27.100.42.2 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Thailand

运营商(isp): Advanced Info Service Public Company Limited

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Attempt to attack host OS, exploiting network vulnerabilities, on 16-11-2019 06:20:33.	2019-11-16 20:17:48

相同子网IP讨论:

IP	类型	评论内容	时间
27.100.42.1	attackspambots	Unauthorized connection attempt from IP address 27.100.42.1 on Port 445(SMB)	2020-02-10 01:39:56
27.100.42.0	attack	Unauthorized connection attempt from IP address 27.100.42.0 on Port 445(SMB)	2019-10-20 00:08:39

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 27.100.42.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46118
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;27.100.42.2.			IN	A

;; AUTHORITY SECTION:
.			595	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019111600 1800 900 604800 86400

;; Query time: 112 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Nov 16 20:17:38 CST 2019
;; MSG SIZE  rcvd: 115

HOST信息:

Host 2.42.100.27.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 2.42.100.27.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
218.92.0.205	attackbots	Unauthorized connection attempt detected from IP address 218.92.0.205 to port 22 [T]	2020-01-26 17:11:19
58.18.91.190	attackspam	Jan 26 10:41:42 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 4 secs\): user=\, method=PLAIN, rip=58.18.91.190, lip=212.111.212.230, session=\<37qS9Qadn4s6Elu+\> Jan 26 10:41:51 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 7 secs\): user=\, method=PLAIN, rip=58.18.91.190, lip=212.111.212.230, session=\ Jan 26 10:42:05 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 12 secs\): user=\, method=PLAIN, rip=58.18.91.190, lip=212.111.212.230, session=\ Jan 26 10:43:12 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 4 secs\): user=\, method=PLAIN, rip=58.18.91.190, lip=212.111.212.230, session=\ Jan 26 10:43:21 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 7 secs\): user=\, method=PLAIN, rip=58.18.91.190, lip=212.111.2 ...	2020-01-26 16:51:19
139.99.180.165	attackbots	Unauthorized connection attempt detected from IP address 139.99.180.165 to port 2220 [J]	2020-01-26 16:53:25
80.14.253.7	attackspam	Unauthorized connection attempt detected from IP address 80.14.253.7 to port 2220 [J]	2020-01-26 16:55:28
205.205.150.59	attackspam	205.205.150.59 was recorded 182 times by 1 hosts attempting to connect to the following ports: 9600,9869,9943,9944,13,6666,389,9981,5060,5985,503,8010,1741,9999,5986,6667,10000,17,515,3001,8069,19,444,6000,21,8080,1962,5222,8081,5269,6001,2000,548,10243,7000,465,6060,8086,554,6379,12345,502,8089,26,5357,8090,11300,3460,5432,631,3541,13579,2082,5555,636,7548,2083,14147,5560,3542,2086,7657,8099,666,5577,16010,2087,7777,53,17000,8112,3689,5672,18245,774,8126,7779,18246,8129,3749,79,8000,19150,3780,5900,8181,20000,873,2323,8333,3790,5938,20547,902,8001,8334,8443,21025,992,993,2376,21379,8008,2379,84,2404,23023,1010,88,23424,7,2425,4063,1023,1025,8880,2455,1098,8888,27015,1099,1177,8889,104,8899,1200,4443,1234,9000,27017,111,1311,4444,1400,113,1433,4567,4730,9001,9002,123,9042,4840,129,9051,4848,9080,1521,9100,4911,135,9151,9160,5000,5001,9191,5002,143,9390,5003,161,9418,175,9443,5007,179,9595,195,5009,311,5019,323. Incident counter (4h, 24h, all-time): 182, 182, 881	2020-01-26 17:08:34
92.255.95.242	attackbots	Jan 25 20:08:49 server sshd\[4849\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92-255-95-242.customer.comfortel.pro Jan 25 20:08:56 server sshd\[4849\]: Failed password for invalid user ftp_user from 92.255.95.242 port 44680 ssh2 Jan 26 11:23:51 server sshd\[30714\]: Invalid user sybase from 92.255.95.242 Jan 26 11:23:51 server sshd\[30714\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92-255-95-242.customer.comfortel.pro Jan 26 11:23:53 server sshd\[30714\]: Failed password for invalid user sybase from 92.255.95.242 port 36038 ssh2 ...	2020-01-26 16:50:49
51.68.227.98	attackbots	Unauthorized connection attempt detected from IP address 51.68.227.98 to port 2220 [J]	2020-01-26 17:10:25
152.136.116.121	attackbotsspam	Unauthorized connection attempt detected from IP address 152.136.116.121 to port 2220 [J]	2020-01-26 16:36:40
51.38.186.180	attack	Jan 25 11:11:59 server2101 sshd[27374]: Invalid user panda from 51.38.186.180 port 45127 Jan 25 11:12:00 server2101 sshd[27374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.186.180 Jan 25 11:12:02 server2101 sshd[27374]: Failed password for invalid user panda from 51.38.186.180 port 45127 ssh2 Jan 25 11:12:02 server2101 sshd[27374]: Received disconnect from 51.38.186.180 port 45127:11: Bye Bye [preauth] Jan 25 11:12:02 server2101 sshd[27374]: Disconnected from 51.38.186.180 port 45127 [preauth] Jan 25 11:31:49 server2101 sshd[27679]: Invalid user future from 51.38.186.180 port 46178 Jan 25 11:31:49 server2101 sshd[27679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.186.180 Jan 25 11:31:51 server2101 sshd[27679]: Failed password for invalid user future from 51.38.186.180 port 46178 ssh2 Jan 25 11:31:51 server2101 sshd[27679]: Received disconnect from 51.38.186.180 port 461........ -------------------------------	2020-01-26 16:56:35
207.200.8.182	attackbotsspam	Automated report (2020-01-26T06:59:12+00:00). Misbehaving bot detected at this address.	2020-01-26 16:58:07
125.39.73.101	attack	SSH invalid-user multiple login attempts	2020-01-26 16:50:00
93.57.25.54	attackspambots	Unauthorized connection attempt detected from IP address 93.57.25.54 to port 2220 [J]	2020-01-26 16:37:04
213.59.144.39	attackbotsspam	Unauthorized connection attempt detected from IP address 213.59.144.39 to port 2220 [J]	2020-01-26 16:52:19
110.49.71.249	attackspambots	Jan 26 05:43:47 DAAP sshd[28012]: Invalid user sme from 110.49.71.249 port 23090 Jan 26 05:43:47 DAAP sshd[28012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.49.71.249 Jan 26 05:43:47 DAAP sshd[28012]: Invalid user sme from 110.49.71.249 port 23090 Jan 26 05:43:49 DAAP sshd[28012]: Failed password for invalid user sme from 110.49.71.249 port 23090 ssh2 Jan 26 05:48:36 DAAP sshd[28090]: Invalid user keystone from 110.49.71.249 port 21316 ...	2020-01-26 17:10:05
2.144.247.24	attackspam	Unauthorized connection attempt detected from IP address 2.144.247.24 to port 2220 [J]	2020-01-26 17:01:46

最近上报的IP列表

119.27.165.198	170.83.240.225	130.0.35.62	120.29.77.165
118.69.116.52	118.194.226.100	151.184.170.193	117.241.247.239
245.101.228.55	24.157.143.154	113.254.211.100	103.233.122.55
103.99.37.39	148.121.103.20	1.55.227.84	112.225.253.170
216.6.152.52	213.39.181.205	204.132.77.54	173.245.52.79