1.27.137.107 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): China Unicom

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
1.27.137.16	attackspam	$f2bV_matches	2020-04-05 07:03:06
1.27.137.218	attackbots	Jul 7 20:23:56 itv-usvr-01 sshd[13559]: Invalid user admin from 1.27.137.218 Jul 7 20:23:56 itv-usvr-01 sshd[13559]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.27.137.218 Jul 7 20:23:56 itv-usvr-01 sshd[13559]: Invalid user admin from 1.27.137.218 Jul 7 20:23:58 itv-usvr-01 sshd[13559]: Failed password for invalid user admin from 1.27.137.218 port 38076 ssh2 Jul 7 20:23:56 itv-usvr-01 sshd[13559]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.27.137.218 Jul 7 20:23:56 itv-usvr-01 sshd[13559]: Invalid user admin from 1.27.137.218 Jul 7 20:23:58 itv-usvr-01 sshd[13559]: Failed password for invalid user admin from 1.27.137.218 port 38076 ssh2 Jul 7 20:24:00 itv-usvr-01 sshd[13559]: Failed password for invalid user admin from 1.27.137.218 port 38076 ssh2	2019-07-08 06:50:03

类型

评论内容

时间

1.27.137.16

attackspam

$f2bV_matches

2020-04-05 07:03:06

1.27.137.218

attackbots

Jul  7 20:23:56 itv-usvr-01 sshd[13559]: Invalid user admin from 1.27.137.218
Jul  7 20:23:56 itv-usvr-01 sshd[13559]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.27.137.218
Jul  7 20:23:56 itv-usvr-01 sshd[13559]: Invalid user admin from 1.27.137.218
Jul  7 20:23:58 itv-usvr-01 sshd[13559]: Failed password for invalid user admin from 1.27.137.218 port 38076 ssh2
Jul  7 20:23:56 itv-usvr-01 sshd[13559]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.27.137.218
Jul  7 20:23:56 itv-usvr-01 sshd[13559]: Invalid user admin from 1.27.137.218
Jul  7 20:23:58 itv-usvr-01 sshd[13559]: Failed password for invalid user admin from 1.27.137.218 port 38076 ssh2
Jul  7 20:24:00 itv-usvr-01 sshd[13559]: Failed password for invalid user admin from 1.27.137.218 port 38076 ssh2

2019-07-08 06:50:03

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.27.137.107
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19181
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.27.137.107.			IN	A

;; AUTHORITY SECTION:
.			420	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022111100 1800 900 604800 86400

;; Query time: 22 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Nov 11 17:10:36 CST 2022
;; MSG SIZE  rcvd: 105

HOST信息:

Host 107.137.27.1.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 107.137.27.1.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
177.139.99.64	attack	1599843264 - 09/11/2020 18:54:24 Host: 177.139.99.64/177.139.99.64 Port: 445 TCP Blocked	2020-09-12 15:41:06
140.143.137.170	attack	Sep 12 00:48:52 fhem-rasp sshd[26204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.137.170 Sep 12 00:48:53 fhem-rasp sshd[26204]: Failed password for invalid user svn from 140.143.137.170 port 42148 ssh2 ...	2020-09-12 15:28:58
62.149.145.88	attackbots	WP XMLRPC Hack attempts	2020-09-12 15:36:15
202.166.164.126	attackspambots	Icarus honeypot on github	2020-09-12 15:40:23
211.254.215.197	attackspambots	Sep 12 08:45:19 root sshd[20097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.254.215.197 ...	2020-09-12 15:10:29
96.127.179.156	attackbots	Sep 12 12:15:40 lunarastro sshd[27447]: Failed password for root from 96.127.179.156 port 45098 ssh2	2020-09-12 15:21:02
106.13.144.207	attackspam	Sep 12 07:55:20 dhoomketu sshd[3026535]: Failed password for root from 106.13.144.207 port 52194 ssh2 Sep 12 07:56:28 dhoomketu sshd[3026551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.144.207 user=root Sep 12 07:56:30 dhoomketu sshd[3026551]: Failed password for root from 106.13.144.207 port 38840 ssh2 Sep 12 07:57:35 dhoomketu sshd[3026589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.144.207 user=root Sep 12 07:57:37 dhoomketu sshd[3026589]: Failed password for root from 106.13.144.207 port 53720 ssh2 ...	2020-09-12 15:28:29
90.188.42.221	attack	TCP (SYN) 90.188.42.221:61825 -> port 23, len 44	2020-09-12 15:35:51
202.155.211.226	attackbots	2020-09-12T05:44:23.922144abusebot-3.cloudsearch.cf sshd[14015]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.155.211.226 user=root 2020-09-12T05:44:25.777102abusebot-3.cloudsearch.cf sshd[14015]: Failed password for root from 202.155.211.226 port 53866 ssh2 2020-09-12T05:48:18.442231abusebot-3.cloudsearch.cf sshd[14019]: Invalid user mari from 202.155.211.226 port 35222 2020-09-12T05:48:18.448138abusebot-3.cloudsearch.cf sshd[14019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.155.211.226 2020-09-12T05:48:18.442231abusebot-3.cloudsearch.cf sshd[14019]: Invalid user mari from 202.155.211.226 port 35222 2020-09-12T05:48:20.564001abusebot-3.cloudsearch.cf sshd[14019]: Failed password for invalid user mari from 202.155.211.226 port 35222 ssh2 2020-09-12T05:52:04.859539abusebot-3.cloudsearch.cf sshd[14029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2 ...	2020-09-12 15:07:58
142.93.101.148	attack	(sshd) Failed SSH login from 142.93.101.148 (DE/Germany/-): 5 in the last 3600 secs	2020-09-12 15:43:02
27.6.196.229	attack	port scan and connect, tcp 23 (telnet)	2020-09-12 15:22:34
159.65.158.30	attackbotsspam	Sep 12 06:30:19 root sshd[30035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.158.30 ...	2020-09-12 15:45:15
128.199.142.0	attackspambots	$f2bV_matches	2020-09-12 15:17:07
218.92.0.248	attackspambots	Sep 12 03:01:27 NPSTNNYC01T sshd[25885]: Failed password for root from 218.92.0.248 port 35157 ssh2 Sep 12 03:01:39 NPSTNNYC01T sshd[25885]: error: maximum authentication attempts exceeded for root from 218.92.0.248 port 35157 ssh2 [preauth] Sep 12 03:01:45 NPSTNNYC01T sshd[25909]: Failed password for root from 218.92.0.248 port 56458 ssh2 ...	2020-09-12 15:08:45
27.74.243.157	attack	Unauthorised access (Sep 11) SRC=27.74.243.157 LEN=52 TTL=111 ID=4093 DF TCP DPT=445 WINDOW=8192 SYN	2020-09-12 15:07:27

最近上报的IP列表

108.184.112.74	86.188.155.241	118.192.66.14	70.136.187.46
238.8.236.250	240.247.30.22	202.6.96.4	109.112.182.251
203.119.8.106	1.77.86.27	1.77.16.100	1.76.227.175
1.75.182.188	1.75.42.199	1.75.159.72	1.75.16.159
1.73.222.235	1.73.65.32	1.73.45.113	1.74.227.158