必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Nur-Sultan

省份(region): Nur-Sultan

国家(country): Kazakhstan

运营商(isp): Ust Kamenogorsk

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Commercial

用户上报:
类型 评论内容 时间
attackspam
Oct  5 19:35:15 gospond sshd[26916]: Failed password for root from 2.132.254.54 port 48298 ssh2
Oct  5 19:35:13 gospond sshd[26916]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.132.254.54  user=root
Oct  5 19:35:15 gospond sshd[26916]: Failed password for root from 2.132.254.54 port 48298 ssh2
...
2020-10-06 03:04:33
attack
2020-10-04T20:36:17.3812821495-001 sshd[15161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.132.254.54  user=root
2020-10-04T20:36:19.3810371495-001 sshd[15161]: Failed password for root from 2.132.254.54 port 59016 ssh2
2020-10-04T20:40:15.3053521495-001 sshd[15356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.132.254.54  user=root
2020-10-04T20:40:17.3102871495-001 sshd[15356]: Failed password for root from 2.132.254.54 port 38016 ssh2
2020-10-04T20:44:16.6605071495-001 sshd[15611]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.132.254.54  user=root
2020-10-04T20:44:18.7511571495-001 sshd[15611]: Failed password for root from 2.132.254.54 port 45076 ssh2
...
2020-10-05 18:55:36
attack
$f2bV_matches
2020-09-16 23:51:15
attackbotsspam
Sep 16 06:53:13 rocket sshd[20819]: Failed password for mysql from 2.132.254.54 port 48928 ssh2
Sep 16 06:57:40 rocket sshd[21420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.132.254.54
...
2020-09-16 16:08:14
attack
Sep 15 19:56:22 ny01 sshd[15314]: Failed password for root from 2.132.254.54 port 33348 ssh2
Sep 15 20:00:25 ny01 sshd[16087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.132.254.54
Sep 15 20:00:27 ny01 sshd[16087]: Failed password for invalid user Admin from 2.132.254.54 port 38694 ssh2
2020-09-16 08:07:58
attackbotsspam
2020-08-29T08:58:30.2230271495-001 sshd[12376]: Invalid user mico from 2.132.254.54 port 40596
2020-08-29T08:58:30.2267631495-001 sshd[12376]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.132.254.54
2020-08-29T08:58:30.2230271495-001 sshd[12376]: Invalid user mico from 2.132.254.54 port 40596
2020-08-29T08:58:32.2014801495-001 sshd[12376]: Failed password for invalid user mico from 2.132.254.54 port 40596 ssh2
2020-08-29T09:02:44.2291111495-001 sshd[12620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.132.254.54  user=mysql
2020-08-29T09:02:46.0733661495-001 sshd[12620]: Failed password for mysql from 2.132.254.54 port 47412 ssh2
...
2020-08-29 23:47:38
attack
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-29T04:39:42Z and 2020-08-29T04:52:03Z
2020-08-29 14:08:25
attackspambots
Aug 25 23:53:18 [host] sshd[3112]: pam_unix(sshd:a
Aug 25 23:53:20 [host] sshd[3112]: Failed password
Aug 25 23:57:27 [host] sshd[3265]: Invalid user ab
2020-08-26 08:21:51
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.132.254.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17186
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;2.132.254.54.			IN	A

;; AUTHORITY SECTION:
.			154	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020082501 1800 900 604800 86400

;; Query time: 70 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Aug 26 08:21:48 CST 2020
;; MSG SIZE  rcvd: 116
HOST信息:
Host 54.254.132.2.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 54.254.132.2.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
185.112.250.250 attackspam
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-16 23:09:55
103.1.93.123 attack
"SMTP brute force auth login attempt."
2020-02-16 23:28:58
80.211.137.127 attackbotsspam
Feb 16 05:00:08 web9 sshd\[18863\]: Invalid user vss from 80.211.137.127
Feb 16 05:00:08 web9 sshd\[18863\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.137.127
Feb 16 05:00:10 web9 sshd\[18863\]: Failed password for invalid user vss from 80.211.137.127 port 47352 ssh2
Feb 16 05:02:42 web9 sshd\[19206\]: Invalid user suporte from 80.211.137.127
Feb 16 05:02:42 web9 sshd\[19206\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.137.127
2020-02-16 23:04:25
185.175.93.19 attackbots
Feb 16 15:49:22 debian-2gb-nbg1-2 kernel: \[4123783.011226\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.175.93.19 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=5875 PROTO=TCP SPT=41424 DPT=5933 WINDOW=1024 RES=0x00 SYN URGP=0
2020-02-16 22:51:47
105.112.181.24 attack
Attempt to attack host OS, exploiting network vulnerabilities, on 16-02-2020 13:50:16.
2020-02-16 23:03:08
185.103.110.209 attackbots
0,62-02/05 [bc01/m08] PostRequest-Spammer scoring: Lusaka01
2020-02-16 22:55:57
202.151.30.145 attack
Feb 16 16:02:34 dedicated sshd[3414]: Invalid user a from 202.151.30.145 port 57938
2020-02-16 23:16:13
177.72.23.28 attackspam
php WP PHPmyadamin ABUSE blocked for 12h
2020-02-16 23:27:37
79.220.20.37 attack
Automatic report - Port Scan Attack
2020-02-16 23:26:45
187.61.195.46 attack
Automatic report - Port Scan Attack
2020-02-16 23:13:00
144.217.42.212 attackbotsspam
Feb 16 14:50:13 localhost sshd\[18179\]: Invalid user pi from 144.217.42.212
Feb 16 14:50:13 localhost sshd\[18179\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.42.212
Feb 16 14:50:15 localhost sshd\[18179\]: Failed password for invalid user pi from 144.217.42.212 port 43022 ssh2
Feb 16 14:50:18 localhost sshd\[18183\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.42.212  user=root
Feb 16 14:50:20 localhost sshd\[18183\]: Failed password for root from 144.217.42.212 port 44140 ssh2
...
2020-02-16 22:54:20
184.22.208.197 attackbots
Attempt to attack host OS, exploiting network vulnerabilities, on 16-02-2020 13:50:25.
2020-02-16 22:45:03
222.186.31.166 attack
DATE:2020-02-16 16:13:07, IP:222.186.31.166, PORT:ssh SSH brute force auth on honeypot server (epe-honey1-hq)
2020-02-16 23:19:38
186.95.218.122 attackspam
Attempt to attack host OS, exploiting network vulnerabilities, on 16-02-2020 13:50:26.
2020-02-16 22:42:32
201.64.93.242 attackbotsspam
1581861003 - 02/16/2020 14:50:03 Host: 201.64.93.242/201.64.93.242 Port: 445 TCP Blocked
2020-02-16 23:16:34

最近上报的IP列表

35.138.105.171 180.139.154.81 87.138.79.211 98.20.200.53
111.67.205.91 103.91.33.99 187.75.189.233 80.108.53.143
179.120.24.200 108.74.217.164 42.200.222.28 81.24.86.181
194.154.159.51 51.83.136.100 139.194.242.204 187.255.55.11
213.29.97.209 201.178.122.154 106.34.49.163 79.133.252.220