Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Montenegro

Internet Service Provider: Drustvo za telekomunikacije MTEL DOO

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackbotsspam
email spam
2020-04-15 17:31:25
attack
Apr 13 09:23:49 mail.srvfarm.net postfix/smtpd[775967]: NOQUEUE: reject: RCPT from unknown[62.4.54.158]: 554 5.7.1 Service unavailable; Client host [62.4.54.158] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?62.4.54.158; from= to= proto=ESMTP helo=
Apr 13 09:23:50 mail.srvfarm.net postfix/smtpd[775967]: NOQUEUE: reject: RCPT from unknown[62.4.54.158]: 554 5.7.1 Service unavailable; Client host [62.4.54.158] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?62.4.54.158; from= to= proto=ESMTP helo=
Apr 13 09:23:50 mail.srvfarm.net postfix/smtpd[775967]: NOQUEUE: reject: RCPT from unknown[62.4.54.158]: 554 5.7.1 Service unavailable; Client host [62.4.54.158] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?62.4.54.158; from= to= proto=ESMTP helo=
Apr 13 09:23:5
2020-04-13 18:16:58
attackbots
postfix (unknown user, SPF fail or relay access denied)
2020-01-15 07:17:17
attackbots
Autoban   62.4.54.158 AUTH/CONNECT
2019-12-17 20:12:53
attack
proto=tcp  .  spt=45421  .  dpt=25  .     (Listed on    truncate-gbudb also unsubscore and rbldns-ru)     (888)
2019-10-13 00:53:29
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 62.4.54.158
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34252
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;62.4.54.158.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019062100 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Jun 21 19:15:35 CST 2019
;; MSG SIZE  rcvd: 115
Host info
Host 158.54.4.62.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 158.54.4.62.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
69.138.224.80 attackspambots
Telnet/23 MH Probe, BF, Hack -
2019-11-14 21:57:18
190.144.45.108 attackbotsspam
SSH Brute-Force reported by Fail2Ban
2019-11-14 22:12:49
37.123.177.246 attackspambots
Telnet/23 MH Probe, BF, Hack -
2019-11-14 22:06:12
91.187.115.130 attackbotsspam
Total attacks: 2
2019-11-14 22:39:12
159.203.201.96 spamattack
fuck this
2019-11-14 22:29:06
218.78.53.37 attack
SSH Brute-Force attacks
2019-11-14 22:16:42
148.70.250.207 attackspambots
2019-11-14T07:27:48.480327abusebot-8.cloudsearch.cf sshd\[8097\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.250.207  user=root
2019-11-14 22:00:24
49.116.62.61 attackbotsspam
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/49.116.62.61/ 
 
 CN - 1H : (816)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : CN 
 NAME ASN : ASN4134 
 
 IP : 49.116.62.61 
 
 CIDR : 49.112.0.0/13 
 
 PREFIX COUNT : 5430 
 
 UNIQUE IP COUNT : 106919680 
 
 
 ATTACKS DETECTED ASN4134 :  
  1H - 30 
  3H - 78 
  6H - 155 
 12H - 289 
 24H - 367 
 
 DateTime : 2019-11-14 07:19:32 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-11-14 22:07:23
159.203.201.96 spamattack
fuck this
2019-11-14 22:29:04
123.207.38.126 attack
Unauthorized connection attempt from IP address 123.207.38.126 on Port 445(SMB)
2019-11-14 22:30:27
91.205.207.232 attack
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/91.205.207.232/ 
 
 UA - 1H : (37)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : UA 
 NAME ASN : ASN48006 
 
 IP : 91.205.207.232 
 
 CIDR : 91.205.204.0/22 
 
 PREFIX COUNT : 8 
 
 UNIQUE IP COUNT : 10240 
 
 
 ATTACKS DETECTED ASN48006 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2019-11-14 07:19:43 
 
 INFO : Server 403 - Looking for resource vulnerabilities Detected and Blocked by ADMIN  - data recovery
2019-11-14 21:58:15
1.163.29.163 attackbotsspam
Port scan
2019-11-14 22:24:35
46.105.124.52 attackbots
Automatic report - Banned IP Access
2019-11-14 22:30:06
60.249.21.132 attack
Nov 14 08:03:59 Tower sshd[29722]: Connection from 60.249.21.132 port 41682 on 192.168.10.220 port 22
Nov 14 08:04:00 Tower sshd[29722]: Invalid user apache from 60.249.21.132 port 41682
Nov 14 08:04:00 Tower sshd[29722]: error: Could not get shadow information for NOUSER
Nov 14 08:04:00 Tower sshd[29722]: Failed password for invalid user apache from 60.249.21.132 port 41682 ssh2
Nov 14 08:04:01 Tower sshd[29722]: Received disconnect from 60.249.21.132 port 41682:11: Bye Bye [preauth]
Nov 14 08:04:01 Tower sshd[29722]: Disconnected from invalid user apache 60.249.21.132 port 41682 [preauth]
2019-11-14 22:14:21
91.85.208.131 attack
UTC: 2019-11-13 port: 80/tcp
2019-11-14 22:13:49

Recently Reported IPs

174.239.24.163 100.220.3.111 148.251.238.6 233.232.14.123
159.119.241.196 46.8.146.140 236.219.40.105 250.85.161.128
67.126.106.191 31.182.16.66 115.188.169.134 248.57.211.253
246.58.106.41 90.169.184.147 85.209.90.153 180.104.6.147
103.255.4.41 183.189.200.98 14.246.205.184 27.153.141.168