必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       165.254.0.0 - 165.254.255.255
CIDR:           165.254.0.0/16
NetName:        NTTA-165-254
NetHandle:      NET-165-254-0-0-1
Parent:         NET165 (NET-165-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   NTT America, Inc. (NTTAM-1)
RegDate:        1993-10-21
Updated:        2026-06-15
Comment:        Geofeed https://geo.ip.gin.ntt.net/geofeeds/geofeeds.csv
Comment:        
Comment:        Reassignment information for this block is
Comment:        available at rwhois.gin.ntt.net port 4321
Ref:            https://rdap.arin.net/registry/ip/165.254.0.0



OrgName:        NTT America, Inc.
OrgId:          NTTAM-1
Address:        15809 Bear Creek Pkwy
Address:        Suite 320
City:           Redmond
StateProv:      WA
PostalCode:     98052
Country:        US
RegDate:        2005-12-08
Updated:        2024-03-04
Ref:            https://rdap.arin.net/registry/entity/NTTAM-1

ReferralServer:  rwhois://rwhois.gin.ntt.net:4321

OrgAbuseHandle: NAAC-ARIN
OrgAbuseName:   NTT America Abuse Contact
OrgAbusePhone:  +1-877-688-6625 
OrgAbuseEmail:  abuse@ntt.net
OrgAbuseRef:    https://rdap.arin.net/registry/entity/NAAC-ARIN

OrgTechHandle: VIPAR-ARIN
OrgTechName:   VIPAR
OrgTechPhone:  +1-877-688-6625 
OrgTechEmail:  ipr@gin.ntt.net
OrgTechRef:    https://rdap.arin.net/registry/entity/VIPAR-ARIN

OrgNOCHandle: NASC-ARIN
OrgNOCName:   NTT America Support Contact
OrgNOCPhone:  +1-877-688-6625 
OrgNOCEmail:  ce-support@gin.ntt.net
OrgNOCRef:    https://rdap.arin.net/registry/entity/NASC-ARIN

OrgTechHandle: CANDE70-ARIN
OrgTechName:   Candela, Massimo 
OrgTechPhone:  +1-214-915-1366 
OrgTechEmail:  massimo@ntt.net
OrgTechRef:    https://rdap.arin.net/registry/entity/CANDE70-ARIN

OrgRoutingHandle: PEERI-ARIN
OrgRoutingName:   Peering
OrgRoutingPhone:  +1-877-688-6625 
OrgRoutingEmail:  peering@ntt.net
OrgRoutingRef:    https://rdap.arin.net/registry/entity/PEERI-ARIN

RTechHandle: VIA4-ORG-ARIN
RTechName:   VIPAR
RTechPhone:  +1-877-688-6625 
RTechEmail:  ipr@gin.ntt.net
RTechRef:    https://rdap.arin.net/registry/entity/VIA4-ORG-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#



Found a referral to rwhois.gin.ntt.net:4321.

%rwhois V-1.5:0078b6:00 rwhois.gin.ntt.net (Vipar 0.1a. Comments to ipr@gin.ntt.net)
network:Class-Name:network
network:Auth-Area:165.254.0.0/16
network:ID:NETBLK-USV4-165-254-108.127.0.0.1/32
network:Handle:NETBLK-USV4-165-254-108
network:Network-Name:USV4-165-254-108
network:IP-Network:165.254.108.0/23
network:In-Addr-Server;I:GIN1-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN2-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN3-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN4-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN5-HST.127.0.0.1/32
network:IP-Network-Block:165.254.108.0 - 165.254.109.255
network:Org-Name:NTT America/Wholesale
network:Street-Address:101 Park Ave, 41st Floor
network:City:New York
network:State:NY
network:Postal-Code:10178
network:Country-Code:US
network:Tech-Contact;I:VRIO-NTTA.127.0.0.1/32
network:Created:2026-05-26 14:00:52.428076+00
network:Updated:2026-06-02 12:12:37.572368+00

network:Class-Name:network
network:Auth-Area:165.254.0.0/16
network:ID:NETBLK-USV4-165-254.127.0.0.1/32
network:Handle:NETBLK-USV4-165-254
network:Network-Name:USV4-165-254
network:IP-Network:165.254.0.0/16
network:In-Addr-Server;I:GIN1-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN2-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN3-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN4-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN5-HST.127.0.0.1/32
network:IP-Network-Block:165.254.0.0 - 165.254.255.255
network:Org-Name:NTT DATA
network:Street-Address:8300 E Maplewood Ave. Suite 400
network:City:Greenwood Village
network:State:CO
network:Postal-Code:80111
network:Country-Code:US
network:Tech-Contact;I:GIN-BBV4.127.0.0.1/32
network:Created:1999-10-21 05:00:00+00
network:Updated:2019-02-26 15:29:11.25021+00

%ok
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 165.254.108.79
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13138
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;165.254.108.79.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026090300 1800 900 604800 86400

;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Sep 03 17:23:54 CST 2026
;; MSG SIZE  rcvd: 107
HOST信息:
Host 79.108.254.165.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 79.108.254.165.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
196.218.117.181 attackspam
Unauthorised access (Nov 24) SRC=196.218.117.181 LEN=40 TTL=51 ID=57510 TCP DPT=8080 WINDOW=59278 SYN 
Unauthorised access (Nov 19) SRC=196.218.117.181 LEN=40 TTL=50 ID=59963 TCP DPT=8080 WINDOW=12676 SYN
2019-11-24 15:52:14
81.28.100.106 attackspambots
2019-11-24T07:27:50.884389stark.klein-stark.info postfix/smtpd\[21678\]: NOQUEUE: reject: RCPT from palliate.shrewdmhealth.com\[81.28.100.106\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\
...
2019-11-24 15:54:34
162.243.20.243 attack
Nov 24 07:19:13 hcbbdb sshd\[19626\]: Invalid user aaaidc from 162.243.20.243
Nov 24 07:19:13 hcbbdb sshd\[19626\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.20.243
Nov 24 07:19:15 hcbbdb sshd\[19626\]: Failed password for invalid user aaaidc from 162.243.20.243 port 33328 ssh2
Nov 24 07:25:38 hcbbdb sshd\[20251\]: Invalid user ngfk from 162.243.20.243
Nov 24 07:25:38 hcbbdb sshd\[20251\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.20.243
2019-11-24 15:32:24
23.99.255.95 attackspam
Fail2Ban Ban Triggered
HTTP SQL Injection Attempt
2019-11-24 15:32:00
138.68.247.104 attack
port scan and connect, tcp 80 (http)
2019-11-24 15:31:00
158.69.194.212 attack
Nov 19 20:41:25 wordpress sshd[25044]: Did not receive identification string from 158.69.194.212
Nov 19 20:43:32 wordpress sshd[25085]: Invalid user deployer from 158.69.194.212
Nov 19 20:43:32 wordpress sshd[25085]: Received disconnect from 158.69.194.212 port 47716:11: Normal Shutdown, Thank you for playing [preauth]
Nov 19 20:43:32 wordpress sshd[25085]: Disconnected from 158.69.194.212 port 47716 [preauth]
Nov 19 20:44:27 wordpress sshd[25110]: Invalid user deploy from 158.69.194.212
Nov 19 20:44:27 wordpress sshd[25110]: Received disconnect from 158.69.194.212 port 39311:11: Normal Shutdown, Thank you for playing [preauth]
Nov 19 20:44:27 wordpress sshd[25110]: Disconnected from 158.69.194.212 port 39311 [preauth]
Nov 19 20:45:16 wordpress sshd[25120]: Invalid user ubuntu from 158.69.194.212
Nov 19 20:45:16 wordpress sshd[25120]: Received disconnect from 158.69.194.212 port 59144:11: Normal Shutdown, Thank you for playing [preauth]
Nov 19 20:45:16 wordpress sshd[25........
-------------------------------
2019-11-24 15:26:28
206.189.18.205 attackspam
2019-11-24T07:36:15.619899abusebot-5.cloudsearch.cf sshd\[15495\]: Invalid user webmaster from 206.189.18.205 port 53260
2019-11-24 15:44:47
78.128.113.123 attackbotsspam
Nov 20 10:01:55 xzibhostname postfix/smtpd[9657]: warning: hostname ip-113-123.4vendeta.com does not resolve to address 78.128.113.123: Name or service not known
Nov 20 10:01:55 xzibhostname postfix/smtpd[9657]: connect from unknown[78.128.113.123]
Nov 20 10:01:57 xzibhostname postfix/smtpd[9657]: warning: unknown[78.128.113.123]: SASL PLAIN authentication failed: authentication failure
Nov 20 10:01:57 xzibhostname postfix/smtpd[9657]: lost connection after AUTH from unknown[78.128.113.123]
Nov 20 10:01:57 xzibhostname postfix/smtpd[9657]: disconnect from unknown[78.128.113.123]
Nov 20 10:01:57 xzibhostname postfix/smtpd[11470]: warning: hostname ip-113-123.4vendeta.com does not resolve to address 78.128.113.123: Name or service not known
Nov 20 10:01:57 xzibhostname postfix/smtpd[11470]: connect from unknown[78.128.113.123]
Nov 20 10:01:57 xzibhostname postfix/smtpd[9657]: warning: hostname ip-113-123.4vendeta.com does not resolve to address 78.128.113.123: Name or ser........
-------------------------------
2019-11-24 15:35:22
66.70.206.215 attackbots
Nov 24 07:22:12 eventyay sshd[18822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.70.206.215
Nov 24 07:22:15 eventyay sshd[18822]: Failed password for invalid user swiderski from 66.70.206.215 port 33428 ssh2
Nov 24 07:28:07 eventyay sshd[18917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.70.206.215
...
2019-11-24 15:51:17
182.16.103.136 attackbots
Nov 23 21:19:55 hanapaa sshd\[27642\]: Invalid user ching from 182.16.103.136
Nov 23 21:19:55 hanapaa sshd\[27642\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.16.103.136
Nov 23 21:19:57 hanapaa sshd\[27642\]: Failed password for invalid user ching from 182.16.103.136 port 41852 ssh2
Nov 23 21:24:40 hanapaa sshd\[28020\]: Invalid user sity from 182.16.103.136
Nov 23 21:24:40 hanapaa sshd\[28020\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.16.103.136
2019-11-24 15:34:52
172.105.198.199 attackbotsspam
172.105.198.199 was recorded 6 times by 6 hosts attempting to connect to the following ports: 123. Incident counter (4h, 24h, all-time): 6, 16, 16
2019-11-24 15:24:51
121.46.4.222 attackbots
Nov 22 05:11:25 pl3server sshd[32127]: Invalid user www from 121.46.4.222
Nov 22 05:11:25 pl3server sshd[32127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.46.4.222
Nov 22 05:11:27 pl3server sshd[32127]: Failed password for invalid user www from 121.46.4.222 port 54163 ssh2
Nov 22 05:11:28 pl3server sshd[32127]: Received disconnect from 121.46.4.222: 11: Bye Bye [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=121.46.4.222
2019-11-24 15:58:48
212.64.15.244 attackbotsspam
Nov 21 09:55:03 lamijardin sshd[24168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.15.244  user=r.r
Nov 21 09:55:06 lamijardin sshd[24168]: Failed password for r.r from 212.64.15.244 port 49798 ssh2
Nov 21 09:55:06 lamijardin sshd[24168]: Connection closed by 212.64.15.244 port 49798 [preauth]
Nov 21 09:55:08 lamijardin sshd[24170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.15.244  user=r.r
Nov 21 09:55:10 lamijardin sshd[24170]: Failed password for r.r from 212.64.15.244 port 49922 ssh2
Nov 21 09:55:10 lamijardin sshd[24170]: Connection closed by 212.64.15.244 port 49922 [preauth]
Nov 21 09:55:12 lamijardin sshd[24172]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.15.244  user=r.r
Nov 21 09:55:13 lamijardin sshd[24172]: Failed password for r.r from 212.64.15.244 port 50036 ssh2
Nov 21 09:55:13 lamijardin sshd[24172]:........
-------------------------------
2019-11-24 15:42:43
51.38.49.140 attackspambots
Nov 24 08:11:38 vps666546 sshd\[5643\]: Invalid user lingzhong!@\# from 51.38.49.140 port 58708
Nov 24 08:11:38 vps666546 sshd\[5643\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.49.140
Nov 24 08:11:40 vps666546 sshd\[5643\]: Failed password for invalid user lingzhong!@\# from 51.38.49.140 port 58708 ssh2
Nov 24 08:17:53 vps666546 sshd\[5801\]: Invalid user symult from 51.38.49.140 port 38230
Nov 24 08:17:53 vps666546 sshd\[5801\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.49.140
...
2019-11-24 15:46:05
152.136.40.21 attack
11/24/2019-02:36:54.534619 152.136.40.21 Protocol: 6 ET SCAN NMAP -sS window 1024
2019-11-24 15:52:40

最近上报的IP列表

135.233.115.244 61.243.40.178 39.184.8.123 39.154.12.64
223.91.123.221 223.90.17.107 223.101.67.17 180.233.81.163
180.233.80.37 120.235.10.94 120.230.23.167 117.151.87.115
74.196.172.40 121.60.88.80 44.192.31.236 34.204.93.108
2606:4700:10::6814:4722 36.36.90.21 195.178.110.70 192.10.12.201