117.252.64.130

Basic Info

City: unknown

Region: unknown

Country: India

Internet Service Provider: Bharat Sanchar Nigam Limited

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	(imapd) Failed IMAP login from 117.252.64.130 (IN/India/-): 1 in the last 3600 secs	2020-08-01 12:41:28

Comments on same subnet:

IP	Type	Details	Datetime
117.252.64.207	attack	Apr 8 14:22:29 mxgate1 postfix/postscreen[4121]: CONNECT from [117.252.64.207]:45268 to [176.31.12.44]:25 Apr 8 14:22:30 mxgate1 postfix/dnsblog[4300]: addr 117.252.64.207 listed by domain bl.spamcop.net as 127.0.0.2 Apr 8 14:22:30 mxgate1 postfix/dnsblog[4301]: addr 117.252.64.207 listed by domain cbl.abuseat.org as 127.0.0.2 Apr 8 14:22:30 mxgate1 postfix/dnsblog[4302]: addr 117.252.64.207 listed by domain b.barracudacentral.org as 127.0.0.2 Apr 8 14:22:35 mxgate1 postfix/postscreen[4121]: DNSBL rank 3 for [117.252.64.207]:45268 Apr 8 14:22:37 mxgate1 postfix/tlsproxy[4384]: CONNECT from [117.252.64.207]:45268 Apr x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=117.252.64.207	2020-04-08 21:42:16
117.252.64.2	attackbotsspam	"Account brute force using dictionary attack against Exchange Online"	2019-08-06 03:02:08
117.252.64.62	attackspambots	8080/tcp [2019-07-24]1pkt	2019-07-25 04:26:06

Type

Details

Datetime

117.252.64.207

attack

Apr  8 14:22:29 mxgate1 postfix/postscreen[4121]: CONNECT from [117.252.64.207]:45268 to [176.31.12.44]:25
Apr  8 14:22:30 mxgate1 postfix/dnsblog[4300]: addr 117.252.64.207 listed by domain bl.spamcop.net as 127.0.0.2
Apr  8 14:22:30 mxgate1 postfix/dnsblog[4301]: addr 117.252.64.207 listed by domain cbl.abuseat.org as 127.0.0.2
Apr  8 14:22:30 mxgate1 postfix/dnsblog[4302]: addr 117.252.64.207 listed by domain b.barracudacentral.org as 127.0.0.2
Apr  8 14:22:35 mxgate1 postfix/postscreen[4121]: DNSBL rank 3 for [117.252.64.207]:45268
Apr  8 14:22:37 mxgate1 postfix/tlsproxy[4384]: CONNECT from [117.252.64.207]:45268
Apr x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=117.252.64.207

2020-04-08 21:42:16

117.252.64.2

attackbotsspam

"Account brute force using dictionary attack against Exchange Online"

2019-08-06 03:02:08

117.252.64.62

attackspambots

8080/tcp
[2019-07-24]1pkt

2019-07-25 04:26:06

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.252.64.130
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15599
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;117.252.64.130.			IN	A

;; AUTHORITY SECTION:
.			278	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020073101 1800 900 604800 86400

;; Query time: 24 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Aug 01 12:41:23 CST 2020
;; MSG SIZE  rcvd: 118

Host info

Host 130.64.252.117.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 130.64.252.117.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
112.85.42.172	attack	Oct 8 18:31:23 nextcloud sshd\[23885\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.172 user=root Oct 8 18:31:25 nextcloud sshd\[23885\]: Failed password for root from 112.85.42.172 port 43906 ssh2 Oct 8 18:31:29 nextcloud sshd\[23885\]: Failed password for root from 112.85.42.172 port 43906 ssh2	2020-10-09 00:31:54
94.102.50.137	attackbotsspam	ET CINS Active Threat Intelligence Poor Reputation IP group 84 - port: 58422 proto: tcp cat: Misc Attackbytes: 60	2020-10-09 00:14:19
140.143.13.177	attack	(sshd) Failed SSH login from 140.143.13.177 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 8 00:06:29 optimus sshd[9804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.13.177 user=root Oct 8 00:06:31 optimus sshd[9804]: Failed password for root from 140.143.13.177 port 36018 ssh2 Oct 8 00:08:46 optimus sshd[10568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.13.177 user=root Oct 8 00:08:48 optimus sshd[10568]: Failed password for root from 140.143.13.177 port 38200 ssh2 Oct 8 00:10:59 optimus sshd[11324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.13.177 user=root	2020-10-09 00:42:14
45.150.206.113	attack	Oct 8 18:49:13 cho postfix/smtps/smtpd[243959]: warning: unknown[45.150.206.113]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 8 18:49:29 cho postfix/smtps/smtpd[243155]: warning: unknown[45.150.206.113]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 8 18:50:41 cho postfix/smtps/smtpd[243155]: warning: unknown[45.150.206.113]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 8 18:51:01 cho postfix/smtps/smtpd[243998]: warning: unknown[45.150.206.113]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 8 18:52:06 cho postfix/smtps/smtpd[243155]: warning: unknown[45.150.206.113]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-10-09 00:53:05
171.229.143.112	attackspambots	Unauthorized connection attempt detected from IP address 171.229.143.112 to port 23 [T]	2020-10-09 00:30:32
27.77.197.132	attack	TCP (SYN) 27.77.197.132:1066 -> port 23, len 44	2020-10-09 00:38:49
103.45.150.170	attackspambots	Oct 8 06:13:34 ws24vmsma01 sshd[131763]: Failed password for root from 103.45.150.170 port 39888 ssh2 ...	2020-10-09 00:44:56
167.248.133.36	attackspambots	Sep 17 13:59:31 hidden postfix/postscreen[44452]: DNSBL rank 3 for [167.248.133.36]:47944	2020-10-09 00:35:41
27.77.202.41	attack	SP-Scan 19211:23 detected 2020.10.07 14:54:47 blocked until 2020.11.26 06:57:34	2020-10-09 00:22:16
171.248.63.226	attackspambots	Unauthorized connection attempt detected from IP address 171.248.63.226 to port 23 [T]	2020-10-09 00:18:29
112.85.42.189	attackspam	Oct 8 13:41:02 dns1 sshd[30395]: Failed password for root from 112.85.42.189 port 20499 ssh2 Oct 8 13:41:05 dns1 sshd[30395]: Failed password for root from 112.85.42.189 port 20499 ssh2 Oct 8 13:41:09 dns1 sshd[30395]: Failed password for root from 112.85.42.189 port 20499 ssh2	2020-10-09 00:53:49
138.0.88.80	attack	Port probing on unauthorized port 23	2020-10-09 00:47:28
202.158.62.240	attack	TCP (SYN) 202.158.62.240:52415 -> port 1433, len 44	2020-10-09 00:15:41
165.227.182.136	attackspam	Oct 8 19:05:23 hosting sshd[483]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.182.136 user=root Oct 8 19:05:25 hosting sshd[483]: Failed password for root from 165.227.182.136 port 40292 ssh2 ...	2020-10-09 00:32:58
119.65.95.181	attack	Automatic report - Banned IP Access	2020-10-09 00:44:40

Recently Reported IPs

181.60.62.4	173.212.244.60	14.179.10.203	38.231.99.6
107.210.53.119	186.157.68.22	46.180.169.130	193.50.141.119
50.169.142.65	176.166.15.2	78.109.232.19	175.221.177.27
13.38.108.176	107.165.208.149	31.30.37.212	153.25.191.68
165.131.2.70	154.97.100.46	53.235.52.242	52.229.35.240