Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Canada

Internet Service Provider: Frontier Networks Inc

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackspambots
scan z
2019-11-15 04:54:32
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.2.254.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47376
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.2.254.52.			IN	A

;; AUTHORITY SECTION:
.			598	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019111401 1800 900 604800 86400

;; Query time: 117 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Nov 15 04:54:30 CST 2019
;; MSG SIZE  rcvd: 115
Host info
Host 52.254.2.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 52.254.2.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
174.138.34.178 attackbots
May 31 19:19:13 finn sshd[11481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.34.178  user=r.r
May 31 19:19:15 finn sshd[11481]: Failed password for r.r from 174.138.34.178 port 35706 ssh2
May 31 19:19:15 finn sshd[11481]: Received disconnect from 174.138.34.178 port 35706:11: Bye Bye [preauth]
May 31 19:19:15 finn sshd[11481]: Disconnected from 174.138.34.178 port 35706 [preauth]
May 31 19:20:58 finn sshd[12987]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.34.178  user=r.r
May 31 19:21:00 finn sshd[12987]: Failed password for r.r from 174.138.34.178 port 60514 ssh2
May 31 19:21:00 finn sshd[12987]: Received disconnect from 174.138.34.178 port 60514:11: Bye Bye [preauth]
May 31 19:21:00 finn sshd[12987]: Disconnected from 174.138.34.178 port 60514 [preauth]
May 31 19:22:11 finn sshd[13074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh rus........
-------------------------------
2020-06-04 03:11:53
138.197.164.222 attackspam
Jun  3 17:26:34 OPSO sshd\[31478\]: Invalid user levko\\r from 138.197.164.222 port 42480
Jun  3 17:26:34 OPSO sshd\[31478\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.164.222
Jun  3 17:26:36 OPSO sshd\[31478\]: Failed password for invalid user levko\\r from 138.197.164.222 port 42480 ssh2
Jun  3 17:31:13 OPSO sshd\[32265\]: Invalid user Qwer!@\#\$%\^\\r from 138.197.164.222 port 57500
Jun  3 17:31:13 OPSO sshd\[32265\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.164.222
2020-06-04 03:48:00
189.90.255.108 attack
Jun  3 16:43:24 ws12vmsma01 sshd[10890]: Failed password for root from 189.90.255.108 port 50264 ssh2
Jun  3 16:46:34 ws12vmsma01 sshd[11489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-189-90-255-108.isp.valenet.com.br  user=root
Jun  3 16:46:37 ws12vmsma01 sshd[11489]: Failed password for root from 189.90.255.108 port 50802 ssh2
...
2020-06-04 03:47:40
23.251.142.181 attack
Jun  3 15:15:44 ns382633 sshd\[6912\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.251.142.181  user=root
Jun  3 15:15:46 ns382633 sshd\[6912\]: Failed password for root from 23.251.142.181 port 61665 ssh2
Jun  3 15:21:36 ns382633 sshd\[7934\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.251.142.181  user=root
Jun  3 15:21:38 ns382633 sshd\[7934\]: Failed password for root from 23.251.142.181 port 14879 ssh2
Jun  3 15:23:45 ns382633 sshd\[8186\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.251.142.181  user=root
2020-06-04 03:14:04
62.234.145.195 attackspam
2020-06-03T18:21:18.207644ns386461 sshd\[10055\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.145.195  user=root
2020-06-03T18:21:20.914680ns386461 sshd\[10055\]: Failed password for root from 62.234.145.195 port 37158 ssh2
2020-06-03T18:36:26.033925ns386461 sshd\[23971\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.145.195  user=root
2020-06-03T18:36:27.392849ns386461 sshd\[23971\]: Failed password for root from 62.234.145.195 port 56678 ssh2
2020-06-03T18:39:20.392051ns386461 sshd\[26801\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.145.195  user=root
...
2020-06-04 03:47:06
49.235.11.46 attackbotsspam
Jun  3 21:23:57 MainVPS sshd[29226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.11.46  user=root
Jun  3 21:23:59 MainVPS sshd[29226]: Failed password for root from 49.235.11.46 port 44324 ssh2
Jun  3 21:26:39 MainVPS sshd[31588]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.11.46  user=root
Jun  3 21:26:40 MainVPS sshd[31588]: Failed password for root from 49.235.11.46 port 43934 ssh2
Jun  3 21:29:10 MainVPS sshd[1424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.11.46  user=root
Jun  3 21:29:11 MainVPS sshd[1424]: Failed password for root from 49.235.11.46 port 43540 ssh2
...
2020-06-04 03:45:52
201.219.50.217 attackbots
Lines containing failures of 201.219.50.217
Jun  1 20:00:35 g sshd[7731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.219.50.217  user=r.r
Jun  1 20:00:37 g sshd[7731]: Failed password for r.r from 201.219.50.217 port 57752 ssh2
Jun  1 20:00:37 g sshd[7731]: Received disconnect from 201.219.50.217 port 57752:11: Bye Bye [preauth]
Jun  1 20:00:37 g sshd[7731]: Disconnected from authenticating user r.r 201.219.50.217 port 57752 [preauth]
Jun  1 20:05:16 g sshd[7785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.219.50.217  user=r.r
Jun  1 20:05:18 g sshd[7785]: Failed password for r.r from 201.219.50.217 port 44962 ssh2
Jun  1 20:05:18 g sshd[7785]: Received disconnect from 201.219.50.217 port 44962:11: Bye Bye [preauth]
Jun  1 20:05:18 g sshd[7785]: Disconnected from authenticating user r.r 201.219.50.217 port 44962 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.
2020-06-04 03:21:40
35.187.239.32 attack
SSH/22 MH Probe, BF, Hack -
2020-06-04 03:38:53
106.13.25.198 attack
Jun  2 11:05:55 mailrelay sshd[5896]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.25.198  user=r.r
Jun  2 11:05:56 mailrelay sshd[5896]: Failed password for r.r from 106.13.25.198 port 49778 ssh2
Jun  2 11:05:56 mailrelay sshd[5896]: Received disconnect from 106.13.25.198 port 49778:11: Bye Bye [preauth]
Jun  2 11:05:56 mailrelay sshd[5896]: Disconnected from 106.13.25.198 port 49778 [preauth]
Jun  2 14:13:42 mailrelay sshd[8556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.25.198  user=r.r
Jun  2 14:13:44 mailrelay sshd[8556]: Failed password for r.r from 106.13.25.198 port 40914 ssh2
Jun  2 14:13:44 mailrelay sshd[8556]: Received disconnect from 106.13.25.198 port 40914:11: Bye Bye [preauth]
Jun  2 14:13:44 mailrelay sshd[8556]: Disconnected from 106.13.25.198 port 40914 [preauth]
Jun  2 14:22:33 mailrelay sshd[8605]: pam_unix(sshd:auth): authentication failure; logna........
-------------------------------
2020-06-04 03:38:13
138.197.5.123 attackbotsspam
2020-06-03T20:26:03.420295hz01.yumiweb.com sshd\[20906\]: Invalid user user2 from 138.197.5.123 port 54660
2020-06-03T20:28:28.553886hz01.yumiweb.com sshd\[20908\]: Invalid user user3 from 138.197.5.123 port 34916
2020-06-03T20:30:53.920336hz01.yumiweb.com sshd\[20925\]: Invalid user user4 from 138.197.5.123 port 38972
...
2020-06-04 03:30:51
114.67.67.41 attack
odoo8
...
2020-06-04 03:36:17
93.49.247.215 attackbots
firewall-block, port(s): 23/tcp
2020-06-04 03:43:35
213.176.36.4 attackbotsspam
(sshd) Failed SSH login from 213.176.36.4 (HK/Hong Kong/-): 5 in the last 3600 secs
2020-06-04 03:14:38
195.54.160.180 attackspam
$f2bV_matches
2020-06-04 03:20:32
80.82.77.245 attackbotsspam
firewall-block, port(s): 1054/udp
2020-06-04 03:22:02

Recently Reported IPs

185.43.209.185 59.153.252.91 185.43.209.96 102.50.50.1
180.254.139.140 94.51.70.46 14.191.100.69 108.162.216.234
41.39.118.34 183.193.214.170 89.2.28.229 173.44.36.156
108.162.216.144 199.229.249.136 108.162.216.116 85.26.149.34
223.10.18.102 188.136.164.56 186.52.114.242 162.158.74.107