5.144.130.21 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Iran (ISLAMIC Republic Of)

Internet Service Provider: Noavaran Shabakeh Sabz Mehregan Company Limited

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	php WP PHPmyadamin ABUSE blocked for 12h	2019-11-20 05:23:56
attackbotsspam	abcdata-sys.de:80 5.144.130.21 - - \[10/Oct/2019:13:53:46 +0200\] "POST /xmlrpc.php HTTP/1.1" 301 441 "-" "Windows Live Writter" www.goldgier.de 5.144.130.21 \[10/Oct/2019:13:53:46 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4484 "-" "Windows Live Writter"	2019-10-11 00:18:40

Type

Details

Datetime

attackspambots

php WP PHPmyadamin ABUSE blocked for 12h

2019-11-20 05:23:56

attackbotsspam

abcdata-sys.de:80 5.144.130.21 - - \[10/Oct/2019:13:53:46 +0200\] "POST /xmlrpc.php HTTP/1.1" 301 441 "-" "Windows Live Writter"
www.goldgier.de 5.144.130.21 \[10/Oct/2019:13:53:46 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4484 "-" "Windows Live Writter"

2019-10-11 00:18:40

Comments on same subnet:

IP	Type	Details	Datetime
5.144.130.16	attackbotsspam	LGS,WP GET /blogs/wp-includes/wlwmanifest.xml	2020-06-01 15:56:09
5.144.130.12	attackbotsspam	Attempts to probe for or exploit a Drupal site on url: /wp-login.php. Reported by the module https://www.drupal.org/project/abuseipdb.	2020-02-25 15:53:51
5.144.130.12	attackspambots	php WP PHPmyadamin ABUSE blocked for 12h	2019-10-19 06:31:28
5.144.130.15	attackbotsspam	proto=tcp . spt=54496 . dpt=25 . (listed on 5.144.128.0/21 Iranian ip dnsbl-sorbs abuseat-org barracuda) (15)	2019-07-03 10:40:44
5.144.130.15	attackspam	2019-06-23T21:07:13.384655beta postfix/smtpd[8110]: NOQUEUE: reject: RCPT from 5-144-130-15.static.hostiran.name[5.144.130.15]: 554 5.7.1 Service unavailable; Client host [5.144.130.15] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/5.144.130.15; from= to= proto=ESMTP helo=<5-144-130-15.static.hostiran.name> ...	2019-06-24 06:18:46

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 5.144.130.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46447
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;5.144.130.21.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019042801 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Mon Apr 29 04:00:37 +08 2019
;; MSG SIZE  rcvd: 116

Host info

21.130.144.5.in-addr.arpa domain name pointer 5-144-130-21.static.hostiran.name.

Nslookup info:

Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
21.130.144.5.in-addr.arpa	name = 5-144-130-21.static.hostiran.name.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
14.246.104.233	attack	Unauthorized connection attempt from IP address 14.246.104.233 on Port 445(SMB)	2019-06-22 03:06:11
117.201.126.99	attackspambots	Unauthorized connection attempt from IP address 117.201.126.99 on Port 445(SMB)	2019-06-22 03:01:46
14.189.89.82	attackspambots	Unauthorized connection attempt from IP address 14.189.89.82 on Port 445(SMB)	2019-06-22 02:33:34
105.199.58.223	attackspam	Automatic report - Web App Attack	2019-06-22 03:05:18
117.1.82.117	attackspambots	Unauthorized connection attempt from IP address 117.1.82.117 on Port 445(SMB)	2019-06-22 02:36:48
148.72.23.24	attack	2019-06-21 08:05:28,970 fail2ban.actions [1810]: NOTICE [sshd] Ban 148.72.23.24	2019-06-22 02:54:01
178.128.193.158	attackbots	Tries /searchreplacedb2.php + /wp-upload-class.php + /?gf_page=upload + /wp-content/plugins/woocommerce-abandoned-cart/assets/js/abandoncart_plugin_butto… + /OMC_template.tar.gz + /master.gz + /fullwebsite.sql + /wp-content/plugins/blog-designer/js/designer.js	2019-06-22 02:42:06
189.158.69.241	attackbotsspam	Unauthorized connection attempt from IP address 189.158.69.241 on Port 445(SMB)	2019-06-22 02:43:41
187.16.55.111	attack	Brute Force attack against O365 mail account	2019-06-22 03:11:29
78.110.152.38	attackbots	Unauthorized connection attempt from IP address 78.110.152.38 on Port 445(SMB)	2019-06-22 02:41:47
60.171.135.254	attack	IMAP brute force ...	2019-06-22 02:34:20
116.113.96.22	attackspam	IMAP brute force ...	2019-06-22 02:48:09
186.232.141.7	attackspambots	Brute Force attack against O365 mail account	2019-06-22 03:13:16
212.34.6.35	attackspambots	Unauthorized connection attempt from IP address 212.34.6.35 on Port 445(SMB)	2019-06-22 02:46:22
218.24.31.132	attack	Brute Force attack against O365 mail account	2019-06-22 03:10:26

Recently Reported IPs

118.163.97.19	129.204.11.182	116.120.58.205	111.230.132.130
188.235.146.137	90.150.188.154	116.113.86.246	192.114.66.238
225.47.68.55	190.137.102.123	77.75.129.83	61.37.150.6
92.144.231.74	211.227.11.135	209.200.38.156	168.227.215.130
186.5.129.199	127.153.135.42	193.169.252.37	115.238.188.210