JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 128.234.241.172

128.234.241.172 was found in our database!

This IP was reported 5 times. Confidence of Abuse is 23%: ?

23%

ISP	Saudi Telecom Company JSC
Usage Type	Mobile ISP
ASN	AS39891
Domain Name	stc.com.sa
Country	🇸🇦 Saudi Arabia
City	Dammam, Eastern Province

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 128.234.241.172

Whois 128.234.241.172

IP Abuse Reports for 128.234.241.172:

This IP address has been reported a total of 5 times from 3 distinct sources. 128.234.241.172 was first reported on July 20th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 EvoX	2026-07-22 07:10:39 (1 day ago)	🛡️ Honeypot [bsts-tpot-sensor]: Unsolicited SMB connection (dst port 445/tcp, src port 61524) to a p ... show more 🛡️ Honeypot [bsts-tpot-sensor]: Unsolicited SMB connection (dst port 445/tcp, src port 61524) to a passive honeypot sensor. No legitimate SMB service is exposed here; this traffic is consistent with automated internet-wide scanning or exploitation attempts targeting SMB (e.g. EternalBlue-class vulnerabilities). show less	Hacking
🇫🇷 EvoX	2026-07-21 16:12:03 (2 days ago)	🛡️ Honeypot [bsts-tpot-sensor]: Unsolicited SMB connection (dst port 445/tcp, src port 1054) to a pa ... show more 🛡️ Honeypot [bsts-tpot-sensor]: Unsolicited SMB connection (dst port 445/tcp, src port 1054) to a passive honeypot sensor. No legitimate SMB service is exposed here; this traffic is consistent with automated internet-wide scanning or exploitation attempts targeting SMB (e.g. EternalBlue-class vulnerabilities). show less	Hacking
🇫🇷 sthoyer.de	2026-07-20 09:14:11 (3 days ago)	Jul 20 11:14:10 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jul 20 11:14:10 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=128.234.241.172 DST=173.212.223.67 LEN=52 TOS=0x02 PREC=0x00 TTL=113 ID=19704 DF PROTO=TCP SPT=26983 DPT=445 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 ... show less	Port Scan
🇫🇷 Little Iguana	2026-07-20 09:13:03 (3 days ago)	trying to access non-authorized port	Port Scan
🇫🇷 sthoyer.de	2026-07-20 04:45:10 (4 days ago)	Jul 20 06:45:09 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jul 20 06:45:09 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=128.234.241.172 DST=173.212.223.67 LEN=52 TOS=0x02 PREC=0x00 TTL=113 ID=29143 DF PROTO=TCP SPT=3905 DPT=445 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 ... show less	Port Scan

Showing 1 to 5 of 5 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇰 203.94.67.2

🇷🇴 141.98.83.48

🇷🇴 80.94.92.234

🇧🇪 198.235.24.246

🇹🇼 198.235.24.53

🇭🇰 152.32.135.48

🇺🇸 142.111.152.59

🇮🇳 124.253.193.139

🇫🇷 91.196.152.110

🇨🇳 39.100.81.174

🇺🇸 18.212.223.42

🇨🇳 218.24.73.44

🇲🇾 175.136.140.251

🇸🇪 157.22.127.66

🇫🇷 88.176.138.250

🇺🇸 66.132.186.243

🇺🇸 64.62.156.58

🇺🇸 52.167.144.174

🇧🇷 45.140.193.184

🇬🇧 2a06:4880::10