必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Porto

省份(region): Porto

国家(country): Portugal

运营商(isp): MEO

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
62.28.132.131 attackspam
Bad mail behaviour
2019-11-22 00:33:46
62.28.132.131 attack
Bad mail behaviour
2019-11-07 04:08:47
62.28.132.131 attack
Bad mail behaviour
2019-11-01 20:28:09
WHOIS信息:
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html

% Note: this output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '62.28.132.96 - 62.28.132.111'

% Abuse contact for '62.28.132.96 - 62.28.132.111' is 'abuse.lir@meo.pt'

inetnum:        62.28.132.96 - 62.28.132.111
netname:        CIMAC-NET
descr:          CIMAC
descr:          RUA 24 DE JULHO, 1
descr:          7000-673 EVORA
country:        PT
admin-c:        PT4010-RIPE
tech-c:         PT4010-RIPE
status:         ASSIGNED PA
mnt-by:         AS15525-MNT
created:        2009-05-12T14:26:15Z
last-modified:  2019-08-30T14:26:31Z
source:         RIPE

role:           MEO-EMPRESARIAL
org:            ORG-PP3-RIPE
address:        Local Internet Registry Management
address:        MEO - SERVICOS DE COMUNICACOES E MULTIMEDIA S.A.
address:        Av. Fontes Pereira de Melo, 40 - 3 Bl A
address:        Forum Picoas - 1069-300 Lisboa
address:        Portugal
phone:          +351-215000000
admin-c:        NPM17-RIPE
admin-c:        DPM37-RIPE
admin-c:        LAS102-RIPE
admin-c:        DL11448-RIPE
admin-c:        PR17747-RIPE
nic-hdl:        PT4010-RIPE
abuse-mailbox:  abuse.lir@meo.pt
mnt-by:         AS15525-MNT
created:        1970-01-01T00:00:00Z
last-modified:  2025-09-01T09:20:28Z
source:         RIPE # Filtered

% Information related to '62.28.0.0/16AS15525'

route:          62.28.0.0/16
descr:          PTPRIMENET
descr:          PT Prime - Network Service Provider
origin:         AS15525
mnt-by:         AS15525-MNT
created:        2006-06-08T12:32:07Z
last-modified:  2006-06-08T12:32:07Z
source:         RIPE

% This query was served by the RIPE Database Query Service version 1.121.2 (ABERDEEN)
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 62.28.132.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54310
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;62.28.132.104.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026032301 1800 900 604800 86400

;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 24 03:30:04 CST 2026
;; MSG SIZE  rcvd: 106
HOST信息:
104.132.28.62.in-addr.arpa domain name pointer webmail.drealentejo.pt.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
104.132.28.62.in-addr.arpa	name = webmail.drealentejo.pt.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
110.77.202.197 attackspam
Port probing on unauthorized port 445
2020-08-11 13:10:26
128.199.254.89 attackbots
2020-08-10T23:55:50.648608sorsha.thespaminator.com sshd[3819]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.254.89  user=root
2020-08-10T23:55:52.496638sorsha.thespaminator.com sshd[3819]: Failed password for root from 128.199.254.89 port 35258 ssh2
...
2020-08-11 13:49:49
103.107.17.139 attackspambots
leo_www
2020-08-11 13:17:33
191.187.177.230 attackbots
191.187.177.230 - - [11/Aug/2020:05:57:04 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1"
191.187.177.230 - - [11/Aug/2020:05:57:04 +0100] "POST /wp-login.php HTTP/1.1" 200 5871 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1"
191.187.177.230 - - [11/Aug/2020:06:04:15 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1"
...
2020-08-11 13:20:10
45.82.137.35 attack
Aug 11 13:56:07 localhost sshd[3088994]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.82.137.35  user=root
Aug 11 13:56:08 localhost sshd[3088994]: Failed password for root from 45.82.137.35 port 51710 ssh2
...
2020-08-11 13:39:30
5.62.61.107 attackspam
Forbidden directory scan :: 2020/08/11 03:56:40 [error] 967#967: *1116 access forbidden by rule, client: 5.62.61.107, server: [censored_1], request: "GET /.git//index HTTP/1.1", host: "www.[censored_1]"
2020-08-11 13:18:37
2a02:a03f:3a4e:bb00:8503:449d:4389:8c6 attackspambots
Aug 11 05:55:51 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=2a02:a03f:3a4e:bb00:8503:449d:4389:8c6, lip=2a01:7e01:e001:164::, session=
Aug 11 05:55:57 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=2a02:a03f:3a4e:bb00:8503:449d:4389:8c6, lip=2a01:7e01:e001:164::, session=<+mEWDJKsX/IqAqA/Ok67AIUDRJ1DiQjG>
Aug 11 05:55:57 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=2a02:a03f:3a4e:bb00:8503:449d:4389:8c6, lip=2a01:7e01:e001:164::, session=<6GAWDJKsXvIqAqA/Ok67AIUDRJ1DiQjG>
Aug 11 05:56:10 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 8 secs): user=, method=PLAIN, rip=2a02:a03f:3a4e:bb00:8503:449d:4389:8c6, lip=2a01:7e01:e001:164::, session=
2020-08-11 13:36:50
91.121.65.15 attack
SSH Brute Force
2020-08-11 13:43:06
129.213.148.12 attackbots
$f2bV_matches
2020-08-11 13:31:21
218.92.0.173 attackspam
Aug 10 19:30:20 php1 sshd\[17460\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.173  user=root
Aug 10 19:30:22 php1 sshd\[17460\]: Failed password for root from 218.92.0.173 port 48976 ssh2
Aug 10 19:30:24 php1 sshd\[17460\]: Failed password for root from 218.92.0.173 port 48976 ssh2
Aug 10 19:30:28 php1 sshd\[17460\]: Failed password for root from 218.92.0.173 port 48976 ssh2
Aug 10 19:30:31 php1 sshd\[17460\]: Failed password for root from 218.92.0.173 port 48976 ssh2
2020-08-11 13:51:03
18.163.193.253 attackspam
Aug 11 07:12:13 db sshd[7918]: User root from 18.163.193.253 not allowed because none of user's groups are listed in AllowGroups
...
2020-08-11 13:39:03
125.141.56.231 attack
2020-08-11T05:05:31.465240shield sshd\[32042\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.141.56.231  user=root
2020-08-11T05:05:33.624239shield sshd\[32042\]: Failed password for root from 125.141.56.231 port 53868 ssh2
2020-08-11T05:07:36.906969shield sshd\[32234\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.141.56.231  user=root
2020-08-11T05:07:38.559135shield sshd\[32234\]: Failed password for root from 125.141.56.231 port 55842 ssh2
2020-08-11T05:09:45.435781shield sshd\[32336\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.141.56.231  user=root
2020-08-11 13:23:58
212.83.175.207 attack
212.83.175.207 - - [11/Aug/2020:05:56:05 +0200] "GET /wp-login.php HTTP/1.1" 200 6060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
212.83.175.207 - - [11/Aug/2020:05:56:06 +0200] "POST /wp-login.php HTTP/1.1" 200 6311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
212.83.175.207 - - [11/Aug/2020:05:56:06 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-08-11 13:40:20
188.246.224.140 attackspam
Aug 11 05:51:34 myvps sshd[18660]: Failed password for root from 188.246.224.140 port 54040 ssh2
Aug 11 05:57:28 myvps sshd[22336]: Failed password for root from 188.246.224.140 port 44592 ssh2
...
2020-08-11 13:19:11
45.65.229.119 attackspambots
1597118191 - 08/11/2020 05:56:31 Host: 45.65.229.119/45.65.229.119 Port: 445 TCP Blocked
2020-08-11 13:26:05

最近上报的IP列表

71.87.244.69 34.38.195.167 173.20.44.60 217.15.156.199
10.110.6.230 132.66.242.3 2606:4700:10::6816:4338 2606:4700:10::6814:9964
2606:4700:10::ac43:1166 109.167.82.155 2606:4700:10::ac43:120e 2606:4700:10::ac43:747
2606:4700:10::6816:519 2606:4700:10::6816:2847 2606:4700:10::6816:3403 2606:4700:10::6814:9810
2606:4700:10::6814:9189 2606:4700:10::ac43:876 2606:4700:10::6816:4520 109.167.82.66