 ssh2 ... |
2019-10-29 18:57:18 |
| 84.42.253.252 | attack | Automatic report - XMLRPC Attack |
2019-10-29 19:06:58 |
| 46.38.144.202 | attack | 2019-10-29T12:00:35.179043mail01 postfix/smtpd[32507]: warning: unknown[46.38.144.202]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-10-29T12:00:36.179101mail01 postfix/smtpd[6442]: warning: unknown[46.38.144.202]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-10-29T12:01:02.079931mail01 postfix/smtpd[32507]: warning: unknown[46.38.144.202]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-10-29 19:04:52 |
| 159.203.73.181 | attackspambots | Invalid user deutsche from 159.203.73.181 port 39827 |
2019-10-29 18:55:45 |
| 138.197.151.248 | attackbotsspam | Oct 29 11:02:02 * sshd[13195]: Failed password for root from 138.197.151.248 port 46230 ssh2 Oct 29 11:07:08 * sshd[13778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.151.248 |
2019-10-29 19:13:58 |
| 49.88.112.66 | attackbots | Oct 29 12:15:20 pkdns2 sshd\[51509\]: Failed password for root from 49.88.112.66 port 14721 ssh2Oct 29 12:15:43 pkdns2 sshd\[51511\]: Failed password for root from 49.88.112.66 port 25552 ssh2Oct 29 12:16:15 pkdns2 sshd\[51535\]: Failed password for root from 49.88.112.66 port 32820 ssh2Oct 29 12:16:45 pkdns2 sshd\[51542\]: Failed password for root from 49.88.112.66 port 26902 ssh2Oct 29 12:16:48 pkdns2 sshd\[51542\]: Failed password for root from 49.88.112.66 port 26902 ssh2Oct 29 12:16:50 pkdns2 sshd\[51542\]: Failed password for root from 49.88.112.66 port 26902 ssh2 ... |
2019-10-29 18:41:20 |