必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Brazil

运营商(isp): Algar Telecom S/A

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attackspambots
firewall-block, port(s): 445/tcp
2020-05-02 18:01:43
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 191.54.132.18
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8031
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;191.54.132.18.			IN	A

;; AUTHORITY SECTION:
.			369	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050200 1800 900 604800 86400

;; Query time: 93 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 02 18:01:38 CST 2020
;; MSG SIZE  rcvd: 117
HOST信息:
18.132.54.191.in-addr.arpa domain name pointer 191-054-132-18.xd-dynamic.algarnetsuper.com.br.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
18.132.54.191.in-addr.arpa	name = 191-054-132-18.xd-dynamic.algarnetsuper.com.br.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
36.77.187.107 attackspambots
Unauthorised access (Oct  7) SRC=36.77.187.107 LEN=52 TTL=247 ID=31279 DF TCP DPT=445 WINDOW=8192 SYN
2019-10-08 02:20:12
117.50.25.196 attackbots
Oct 07 09:39:40 askasleikir sshd[248236]: Failed password for root from 117.50.25.196 port 35836 ssh2
2019-10-08 01:42:00
154.120.230.250 attackbots
Unauthorized connection attempt from IP address 154.120.230.250 on Port 445(SMB)
2019-10-08 02:18:27
201.93.164.54 attackspambots
Automatic report - Port Scan Attack
2019-10-08 02:01:56
109.202.117.145 attack
Oct  7 16:32:08 h2177944 kernel: \[3334831.017071\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=109.202.117.145 DST=85.214.117.9 LEN=40 TOS=0x08 PREC=0x20 TTL=71 ID=65060 DF PROTO=TCP SPT=58655 DPT=443 WINDOW=29200 RES=0x00 SYN URGP=0 
Oct  7 16:50:54 h2177944 kernel: \[3335956.882819\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=109.202.117.145 DST=85.214.117.9 LEN=40 TOS=0x08 PREC=0x20 TTL=79 ID=58003 DF PROTO=TCP SPT=57289 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 
Oct  7 16:58:55 h2177944 kernel: \[3336438.289464\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=109.202.117.145 DST=85.214.117.9 LEN=40 TOS=0x08 PREC=0x20 TTL=55 ID=48896 DF PROTO=TCP SPT=62360 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 
Oct  7 17:01:36 h2177944 kernel: \[3336598.516156\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=109.202.117.145 DST=85.214.117.9 LEN=40 TOS=0x08 PREC=0x20 TTL=69 ID=2383 DF PROTO=TCP SPT=51424 DPT=443 WINDOW=29200 RES=0x00 SYN URGP=0 
Oct  7 17:05:56 h2177944 kernel: \[3336859.032451\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=109.202.117.145 D
2019-10-08 01:52:11
45.136.109.250 attack
Oct  7 19:08:36 mc1 kernel: \[1754517.455653\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.250 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=53390 PROTO=TCP SPT=45677 DPT=6225 WINDOW=1024 RES=0x00 SYN URGP=0 
Oct  7 19:13:17 mc1 kernel: \[1754798.138823\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.250 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=64853 PROTO=TCP SPT=45677 DPT=6042 WINDOW=1024 RES=0x00 SYN URGP=0 
Oct  7 19:17:42 mc1 kernel: \[1755062.930653\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.250 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=26030 PROTO=TCP SPT=45677 DPT=6276 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2019-10-08 02:13:45
106.12.116.237 attackbotsspam
Oct  7 18:45:26 vps691689 sshd[8281]: Failed password for root from 106.12.116.237 port 33782 ssh2
Oct  7 18:50:45 vps691689 sshd[8390]: Failed password for root from 106.12.116.237 port 41266 ssh2
...
2019-10-08 02:02:17
92.53.65.52 attackbotsspam
10/07/2019-07:38:58.417060 92.53.65.52 Protocol: 6 ET SCAN NMAP -sS window 1024
2019-10-08 02:10:10
201.47.34.147 attackspambots
IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/201.47.34.147/ 
 BR - 1H : (431)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : BR 
 NAME ASN : ASN18881 
 
 IP : 201.47.34.147 
 
 CIDR : 201.47.0.0/18 
 
 PREFIX COUNT : 938 
 
 UNIQUE IP COUNT : 4233472 
 
 
 WYKRYTE ATAKI Z ASN18881 :  
  1H - 4 
  3H - 11 
  6H - 17 
 12H - 28 
 24H - 92 
 
 DateTime : 2019-10-07 13:38:56 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-10-08 02:06:21
81.30.212.14 attackbotsspam
Oct  7 19:54:01 vps647732 sshd[9527]: Failed password for root from 81.30.212.14 port 56904 ssh2
...
2019-10-08 02:13:05
185.153.198.161 attack
RDP Bruteforce
2019-10-08 01:57:32
124.156.218.80 attack
Oct  7 17:24:00 areeb-Workstation sshd[8996]: Failed password for root from 124.156.218.80 port 33100 ssh2
...
2019-10-08 01:42:30
106.12.176.3 attackspam
Oct  7 19:29:42 web1 sshd\[14262\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.176.3  user=root
Oct  7 19:29:44 web1 sshd\[14262\]: Failed password for root from 106.12.176.3 port 54554 ssh2
Oct  7 19:35:28 web1 sshd\[14638\]: Invalid user 123 from 106.12.176.3
Oct  7 19:35:28 web1 sshd\[14638\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.176.3
Oct  7 19:35:30 web1 sshd\[14638\]: Failed password for invalid user 123 from 106.12.176.3 port 41966 ssh2
2019-10-08 02:21:00
163.32.93.106 attackspambots
IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/163.32.93.106/ 
 TW - 1H : (278)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : TW 
 NAME ASN : ASN1659 
 
 IP : 163.32.93.106 
 
 CIDR : 163.32.0.0/17 
 
 PREFIX COUNT : 463 
 
 UNIQUE IP COUNT : 4082944 
 
 
 WYKRYTE ATAKI Z ASN1659 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 2 
 
 DateTime : 2019-10-07 13:38:56 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-10-08 02:07:23
159.65.189.115 attack
Oct  7 17:39:57 venus sshd\[23940\]: Invalid user Triple123 from 159.65.189.115 port 54710
Oct  7 17:39:57 venus sshd\[23940\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.189.115
Oct  7 17:39:59 venus sshd\[23940\]: Failed password for invalid user Triple123 from 159.65.189.115 port 54710 ssh2
...
2019-10-08 01:53:30

最近上报的IP列表

94.68.71.73 176.162.157.42 187.200.103.59 213.198.52.121
103.47.34.236 78.97.69.122 87.23.201.206 23.122.174.226
88.197.70.6 208.206.96.139 139.150.107.162 39.230.213.253
117.64.124.26 86.227.88.109 100.35.249.174 169.239.61.120
149.77.23.89 194.94.150.216 15.243.155.215 14.231.231.233