154.125.27.139

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Senegal

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
154.125.27.189	attackbotsspam	Automatic report - Port Scan Attack	2020-02-17 15:22:29
154.125.27.17	attackspambots	Aug 10 04:09:32 garuda sshd[653521]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.125.27.17 user=r.r Aug 10 04:09:34 garuda sshd[653521]: Failed password for r.r from 154.125.27.17 port 58877 ssh2 Aug 10 04:09:37 garuda sshd[653521]: Failed password for r.r from 154.125.27.17 port 58877 ssh2 Aug 10 04:09:39 garuda sshd[653521]: Failed password for r.r from 154.125.27.17 port 58877 ssh2 Aug 10 04:09:41 garuda sshd[653521]: Failed password for r.r from 154.125.27.17 port 58877 ssh2 Aug 10 04:09:43 garuda sshd[653521]: Failed password for r.r from 154.125.27.17 port 58877 ssh2 Aug 10 04:09:46 garuda sshd[653521]: Failed password for r.r from 154.125.27.17 port 58877 ssh2 Aug 10 04:09:46 garuda sshd[653521]: PAM 5 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.125.27.17 user=r.r ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=154.125.27.17	2019-08-10 20:02:30

类型

评论内容

时间

154.125.27.189

attackbotsspam

Automatic report - Port Scan Attack

2020-02-17 15:22:29

154.125.27.17

attackspambots

Aug 10 04:09:32 garuda sshd[653521]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.125.27.17  user=r.r
Aug 10 04:09:34 garuda sshd[653521]: Failed password for r.r from 154.125.27.17 port 58877 ssh2
Aug 10 04:09:37 garuda sshd[653521]: Failed password for r.r from 154.125.27.17 port 58877 ssh2
Aug 10 04:09:39 garuda sshd[653521]: Failed password for r.r from 154.125.27.17 port 58877 ssh2
Aug 10 04:09:41 garuda sshd[653521]: Failed password for r.r from 154.125.27.17 port 58877 ssh2
Aug 10 04:09:43 garuda sshd[653521]: Failed password for r.r from 154.125.27.17 port 58877 ssh2
Aug 10 04:09:46 garuda sshd[653521]: Failed password for r.r from 154.125.27.17 port 58877 ssh2
Aug 10 04:09:46 garuda sshd[653521]: PAM 5 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.125.27.17  user=r.r


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=154.125.27.17

2019-08-10 20:02:30

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 154.125.27.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54361
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;154.125.27.139.			IN	A

;; AUTHORITY SECTION:
.			505	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 18:43:35 CST 2022
;; MSG SIZE  rcvd: 107

HOST信息:

Host 139.27.125.154.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 139.27.125.154.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
54.37.159.12	attack	Feb 10 07:38:29 plusreed sshd[9739]: Invalid user wbh from 54.37.159.12 ...	2020-02-10 20:53:00
195.95.147.98	attackspam	" "	2020-02-10 20:46:59
203.195.229.145	attack	Unauthorized connection attempt detected, IP banned.	2020-02-10 21:16:29
185.175.93.78	attackbotsspam	02/10/2020-07:24:09.623454 185.175.93.78 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2020-02-10 20:52:30
201.122.102.21	attackspam	Feb 10 02:39:11 web9 sshd\[20215\]: Invalid user qpg from 201.122.102.21 Feb 10 02:39:11 web9 sshd\[20215\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.122.102.21 Feb 10 02:39:13 web9 sshd\[20215\]: Failed password for invalid user qpg from 201.122.102.21 port 58490 ssh2 Feb 10 02:40:41 web9 sshd\[20406\]: Invalid user nwo from 201.122.102.21 Feb 10 02:40:41 web9 sshd\[20406\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.122.102.21	2020-02-10 20:43:24
106.12.31.99	attackbotsspam	Feb 10 14:54:50 ns01 sshd[998]: Invalid user oep from 106.12.31.99 Feb 10 14:54:50 ns01 sshd[998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.31.99 Feb 10 14:54:51 ns01 sshd[998]: Failed password for invalid user oep from 106.12.31.99 port 35158 ssh2 Feb 10 14:59:19 ns01 sshd[1162]: Invalid user ddd from 106.12.31.99 Feb 10 14:59:19 ns01 sshd[1162]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.31.99 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=106.12.31.99	2020-02-10 20:39:34
185.143.223.161	attackspambots	Feb 10 11:08:27 relay postfix/smtpd\[11396\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.161\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[185.143.223.97\]\> Feb 10 11:08:27 relay postfix/smtpd\[11396\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.161\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[185.143.223.97\]\> Feb 10 11:08:27 relay postfix/smtpd\[11396\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.161\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[185.143.223.97\]\> Feb 10 11:08:27 relay postfix/smtpd\[11396\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.161\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ pr ...	2020-02-10 20:37:29
117.0.189.221	attackspambots	[portscan] tcp/23 [TELNET] *(RWIN=55922)(02101252)	2020-02-10 20:48:51
156.236.119.151	attackbots	2020-02-10T13:43:18.579649scmdmz1 sshd[28377]: Invalid user yvp from 156.236.119.151 port 52248 2020-02-10T13:43:18.582536scmdmz1 sshd[28377]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.236.119.151 2020-02-10T13:43:18.579649scmdmz1 sshd[28377]: Invalid user yvp from 156.236.119.151 port 52248 2020-02-10T13:43:20.100170scmdmz1 sshd[28377]: Failed password for invalid user yvp from 156.236.119.151 port 52248 ssh2 2020-02-10T13:46:55.588533scmdmz1 sshd[28712]: Invalid user som from 156.236.119.151 port 48078 ...	2020-02-10 21:07:04
156.236.119.175	attackbotsspam	$f2bV_matches	2020-02-10 20:54:18
89.248.167.131	attack	ET CINS Active Threat Intelligence Poor Reputation IP group 87 - port: 55443 proto: TCP cat: Misc Attack	2020-02-10 20:40:55
78.42.70.33	attack	Feb 10 02:29:00 zulu1842 sshd[15794]: Invalid user qmj from 78.42.70.33 Feb 10 02:29:01 zulu1842 sshd[15794]: Failed password for invalid user qmj from 78.42.70.33 port 56872 ssh2 Feb 10 02:29:01 zulu1842 sshd[15794]: Received disconnect from 78.42.70.33: 11: Bye Bye [preauth] Feb 10 02:40:05 zulu1842 sshd[16526]: Invalid user kpz from 78.42.70.33 Feb 10 02:40:08 zulu1842 sshd[16526]: Failed password for invalid user kpz from 78.42.70.33 port 46222 ssh2 Feb 10 02:40:08 zulu1842 sshd[16526]: Received disconnect from 78.42.70.33: 11: Bye Bye [preauth] Feb 10 02:45:01 zulu1842 sshd[16721]: Invalid user sxa from 78.42.70.33 Feb 10 02:45:03 zulu1842 sshd[16721]: Failed password for invalid user sxa from 78.42.70.33 port 56216 ssh2 Feb 10 02:45:03 zulu1842 sshd[16721]: Received disconnect from 78.42.70.33: 11: Bye Bye [preauth] Feb 10 02:49:32 zulu1842 sshd[16945]: Invalid user rhl from 78.42.70.33 Feb 10 02:49:33 zulu1842 sshd[16945]: Failed password for invalid user rhl fro........ -------------------------------	2020-02-10 21:02:23
80.157.194.45	attackbotsspam	Feb 10 08:38:18 ws22vmsma01 sshd[9977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.157.194.45 Feb 10 08:38:20 ws22vmsma01 sshd[9977]: Failed password for invalid user aqk from 80.157.194.45 port 33666 ssh2 ...	2020-02-10 20:48:04
106.13.123.29	attackbots	$f2bV_matches	2020-02-10 21:13:38
117.247.24.209	attackbotsspam	Telnet/23 MH Probe, BF, Hack -	2020-02-10 20:46:15

最近上报的IP列表

154.125.199.145	154.126.223.242	154.125.78.225	154.126.226.75
154.126.32.198	154.121.51.154	154.127.119.147	154.126.42.110
154.126.226.76	154.127.165.63	154.126.178.56	154.127.53.115
154.129.41.171	154.13.1.12	154.13.1.128	154.13.1.100
154.127.79.139	154.13.1.15	154.13.1.185	154.13.1.29