117.27.139.56 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Fujian Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Aug 16 05:07:54 www sshd\[31621\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.27.139.56 user=mail Aug 16 05:07:57 www sshd\[31621\]: Failed password for mail from 117.27.139.56 port 58490 ssh2 Aug 16 05:11:26 www sshd\[31933\]: Invalid user publish from 117.27.139.56 Aug 16 05:11:26 www sshd\[31933\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.27.139.56 ...	2019-08-16 12:52:42
attack	fraudulent SSH attempt	2019-07-17 11:34:20
attackbotsspam	Jun 24 13:05:08 lhostnameo sshd[13918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.27.139.56 user=r.r Jun 24 13:05:10 lhostnameo sshd[13918]: Failed password for r.r from 117.27.139.56 port 44320 ssh2 Jun 24 13:05:12 lhostnameo sshd[13942]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.27.139.56 user=r.r Jun 24 13:05:14 lhostnameo sshd[13942]: Failed password for r.r from 117.27.139.56 port 45594 ssh2 Jun 24 13:05:16 lhostnameo sshd[13959]: Invalid user pi from 117.27.139.56 port 46454 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=117.27.139.56	2019-06-24 21:50:07

类型

评论内容

时间

attack

Aug 16 05:07:54 www sshd\[31621\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.27.139.56  user=mail
Aug 16 05:07:57 www sshd\[31621\]: Failed password for mail from 117.27.139.56 port 58490 ssh2
Aug 16 05:11:26 www sshd\[31933\]: Invalid user publish from 117.27.139.56
Aug 16 05:11:26 www sshd\[31933\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.27.139.56
...

2019-08-16 12:52:42

attack

fraudulent SSH attempt

2019-07-17 11:34:20

attackbotsspam

Jun 24 13:05:08 lhostnameo sshd[13918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.27.139.56  user=r.r
Jun 24 13:05:10 lhostnameo sshd[13918]: Failed password for r.r from 117.27.139.56 port 44320 ssh2
Jun 24 13:05:12 lhostnameo sshd[13942]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.27.139.56  user=r.r
Jun 24 13:05:14 lhostnameo sshd[13942]: Failed password for r.r from 117.27.139.56 port 45594 ssh2
Jun 24 13:05:16 lhostnameo sshd[13959]: Invalid user pi from 117.27.139.56 port 46454

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=117.27.139.56

2019-06-24 21:50:07

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.27.139.56
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5999
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;117.27.139.56.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019062400 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jun 24 21:49:56 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 56.139.27.117.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 56.139.27.117.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
184.30.210.217	attack	09/26/2019-12:53:52.239967 184.30.210.217 Protocol: 6 SURICATA TLS invalid handshake message	2019-09-26 19:06:02
80.82.77.240	attackspambots	09/26/2019-06:31:45.846988 80.82.77.240 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 82	2019-09-26 19:14:52
162.158.107.175	attack	162.158.107.175 - - [26/Sep/2019:10:41:26 +0700] "GET /apple-touch-icon-144x144.png HTTP/1.1" 404 2828 "-" "Googlebot-Image/1.0"	2019-09-26 19:15:23
81.171.85.157	attackbots	\[2019-09-26 12:40:19\] NOTICE\[23191\] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '\' failed for '81.171.85.157:59654' $callid: 149523050-745042187-174034085$ - Failed to authenticate \[2019-09-26 12:40:19\] SECURITY\[1715\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-09-26T12:40:19.468+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="149523050-745042187-174034085",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/81.171.85.157/59654",Challenge="1569494419/ab9afd03612284eae8f211e992cd20b7",Response="d4ba0f2498f4915983ae0f288e0f4c82",ExpectedResponse="" \[2019-09-26 12:40:19\] NOTICE\[25634\] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '\' failed for '81.171.85.157:59654' $callid: 149523050-745042187-174034085$ - Failed to authenticate \[2019-09-26 12:40:19\] SECURITY\[1715\] res_security_log.c: SecurityEvent="ChallengeResponseFai	2019-09-26 19:03:42
117.41.154.45	attackspambots	Sep2605:32:12server4pure-ftpd:$\?@59.32.28.226$[WARNING]Authenticationfailedforuser[yex-swiss]Sep2605:32:23server4pure-ftpd:$\?@59.32.28.226$[WARNING]Authenticationfailedforuser[yex-swiss]Sep2605:32:06server4pure-ftpd:$\?@59.32.28.226$[WARNING]Authenticationfailedforuser[yex-swiss]Sep2605:41:47server4pure-ftpd:$\?@117.41.154.45$[WARNING]Authenticationfailedforuser[yex-swiss]Sep2605:32:36server4pure-ftpd:$\?@59.32.28.226$[WARNING]Authenticationfailedforuser[yex-swiss]Sep2605:32:44server4pure-ftpd:$\?@59.32.28.226$[WARNING]Authenticationfailedforuser[yex-swiss]Sep2605:32:55server4pure-ftpd:$\?@59.32.28.226$[WARNING]Authenticationfailedforuser[yex-swiss]Sep2605:32:31server4pure-ftpd:$\?@59.32.28.226$[WARNING]Authenticationfailedforuser[yex-swiss]Sep2605:32:50server4pure-ftpd:$\?@59.32.28.226$[WARNING]Authenticationfailedforuser[yex-swiss]Sep2605:32:18server4pure-ftpd:$\?@59.32.28.226$[WARNING]Authenticationfailedforuser[yex-swiss]Sep2605:32:00server4pure-ftpd:$\?@59.32.28.226$[WARNING]Authe	2019-09-26 19:09:18
164.52.24.237	attackbotsspam	" "	2019-09-26 18:55:14
183.6.58.74	attackbotsspam	Sep 26 12:57:43 ns3110291 sshd\[15470\]: Invalid user ubnt from 183.6.58.74 Sep 26 12:57:43 ns3110291 sshd\[15470\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.6.58.74 Sep 26 12:57:45 ns3110291 sshd\[15470\]: Failed password for invalid user ubnt from 183.6.58.74 port 36938 ssh2 Sep 26 13:00:49 ns3110291 sshd\[15657\]: Invalid user es from 183.6.58.74 Sep 26 13:00:49 ns3110291 sshd\[15657\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.6.58.74 ...	2019-09-26 19:13:04
174.140.249.110	attackbotsspam	(From darren@custompicsfromairplane.com) Hi We have extended the below offer just 2 more days Aerial Impressions will be photographing businesses and homes in Melrose and throughout a large part of the USA from Sept 28th. Aerial images of Bay State Centre Family Chiropractic would make a great addition to your advertising material and photograhps of your home will make a awesome wall hanging. We shoot 30+ images from various aspects from an airplane (we do not use drones) and deliver digitally free from any copyright. Only $249 per location. For more info, schedule and bookings please visit www.custompicsfromairplane.com or call 1877 533 9003 Regards Aerial Impressions	2019-09-26 18:56:18
162.158.106.93	attack	162.158.106.93 - - [26/Sep/2019:10:41:16 +0700] "GET /js/service-worker/fetch.js HTTP/1.1" 200 6027 "https://web.floware.ml/" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"	2019-09-26 19:23:33
119.145.165.122	attack	Sep 25 22:01:06 php1 sshd\[20420\]: Invalid user wildfly from 119.145.165.122 Sep 25 22:01:06 php1 sshd\[20420\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.145.165.122 Sep 25 22:01:09 php1 sshd\[20420\]: Failed password for invalid user wildfly from 119.145.165.122 port 43230 ssh2 Sep 25 22:03:43 php1 sshd\[20626\]: Invalid user teamspeak from 119.145.165.122 Sep 25 22:03:43 php1 sshd\[20626\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.145.165.122	2019-09-26 19:01:40
195.154.27.239	attack	Invalid user lulu from 195.154.27.239 port 36869	2019-09-26 18:56:46
106.75.157.9	attackspambots	Sep 26 09:26:28 SilenceServices sshd[25316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.157.9 Sep 26 09:26:31 SilenceServices sshd[25316]: Failed password for invalid user system from 106.75.157.9 port 47438 ssh2 Sep 26 09:30:11 SilenceServices sshd[26244]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.157.9	2019-09-26 18:39:35
182.71.127.250	attackbots	Sep 26 08:33:55 web8 sshd\[19381\]: Invalid user user from 182.71.127.250 Sep 26 08:33:55 web8 sshd\[19381\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.71.127.250 Sep 26 08:33:56 web8 sshd\[19381\]: Failed password for invalid user user from 182.71.127.250 port 53570 ssh2 Sep 26 08:38:35 web8 sshd\[21637\]: Invalid user ua from 182.71.127.250 Sep 26 08:38:35 web8 sshd\[21637\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.71.127.250	2019-09-26 18:52:35
49.234.189.19	attack	2019-09-24T22:12:19.8279721495-001 sshd[11877]: Invalid user ryder from 49.234.189.19 port 40200 2019-09-24T22:12:19.8354711495-001 sshd[11877]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.189.19 2019-09-24T22:12:21.6107851495-001 sshd[11877]: Failed password for invalid user ryder from 49.234.189.19 port 40200 ssh2 2019-09-24T22:19:52.5185821495-001 sshd[12634]: Invalid user admin from 49.234.189.19 port 44646 2019-09-24T22:19:52.5259631495-001 sshd[12634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.189.19 2019-09-24T22:19:54.8233041495-001 sshd[12634]: Failed password for invalid user admin from 49.234.189.19 port 44646 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=49.234.189.19	2019-09-26 19:12:23
132.232.39.15	attack	Sep 26 08:05:38 meumeu sshd[8364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.39.15 Sep 26 08:05:41 meumeu sshd[8364]: Failed password for invalid user 123 from 132.232.39.15 port 56318 ssh2 Sep 26 08:12:44 meumeu sshd[9238]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.39.15 ...	2019-09-26 19:11:43

最近上报的IP列表

196.47.64.42	92.77.238.250	13.245.121.194	5.62.35.162
170.18.126.89	125.99.232.103	5.44.196.17	182.87.139.140
1.84.93.125	153.37.154.118	95.12.97.172	67.249.140.227
173.225.101.110	187.247.70.63	84.20.121.31	177.66.61.134
2.179.218.86	91.203.73.180	177.130.136.32	218.102.211.235