Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Tencent Cloud Computing (Beijing) Co. Ltd

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
Aug 20 20:25:39 localhost sshd\[2675\]: Invalid user dgu from 152.136.30.149 port 33454
Aug 20 20:25:39 localhost sshd\[2675\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.30.149
Aug 20 20:25:41 localhost sshd\[2675\]: Failed password for invalid user dgu from 152.136.30.149 port 33454 ssh2
...
2020-08-21 07:39:57
attackbotsspam
Invalid user naveen from 152.136.30.149 port 42292
2020-07-24 03:29:54
attack
$f2bV_matches
2020-07-21 07:57:48
attackbots
Brute-force attempt banned
2020-07-05 19:24:33
attack
Jun 23 15:24:51 lnxmail61 sshd[6858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.30.149
2020-06-23 22:48:40
attackbots
DATE:2020-06-17 19:49:50, IP:152.136.30.149, PORT:ssh SSH brute force auth (docker-dc)
2020-06-18 01:56:19
Comments on same subnet:
IP Type Details Datetime
152.136.30.135 attackspambots
[f2b] sshd bruteforce, retries: 1
2020-10-14 08:48:02
152.136.30.135 attack
2020-10-12T19:59:16+0200 Failed SSH Authentication/Brute Force Attack. (Server 4)
2020-10-13 02:17:54
152.136.30.135 attackspam
Oct 12 08:54:47 ip-172-31-42-142 sshd\[11919\]: Invalid user saugata from 152.136.30.135\
Oct 12 08:54:49 ip-172-31-42-142 sshd\[11919\]: Failed password for invalid user saugata from 152.136.30.135 port 42170 ssh2\
Oct 12 08:58:24 ip-172-31-42-142 sshd\[11954\]: Invalid user rupert from 152.136.30.135\
Oct 12 08:58:27 ip-172-31-42-142 sshd\[11954\]: Failed password for invalid user rupert from 152.136.30.135 port 34744 ssh2\
Oct 12 09:01:54 ip-172-31-42-142 sshd\[12003\]: Failed password for root from 152.136.30.135 port 55542 ssh2\
2020-10-12 17:43:49
152.136.30.135 attackbotsspam
Invalid user cyrus from 152.136.30.135 port 59874
2020-10-04 07:19:18
152.136.30.135 attack
Invalid user cyrus from 152.136.30.135 port 59874
2020-10-03 23:34:32
152.136.30.135 attackbots
Oct  3 07:23:41 host1 sshd[426479]: Invalid user sunil from 152.136.30.135 port 51200
Oct  3 07:23:44 host1 sshd[426479]: Failed password for invalid user sunil from 152.136.30.135 port 51200 ssh2
Oct  3 07:26:53 host1 sshd[426597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.30.135  user=root
Oct  3 07:26:55 host1 sshd[426597]: Failed password for root from 152.136.30.135 port 35414 ssh2
Oct  3 07:30:01 host1 sshd[426831]: Invalid user ubuntu from 152.136.30.135 port 47868
...
2020-10-03 15:18:33
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 152.136.30.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7030
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;152.136.30.149.			IN	A

;; AUTHORITY SECTION:
.			584	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020061701 1800 900 604800 86400

;; Query time: 98 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jun 18 01:56:15 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 149.30.136.152.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 149.30.136.152.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
148.70.204.218 attackbots
SSH brutforce
2019-11-14 20:05:52
180.253.20.105 attack
Port 1433 Scan
2019-11-14 19:43:25
117.87.227.179 attack
Nov 14 08:19:04 elektron postfix/smtpd\[1052\]: NOQUEUE: reject: RCPT from unknown\[117.87.227.179\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[117.87.227.179\]\; from=\ to=\ proto=ESMTP helo=\
Nov 14 08:19:44 elektron postfix/smtpd\[1052\]: NOQUEUE: reject: RCPT from unknown\[117.87.227.179\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[117.87.227.179\]\; from=\ to=\ proto=ESMTP helo=\
Nov 14 08:20:27 elektron postfix/smtpd\[1037\]: NOQUEUE: reject: RCPT from unknown\[117.87.227.179\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[117.87.227.179\]\; from=\ to=\ proto=ESMTP helo=\
Nov 14 08:21:15 elektron postfix/smtpd\[27481\]: NOQUEUE: reject: RCPT from unknown\[117.87.227.179\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[117.87.227.179\]\; from=\ to=\ proto=ESMTP h
2019-11-14 20:09:31
200.217.148.218 attack
scan z
2019-11-14 19:58:46
219.91.222.148 attackbots
Nov 14 08:24:52 MK-Soft-VM7 sshd[12053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.91.222.148 
Nov 14 08:24:54 MK-Soft-VM7 sshd[12053]: Failed password for invalid user woestman from 219.91.222.148 port 56958 ssh2
...
2019-11-14 19:42:07
104.236.127.247 attackspambots
C1,WP GET /chicken-house/wp-login.php
2019-11-14 20:11:59
220.92.16.102 attackspam
Automatic report - Banned IP Access
2019-11-14 20:17:00
2.186.12.163 attackspam
Unauthorised access (Nov 14) SRC=2.186.12.163 LEN=52 PREC=0x20 TTL=115 ID=3320 DF TCP DPT=445 WINDOW=8192 SYN
2019-11-14 20:07:48
185.172.110.217 attack
185.172.110.217 was recorded 5 times by 5 hosts attempting to connect to the following ports: 80. Incident counter (4h, 24h, all-time): 5, 27, 125
2019-11-14 19:56:35
61.223.165.19 attackbotsspam
Port scan
2019-11-14 20:11:39
138.197.89.212 attackbotsspam
Nov 14 12:53:46 ncomp sshd[10382]: Invalid user rtohotan from 138.197.89.212
Nov 14 12:53:46 ncomp sshd[10382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.89.212
Nov 14 12:53:46 ncomp sshd[10382]: Invalid user rtohotan from 138.197.89.212
Nov 14 12:53:47 ncomp sshd[10382]: Failed password for invalid user rtohotan from 138.197.89.212 port 59340 ssh2
2019-11-14 20:13:22
113.17.111.19 attackspam
Nov 14 10:17:07 markkoudstaal sshd[28667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.17.111.19
Nov 14 10:17:09 markkoudstaal sshd[28667]: Failed password for invalid user rundhovde from 113.17.111.19 port 3824 ssh2
Nov 14 10:21:24 markkoudstaal sshd[29013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.17.111.19
2019-11-14 20:14:22
111.68.104.130 attackspambots
Nov 14 11:24:34 eventyay sshd[13496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.68.104.130
Nov 14 11:24:35 eventyay sshd[13496]: Failed password for invalid user ts3user from 111.68.104.130 port 60248 ssh2
Nov 14 11:30:21 eventyay sshd[13546]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.68.104.130
...
2019-11-14 20:16:36
146.71.79.20 attackbots
Repeated brute force against a port
2019-11-14 20:14:09
220.142.175.80 attackspam
UTC: 2019-11-13 port: 23/tcp
2019-11-14 19:52:56

Recently Reported IPs

250.38.148.202 221.167.201.76 76.192.190.68 193.114.107.82
201.38.7.227 168.77.73.106 144.217.85.124 121.121.109.52
109.62.195.203 107.174.44.184 253.184.239.39 91.93.19.120
42.238.87.238 54.180.37.90 196.26.181.14 52.79.110.208
35.187.114.106 205.157.164.189 87.15.48.37 46.123.249.236