2.133.70.201 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Kazakhstan

运营商(isp): JSC Kazakhtelecom

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Oct 4 22:25:08 mailman postfix/smtpd[3769]: NOQUEUE: reject: RCPT from unknown[2.133.70.201]: 554 5.7.1 Service unavailable; Client host [2.133.70.201] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/query/ip/2.133.70.201 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<[2.133.70.201]> Oct 4 22:46:06 mailman postfix/smtpd[3938]: NOQUEUE: reject: RCPT from unknown[2.133.70.201]: 554 5.7.1 Service unavailable; Client host [2.133.70.201] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/2.133.70.201; from= to= proto=ESMTP helo=<[2.133.70.201]>	2019-10-05 18:20:34

类型

评论内容

时间

attackbots

Oct  4 22:25:08 mailman postfix/smtpd[3769]: NOQUEUE: reject: RCPT from unknown[2.133.70.201]: 554 5.7.1 Service unavailable; Client host [2.133.70.201] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/query/ip/2.133.70.201 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<[2.133.70.201]>
Oct  4 22:46:06 mailman postfix/smtpd[3938]: NOQUEUE: reject: RCPT from unknown[2.133.70.201]: 554 5.7.1 Service unavailable; Client host [2.133.70.201] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/2.133.70.201; from= to= proto=ESMTP helo=<[2.133.70.201]>

2019-10-05 18:20:34

相同子网IP讨论:

IP	类型	评论内容	时间
2.133.70.113	attack	Email rejected due to spam filtering	2020-02-27 06:00:53

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.133.70.201
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4869
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;2.133.70.201.			IN	A

;; AUTHORITY SECTION:
.			457	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019100500 1800 900 604800 86400

;; Query time: 109 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 05 18:20:30 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

201.70.133.2.in-addr.arpa domain name pointer 2.133.70.201.megaline.telecom.kz.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
201.70.133.2.in-addr.arpa	name = 2.133.70.201.megaline.telecom.kz.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
218.92.0.198	attack	Aug 24 05:39:55 pkdns2 sshd\[45075\]: Failed password for root from 218.92.0.198 port 58704 ssh2Aug 24 05:39:57 pkdns2 sshd\[45075\]: Failed password for root from 218.92.0.198 port 58704 ssh2Aug 24 05:39:59 pkdns2 sshd\[45075\]: Failed password for root from 218.92.0.198 port 58704 ssh2Aug 24 05:41:28 pkdns2 sshd\[45202\]: Failed password for root from 218.92.0.198 port 44164 ssh2Aug 24 05:41:31 pkdns2 sshd\[45202\]: Failed password for root from 218.92.0.198 port 44164 ssh2Aug 24 05:41:33 pkdns2 sshd\[45202\]: Failed password for root from 218.92.0.198 port 44164 ssh2 ...	2019-08-24 11:03:38
91.134.241.32	attack	web-1 [ssh] SSH Attack	2019-08-24 11:08:26
123.206.22.145	attack	Aug 24 09:15:28 localhost sshd[18617]: Invalid user admin from 123.206.22.145 port 33614 ...	2019-08-24 11:21:35
74.141.89.35	attackbotsspam	Aug 24 05:52:29 www4 sshd\[4232\]: Invalid user scan from 74.141.89.35 Aug 24 05:52:29 www4 sshd\[4232\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.141.89.35 Aug 24 05:52:31 www4 sshd\[4232\]: Failed password for invalid user scan from 74.141.89.35 port 20001 ssh2 ...	2019-08-24 10:54:15
83.19.99.65	attackbots	proto=tcp . spt=54115 . dpt=25 . (listed on Blocklist de Aug 23) (151)	2019-08-24 11:17:40
49.51.171.35	attack	Aug 24 04:18:16 h2177944 sshd\[14438\]: Invalid user steam from 49.51.171.35 port 40482 Aug 24 04:18:16 h2177944 sshd\[14438\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.51.171.35 Aug 24 04:18:18 h2177944 sshd\[14438\]: Failed password for invalid user steam from 49.51.171.35 port 40482 ssh2 Aug 24 04:22:29 h2177944 sshd\[14573\]: Invalid user admin from 49.51.171.35 port 57856 ...	2019-08-24 11:19:52
106.13.86.199	attackspam	Aug 24 03:38:34 [snip] sshd[18343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.86.199 user=root Aug 24 03:38:36 [snip] sshd[18343]: Failed password for root from 106.13.86.199 port 51608 ssh2 Aug 24 03:56:30 [snip] sshd[20322]: Invalid user agostino from 106.13.86.199 port 42562[...]	2019-08-24 11:00:06
122.228.208.113	attackspambots	Aug 24 03:14:00 h2177944 kernel: \[4932824.183502\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=122.228.208.113 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=42871 PROTO=TCP SPT=49175 DPT=9000 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 24 03:14:28 h2177944 kernel: \[4932851.663307\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=122.228.208.113 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=30313 PROTO=TCP SPT=49175 DPT=3128 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 24 03:14:37 h2177944 kernel: \[4932860.589460\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=122.228.208.113 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=15976 PROTO=TCP SPT=49175 DPT=6666 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 24 03:15:11 h2177944 kernel: \[4932895.362747\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=122.228.208.113 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=33640 PROTO=TCP SPT=49175 DPT=81 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 24 03:15:59 h2177944 kernel: \[4932942.506117\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=122.228.208.113 DST=85.2	2019-08-24 10:57:34
211.252.84.191	attack	Aug 23 17:01:12 hiderm sshd\[20408\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.252.84.191 user=root Aug 23 17:01:14 hiderm sshd\[20408\]: Failed password for root from 211.252.84.191 port 34896 ssh2 Aug 23 17:06:34 hiderm sshd\[20947\]: Invalid user anastacia from 211.252.84.191 Aug 23 17:06:34 hiderm sshd\[20947\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.252.84.191 Aug 23 17:06:36 hiderm sshd\[20947\]: Failed password for invalid user anastacia from 211.252.84.191 port 52270 ssh2	2019-08-24 11:13:25
175.98.133.29	attackbotsspam	Port Scan: UDP/49153	2019-08-24 11:46:46
222.186.52.89	attack	Fail2Ban Ban Triggered	2019-08-24 10:53:44
115.132.127.188	attackbots	Aug 24 04:15:28 www sshd\[153081\]: Invalid user usuario from 115.132.127.188 Aug 24 04:15:28 www sshd\[153081\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.132.127.188 Aug 24 04:15:30 www sshd\[153081\]: Failed password for invalid user usuario from 115.132.127.188 port 35634 ssh2 ...	2019-08-24 11:19:17
195.80.144.2	attackbotsspam	[portscan] Port scan	2019-08-24 11:34:09
209.94.195.212	attackspam	Aug 24 05:23:19 minden010 sshd[5720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.94.195.212 Aug 24 05:23:21 minden010 sshd[5720]: Failed password for invalid user wget from 209.94.195.212 port 27344 ssh2 Aug 24 05:28:01 minden010 sshd[7358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.94.195.212 ...	2019-08-24 11:29:57
211.253.25.21	attack	Aug 24 05:47:48 server sshd\[31933\]: Invalid user universitaetsgelaende from 211.253.25.21 port 34998 Aug 24 05:47:48 server sshd\[31933\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.253.25.21 Aug 24 05:47:51 server sshd\[31933\]: Failed password for invalid user universitaetsgelaende from 211.253.25.21 port 34998 ssh2 Aug 24 05:52:32 server sshd\[18522\]: Invalid user um from 211.253.25.21 port 57588 Aug 24 05:52:32 server sshd\[18522\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.253.25.21	2019-08-24 10:52:50

最近上报的IP列表

165.118.229.251	86.137.148.197	184.42.246.201	122.191.79.42
2a02:c207:2028:9190::1:3829	2a02:c207:2028:9190::1	187.167.67.187	100.222.150.59
122.96.242.79	215.23.252.115	65.187.176.194	16.156.6.20
56.10.181.200	81.22.45.73	168.147.141.21	59.197.217.127
240.30.203.128	238.23.59.194	74.147.219.17	29.38.23.181