必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Thailand

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.4.249.132
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52062
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.4.249.132.			IN	A

;; AUTHORITY SECTION:
.			489	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022401 1800 900 604800 86400

;; Query time: 48 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 11:46:49 CST 2022
;; MSG SIZE  rcvd: 104
HOST信息:
132.249.4.1.in-addr.arpa domain name pointer node-o04.pool-1-4.dynamic.totinternet.net.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
132.249.4.1.in-addr.arpa	name = node-o04.pool-1-4.dynamic.totinternet.net.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
177.222.16.85 attack
Unauthorized connection attempt from IP address 177.222.16.85 on Port 445(SMB)
2020-09-18 22:20:08
85.216.6.12 attack
(sshd) Failed SSH login from 85.216.6.12 (DE/Germany/HSI-KBW-085-216-006-012.hsi.kabelbw.de): 5 in the last 3600 secs
2020-09-18 22:24:01
187.108.31.87 attackbots
(smtpauth) Failed SMTP AUTH login from 187.108.31.87 (BR/Brazil/187.108.31.87-rev.tcheturbo.net.br): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2020-09-18 10:00:44 dovecot_login authenticator failed for (Alan) [187.108.31.87]:18624: 535 Incorrect authentication data (set_id=alanalonso)
2020-09-18 10:06:59 dovecot_login authenticator failed for (Alan) [187.108.31.87]:18584: 535 Incorrect authentication data (set_id=alanalonso)
2020-09-18 10:17:02 dovecot_login authenticator failed for (Alan) [187.108.31.87]:18289: 535 Incorrect authentication data (set_id=alanalonso)
2020-09-18 10:27:04 dovecot_login authenticator failed for (Alan) [187.108.31.87]:18638: 535 Incorrect authentication data (set_id=alanalonso)
2020-09-18 10:37:06 dovecot_login authenticator failed for (Alan) [187.108.31.87]:27954: 535 Incorrect authentication data (set_id=alanalonso)
2020-09-18 22:04:30
190.26.167.157 attack
Auto Detect Rule!
proto TCP (SYN), 190.26.167.157:41643->gjan.info:23, len 40
2020-09-18 22:33:34
141.136.87.250 attack
Unauthorized access to SSH at 17/Sep/2020:17:00:30 +0000.
2020-09-18 22:30:44
113.128.246.50 attack
Invalid user idallas from 113.128.246.50 port 34144
2020-09-18 22:29:05
202.188.20.123 attackbots
2020-09-18 08:55:44.632214-0500  localhost sshd[87008]: Failed password for root from 202.188.20.123 port 54556 ssh2
2020-09-18 22:16:52
120.133.136.191 attackbotsspam
Lines containing failures of 120.133.136.191
Sep 17 08:04:45 hgb10502 sshd[27465]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.133.136.191  user=r.r
Sep 17 08:04:46 hgb10502 sshd[27465]: Failed password for r.r from 120.133.136.191 port 48393 ssh2
Sep 17 08:04:47 hgb10502 sshd[27465]: Received disconnect from 120.133.136.191 port 48393:11: Bye Bye [preauth]
Sep 17 08:04:47 hgb10502 sshd[27465]: Disconnected from authenticating user r.r 120.133.136.191 port 48393 [preauth]
Sep 17 08:26:01 hgb10502 sshd[30512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.133.136.191  user=r.r
Sep 17 08:26:03 hgb10502 sshd[30512]: Failed password for r.r from 120.133.136.191 port 44689 ssh2
Sep 17 08:26:06 hgb10502 sshd[30512]: Received disconnect from 120.133.136.191 port 44689:11: Bye Bye [preauth]
Sep 17 08:26:06 hgb10502 sshd[30512]: Disconnected from authenticating user r.r 120.133.136.191 p........
------------------------------
2020-09-18 22:31:32
45.183.1.105 attack
Unauthorized connection attempt from IP address 45.183.1.105 on Port 445(SMB)
2020-09-18 22:14:26
195.54.167.91 attack
scans 2 times in preceeding hours on the ports (in chronological order) 43435 43417 resulting in total of 31 scans from 195.54.166.0/23 block.
2020-09-18 22:22:21
117.220.0.146 attack
Unauthorized connection attempt from IP address 117.220.0.146 on Port 445(SMB)
2020-09-18 22:13:35
165.227.95.163 attack
Sep 18 14:22:42 nextcloud sshd\[28955\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.95.163  user=root
Sep 18 14:22:44 nextcloud sshd\[28955\]: Failed password for root from 165.227.95.163 port 57822 ssh2
Sep 18 14:25:18 nextcloud sshd\[32091\]: Invalid user debian from 165.227.95.163
Sep 18 14:25:18 nextcloud sshd\[32091\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.95.163
2020-09-18 22:14:40
67.205.166.231 attackbots
67.205.166.231 (US/United States/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 18 08:09:07 server4 sshd[21233]: Failed password for root from 93.108.242.140 port 43194 ssh2
Sep 18 08:17:29 server4 sshd[29357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.205.166.231  user=root
Sep 18 08:10:40 server4 sshd[22704]: Failed password for root from 111.231.62.191 port 35284 ssh2
Sep 18 08:10:35 server4 sshd[22717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.10.245.152  user=root
Sep 18 08:10:38 server4 sshd[22704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.62.191  user=root
Sep 18 08:10:38 server4 sshd[22717]: Failed password for root from 186.10.245.152 port 57980 ssh2

IP Addresses Blocked:

93.108.242.140 (PT/Portugal/-)
2020-09-18 22:21:30
184.105.139.94 attackbotsspam
Found on   Github Combined on 3 lists    / proto=17  .  srcport=19005  .  dstport=69  .     (1318)
2020-09-18 22:22:42
107.170.20.247 attackbots
Sep 18 13:00:19 mail sshd[25755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.20.247
2020-09-18 22:08:11

最近上报的IP列表

104.18.21.143 1.4.248.84 1.4.249.115 1.4.249.163
1.4.248.79 1.4.249.113 1.4.249.149 1.4.249.161
1.4.249.130 1.4.249.119 104.18.21.167 1.4.249.157
1.4.249.101 1.4.249.171 1.4.249.172 1.4.249.168
1.4.249.183 1.4.249.220 1.4.249.194 1.4.249.206