18.136.20.67 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
18.136.200.12	attack	18.136.200.12 - - [21/Jul/2020:18:50:06 +1000] "POST /wp-login.php HTTP/1.0" 200 5963 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 18.136.200.12 - - [21/Jul/2020:18:59:49 +1000] "POST /wp-login.php HTTP/1.1" 200 1925 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 18.136.200.12 - - [21/Jul/2020:18:59:51 +1000] "POST /wp-login.php HTTP/1.1" 200 1880 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 18.136.200.12 - - [22/Jul/2020:01:05:27 +1000] "POST /wp-login.php HTTP/1.1" 200 1936 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 18.136.200.12 - - [22/Jul/2020:16:24:34 +1000] "POST /wp-login.php HTTP/1.0" 200 6261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-07-22 14:30:06
18.136.200.250	attackspam	Unauthorized connection attempt detected from IP address 18.136.200.250 to port 80 [J]	2020-02-04 01:22:29
18.136.201.193	attackbots	Sep 28 04:27:49 cumulus sshd[5100]: Invalid user kd from 18.136.201.193 port 52380 Sep 28 04:27:49 cumulus sshd[5100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.136.201.193 Sep 28 04:27:50 cumulus sshd[5100]: Failed password for invalid user kd from 18.136.201.193 port 52380 ssh2 Sep 28 04:27:51 cumulus sshd[5100]: Received disconnect from 18.136.201.193 port 52380:11: Bye Bye [preauth] Sep 28 04:27:51 cumulus sshd[5100]: Disconnected from 18.136.201.193 port 52380 [preauth] Sep 28 04:36:40 cumulus sshd[5443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.136.201.193 user=postgres Sep 28 04:36:42 cumulus sshd[5443]: Failed password for postgres from 18.136.201.193 port 59978 ssh2 Sep 28 04:36:42 cumulus sshd[5443]: Received disconnect from 18.136.201.193 port 59978:11: Bye Bye [preauth] Sep 28 04:36:42 cumulus sshd[5443]: Disconnected from 18.136.201.193 port 59978 [preauth] ........ -------------------------------	2019-09-30 08:54:08

类型

评论内容

时间

18.136.200.12

attack

18.136.200.12 - - [21/Jul/2020:18:50:06 +1000] "POST /wp-login.php HTTP/1.0" 200 5963 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
18.136.200.12 - - [21/Jul/2020:18:59:49 +1000] "POST /wp-login.php HTTP/1.1" 200 1925 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
18.136.200.12 - - [21/Jul/2020:18:59:51 +1000] "POST /wp-login.php HTTP/1.1" 200 1880 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
18.136.200.12 - - [22/Jul/2020:01:05:27 +1000] "POST /wp-login.php HTTP/1.1" 200 1936 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
18.136.200.12 - - [22/Jul/2020:16:24:34 +1000] "POST /wp-login.php HTTP/1.0" 200 6261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...

2020-07-22 14:30:06

18.136.200.250

attackspam

Unauthorized connection attempt detected from IP address 18.136.200.250 to port 80 [J]

2020-02-04 01:22:29

18.136.201.193

attackbots

Sep 28 04:27:49 cumulus sshd[5100]: Invalid user kd from 18.136.201.193 port 52380
Sep 28 04:27:49 cumulus sshd[5100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.136.201.193
Sep 28 04:27:50 cumulus sshd[5100]: Failed password for invalid user kd from 18.136.201.193 port 52380 ssh2
Sep 28 04:27:51 cumulus sshd[5100]: Received disconnect from 18.136.201.193 port 52380:11: Bye Bye [preauth]
Sep 28 04:27:51 cumulus sshd[5100]: Disconnected from 18.136.201.193 port 52380 [preauth]
Sep 28 04:36:40 cumulus sshd[5443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.136.201.193  user=postgres
Sep 28 04:36:42 cumulus sshd[5443]: Failed password for postgres from 18.136.201.193 port 59978 ssh2
Sep 28 04:36:42 cumulus sshd[5443]: Received disconnect from 18.136.201.193 port 59978:11: Bye Bye [preauth]
Sep 28 04:36:42 cumulus sshd[5443]: Disconnected from 18.136.201.193 port 59978 [preauth]

........
-------------------------------

2019-09-30 08:54:08

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 18.136.20.67
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33299
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;18.136.20.67.			IN	A

;; AUTHORITY SECTION:
.			132	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 18:46:24 CST 2022
;; MSG SIZE  rcvd: 105

HOST信息:

67.20.136.18.in-addr.arpa domain name pointer ec2-18-136-20-67.ap-southeast-1.compute.amazonaws.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
67.20.136.18.in-addr.arpa	name = ec2-18-136-20-67.ap-southeast-1.compute.amazonaws.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
103.23.102.3	attackspambots	Automatic report - Banned IP Access	2020-02-08 19:10:52
45.155.126.33	attack	2020-02-07 22:51:43 H=edm5.edmeventallgain.info [45.155.126.33]:60641 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.2) (https://www.spamhaus.org/sbl/query/SBLCSS) 2020-02-07 22:51:44 H=edm5.edmeventallgain.info [45.155.126.33]:60641 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.2) (https://www.spamhaus.org/sbl/query/SBL476535) 2020-02-07 22:51:44 H=edm5.edmeventallgain.info [45.155.126.33]:60641 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.2) (https://www.spamhaus.org/sbl/query/SBL476535) ...	2020-02-08 18:55:49
46.101.17.215	attackbotsspam	Feb 8 12:07:29 dedicated sshd[545]: Invalid user oas from 46.101.17.215 port 57984	2020-02-08 19:13:11
139.162.122.110	attackbots	2020-02-07 UTC: 4x - (4x)	2020-02-08 19:01:04
183.83.92.110	attackbots	1581137496 - 02/08/2020 05:51:36 Host: 183.83.92.110/183.83.92.110 Port: 445 TCP Blocked	2020-02-08 19:03:12
222.91.72.102	attack	2020-2-8 11:21:50 AM: failed ssh attempt	2020-02-08 18:58:48
121.204.148.98	attack	2020-2-8 11:28:42 AM: failed ssh attempt	2020-02-08 19:22:23
202.69.38.82	attackspam	Automatic report - XMLRPC Attack	2020-02-08 19:21:01
37.59.98.64	attackbots	Feb 8 05:51:51 lnxded64 sshd[3754]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.98.64	2020-02-08 18:49:40
62.234.65.92	attackbots	Feb 8 11:50:56 dedicated sshd[29603]: Invalid user uzo from 62.234.65.92 port 37067	2020-02-08 19:06:31
173.254.231.134	attackspambots	Feb 8 11:52:23 legacy sshd[1435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.254.231.134 Feb 8 11:52:25 legacy sshd[1435]: Failed password for invalid user vuk from 173.254.231.134 port 58432 ssh2 Feb 8 11:56:43 legacy sshd[1765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.254.231.134 ...	2020-02-08 19:00:42
103.58.92.5	attackspam	Feb 8 13:17:48 gw1 sshd[30974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.58.92.5 Feb 8 13:17:50 gw1 sshd[30974]: Failed password for invalid user bdl from 103.58.92.5 port 60646 ssh2 ...	2020-02-08 18:46:38
185.175.93.104	attackspam	02/08/2020-11:38:42.602008 185.175.93.104 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2020-02-08 18:44:18
83.61.10.169	attackbots	2020-2-8 11:19:03 AM: failed ssh attempt	2020-02-08 19:25:28
182.74.0.54	attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-08 19:11:11

最近上报的IP列表

18.136.21.135	18.136.223.26	18.136.247.6	18.136.232.158
18.136.225.97	18.136.228.77	18.136.240.237	18.136.249.38
18.136.21.59	18.136.254.123	18.136.32.28	18.136.3.21
18.136.36.203	18.136.34.90	18.136.41.16	18.136.43.122
18.136.40.33	18.136.43.8	18.136.63.181	18.136.67.123