必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       198.63.0.0 - 198.66.255.255
CIDR:           198.64.0.0/15, 198.63.0.0/16, 198.66.0.0/16
NetName:        NTTA-198-63
NetHandle:      NET-198-63-0-0-1
Parent:         NET198 (NET-198-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   NTT America, Inc. (NTTAM-1)
RegDate:        1993-02-11
Updated:        2026-02-10
Comment:        Geofeed https://geo.ip.gin.ntt.net/geofeeds/geofeeds.csv
Comment:        
Comment:        Reassignment information for this block is
Comment:        available at rwhois.gin.ntt.net port 4321
Ref:            https://rdap.arin.net/registry/ip/198.63.0.0



OrgName:        NTT America, Inc.
OrgId:          NTTAM-1
Address:        15809 Bear Creek Pkwy
Address:        Suite 320
City:           Redmond
StateProv:      WA
PostalCode:     98052
Country:        US
RegDate:        2005-12-08
Updated:        2024-03-04
Ref:            https://rdap.arin.net/registry/entity/NTTAM-1

ReferralServer:  rwhois://rwhois.gin.ntt.net:4321

OrgTechHandle: VIPAR-ARIN
OrgTechName:   VIPAR
OrgTechPhone:  +1-877-688-6625 
OrgTechEmail:  ipr@gin.ntt.net
OrgTechRef:    https://rdap.arin.net/registry/entity/VIPAR-ARIN

OrgAbuseHandle: NAAC-ARIN
OrgAbuseName:   NTT America Abuse Contact
OrgAbusePhone:  +1-877-688-6625 
OrgAbuseEmail:  abuse@ntt.net
OrgAbuseRef:    https://rdap.arin.net/registry/entity/NAAC-ARIN

OrgRoutingHandle: PEERI-ARIN
OrgRoutingName:   Peering
OrgRoutingPhone:  +1-877-688-6625 
OrgRoutingEmail:  peering@ntt.net
OrgRoutingRef:    https://rdap.arin.net/registry/entity/PEERI-ARIN

OrgNOCHandle: NASC-ARIN
OrgNOCName:   NTT America Support Contact
OrgNOCPhone:  +1-877-688-6625 
OrgNOCEmail:  ce-support@gin.ntt.net
OrgNOCRef:    https://rdap.arin.net/registry/entity/NASC-ARIN

OrgTechHandle: CANDE70-ARIN
OrgTechName:   Candela, Massimo 
OrgTechPhone:  +1-214-915-1366 
OrgTechEmail:  massimo@ntt.net
OrgTechRef:    https://rdap.arin.net/registry/entity/CANDE70-ARIN

RTechHandle: VIA4-ORG-ARIN
RTechName:   VIPAR
RTechPhone:  +1-877-688-6625 
RTechEmail:  ipr@gin.ntt.net
RTechRef:    https://rdap.arin.net/registry/entity/VIA4-ORG-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#



Found a referral to rwhois.gin.ntt.net:4321.

%rwhois V-1.5:0078b6:00 rwhois.gin.ntt.net (Vipar 0.1a. Comments to ipr@gin.ntt.net)
network:Class-Name:network
network:Auth-Area:198.65.0.0/16
network:ID:NETBLK-198-65-0-0.127.0.0.1/32
network:Handle:NETBLK-198-65-0-0
network:Network-Name:198-65-0-0
network:IP-Network:198.65.0.0/16
network:In-Addr-Server;I:GIN1-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN2-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN3-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN4-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN5-HST.127.0.0.1/32
network:IP-Network-Block:198.65.0.0 - 198.65.255.255
network:Org-Name:NTT DATA
network:Street-Address:8300 E Maplewood Ave. Suite 400
network:City:Greenwood Village
network:State:CO
network:Postal-Code:80111
network:Country-Code:US
network:Tech-Contact;I:GIN-BBV4.127.0.0.1/32
network:Created:2025-04-10 14:20:37.326306+00
network:Updated:2026-01-14 17:01:27.469161+00

%ok
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 198.65.69.127
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49700
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;198.65.69.127.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026072800 1800 900 604800 86400

;; Query time: 29 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jul 29 00:59:51 CST 2026
;; MSG SIZE  rcvd: 106
HOST信息:
b'Host 127.69.65.198.in-addr.arpa not found: 2(SERVFAIL)
'
NSLOOKUP信息:
server can't find 198.65.69.127.in-addr.arpa: SERVFAIL
相关IP信息:
最新评论:
IP 类型 评论内容 时间
66.240.205.34 attackspambots
General
Date 	08/25/2019
Time 	07:09:53
Session ID 	109767652
Virtual Domain 	root

Source
IP 	66.240.205.34
Source Port 	46798
Country/Region 	United States
Source Interface 	wan2

Destination
IP 	xxx.xxx.xxx.xxx
Host Name 	xxx.com.vn
Port 	443
Destination Interface 	lan
URL 	

Application
Protocol 	tcp
Service 	HTTPS
Action
Action 	dropped
Policy 	8

Security
Level 	
Threat Level 	critical
Threat Score 	50

Intrusion Prevention
Profile Name 	default
Attack Name 	Bladabindi.Botnet
Attack ID 	38856
Reference 	http://www.fortinet.com/ids/VID38856
Incident Serial No. 	41849422
Direction 	outgoing
Severity 	
Message 	backdoor: Bladabindi.Botnet,

Other
Source Interface Role 	undefined
_pcap_id 	38856
Destination Interface Role 	undefined
Event Type 	signature
Protocol Number 	6
roll 	64412
Log event original timestamp 	1566691792
Log ID 	16384
Sub Type 	ips
2019-08-26 12:45:45
222.122.94.10 attackbots
Aug 26 04:50:52 MK-Soft-VM3 sshd\[12593\]: Invalid user student2 from 222.122.94.10 port 43588
Aug 26 04:50:52 MK-Soft-VM3 sshd\[12593\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.122.94.10
Aug 26 04:50:53 MK-Soft-VM3 sshd\[12593\]: Failed password for invalid user student2 from 222.122.94.10 port 43588 ssh2
...
2019-08-26 13:40:52
139.198.4.44 attackbots
Aug 26 01:14:16 plusreed sshd[24883]: Invalid user saas from 139.198.4.44
...
2019-08-26 13:25:05
193.32.160.142 attackspam
Aug 26 06:56:25 relay postfix/smtpd\[1468\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.142\]: 554 5.7.1 \: Relay access denied\; from=\<5hupa767psx5@firefly.ae\> to=\ proto=ESMTP helo=\<\[193.32.160.139\]\>
Aug 26 06:56:25 relay postfix/smtpd\[1468\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.142\]: 554 5.7.1 \: Relay access denied\; from=\<5hupa767psx5@firefly.ae\> to=\ proto=ESMTP helo=\<\[193.32.160.139\]\>
Aug 26 06:56:25 relay postfix/smtpd\[1468\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.142\]: 554 5.7.1 \: Relay access denied\; from=\<5hupa767psx5@firefly.ae\> to=\ proto=ESMTP helo=\<\[193.32.160.139\]\>
Aug 26 06:56:25 relay postfix/smtpd\[1468\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.142\]: 554 5.7.1 \: Relay access denied\; from=\<5hupa767psx5@firefly.ae\> to=\
2019-08-26 13:46:25
92.167.255.124 attackspambots
Aug 26 01:06:18 ny01 sshd[19474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.167.255.124
Aug 26 01:06:21 ny01 sshd[19474]: Failed password for invalid user boinc from 92.167.255.124 port 44334 ssh2
Aug 26 01:11:01 ny01 sshd[20181]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.167.255.124
2019-08-26 13:28:14
122.114.132.106 attackspam
Aug 26 04:27:46 hosname24 sshd[4056]: Invalid user ggutierrez from 122.114.132.106 port 51948
Aug 26 04:27:48 hosname24 sshd[4056]: Failed password for invalid user ggutierrez from 122.114.132.106 port 51948 ssh2
Aug 26 04:27:48 hosname24 sshd[4056]: Received disconnect from 122.114.132.106 port 51948:11: Bye Bye [preauth]
Aug 26 04:27:48 hosname24 sshd[4056]: Disconnected from 122.114.132.106 port 51948 [preauth]
Aug 26 04:51:49 hosname24 sshd[2087]: Invalid user rungshostname.ato from 122.114.132.106 port 45972
Aug 26 04:51:52 hosname24 sshd[2087]: Failed password for invalid user rungshostname.ato from 122.114.132.106 port 45972 ssh2
Aug 26 04:51:52 hosname24 sshd[2087]: Received disconnect from 122.114.132.106 port 45972:11: Bye Bye [preauth]
Aug 26 04:51:52 hosname24 sshd[2087]: Disconnected from 122.114.132.106 port 45972 [preauth]
Aug 26 04:54:07 hosname24 sshd[2137]: Invalid user user from 122.114.132.106 port 34438
Aug 26 04:54:09 hosname24 sshd[2137]: Failed p........
-------------------------------
2019-08-26 13:43:29
123.207.245.120 attackspam
Aug 26 05:27:43 ncomp sshd[18143]: Invalid user vbox from 123.207.245.120
Aug 26 05:27:43 ncomp sshd[18143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.245.120
Aug 26 05:27:43 ncomp sshd[18143]: Invalid user vbox from 123.207.245.120
Aug 26 05:27:45 ncomp sshd[18143]: Failed password for invalid user vbox from 123.207.245.120 port 51866 ssh2
2019-08-26 13:30:03
49.50.76.29 attackspambots
Aug 26 06:32:59 mout sshd[27176]: Invalid user lion from 49.50.76.29 port 35076
2019-08-26 13:28:48
193.70.8.163 attackbots
Aug 26 05:52:42 debian sshd\[28481\]: Invalid user fog from 193.70.8.163 port 34536
Aug 26 05:52:42 debian sshd\[28481\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.8.163
...
2019-08-26 12:52:53
159.65.149.131 attack
Invalid user bimmasss from 159.65.149.131 port 39376
2019-08-26 13:00:15
176.37.177.78 attack
Aug 26 00:35:50 plusreed sshd[14889]: Invalid user khelms from 176.37.177.78
...
2019-08-26 12:46:06
165.22.26.134 attackspam
Aug 26 07:22:42 server sshd\[1543\]: Invalid user kafka from 165.22.26.134 port 59442
Aug 26 07:22:42 server sshd\[1543\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.26.134
Aug 26 07:22:44 server sshd\[1543\]: Failed password for invalid user kafka from 165.22.26.134 port 59442 ssh2
Aug 26 07:26:34 server sshd\[5541\]: Invalid user student from 165.22.26.134 port 49422
Aug 26 07:26:34 server sshd\[5541\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.26.134
2019-08-26 13:38:41
171.221.205.133 attackbots
Aug 26 02:23:57 h2065291 sshd[32446]: Invalid user july from 171.221.205.133
Aug 26 02:23:57 h2065291 sshd[32446]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.221.205.133 
Aug 26 02:23:58 h2065291 sshd[32446]: Failed password for invalid user july from 171.221.205.133 port 13004 ssh2
Aug 26 02:23:59 h2065291 sshd[32446]: Received disconnect from 171.221.205.133: 11: Bye Bye [preauth]
Aug 26 02:41:37 h2065291 sshd[464]: Invalid user sdtdserver from 171.221.205.133
Aug 26 02:41:37 h2065291 sshd[464]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.221.205.133 
Aug 26 02:41:39 h2065291 sshd[464]: Failed password for invalid user sdtdserver from 171.221.205.133 port 36400 ssh2
Aug 26 02:41:39 h2065291 sshd[464]: Received disconnect from 171.221.205.133: 11: Bye Bye [preauth]
Aug 26 02:43:17 h2065291 sshd[466]: Invalid user nagios from 171.221.205.133
Aug 26 02:43:17 h2065291 sshd[466........
-------------------------------
2019-08-26 13:15:30
49.83.147.245 attackspambots
DATE:2019-08-26 05:28:07, IP:49.83.147.245, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)
2019-08-26 13:05:00
5.39.88.4 attack
Aug 26 05:59:10 debian sshd\[28631\]: Invalid user 123456 from 5.39.88.4 port 56694
Aug 26 05:59:10 debian sshd\[28631\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.39.88.4
...
2019-08-26 13:06:46

最近上报的IP列表

146.190.169.5 165.227.157.247 168.143.225.1 103.81.193.74
111.231.101.182 137.226.114.249 163.7.13.2 52.86.131.1
112.224.170.100 112.224.28.150 112.224.170.243 43.98.194.239
43.98.178.169 43.153.101.233 35.241.131.230 222.255.180.153
91.92.40.12 27.43.207.182 216.180.246.87 103.199.123.37