City: Riyadh
Region: Ar Riyad
Country: Saudi Arabia
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '78.111.110.0 - 78.111.110.255'
% Abuse contact for '78.111.110.0 - 78.111.110.255' is 'abuse@gcore.lu'
inetnum: 78.111.110.0 - 78.111.110.255
descr: G-Core Labs Customer assignment
netname: GCL-CUSTOMER-SA
country: SA
geofeed: https://geofeed.gcore.lu/IP-Range.csv
admin-c: LA5122-RIPE
tech-c: LA5122-RIPE
status: ASSIGNED PA
geoloc: 24.71805 46.64639
mnt-by: GCL1-MNT
created: 2023-01-12T10:48:20Z
last-modified: 2026-02-12T14:07:59Z
source: RIPE
person: LIR Admin
address: G-Core Labs S.A.
address: 2 Rue Edmond Reuter
address: 5326 Contern
phone: +35220880507
nic-hdl: LA5122-RIPE
mnt-by: GCL1-MNT
created: 2012-12-05T15:05:34Z
last-modified: 2023-07-17T19:38:48Z
source: RIPE # Filtered
% Information related to '78.111.110.0/24AS199524'
route: 78.111.110.0/24
descr: GCL-78-111-110-0-24
origin: AS199524
mnt-by: GCL1-MNT
created: 2022-06-14T14:01:56Z
last-modified: 2022-06-14T14:01:56Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.123 (ABERDEEN)
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 78.111.110.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62076
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;78.111.110.54. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026082001 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Aug 21 08:47:24 CST 2026
;; MSG SIZE rcvd: 106
Host 54.110.111.78.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 54.110.111.78.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 218.92.0.195 | attackspambots | 07/14/2020-01:52:48.246605 218.92.0.195 Protocol: 6 ET SCAN Potential SSH Scan |
2020-07-14 13:53:50 |
| 222.186.175.216 | attackbots | Jul 14 07:40:17 santamaria sshd\[23207\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.216 user=root Jul 14 07:40:20 santamaria sshd\[23207\]: Failed password for root from 222.186.175.216 port 21750 ssh2 Jul 14 07:40:38 santamaria sshd\[23223\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.216 user=root ... |
2020-07-14 13:44:04 |
| 101.95.162.58 | attack | Jul 12 21:13:16 mail sshd[33986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.95.162.58 Jul 12 21:13:18 mail sshd[33986]: Failed password for invalid user abc123 from 101.95.162.58 port 48290 ssh2 ... |
2020-07-14 13:54:55 |
| 103.104.119.107 | attackbotsspam | Jul 12 09:36:04 mail sshd[12616]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.104.119.107 Jul 12 09:36:06 mail sshd[12616]: Failed password for invalid user nerida from 103.104.119.107 port 52074 ssh2 ... |
2020-07-14 13:39:28 |
| 168.194.13.19 | attackbotsspam | 2020-07-14T00:37:44.7854961495-001 sshd[34416]: Failed password for invalid user boss from 168.194.13.19 port 46898 ssh2 2020-07-14T00:41:21.8484291495-001 sshd[34565]: Invalid user ochsner from 168.194.13.19 port 43298 2020-07-14T00:41:21.8518601495-001 sshd[34565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=prtg-pf.flashnetpe.com.br 2020-07-14T00:41:21.8484291495-001 sshd[34565]: Invalid user ochsner from 168.194.13.19 port 43298 2020-07-14T00:41:23.9251451495-001 sshd[34565]: Failed password for invalid user ochsner from 168.194.13.19 port 43298 ssh2 2020-07-14T00:44:59.9884381495-001 sshd[34667]: Invalid user jean from 168.194.13.19 port 39668 ... |
2020-07-14 13:46:56 |
| 89.2.236.32 | attack | Invalid user administrator from 89.2.236.32 port 55984 |
2020-07-14 13:30:33 |
| 222.186.175.202 | attack | 2020-07-14T05:17:48.799270shield sshd\[12979\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.202 user=root 2020-07-14T05:17:50.777747shield sshd\[12979\]: Failed password for root from 222.186.175.202 port 26094 ssh2 2020-07-14T05:17:53.737741shield sshd\[12979\]: Failed password for root from 222.186.175.202 port 26094 ssh2 2020-07-14T05:17:57.122866shield sshd\[12979\]: Failed password for root from 222.186.175.202 port 26094 ssh2 2020-07-14T05:18:00.380188shield sshd\[12979\]: Failed password for root from 222.186.175.202 port 26094 ssh2 |
2020-07-14 13:21:06 |
| 49.234.196.215 | attack | Invalid user lieselotte from 49.234.196.215 port 38622 |
2020-07-14 13:38:49 |
| 191.232.249.156 | attack | SSH Brute-Force reported by Fail2Ban |
2020-07-14 13:48:34 |
| 85.209.0.246 | attackspam | Jul 14 04:55:19 ms-srv sshd[13666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.209.0.246 user=root |
2020-07-14 13:20:02 |
| 213.0.69.74 | attackbotsspam | 2020-07-14T00:54:07.7625261495-001 sshd[34991]: Failed password for invalid user paloma from 213.0.69.74 port 39618 ssh2 2020-07-14T00:58:44.2779451495-001 sshd[35111]: Invalid user myra from 213.0.69.74 port 54880 2020-07-14T00:58:44.2821851495-001 sshd[35111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.red-213-0-69.staticip.rima-tde.net 2020-07-14T00:58:44.2779451495-001 sshd[35111]: Invalid user myra from 213.0.69.74 port 54880 2020-07-14T00:58:45.8747511495-001 sshd[35111]: Failed password for invalid user myra from 213.0.69.74 port 54880 ssh2 2020-07-14T01:03:24.6988011495-001 sshd[35307]: Invalid user naveed from 213.0.69.74 port 41892 ... |
2020-07-14 13:56:34 |
| 156.96.56.71 | attackbotsspam | Jun 27 19:25:20 mail postfix/postscreen[48572]: DNSBL rank 3 for [156.96.56.71]:64194 ... |
2020-07-14 13:19:48 |
| 46.101.103.207 | attackspam | Invalid user andre from 46.101.103.207 port 41430 |
2020-07-14 13:24:54 |
| 157.245.214.36 | attackspam | *Port Scan* detected from 157.245.214.36 (US/United States/New Jersey/Clifton/-). 4 hits in the last 156 seconds |
2020-07-14 13:41:52 |
| 103.142.139.114 | attack | Jul 14 07:05:35 vps687878 sshd\[30706\]: Failed password for invalid user jan from 103.142.139.114 port 54902 ssh2 Jul 14 07:08:12 vps687878 sshd\[31141\]: Invalid user testi from 103.142.139.114 port 46724 Jul 14 07:08:12 vps687878 sshd\[31141\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.142.139.114 Jul 14 07:08:15 vps687878 sshd\[31141\]: Failed password for invalid user testi from 103.142.139.114 port 46724 ssh2 Jul 14 07:10:51 vps687878 sshd\[31509\]: Invalid user ellis from 103.142.139.114 port 38542 Jul 14 07:10:51 vps687878 sshd\[31509\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.142.139.114 ... |
2020-07-14 13:30:13 |