117.252.64.2 - IPInfo

Basic Info

City: Gurgaon

Region: Haryana

Country: India

Internet Service Provider: Bharat Sanchar Nigam Limited

Hostname: unknown

Organization: National Internet Backbone

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	"Account brute force using dictionary attack against Exchange Online"	2019-08-06 03:02:08

Comments on same subnet:

IP	Type	Details	Datetime
117.252.64.130	attackspam	(imapd) Failed IMAP login from 117.252.64.130 (IN/India/-): 1 in the last 3600 secs	2020-08-01 12:41:28
117.252.64.207	attack	Apr 8 14:22:29 mxgate1 postfix/postscreen[4121]: CONNECT from [117.252.64.207]:45268 to [176.31.12.44]:25 Apr 8 14:22:30 mxgate1 postfix/dnsblog[4300]: addr 117.252.64.207 listed by domain bl.spamcop.net as 127.0.0.2 Apr 8 14:22:30 mxgate1 postfix/dnsblog[4301]: addr 117.252.64.207 listed by domain cbl.abuseat.org as 127.0.0.2 Apr 8 14:22:30 mxgate1 postfix/dnsblog[4302]: addr 117.252.64.207 listed by domain b.barracudacentral.org as 127.0.0.2 Apr 8 14:22:35 mxgate1 postfix/postscreen[4121]: DNSBL rank 3 for [117.252.64.207]:45268 Apr 8 14:22:37 mxgate1 postfix/tlsproxy[4384]: CONNECT from [117.252.64.207]:45268 Apr x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=117.252.64.207	2020-04-08 21:42:16
117.252.64.62	attackspambots	8080/tcp [2019-07-24]1pkt	2019-07-25 04:26:06

Type

Details

Datetime

117.252.64.130

attackspam

(imapd) Failed IMAP login from 117.252.64.130 (IN/India/-): 1 in the last 3600 secs

2020-08-01 12:41:28

117.252.64.207

attack

Apr  8 14:22:29 mxgate1 postfix/postscreen[4121]: CONNECT from [117.252.64.207]:45268 to [176.31.12.44]:25
Apr  8 14:22:30 mxgate1 postfix/dnsblog[4300]: addr 117.252.64.207 listed by domain bl.spamcop.net as 127.0.0.2
Apr  8 14:22:30 mxgate1 postfix/dnsblog[4301]: addr 117.252.64.207 listed by domain cbl.abuseat.org as 127.0.0.2
Apr  8 14:22:30 mxgate1 postfix/dnsblog[4302]: addr 117.252.64.207 listed by domain b.barracudacentral.org as 127.0.0.2
Apr  8 14:22:35 mxgate1 postfix/postscreen[4121]: DNSBL rank 3 for [117.252.64.207]:45268
Apr  8 14:22:37 mxgate1 postfix/tlsproxy[4384]: CONNECT from [117.252.64.207]:45268
Apr x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=117.252.64.207

2020-04-08 21:42:16

117.252.64.62

attackspambots

8080/tcp
[2019-07-24]1pkt

2019-07-25 04:26:06

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.252.64.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46795
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;117.252.64.2.			IN	A

;; AUTHORITY SECTION:
.			2430	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019080502 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Aug 06 03:02:02 CST 2019
;; MSG SIZE  rcvd: 116

Host info

Host 2.64.252.117.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 2.64.252.117.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
61.240.148.53	attackspambots	Invalid user tony from 61.240.148.53 port 45414	2020-10-13 01:29:16
116.228.233.91	attack	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-10-12T12:34:59Z and 2020-10-12T12:42:20Z	2020-10-13 01:18:44
217.60.214.130	attackspambots	2323/tcp [2020-10-11]1pkt	2020-10-13 01:14:55
49.235.73.19	attackspambots	2020-10-12T10:38:59.0356821495-001 sshd[13259]: Failed password for invalid user k-abe from 49.235.73.19 port 51425 ssh2 2020-10-12T10:42:11.7991951495-001 sshd[13403]: Invalid user foster from 49.235.73.19 port 24662 2020-10-12T10:42:11.8038671495-001 sshd[13403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.73.19 2020-10-12T10:42:11.7991951495-001 sshd[13403]: Invalid user foster from 49.235.73.19 port 24662 2020-10-12T10:42:13.2818961495-001 sshd[13403]: Failed password for invalid user foster from 49.235.73.19 port 24662 ssh2 2020-10-12T10:45:03.2983181495-001 sshd[13498]: Invalid user mick from 49.235.73.19 port 54358 ...	2020-10-13 01:00:38
110.229.222.139	attackspambots	web	2020-10-13 00:52:15
121.180.203.139	attackspambots	SSH Brute-Force Attack	2020-10-13 01:09:54
162.142.125.29	attack	TCP (SYN) 162.142.125.29:6925 -> port 23, len 44	2020-10-13 01:13:21
49.233.111.193	attackspambots	firewall-block, port(s): 32766/tcp	2020-10-13 01:34:22
111.230.25.75	attack	Invalid user amdsa from 111.230.25.75 port 33510	2020-10-13 01:02:56
49.235.133.228	attack	(sshd) Failed SSH login from 49.235.133.228 (CN/China/Guangdong/Shenzhen/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 12 12:37:19 atlas sshd[10357]: Invalid user user from 49.235.133.228 port 51764 Oct 12 12:37:20 atlas sshd[10357]: Failed password for invalid user user from 49.235.133.228 port 51764 ssh2 Oct 12 12:45:49 atlas sshd[12727]: Invalid user cactiuser from 49.235.133.228 port 53460 Oct 12 12:45:52 atlas sshd[12727]: Failed password for invalid user cactiuser from 49.235.133.228 port 53460 ssh2 Oct 12 12:50:49 atlas sshd[13915]: Invalid user carlo from 49.235.133.228 port 47266	2020-10-13 01:37:08
106.12.132.224	attackspam	pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.132.224 Failed password for invalid user ekim from 106.12.132.224 port 52754 ssh2 Failed password for root from 106.12.132.224 port 36956 ssh2	2020-10-13 00:57:56
45.40.198.93	attackspambots	Banned for a week because repeated abuses, for example SSH, but not only	2020-10-13 01:24:39
139.59.230.61	attack	Oct 12 03:20:19 dhoomketu sshd[3780358]: Invalid user harris from 139.59.230.61 port 63512 Oct 12 03:20:19 dhoomketu sshd[3780358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.230.61 Oct 12 03:20:19 dhoomketu sshd[3780358]: Invalid user harris from 139.59.230.61 port 63512 Oct 12 03:20:21 dhoomketu sshd[3780358]: Failed password for invalid user harris from 139.59.230.61 port 63512 ssh2 Oct 12 03:24:30 dhoomketu sshd[3780491]: Invalid user yonemitsu from 139.59.230.61 port 64553 ...	2020-10-13 01:19:41
2803:9800:a883:81ba:9970:9d8e:596a:9417	attackspambots	C1,WP GET /wp-login.php	2020-10-13 01:11:21
195.154.176.37	attackspambots	Connection to SSH Honeypot - Detected by HoneypotDB	2020-10-13 01:21:41

Recently Reported IPs

6.176.23.197	1.147.148.131	4.80.106.184	117.240.95.58
222.212.202.238	162.15.15.145	34.74.182.202	34.129.21.240
210.115.7.172	75.7.185.131	117.213.22.97	67.84.203.193
51.142.85.254	117.213.21.50	141.137.99.128	126.246.242.51
117.213.14.112	4.213.220.20	167.8.44.200	133.79.33.202