150.136.133.20

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): Oracle Public Cloud

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	$f2bV_matches	2020-01-11 21:44:34
attackspam	pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.133.20 user=root Failed password for root from 150.136.133.20 port 39627 ssh2 Invalid user miy from 150.136.133.20 port 46518 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.133.20 Failed password for invalid user miy from 150.136.133.20 port 46518 ssh2	2020-01-11 07:45:53
attackbots	Dec 23 23:28:19 pl2server sshd[13806]: Invalid user paulik from 150.136.133.20 Dec 23 23:28:19 pl2server sshd[13806]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.133.20 Dec 23 23:28:21 pl2server sshd[13806]: Failed password for invalid user paulik from 150.136.133.20 port 53592 ssh2 Dec 23 23:28:21 pl2server sshd[13806]: Received disconnect from 150.136.133.20: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=150.136.133.20	2019-12-24 07:57:20

类型

评论内容

时间

attackbots

$f2bV_matches

2020-01-11 21:44:34

attackspam

pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.133.20  user=root
Failed password for root from 150.136.133.20 port 39627 ssh2
Invalid user miy from 150.136.133.20 port 46518
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.133.20
Failed password for invalid user miy from 150.136.133.20 port 46518 ssh2

2020-01-11 07:45:53

attackbots

Dec 23 23:28:19 pl2server sshd[13806]: Invalid user paulik from 150.136.133.20
Dec 23 23:28:19 pl2server sshd[13806]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.133.20
Dec 23 23:28:21 pl2server sshd[13806]: Failed password for invalid user paulik from 150.136.133.20 port 53592 ssh2
Dec 23 23:28:21 pl2server sshd[13806]: Received disconnect from 150.136.133.20: 11: Bye Bye [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=150.136.133.20

2019-12-24 07:57:20

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 150.136.133.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57358
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;150.136.133.20.			IN	A

;; AUTHORITY SECTION:
.			525	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019122302 1800 900 604800 86400

;; Query time: 120 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Dec 24 07:57:17 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

Host 20.133.136.150.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 20.133.136.150.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
180.241.106.251	attackbots	1594007262 - 07/06/2020 05:47:42 Host: 180.241.106.251/180.241.106.251 Port: 445 TCP Blocked	2020-07-06 19:49:36
123.16.58.65	attackspam	Port scan on 1 port(s): 445	2020-07-06 20:17:32
185.39.11.39	attack	Port scan on 9 port(s): 5002 5005 5012 5015 5016 5040 5042 5047 5049	2020-07-06 20:11:56
79.137.77.131	attackspambots	Jul 6 13:49:16 mout sshd[1171]: Invalid user catadmin from 79.137.77.131 port 45276	2020-07-06 19:56:47
193.228.91.109	attack	Jul 6 14:19:58 server2 sshd\[23842\]: User root from 193.228.91.109 not allowed because not listed in AllowUsers Jul 6 14:20:16 server2 sshd\[24032\]: User root from 193.228.91.109 not allowed because not listed in AllowUsers Jul 6 14:20:34 server2 sshd\[24034\]: User root from 193.228.91.109 not allowed because not listed in AllowUsers Jul 6 14:20:52 server2 sshd\[24044\]: User root from 193.228.91.109 not allowed because not listed in AllowUsers Jul 6 14:21:10 server2 sshd\[24078\]: User root from 193.228.91.109 not allowed because not listed in AllowUsers Jul 6 14:21:28 server2 sshd\[24086\]: User root from 193.228.91.109 not allowed because not listed in AllowUsers	2020-07-06 19:23:59
222.186.180.6	attackbots	Jul 6 11:23:44 marvibiene sshd[45537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.6 user=root Jul 6 11:23:45 marvibiene sshd[45537]: Failed password for root from 222.186.180.6 port 6732 ssh2 Jul 6 11:23:48 marvibiene sshd[45537]: Failed password for root from 222.186.180.6 port 6732 ssh2 Jul 6 11:23:44 marvibiene sshd[45537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.6 user=root Jul 6 11:23:45 marvibiene sshd[45537]: Failed password for root from 222.186.180.6 port 6732 ssh2 Jul 6 11:23:48 marvibiene sshd[45537]: Failed password for root from 222.186.180.6 port 6732 ssh2 ...	2020-07-06 19:28:05
103.113.214.11	attackbotsspam	2020-07-05 22:34:05.354579-0500 localhost smtpd[37487]: NOQUEUE: reject: RCPT from unknown[103.113.214.11]: 554 5.7.1 Service unavailable; Client host [103.113.214.11] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/103.113.214.11; from= to= proto=ESMTP helo=<[103.113.214.11]>	2020-07-06 19:30:38
186.232.160.176	attack	Automatic report - Banned IP Access	2020-07-06 19:48:57
103.85.142.16	attack	Automatic report - XMLRPC Attack	2020-07-06 20:24:08
89.237.195.134	attackspambots	Jul 6 05:47:11 smtp postfix/smtpd[81745]: NOQUEUE: reject: RCPT from unknown[89.237.195.134]: 554 5.7.1 Service unavailable; Client host [89.237.195.134] blocked using cbl.abuseat.org; Blocked - see http://www.abuseat.org/lookup.cgi?ip=89.237.195.134; from= to= proto=ESMTP helo=<[89.237.195.134]> ...	2020-07-06 20:13:03
180.76.168.228	attackspam	Automatic report BANNED IP	2020-07-06 19:29:51
13.71.134.242	attackbotsspam	Brute forcing email accounts	2020-07-06 19:54:12
61.164.246.45	attackspam	$f2bV_matches	2020-07-06 20:07:26
180.76.101.202	attack	Jul 6 14:04:56 lukav-desktop sshd\[25200\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.101.202 user=root Jul 6 14:04:58 lukav-desktop sshd\[25200\]: Failed password for root from 180.76.101.202 port 42492 ssh2 Jul 6 14:08:44 lukav-desktop sshd\[12115\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.101.202 user=root Jul 6 14:08:47 lukav-desktop sshd\[12115\]: Failed password for root from 180.76.101.202 port 60542 ssh2 Jul 6 14:12:25 lukav-desktop sshd\[990\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.101.202 user=root	2020-07-06 19:33:45
180.180.123.227	attack	$f2bV_matches	2020-07-06 19:52:19

最近上报的IP列表

190.8.241.139	46.146.242.149	189.41.227.34	50.80.6.14
103.230.49.41	101.89.150.171	180.176.189.251	58.96.51.198
187.72.29.2	129.226.133.194	142.93.56.12	103.9.196.50
85.140.113.202	31.43.194.2	118.89.201.225	82.205.0.199
35.210.172.15	190.153.238.171	75.43.22.95	41.40.53.171