72.252.2.0 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States of America (the)

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
72.252.201.135	attackbotsspam	Automatic report - Banned IP Access	2020-06-07 17:25:05
72.252.208.30	attackbotsspam	Feb 4 01:06:20 grey postfix/smtpd\[26473\]: NOQUEUE: reject: RCPT from unknown\[72.252.208.30\]: 554 5.7.1 Service unavailable\; Client host \[72.252.208.30\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[72.252.208.30\]\; from=\ to=\ proto=ESMTP helo=\<\[72.252.208.30\]\> ...	2020-02-04 09:20:22
72.252.247.85	attackbotsspam	01/26/2020-14:15:46.290503 72.252.247.85 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	2020-01-26 21:35:49
72.252.247.85	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-13 23:15:33
72.252.203.13	attackbots	RDP Bruteforce	2019-10-29 17:05:17
72.252.211.174	attackspambots	$f2bV_matches	2019-10-23 19:15:58
72.252.238.106	attackbots	2019-10-21 x@x 2019-10-21 20:45:52 unexpected disconnection while reading SMTP command from ([72.252.238.106]) [72.252.238.106]:22456 I=[10.100.18.22]:25 (error: Connection reset by peer) 2019-10-21 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=72.252.238.106	2019-10-22 07:04:00
72.252.241.210	attackspambots	Sat, 20 Jul 2019 21:56:12 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-21 08:34:21

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 72.252.2.0
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45865
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;72.252.2.0.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022001 1800 900 604800 86400

;; Query time: 34 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 21 06:30:44 CST 2025
;; MSG SIZE  rcvd: 103

Host info

Host 0.2.252.72.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

server can't find 72.252.2.0.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
94.191.79.156	attackspam	Sep 27 12:50:21 eddieflores sshd\[4009\]: Invalid user windywinter from 94.191.79.156 Sep 27 12:50:21 eddieflores sshd\[4009\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.79.156 Sep 27 12:50:22 eddieflores sshd\[4009\]: Failed password for invalid user windywinter from 94.191.79.156 port 36190 ssh2 Sep 27 12:55:36 eddieflores sshd\[4457\]: Invalid user roger from 94.191.79.156 Sep 27 12:55:36 eddieflores sshd\[4457\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.79.156	2019-09-28 07:01:15
222.186.15.160	attack	Sep 27 18:22:28 TORMINT sshd\[12549\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.160 user=root Sep 27 18:22:30 TORMINT sshd\[12549\]: Failed password for root from 222.186.15.160 port 34598 ssh2 Sep 27 18:31:20 TORMINT sshd\[12845\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.160 user=root ...	2019-09-28 06:35:50
188.166.31.205	attackspam	Sep 27 12:47:21 hcbb sshd\[27962\]: Invalid user service from 188.166.31.205 Sep 27 12:47:21 hcbb sshd\[27962\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.31.205 Sep 27 12:47:23 hcbb sshd\[27962\]: Failed password for invalid user service from 188.166.31.205 port 50811 ssh2 Sep 27 12:51:01 hcbb sshd\[28239\]: Invalid user abby from 188.166.31.205 Sep 27 12:51:01 hcbb sshd\[28239\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.31.205	2019-09-28 07:00:01
149.56.142.220	attackbots	Sep 27 12:41:48 hpm sshd\[24977\]: Invalid user admin from 149.56.142.220 Sep 27 12:41:48 hpm sshd\[24977\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.ip-149-56-142.net Sep 27 12:41:50 hpm sshd\[24977\]: Failed password for invalid user admin from 149.56.142.220 port 33900 ssh2 Sep 27 12:45:36 hpm sshd\[25341\]: Invalid user tk from 149.56.142.220 Sep 27 12:45:36 hpm sshd\[25341\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.ip-149-56-142.net	2019-09-28 06:50:10
46.38.144.32	attackspam	Sep 28 00:50:45 relay postfix/smtpd\[19514\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 28 00:51:13 relay postfix/smtpd\[30532\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 28 00:53:14 relay postfix/smtpd\[2011\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 28 00:53:42 relay postfix/smtpd\[25812\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 28 00:55:43 relay postfix/smtpd\[1174\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2019-09-28 06:58:56
61.175.191.170	attack	firewall-block, port(s): 445/tcp	2019-09-28 06:38:39
37.247.52.49	attackbots	chaangnoifulda.de 37.247.52.49 \[27/Sep/2019:23:10:03 +0200\] "POST /wp-login.php HTTP/1.1" 200 5876 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" chaangnoifulda.de 37.247.52.49 \[27/Sep/2019:23:10:03 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4099 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2019-09-28 06:35:11
49.88.112.68	attack	Sep 28 01:10:32 mail sshd\[28815\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.68 user=root Sep 28 01:10:34 mail sshd\[28815\]: Failed password for root from 49.88.112.68 port 60294 ssh2 Sep 28 01:10:36 mail sshd\[28815\]: Failed password for root from 49.88.112.68 port 60294 ssh2 Sep 28 01:10:39 mail sshd\[28815\]: Failed password for root from 49.88.112.68 port 60294 ssh2 Sep 28 01:11:19 mail sshd\[28902\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.68 user=root	2019-09-28 07:13:42
31.154.16.105	attackspam	Sep 27 18:20:43 ny01 sshd[10629]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.154.16.105 Sep 27 18:20:46 ny01 sshd[10629]: Failed password for invalid user user from 31.154.16.105 port 44492 ssh2 Sep 27 18:25:09 ny01 sshd[11772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.154.16.105	2019-09-28 06:39:09
113.25.167.142	attackspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/113.25.167.142/ CN - 1H : (1127) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN4134 IP : 113.25.167.142 CIDR : 113.24.0.0/14 PREFIX COUNT : 5430 UNIQUE IP COUNT : 106919680 WYKRYTE ATAKI Z ASN4134 : 1H - 12 3H - 41 6H - 87 12H - 195 24H - 436 INFO : SYN Flood DDoS Attack Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery	2019-09-28 06:50:32
189.213.161.231	attackbots	Automatic report - Port Scan Attack	2019-09-28 07:06:30
190.128.230.14	attackbotsspam	Sep 27 12:33:44 web1 sshd\[20775\]: Invalid user odroid from 190.128.230.14 Sep 27 12:33:44 web1 sshd\[20775\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.128.230.14 Sep 27 12:33:46 web1 sshd\[20775\]: Failed password for invalid user odroid from 190.128.230.14 port 47439 ssh2 Sep 27 12:39:39 web1 sshd\[21357\]: Invalid user zimbra from 190.128.230.14 Sep 27 12:39:39 web1 sshd\[21357\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.128.230.14	2019-09-28 06:43:37
110.183.111.33	attackbots	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/110.183.111.33/ CN - 1H : (1128) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN4134 IP : 110.183.111.33 CIDR : 110.176.0.0/13 PREFIX COUNT : 5430 UNIQUE IP COUNT : 106919680 WYKRYTE ATAKI Z ASN4134 : 1H - 13 3H - 42 6H - 88 12H - 196 24H - 437 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-09-28 06:37:45
67.160.99.70	attack	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/67.160.99.70/ US - 1H : (613) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : US NAME ASN : ASN7922 IP : 67.160.99.70 CIDR : 67.160.0.0/11 PREFIX COUNT : 1512 UNIQUE IP COUNT : 70992640 WYKRYTE ATAKI Z ASN7922 : 1H - 1 3H - 2 6H - 7 12H - 20 24H - 51 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-09-28 06:44:02
110.185.106.47	attackbotsspam	Sep 27 12:39:39 eddieflores sshd\[3134\]: Invalid user ij from 110.185.106.47 Sep 27 12:39:39 eddieflores sshd\[3134\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.185.106.47 Sep 27 12:39:41 eddieflores sshd\[3134\]: Failed password for invalid user ij from 110.185.106.47 port 44106 ssh2 Sep 27 12:44:34 eddieflores sshd\[3524\]: Invalid user villepinte from 110.185.106.47 Sep 27 12:44:34 eddieflores sshd\[3524\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.185.106.47	2019-09-28 06:57:22

Recently Reported IPs

254.62.86.239	209.91.240.84	136.155.0.161	59.144.226.46
2.45.166.5	171.233.221.235	80.146.90.51	196.18.230.201
201.214.88.106	190.106.55.93	127.38.9.32	41.14.77.10
238.183.72.11	170.42.242.88	15.99.170.116	178.165.3.43
81.6.11.129	232.22.146.52	204.49.85.249	230.167.221.80