213.230.75.132

Basic Info

City: unknown

Region: unknown

Country: Uzbekistan

Internet Service Provider: Uzbektelekom Joint Stock Company

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	Nov 22 07:06:30 mxgate1 postfix/postscreen[24303]: CONNECT from [213.230.75.132]:21273 to [176.31.12.44]:25 Nov 22 07:06:30 mxgate1 postfix/dnsblog[24331]: addr 213.230.75.132 listed by domain cbl.abuseat.org as 127.0.0.2 Nov 22 07:06:30 mxgate1 postfix/dnsblog[24330]: addr 213.230.75.132 listed by domain zen.spamhaus.org as 127.0.0.10 Nov 22 07:06:30 mxgate1 postfix/dnsblog[24330]: addr 213.230.75.132 listed by domain zen.spamhaus.org as 127.0.0.4 Nov 22 07:06:30 mxgate1 postfix/dnsblog[24329]: addr 213.230.75.132 listed by domain b.barracudacentral.org as 127.0.0.2 Nov 22 07:06:30 mxgate1 postfix/postscreen[24303]: PREGREET 23 after 0.19 from [213.230.75.132]:21273: EHLO [213.230.75.132] Nov 22 07:06:30 mxgate1 postfix/postscreen[24303]: DNSBL rank 4 for [213.230.75.132]:21273 Nov x@x Nov 22 07:06:31 mxgate1 postfix/postscreen[24303]: HANGUP after 0.45 from [213.230.75.132]:21273 in tests after SMTP handshake Nov 22 07:06:31 mxgate1 postfix/postscreen[24303]: DISCONN........ -------------------------------	2019-11-22 18:03:06

Type

Details

Datetime

attackbotsspam

Nov 22 07:06:30 mxgate1 postfix/postscreen[24303]: CONNECT from [213.230.75.132]:21273 to [176.31.12.44]:25
Nov 22 07:06:30 mxgate1 postfix/dnsblog[24331]: addr 213.230.75.132 listed by domain cbl.abuseat.org as 127.0.0.2
Nov 22 07:06:30 mxgate1 postfix/dnsblog[24330]: addr 213.230.75.132 listed by domain zen.spamhaus.org as 127.0.0.10
Nov 22 07:06:30 mxgate1 postfix/dnsblog[24330]: addr 213.230.75.132 listed by domain zen.spamhaus.org as 127.0.0.4
Nov 22 07:06:30 mxgate1 postfix/dnsblog[24329]: addr 213.230.75.132 listed by domain b.barracudacentral.org as 127.0.0.2
Nov 22 07:06:30 mxgate1 postfix/postscreen[24303]: PREGREET 23 after 0.19 from [213.230.75.132]:21273: EHLO [213.230.75.132]

Nov 22 07:06:30 mxgate1 postfix/postscreen[24303]: DNSBL rank 4 for [213.230.75.132]:21273
Nov x@x
Nov 22 07:06:31 mxgate1 postfix/postscreen[24303]: HANGUP after 0.45 from [213.230.75.132]:21273 in tests after SMTP handshake
Nov 22 07:06:31 mxgate1 postfix/postscreen[24303]: DISCONN........
-------------------------------

2019-11-22 18:03:06

Comments on same subnet:

IP	Type	Details	Datetime
213.230.75.216	attackspambots	Email rejected due to spam filtering	2020-07-29 23:59:44
213.230.75.160	attack	IP 213.230.75.160 attacked honeypot on port: 8080 at 5/28/2020 4:55:11 AM	2020-05-28 15:50:46

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 213.230.75.132
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65173
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;213.230.75.132.			IN	A

;; AUTHORITY SECTION:
.			294	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019112101 1800 900 604800 86400

;; Query time: 114 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Nov 22 18:02:59 CST 2019
;; MSG SIZE  rcvd: 118

Host info

132.75.230.213.in-addr.arpa domain name pointer 132.64.uzpak.uz.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
132.75.230.213.in-addr.arpa	name = 132.64.uzpak.uz.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
200.105.163.116	attackbotsspam	Jun 27 08:56:13 124388 sshd[8070]: Invalid user vbox from 200.105.163.116 port 36666 Jun 27 08:56:13 124388 sshd[8070]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.105.163.116 Jun 27 08:56:13 124388 sshd[8070]: Invalid user vbox from 200.105.163.116 port 36666 Jun 27 08:56:15 124388 sshd[8070]: Failed password for invalid user vbox from 200.105.163.116 port 36666 ssh2 Jun 27 09:00:17 124388 sshd[8358]: Invalid user sybase from 200.105.163.116 port 37709	2020-06-27 17:52:11
42.159.228.125	attackspam	2020-06-26T23:22:43.510308hostname sshd[18878]: Invalid user wei from 42.159.228.125 port 44858 2020-06-26T23:22:45.530804hostname sshd[18878]: Failed password for invalid user wei from 42.159.228.125 port 44858 ssh2 2020-06-26T23:26:39.466205hostname sshd[22063]: Invalid user bot from 42.159.228.125 port 25975 ...	2020-06-27 17:51:53
94.29.168.61	attack	xmlrpc attack	2020-06-27 18:14:52
186.90.177.196	attackspam	20 attempts against mh-ssh on rose	2020-06-27 18:24:43
222.104.53.31	attackspam	unauthorized connection attempt	2020-06-27 18:23:47
51.159.59.19	attackbotsspam	2020-06-26 UTC: (37x) - admin(3x),apache,aplmgr01,dayat,discord,dll,est,fast,guest,intekhab,newtest,nicolas(2x),nproc,postgres,rafael,root(7x),server,sl,software,sp,ubuntu(2x),vms,wangxu,wzr,zfm,zhang,zyx	2020-06-27 18:22:50
14.170.5.1	attack	1593229813 - 06/27/2020 05:50:13 Host: 14.170.5.1/14.170.5.1 Port: 445 TCP Blocked	2020-06-27 18:10:41
203.98.76.172	attackbotsspam	Jun 27 09:01:12 ip-172-31-61-156 sshd[17739]: Failed password for invalid user alex from 203.98.76.172 port 34036 ssh2 Jun 27 09:01:10 ip-172-31-61-156 sshd[17739]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.98.76.172 Jun 27 09:01:10 ip-172-31-61-156 sshd[17739]: Invalid user alex from 203.98.76.172 Jun 27 09:01:12 ip-172-31-61-156 sshd[17739]: Failed password for invalid user alex from 203.98.76.172 port 34036 ssh2 Jun 27 09:11:08 ip-172-31-61-156 sshd[18375]: Invalid user wcm from 203.98.76.172 ...	2020-06-27 18:00:22
172.104.36.235	attackbotsspam	Brute forcing RDP port 3389	2020-06-27 18:34:35
118.24.89.243	attackbotsspam	Jun 27 08:19:34 journals sshd\[46002\]: Invalid user as from 118.24.89.243 Jun 27 08:19:34 journals sshd\[46002\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.89.243 Jun 27 08:19:36 journals sshd\[46002\]: Failed password for invalid user as from 118.24.89.243 port 42190 ssh2 Jun 27 08:21:45 journals sshd\[46207\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.89.243 user=backup Jun 27 08:21:47 journals sshd\[46207\]: Failed password for backup from 118.24.89.243 port 37650 ssh2 ...	2020-06-27 18:05:56
192.35.168.28	attack	firewall-block, port(s): 587/tcp	2020-06-27 17:59:42
143.202.112.215	attackspambots	TCP (SYN) 143.202.112.215:32498 -> port 23, len 44	2020-06-27 18:26:47
139.170.118.203	attackbots	Too many connections or unauthorized access detected from Arctic banned ip	2020-06-27 17:59:08
106.38.203.230	attackbots	Jun 27 07:38:04 ip-172-31-62-245 sshd\[17848\]: Failed password for root from 106.38.203.230 port 45477 ssh2\ Jun 27 07:39:24 ip-172-31-62-245 sshd\[18009\]: Invalid user chs from 106.38.203.230\ Jun 27 07:39:26 ip-172-31-62-245 sshd\[18009\]: Failed password for invalid user chs from 106.38.203.230 port 52618 ssh2\ Jun 27 07:40:42 ip-172-31-62-245 sshd\[18036\]: Failed password for root from 106.38.203.230 port 59759 ssh2\ Jun 27 07:42:00 ip-172-31-62-245 sshd\[18048\]: Invalid user dummy from 106.38.203.230\	2020-06-27 17:56:17
122.51.237.131	attack	2020-06-27T16:25:36.712206hostname sshd[78383]: Invalid user deploy from 122.51.237.131 port 34470 ...	2020-06-27 18:01:02

Recently Reported IPs

174.253.160.207	183.166.160.190	197.155.141.9	106.75.171.188
113.217.52.192	233.217.61.143	223.215.186.139	182.73.143.214
171.238.126.43	223.72.64.98	213.219.235.246	172.105.178.30
60.169.94.219	210.240.38.114	146.120.18.152	14.187.51.221
117.57.37.69	110.175.241.145	36.25.7.100	81.154.151.101