132.232.212.45

基本信息:

城市(city): unknown

省份(region): Beijing

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): Shenzhen Tencent Computer Systems Company Limited

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	132.232.212.45 - - [11/Apr/2019:06:03:48 +0800] "GET /phppma/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 132.232.212.45 - - [11/Apr/2019:06:03:48 +0800] "GET /phpmy/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 132.232.212.45 - - [11/Apr/2019:06:03:48 +0800] "GET /mysql/admin/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 132.232.212.45 - - [11/Apr/2019:06:03:48 +0800] "GET /mysql/dbadmin/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 132.232.212.45 - - [11/Apr/2019:06:03:48 +0800] "GET /mysql/sqlmanager/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 132.232.212.45 - - [11/Apr/2019:06:03:48 +0800] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 132.232.212.45 - - [11/Apr/2019:06:03:48 +0800] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"	2019-04-11 06:05:03

类型

评论内容

时间

attack

132.232.212.45 - - [11/Apr/2019:06:03:48 +0800] "GET /phppma/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
132.232.212.45 - - [11/Apr/2019:06:03:48 +0800] "GET /phpmy/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
132.232.212.45 - - [11/Apr/2019:06:03:48 +0800] "GET /mysql/admin/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
132.232.212.45 - - [11/Apr/2019:06:03:48 +0800] "GET /mysql/dbadmin/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
132.232.212.45 - - [11/Apr/2019:06:03:48 +0800] "GET /mysql/sqlmanager/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
132.232.212.45 - - [11/Apr/2019:06:03:48 +0800] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
132.232.212.45 - - [11/Apr/2019:06:03:48 +0800] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"

2019-04-11 06:05:03

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 132.232.212.45
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5991
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;132.232.212.45.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019041001 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Thu Apr 11 06:05:02 +08 2019
;; MSG SIZE  rcvd: 118

HOST信息:

Host 45.212.232.132.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 45.212.232.132.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
208.64.33.110	attackbots	2020-05-25T21:58:45.784365vivaldi2.tree2.info sshd[23306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=reviewsilo.uno 2020-05-25T21:58:45.773331vivaldi2.tree2.info sshd[23306]: Invalid user test from 208.64.33.110 2020-05-25T21:58:47.829449vivaldi2.tree2.info sshd[23306]: Failed password for invalid user test from 208.64.33.110 port 42728 ssh2 2020-05-25T22:00:23.812360vivaldi2.tree2.info sshd[23469]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=reviewsilo.uno user=root 2020-05-25T22:00:26.031560vivaldi2.tree2.info sshd[23469]: Failed password for root from 208.64.33.110 port 35726 ssh2 ...	2020-05-25 21:16:34
119.96.175.244	attackbots	" "	2020-05-25 21:12:06
92.46.87.245	attackbots	1590408204 - 05/25/2020 14:03:24 Host: 92.46.87.245/92.46.87.245 Port: 445 TCP Blocked	2020-05-25 21:09:37
45.254.33.124	attackspambots	2020-05-25 06:54:04.705198-0500 localhost smtpd[45400]: NOQUEUE: reject: RCPT from unknown[45.254.33.124]: 450 4.7.25 Client host rejected: cannot find your hostname, [45.254.33.124]; from= to= proto=ESMTP helo=<00fd7d95.beucre.xyz>	2020-05-25 21:34:58
139.155.11.173	attack	May 25 14:03:32 * sshd[2524]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.11.173 May 25 14:03:34 * sshd[2524]: Failed password for invalid user bavmk from 139.155.11.173 port 50150 ssh2	2020-05-25 20:56:30
194.31.173.71	attack	2020-05-25 07:01:06.048318-0500 localhost smtpd[45858]: NOQUEUE: reject: RCPT from unknown[194.31.173.71]: 554 5.7.1 Service unavailable; Client host [194.31.173.71] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=	2020-05-25 21:32:58
176.50.67.125	attackbots	May 25 13:29:24 master sshd[4300]: Failed password for invalid user admin from 176.50.67.125 port 54190 ssh2	2020-05-25 21:30:39
188.166.175.35	attackspambots	May 25 13:59:41 [host] sshd[31091]: pam_unix(sshd: May 25 13:59:43 [host] sshd[31091]: Failed passwor May 25 14:03:07 [host] sshd[31150]: Invalid user d May 25 14:03:07 [host] sshd[31150]: pam_unix(sshd:	2020-05-25 21:27:37
167.71.209.2	attack	May 25 08:58:15 Tower sshd[9515]: Connection from 167.71.209.2 port 48988 on 192.168.10.220 port 22 rdomain "" May 25 08:58:19 Tower sshd[9515]: Failed password for root from 167.71.209.2 port 48988 ssh2 May 25 08:58:19 Tower sshd[9515]: Received disconnect from 167.71.209.2 port 48988:11: Bye Bye [preauth] May 25 08:58:19 Tower sshd[9515]: Disconnected from authenticating user root 167.71.209.2 port 48988 [preauth]	2020-05-25 21:28:02
218.7.116.226	attackbots	MAIL: User Login Brute Force Attempt, PTR: PTR record not found	2020-05-25 21:26:10
189.90.114.58	attackspambots	odoo8 ...	2020-05-25 21:31:47
118.101.192.81	attackspambots	May 25 14:42:38 haigwepa sshd[21293]: Failed password for root from 118.101.192.81 port 58403 ssh2 ...	2020-05-25 21:28:21
189.33.79.187	attack	May 25 15:04:30 nextcloud sshd\[11048\]: Invalid user admin from 189.33.79.187 May 25 15:04:30 nextcloud sshd\[11048\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.33.79.187 May 25 15:04:32 nextcloud sshd\[11048\]: Failed password for invalid user admin from 189.33.79.187 port 60731 ssh2	2020-05-25 21:13:28
168.197.227.234	attackbotsspam	(sshd) Failed SSH login from 168.197.227.234 (BR/Brazil/227-197-168-234.andradas-net.com.br): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 25 13:31:33 amsweb01 sshd[15820]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.197.227.234 user=root May 25 13:31:36 amsweb01 sshd[15820]: Failed password for root from 168.197.227.234 port 49590 ssh2 May 25 13:59:21 amsweb01 sshd[20606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.197.227.234 user=root May 25 13:59:23 amsweb01 sshd[20606]: Failed password for root from 168.197.227.234 port 59276 ssh2 May 25 14:03:23 amsweb01 sshd[21041]: Invalid user yuanwd from 168.197.227.234 port 60902	2020-05-25 21:08:16
202.70.80.27	attackspambots	May 25 15:10:22 [host] sshd[1564]: pam_unix(sshd:a May 25 15:10:24 [host] sshd[1564]: Failed password May 25 15:14:25 [host] sshd[1770]: Invalid user co	2020-05-25 21:29:09

最近上报的IP列表

193.201.224.241	61.151.239.16	113.161.57.195	105.212.101.163
132.232.32.13	121.238.14.80	2.111.222.211	195.135.27.148
185.229.243.214	177.106.126.101	183.83.36.79	41.75.89.118
91.123.31.93	113.160.155.106	200.87.235.70	95.38.214.138
191.103.252.161	157.230.42.160	185.168.226.222	41.215.62.18