213.230.84.45 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Uzbekistan

Internet Service Provider: Uzbektelekom Joint Stock Company

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	scan r	2020-02-13 14:04:02

Comments on same subnet:

IP	Type	Details	Datetime
213.230.84.191	attack	Jan 10 05:51:26 grey postfix/smtpd\[395\]: NOQUEUE: reject: RCPT from unknown\[213.230.84.191\]: 554 5.7.1 Service unavailable\; Client host \[213.230.84.191\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=213.230.84.191\; from=\ to=\ proto=ESMTP helo=\<191.64.uzpak.uz\> ...	2020-01-10 17:32:09
213.230.84.161	attack	Nov 20 07:16:34 mxgate1 postfix/postscreen[23364]: CONNECT from [213.230.84.161]:2081 to [176.31.12.44]:25 Nov 20 07:16:34 mxgate1 postfix/dnsblog[23368]: addr 213.230.84.161 listed by domain cbl.abuseat.org as 127.0.0.2 Nov 20 07:16:34 mxgate1 postfix/dnsblog[23367]: addr 213.230.84.161 listed by domain zen.spamhaus.org as 127.0.0.11 Nov 20 07:16:34 mxgate1 postfix/dnsblog[23367]: addr 213.230.84.161 listed by domain zen.spamhaus.org as 127.0.0.4 Nov 20 07:16:34 mxgate1 postfix/dnsblog[23366]: addr 213.230.84.161 listed by domain b.barracudacentral.org as 127.0.0.2 Nov 20 07:16:34 mxgate1 postfix/postscreen[23364]: PREGREET 23 after 0.13 from [213.230.84.161]:2081: EHLO [213.230.84.161] Nov 20 07:16:34 mxgate1 postfix/postscreen[23364]: DNSBL rank 4 for [213.230.84.161]:2081 Nov x@x Nov 20 07:16:40 mxgate1 postfix/postscreen[23364]: HANGUP after 6 from [213.230.84.161]:2081 in tests after SMTP handshake Nov 20 07:16:40 mxgate1 postfix/postscreen[23364]: DISCONNECT [21........ -------------------------------	2019-11-20 19:55:06
213.230.84.39	attackbotsspam	Nov 1 04:30:42 mxgate1 postfix/postscreen[4338]: CONNECT from [213.230.84.39]:24756 to [176.31.12.44]:25 Nov 1 04:30:42 mxgate1 postfix/dnsblog[4595]: addr 213.230.84.39 listed by domain cbl.abuseat.org as 127.0.0.2 Nov 1 04:30:42 mxgate1 postfix/dnsblog[4579]: addr 213.230.84.39 listed by domain zen.spamhaus.org as 127.0.0.4 Nov 1 04:30:42 mxgate1 postfix/dnsblog[4579]: addr 213.230.84.39 listed by domain zen.spamhaus.org as 127.0.0.11 Nov 1 04:30:42 mxgate1 postfix/dnsblog[4578]: addr 213.230.84.39 listed by domain bl.spamcop.net as 127.0.0.2 Nov 1 04:30:42 mxgate1 postfix/postscreen[4338]: PREGREET 22 after 0.11 from [213.230.84.39]:24756: EHLO [213.230.84.39] Nov 1 04:30:42 mxgate1 postfix/dnsblog[4581]: addr 213.230.84.39 listed by domain b.barracudacentral.org as 127.0.0.2 Nov 1 04:30:42 mxgate1 postfix/postscreen[4338]: DNSBL rank 5 for [213.230.84.39]:24756 Nov x@x Nov 1 04:30:42 mxgate1 postfix/postscreen[4338]: HANGUP after 0.34 from [213.230.84.39]:........ -------------------------------	2019-11-01 16:45:17

Type

Details

Datetime

213.230.84.191

attack

Jan 10 05:51:26 grey postfix/smtpd\[395\]: NOQUEUE: reject: RCPT from unknown\[213.230.84.191\]: 554 5.7.1 Service unavailable\; Client host \[213.230.84.191\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=213.230.84.191\; from=\ to=\ proto=ESMTP helo=\<191.64.uzpak.uz\>
...

2020-01-10 17:32:09

213.230.84.161

attack

Nov 20 07:16:34 mxgate1 postfix/postscreen[23364]: CONNECT from [213.230.84.161]:2081 to [176.31.12.44]:25
Nov 20 07:16:34 mxgate1 postfix/dnsblog[23368]: addr 213.230.84.161 listed by domain cbl.abuseat.org as 127.0.0.2
Nov 20 07:16:34 mxgate1 postfix/dnsblog[23367]: addr 213.230.84.161 listed by domain zen.spamhaus.org as 127.0.0.11
Nov 20 07:16:34 mxgate1 postfix/dnsblog[23367]: addr 213.230.84.161 listed by domain zen.spamhaus.org as 127.0.0.4
Nov 20 07:16:34 mxgate1 postfix/dnsblog[23366]: addr 213.230.84.161 listed by domain b.barracudacentral.org as 127.0.0.2
Nov 20 07:16:34 mxgate1 postfix/postscreen[23364]: PREGREET 23 after 0.13 from [213.230.84.161]:2081: EHLO [213.230.84.161]

Nov 20 07:16:34 mxgate1 postfix/postscreen[23364]: DNSBL rank 4 for [213.230.84.161]:2081
Nov x@x
Nov 20 07:16:40 mxgate1 postfix/postscreen[23364]: HANGUP after 6 from [213.230.84.161]:2081 in tests after SMTP handshake
Nov 20 07:16:40 mxgate1 postfix/postscreen[23364]: DISCONNECT [21........
-------------------------------

2019-11-20 19:55:06

213.230.84.39

attackbotsspam

Nov  1 04:30:42 mxgate1 postfix/postscreen[4338]: CONNECT from [213.230.84.39]:24756 to [176.31.12.44]:25
Nov  1 04:30:42 mxgate1 postfix/dnsblog[4595]: addr 213.230.84.39 listed by domain cbl.abuseat.org as 127.0.0.2
Nov  1 04:30:42 mxgate1 postfix/dnsblog[4579]: addr 213.230.84.39 listed by domain zen.spamhaus.org as 127.0.0.4
Nov  1 04:30:42 mxgate1 postfix/dnsblog[4579]: addr 213.230.84.39 listed by domain zen.spamhaus.org as 127.0.0.11
Nov  1 04:30:42 mxgate1 postfix/dnsblog[4578]: addr 213.230.84.39 listed by domain bl.spamcop.net as 127.0.0.2
Nov  1 04:30:42 mxgate1 postfix/postscreen[4338]: PREGREET 22 after 0.11 from [213.230.84.39]:24756: EHLO [213.230.84.39]

Nov  1 04:30:42 mxgate1 postfix/dnsblog[4581]: addr 213.230.84.39 listed by domain b.barracudacentral.org as 127.0.0.2
Nov  1 04:30:42 mxgate1 postfix/postscreen[4338]: DNSBL rank 5 for [213.230.84.39]:24756
Nov x@x
Nov  1 04:30:42 mxgate1 postfix/postscreen[4338]: HANGUP after 0.34 from [213.230.84.39]:........
-------------------------------

2019-11-01 16:45:17

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 213.230.84.45
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14373
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;213.230.84.45.			IN	A

;; AUTHORITY SECTION:
.			158	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020021300 1800 900 604800 86400

;; Query time: 155 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 13 14:03:59 CST 2020
;; MSG SIZE  rcvd: 117

Host info

45.84.230.213.in-addr.arpa domain name pointer 45.64.uzpak.uz.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
45.84.230.213.in-addr.arpa	name = 45.64.uzpak.uz.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
71.6.233.34	attackbots	unauthorized connection attempt	2020-07-01 18:59:07
45.201.206.47	attackbotsspam	unauthorized connection attempt	2020-07-01 19:52:18
59.126.7.130	attack	Honeypot attack, port: 81, PTR: 59-126-7-130.HINET-IP.hinet.net.	2020-07-01 19:19:09
118.33.30.71	attackbots	Unauthorized connection attempt detected from IP address 118.33.30.71 to port 23	2020-07-01 19:26:55
120.92.11.9	attackspambots	Invalid user student from 120.92.11.9 port 34622	2020-07-01 19:03:55
159.89.161.2	attack	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: talktime.rtpl.co.in.	2020-07-01 19:10:40
203.218.16.129	attack	Honeypot attack, port: 5555, PTR: pcd171129.netvigator.com.	2020-07-01 19:57:40
119.17.7.68	attackspam	TCP (SYN) 119.17.7.68:24245 -> port 23, len 44	2020-07-01 19:31:02
185.176.27.218	attack	06/30/2020-15:22:38.867492 185.176.27.218 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2020-07-01 19:49:20
106.53.97.54	attack	...	2020-07-01 19:27:37
138.122.97.204	attack	Jun 28 07:43:56 mail.srvfarm.net postfix/smtps/smtpd[3992742]: warning: unknown[138.122.97.204]: SASL PLAIN authentication failed: Jun 28 07:43:57 mail.srvfarm.net postfix/smtps/smtpd[3992742]: lost connection after AUTH from unknown[138.122.97.204] Jun 28 07:50:05 mail.srvfarm.net postfix/smtpd[3997359]: warning: unknown[138.122.97.204]: SASL PLAIN authentication failed: Jun 28 07:50:05 mail.srvfarm.net postfix/smtpd[3997359]: lost connection after AUTH from unknown[138.122.97.204] Jun 28 07:52:29 mail.srvfarm.net postfix/smtps/smtpd[3991414]: warning: unknown[138.122.97.204]: SASL PLAIN authentication failed:	2020-07-01 19:13:58
103.240.36.90	attack	unauthorized connection attempt	2020-07-01 19:21:29
178.161.255.106	attackspambots	DATE:2020-06-30 11:43:17, IP:178.161.255.106, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-07-01 19:26:01
216.218.206.67	attack	firewall-block, port(s): 445/tcp	2020-07-01 19:16:04
1.34.254.28	attack	unauthorized connection attempt	2020-07-01 19:56:28

Recently Reported IPs

183.204.176.163	106.3.44.207	115.78.128.169	46.101.25.209
45.166.108.186	103.206.137.90	200.187.227.198	36.82.214.124
62.168.117.81	199.148.65.161	141.100.248.62	23.223.238.141
244.74.206.233	228.98.75.16	113.161.128.156	147.241.214.64
54.188.142.163	83.228.100.254	108.65.221.14	109.163.121.222