必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 132.205.54.95
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51050
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;132.205.54.95.			IN	A

;; AUTHORITY SECTION:
.			222	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030802 1800 900 604800 86400

;; Query time: 25 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 05:40:20 CST 2022
;; MSG SIZE  rcvd: 106
HOST信息:
Host 95.54.205.132.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 95.54.205.132.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
175.167.11.239 attackspam
Jun 23 01:10:40 mercury kernel: [UFW ALLOW] IN=eth0 OUT= MAC=f2:3c:91:bc:4d:f8:84:78:ac:5a:1a:41:08:00 SRC=175.167.11.239 DST=109.74.200.221 LEN=32 TOS=0x00 PREC=0x00 TTL=50 ID=0 DF PROTO=UDP SPT=123 DPT=123 LEN=12 
...
2019-06-23 15:04:29
40.112.65.88 attackbots
Jun 19 16:09:01 shared06 sshd[20108]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.112.65.88  user=nagios
Jun 19 16:09:03 shared06 sshd[20108]: Failed password for nagios from 40.112.65.88 port 53070 ssh2
Jun 19 16:09:03 shared06 sshd[20108]: Received disconnect from 40.112.65.88 port 53070:11: Bye Bye [preauth]
Jun 19 16:09:03 shared06 sshd[20108]: Disconnected from 40.112.65.88 port 53070 [preauth]
Jun 19 16:13:06 shared06 sshd[21856]: Invalid user da from 40.112.65.88
Jun 19 16:13:06 shared06 sshd[21856]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.112.65.88
Jun 19 16:13:08 shared06 sshd[21856]: Failed password for invalid user da from 40.112.65.88 port 43668 ssh2
Jun 19 16:13:08 shared06 sshd[21856]: Received disconnect from 40.112.65.88 port 43668:11: Bye Bye [preauth]
Jun 19 16:13:08 shared06 sshd[21856]: Disconnected from 40.112.65.88 port 43668 [preauth]


........
---------------------------------------------
2019-06-23 14:57:46
41.110.188.5 attack
port scan and connect, tcp 8080 (http-proxy)
2019-06-23 14:38:12
95.85.8.215 attackspambots
Jun 23 03:36:30 vserver sshd\[4597\]: Invalid user xbmc from 95.85.8.215Jun 23 03:36:31 vserver sshd\[4597\]: Failed password for invalid user xbmc from 95.85.8.215 port 42026 ssh2Jun 23 03:42:40 vserver sshd\[4655\]: Invalid user zimbra from 95.85.8.215Jun 23 03:42:42 vserver sshd\[4655\]: Failed password for invalid user zimbra from 95.85.8.215 port 46572 ssh2
...
2019-06-23 14:47:00
222.186.129.44 attack
ports scanning
2019-06-23 14:39:38
82.119.111.122 attackbots
Automatic report - Web App Attack
2019-06-23 15:15:38
201.103.57.96 attackbotsspam
port scan and connect, tcp 80 (http)
2019-06-23 15:04:59
37.230.163.20 attack
Jun 19 16:13:54 mxgate1 postfix/postscreen[8463]: CONNECT from [37.230.163.20]:40472 to [176.31.12.44]:25
Jun 19 16:13:54 mxgate1 postfix/dnsblog[8465]: addr 37.230.163.20 listed by domain cbl.abuseat.org as 127.0.0.2
Jun 19 16:13:54 mxgate1 postfix/dnsblog[8469]: addr 37.230.163.20 listed by domain zen.spamhaus.org as 127.0.0.4
Jun 19 16:13:54 mxgate1 postfix/dnsblog[8469]: addr 37.230.163.20 listed by domain zen.spamhaus.org as 127.0.0.3
Jun 19 16:13:54 mxgate1 postfix/dnsblog[8464]: addr 37.230.163.20 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Jun 19 16:13:54 mxgate1 postfix/dnsblog[8468]: addr 37.230.163.20 listed by domain bl.spamcop.net as 127.0.0.2
Jun 19 16:13:54 mxgate1 postfix/postscreen[8463]: PREGREET 22 after 0.2 from [37.230.163.20]:40472: EHLO 1122gilford.com

Jun 19 16:13:54 mxgate1 postfix/postscreen[8463]: DNSBL rank 5 for [37.230.163.20]:40472
Jun x@x
Jun 19 16:13:55 mxgate1 postfix/postscreen[8463]: HANGUP after 0.56 from [37.230.163.20]:40472........
-------------------------------
2019-06-23 15:05:22
114.115.135.76 attack
[Sun Jun 23 02:10:17.544894 2019] [php5:error] [pid 16438] [client 114.115.135.76:54525] script '/data/web/construction/Appe6e356d9.php' not found or unable to stat
[Sun Jun 23 02:10:21.582994 2019] [php5:error] [pid 16442] [client 114.115.135.76:54927] script '/data/web/construction/help.php' not found or unable to stat
[Sun Jun 23 02:10:25.593395 2019] [php5:error] [pid 16455] [client 114.115.135.76:55235] script '/data/web/construction/java.php' not found or unable to stat
2019-06-23 15:20:00
185.176.27.38 attack
23.06.2019 05:37:43 Connection to port 14192 blocked by firewall
2019-06-23 14:59:03
194.187.249.57 attack
Automatic report generated by Wazuh
2019-06-23 15:10:23
110.138.98.23 attackbots
20 attempts against mh-ssh on pluto.magehost.pro
2019-06-23 15:09:57
80.211.7.157 attackbots
Jun 23 00:20:36 vl01 sshd[27016]: Address 80.211.7.157 maps to host157-7-211-80.serverdedicati.aruba.hostname, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Jun 23 00:20:36 vl01 sshd[27016]: Invalid user tester from 80.211.7.157
Jun 23 00:20:36 vl01 sshd[27016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.7.157
Jun 23 00:20:38 vl01 sshd[27016]: Failed password for invalid user tester from 80.211.7.157 port 47822 ssh2
Jun 23 00:20:38 vl01 sshd[27016]: Received disconnect from 80.211.7.157: 11: Bye Bye [preauth]
Jun 23 00:23:39 vl01 sshd[27212]: Address 80.211.7.157 maps to host157-7-211-80.serverdedicati.aruba.hostname, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Jun 23 00:23:39 vl01 sshd[27212]: Invalid user user7 from 80.211.7.157
Jun 23 00:23:39 vl01 sshd[27212]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.7.157
Jun ........
-------------------------------
2019-06-23 15:26:53
115.51.211.210 attackbots
TCP port 23 (Telnet) attempt blocked by firewall. [2019-06-23 02:09:47]
2019-06-23 15:01:55
191.53.223.80 attackspam
SMTP-sasl brute force
...
2019-06-23 14:38:39

最近上报的IP列表

132.205.85.240 132.205.54.96 132.205.85.200 132.205.57.35
132.205.73.207 132.205.53.72 118.172.59.176 132.205.86.96
132.210.238.9 132.205.96.17 132.206.92.127 132.206.245.59
132.208.132.99 132.211.133.130 132.206.53.15 132.212.198.35
132.219.129.135 118.172.59.178 132.219.142.5 132.219.132.40