2.132.24.80 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Kazakhstan

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
2.132.249.34	attackspam	Icarus honeypot on github	2020-06-10 20:24:31
2.132.243.211	attackspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/2.132.243.211/ KZ - 1H : (14) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : KZ NAME ASN : ASN9198 IP : 2.132.243.211 CIDR : 2.132.240.0/21 PREFIX COUNT : 1223 UNIQUE IP COUNT : 1472256 ATTACKS DETECTED ASN9198 : 1H - 1 3H - 1 6H - 4 12H - 7 24H - 13 DateTime : 2019-11-19 17:30:30 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-11-20 02:10:55
2.132.243.54	attackbotsspam	Unauthorized connection attempt from IP address 2.132.243.54 on Port 445(SMB)	2019-10-09 07:16:59

类型

评论内容

时间

2.132.249.34

attackspam

Icarus honeypot on github

2020-06-10 20:24:31

2.132.243.211

attackspam

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/2.132.243.211/ 
 
 KZ - 1H : (14)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : KZ 
 NAME ASN : ASN9198 
 
 IP : 2.132.243.211 
 
 CIDR : 2.132.240.0/21 
 
 PREFIX COUNT : 1223 
 
 UNIQUE IP COUNT : 1472256 
 
 
 ATTACKS DETECTED ASN9198 :  
  1H - 1 
  3H - 1 
  6H - 4 
 12H - 7 
 24H - 13 
 
 DateTime : 2019-11-19 17:30:30 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery

2019-11-20 02:10:55

2.132.243.54

attackbotsspam

Unauthorized connection attempt from IP address 2.132.243.54 on Port 445(SMB)

2019-10-09 07:16:59

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.132.24.80
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5741
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;2.132.24.80.			IN	A

;; AUTHORITY SECTION:
.			318	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 14:55:14 CST 2022
;; MSG SIZE  rcvd: 104

HOST信息:

80.24.132.2.in-addr.arpa domain name pointer 2.132.24.80.megaline.telecom.kz.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
80.24.132.2.in-addr.arpa	name = 2.132.24.80.megaline.telecom.kz.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
77.241.49.45	attackspam	Automatic report - Port Scan Attack	2020-10-01 08:21:15
201.217.54.254	attackspam	TCP (SYN) 201.217.54.254:52117 -> port 23, len 44	2020-10-01 08:22:09
106.12.56.41	attack	Oct 1 00:12:44 ws26vmsma01 sshd[9072]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.56.41 Oct 1 00:12:46 ws26vmsma01 sshd[9072]: Failed password for invalid user edgar from 106.12.56.41 port 54692 ssh2 ...	2020-10-01 08:35:21
167.114.52.16	attackspam	SIPVicious Scanner Detection	2020-10-01 08:11:06
116.196.108.9	attackbotsspam	2020-09-30T18:49:20.307251www postfix/smtpd[27892]: warning: unknown[116.196.108.9]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2020-09-30T18:49:34.086017www postfix/smtpd[27892]: warning: unknown[116.196.108.9]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2020-09-30T18:49:55.308998www postfix/smtpd[27892]: warning: unknown[116.196.108.9]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-10-01 08:43:15
51.79.85.154	attack	51.79.85.154 - - [01/Oct/2020:00:22:07 +0100] "POST /wp-login.php HTTP/1.1" 200 2259 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.79.85.154 - - [01/Oct/2020:00:22:08 +0100] "POST /wp-login.php HTTP/1.1" 200 2243 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.79.85.154 - - [01/Oct/2020:00:22:10 +0100] "POST /wp-login.php HTTP/1.1" 200 2287 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-10-01 08:08:52
177.124.201.61	attackbotsspam	SSH / Telnet Brute Force Attempts on Honeypot	2020-10-01 08:38:24
109.237.97.128	attackspambots	SpamScore above: 10.0	2020-10-01 08:15:06
106.51.98.159	attackbotsspam	Failed password for invalid user bruno from 106.51.98.159 port 47440 ssh2	2020-10-01 08:27:15
91.121.101.155	attack	$f2bV_matches	2020-10-01 08:29:32
210.121.223.61	attackbots	2020-09-30T22:17:23.307094abusebot-5.cloudsearch.cf sshd[11800]: Invalid user account from 210.121.223.61 port 58732 2020-09-30T22:17:23.318233abusebot-5.cloudsearch.cf sshd[11800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.121.223.61 2020-09-30T22:17:23.307094abusebot-5.cloudsearch.cf sshd[11800]: Invalid user account from 210.121.223.61 port 58732 2020-09-30T22:17:25.346022abusebot-5.cloudsearch.cf sshd[11800]: Failed password for invalid user account from 210.121.223.61 port 58732 ssh2 2020-09-30T22:24:02.770459abusebot-5.cloudsearch.cf sshd[11811]: Invalid user mmk from 210.121.223.61 port 49122 2020-09-30T22:24:02.777744abusebot-5.cloudsearch.cf sshd[11811]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.121.223.61 2020-09-30T22:24:02.770459abusebot-5.cloudsearch.cf sshd[11811]: Invalid user mmk from 210.121.223.61 port 49122 2020-09-30T22:24:04.579916abusebot-5.cloudsearch.cf sshd[11811 ...	2020-10-01 08:12:26
115.56.182.221	attack	Telnet Honeypot -> Telnet Bruteforce / Login	2020-10-01 08:12:50
46.101.156.213	attackbotsspam	46.101.156.213 - - [30/Sep/2020:23:28:05 +0200] "POST /wp-login.php HTTP/1.1" 200 4481 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 46.101.156.213 - - [30/Sep/2020:23:28:05 +0200] "POST /wp-login.php HTTP/1.1" 200 4481 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 46.101.156.213 - - [30/Sep/2020:23:28:06 +0200] "POST /wp-login.php HTTP/1.1" 200 4481 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 46.101.156.213 - - [30/Sep/2020:23:28:06 +0200] "POST /wp-login.php HTTP/1.1" 200 4481 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-10-01 08:11:55
124.158.108.79	attack	Port probing on unauthorized port 8291	2020-10-01 08:29:07
45.156.84.56	attack	[2020-09-30 20:31:35] NOTICE[1159] chan_sip.c: Registration from '' failed for '45.156.84.56:57646' - Wrong password [2020-09-30 20:31:35] SECURITY[1198] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-30T20:31:35.179-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="Holly",SessionID="0x7fcaa02091e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.156.84.56/57646",Challenge="6fec026e",ReceivedChallenge="6fec026e",ReceivedHash="3fc72eb3b7a66386a4e7edd3f9cb1bf5" [2020-09-30 20:32:11] NOTICE[1159] chan_sip.c: Registration from '' failed for '45.156.84.56:61015' - Wrong password [2020-09-30 20:32:11] SECURITY[1198] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-30T20:32:11.294-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="Evan",SessionID="0x7fcaa02091e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.156.84.56/6 ...	2020-10-01 08:32:29

最近上报的IP列表

167.246.42.248	167.248.133.37	167.249.102.104	167.249.102.154
167.249.102.231	167.249.102.34	167.249.102.22	167.249.102.37
167.249.11.162	167.249.102.63	167.249.102.44	167.249.18.175
2.1.124.6	167.249.102.162	167.249.230.130	167.249.188.71
167.249.94.177	167.249.42.201	167.250.162.36	167.250.10.38