JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 130.211.61.52

130.211.61.52 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	52.61.211.130.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇪 Belgium
City	Brussels, Brussels Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 130.211.61.52

Whois 130.211.61.52

IP Abuse Reports for 130.211.61.52:

This IP address has been reported a total of 24 times from 24 distinct sources. 130.211.61.52 was first reported on June 19th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 flow1234	2026-06-20 06:00:12 (2 days ago)	SSH/Telnet honeypot (Cowrie) — brute-force/login attempts logged 2026-06-20	Brute-Force SSH Hacking
🇺🇸 NXTwoThou	2026-06-19 12:16:00 (3 days ago)	FTP	Port Scan
🇸🇬 fazar	2026-06-19 08:16:21 (3 days ago)	vsftpd: 2 attempts from 130.211.61.52 on node: sgp02	FTP Brute-Force
🇩🇪 ksol-hostmaster	2026-06-19 07:12:08 (3 days ago)	Jun 19 09:12:01 ksol postfix/postscreen[89590]: PREGREET 18 after 0.01 from [130.211.61.52]:48510: E ... show more Jun 19 09:12:01 ksol postfix/postscreen[89590]: PREGREET 18 after 0.01 from [130.211.61.52]:48510: EHLO example.com\r\n Jun 19 09:12:07 ksol postfix/postscreen[89590]: HANGUP after 3.5 from [130.211.61.52]:48510 in tests after SMTP handshake ... show less	Email Spam
🇺🇦 BrateloSlava	2026-06-19 07:03:46 (3 days ago)	SMTP attack	Brute-Force
🇧🇪 sauron-le-noir	2026-06-19 06:21:58 (3 days ago)	scan port : 23 from Belgique at Fri Jun 19 08:26:06 2026	Port Scan
🇨🇭 GAS	2026-06-19 06:19:06 (3 days ago)	SSH aggressive port ping. {"level":"info","msg":"Telnet connection","src":"130.211.61.52","time":"20 ... show more SSH aggressive port ping. {"level":"info","msg":"Telnet connection","src":"130.211.61.52","time":"2026-06-19T06:18:46.065903744Z"} {"level":"info","msg":"Telnet connection","src":"130.211.61.52","time":"2026-06-19T06:18:46.113406577Z"} {"level":"info","msg":"Telnet connection","src":"130.211.61.52","time":"2026-06-19T06:18:46.155625928Z"} {"level":"info","msg":"Telnet connection","src":"130.211.61.52","time":"2026-06-19T06:19:05.19908725Z"} {"level":"info","msg":"Telnet connection","src":"130.211.61.52","time":"2026-06-19T06:19:05.24004555Z"} {"level":"info","msg":"Telnet connection","src":"130.211.61.52","time":"2026-06-19T06:19:05.281852459Z"} {"level":"info","msg":"Telnet connection","src":"130.211.61.52","time":"2026-06-19T06:19:05.322998369Z"} {"level":"info","msg":"Telnet connection","src":"130.211.61.52","time":"2026-06-19T06:19:05.36417611Z"} {"level":"info","msg":"Telnet connection","src":"130.211.61.52","time":"2026-06-19T06:19:05.407642817Z"} {"level":"info","msg":"Telnet connection","src":"130 ... show less	Brute-Force Port Scan
🇫🇷 TheHoneyPotter	2026-06-19 06:04:27 (3 days ago)	Honeypot [fc-honeypot]: Unauthorized traffic on 21/ftpd Reported by: https://github.com/sefinek/T-Po ... show more Honeypot [fc-honeypot]: Unauthorized traffic on 21/ftpd Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 wasuma	2026-06-19 06:01:23 (3 days ago)	Honeypot hit: \| SSH brute-force (3 successful logins) \| commands run: User-Agent: Mozilla/5.0 (Windo ... show more Honeypot hit: \| SSH brute-force (3 successful logins) \| commands run: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36; Accept-Encoding: gzip; show less	Brute-Force Port Scan SSH
🇺🇸 withfallback.com	2026-06-19 05:45:45 (3 days ago)	Attempt to connect to Java debugger (JDWP)	Port Scan
🇺🇸 abenage	2026-06-19 05:40:46 (3 days ago)	Jun 18 23:40:45 [redacted] postfix/smtpd[2070689]: lost connection after CONNECT from 52.61.211.130. ... show more Jun 18 23:40:45 [redacted] postfix/smtpd[2070689]: lost connection after CONNECT from 52.61.211.130.bc.googleusercontent.com[130.211.61.52] show less	Brute-Force Email Spam Exploited Host
🇵🇱 Kitki30.com	2026-06-19 05:29:06 (3 days ago)	Entered Telnet Tarpit (endlessh). Log: 2026-06-19T05:29:05.838Z ACCEPT host=::ffff:130.211.61.52 por ... show more Entered Telnet Tarpit (endlessh). Log: 2026-06-19T05:29:05.838Z ACCEPT host=::ffff:130.211.61.52 port=22786 fd=197 n=695/1020 show less	IoT Targeted Port Scan Brute-Force
🇧🇬 geddo.in	2026-06-19 05:24:59 (3 days ago)	Jun 18 23:24:42 mortgagebase xinetd[1875]: START: telnet pid=13764 from=::ffff:130.211.61.52 Jun 18 ... show more Jun 18 23:24:42 mortgagebase xinetd[1875]: START: telnet pid=13764 from=::ffff:130.211.61.52 Jun 18 23:24:47 mortgagebase xinetd[1875]: START: telnet pid=13777 from=::ffff:130.211.61.52 Jun 18 23:24:49 mortgagebase xinetd[1875]: START: telnet pid=13781 from=::ffff:130.211.61.52 Jun 18 23:24:58 mortgagebase xinetd[1875]: START: telnet pid=13782 from=::ffff:130.211.61.52 ... show less	Brute-Force
Anonymous	2026-06-19 04:59:34 (3 days ago)	Heralding honeypot: smtp on port 25	Email Spam Brute-Force
🇺🇸 Bankbook8585	2026-06-19 04:47:44 (3 days ago)	T-Pot honeypot \| Dionaea honeypot: ftpd	Port Scan Hacking

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.242.226.17

🇲🇦 102.97.26.152

🇺🇸 92.204.138.198

🇳🇱 91.92.40.151

🇬🇧 45.82.76.110

🇨🇳 43.228.37.109

🇶🇦 34.153.65.29

🇦🇺 172.217.33.16

🇫🇷 159.26.105.36

🇷🇴 141.98.83.240

🇮🇩 103.49.223.111

🇳🇱 91.92.40.12

🇳🇱 45.148.10.15

🇺🇸 3.21.134.197

🇷🇴 2.57.121.25

🇨🇳 223.73.8.230

🇨🇳 218.78.46.81

🇲🇳 203.23.199.89

🇧🇬 78.128.113.22

🇺🇸 65.49.20.114