27.124.37.105 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Hong Kong

运营商(isp): BGP Consultancy Pte Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Unauthorized connection attempt detected from IP address 27.124.37.105 to port 445 [T]	2020-05-09 03:15:01

相同子网IP讨论:

IP	类型	评论内容	时间
27.124.37.198	attackbots	Invalid user qhsupport from 27.124.37.198 port 44718	2020-05-30 13:09:13
27.124.37.198	attack	odoo8 ...	2020-05-25 22:21:58
27.124.37.198	attackspambots	May 24 07:51:48 nextcloud sshd\[17187\]: Invalid user hji from 27.124.37.198 May 24 07:51:48 nextcloud sshd\[17187\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.124.37.198 May 24 07:51:50 nextcloud sshd\[17187\]: Failed password for invalid user hji from 27.124.37.198 port 56422 ssh2	2020-05-24 13:57:37
27.124.37.69	attack	Unauthorized connection attempt detected from IP address 27.124.37.69 to port 445	2020-01-02 20:00:25
27.124.37.26	attackspam	[SMB remote code execution attempt: port tcp/445] *(RWIN=63443)(08041230)	2019-08-05 03:21:29

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 27.124.37.105
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38193
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;27.124.37.105.			IN	A

;; AUTHORITY SECTION:
.			420	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050801 1800 900 604800 86400

;; Query time: 99 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 09 03:14:57 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 105.37.124.27.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 105.37.124.27.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
185.53.88.182	attackbotsspam	Jun 7 21:42:41 debian kernel: [457919.593655] [UFW BLOCK] IN=eth0 OUT= MAC=52:54:00:be:e4:65:08:e8:4f:6e:48:0c:08:00 SRC=185.53.88.182 DST=89.252.131.35 LEN=440 TOS=0x00 PREC=0x00 TTL=51 ID=44025 DF PROTO=UDP SPT=5089 DPT=5060 LEN=420	2020-06-08 02:49:35
185.53.88.41	attackspam	[2020-06-07 14:53:12] NOTICE[1288][C-000015b8] chan_sip.c: Call from '' (185.53.88.41:61263) to extension '9810972597147567' rejected because extension not found in context 'public'. [2020-06-07 14:53:12] SECURITY[1303] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-06-07T14:53:12.342-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9810972597147567",SessionID="0x7f4d74373c98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.41/61263",ACLName="no_extension_match" [2020-06-07 14:53:34] NOTICE[1288][C-000015b9] chan_sip.c: Call from '' (185.53.88.41:51223) to extension '8810972597147567' rejected because extension not found in context 'public'. ...	2020-06-08 02:58:09
200.38.224.162	attackbotsspam	[H1.VM1] Blocked by UFW	2020-06-08 03:11:21
139.59.95.139	attackbots	Port Scan detected! ...	2020-06-08 02:40:41
111.251.10.9	attackspambots	scan z	2020-06-08 02:58:57
106.54.141.65	attackspambots	Jun 7 13:57:05 saturn sshd[564772]: Failed password for root from 106.54.141.65 port 48838 ssh2 Jun 7 14:03:23 saturn sshd[565018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.141.65 user=root Jun 7 14:03:25 saturn sshd[565018]: Failed password for root from 106.54.141.65 port 46028 ssh2 ...	2020-06-08 02:32:48
51.75.248.241	attack	Jun 7 20:08:58 home sshd[31253]: Failed password for root from 51.75.248.241 port 46130 ssh2 Jun 7 20:10:13 home sshd[31540]: Failed password for root from 51.75.248.241 port 36930 ssh2 ...	2020-06-08 02:33:01
103.113.90.26	attackspam	2020-06-07 07:03:03.053722-0500 localhost smtpd[52181]: NOQUEUE: reject: RCPT from unknown[103.113.90.26]: 450 4.7.25 Client host rejected: cannot find your hostname, [103.113.90.26]; from= to= proto=ESMTP helo=<00fd7eef.ojasg.xyz>	2020-06-08 02:41:33
116.108.168.230	attackbotsspam	Automatic report - Port Scan Attack	2020-06-08 02:57:11
165.227.126.190	attack	2020-06-07T20:11:49.603214struts4.enskede.local sshd\[23112\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.126.190 user=root 2020-06-07T20:11:51.937692struts4.enskede.local sshd\[23112\]: Failed password for root from 165.227.126.190 port 56048 ssh2 2020-06-07T20:16:17.760480struts4.enskede.local sshd\[23180\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.126.190 user=root 2020-06-07T20:16:20.780277struts4.enskede.local sshd\[23180\]: Failed password for root from 165.227.126.190 port 58190 ssh2 2020-06-07T20:20:32.487571struts4.enskede.local sshd\[23214\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.126.190 user=root ...	2020-06-08 02:33:18
211.38.132.36	attackspam	5x Failed Password	2020-06-08 03:10:45
206.189.132.8	attackbots	(sshd) Failed SSH login from 206.189.132.8 (IN/India/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 7 19:50:19 ubnt-55d23 sshd[7128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.132.8 user=root Jun 7 19:50:21 ubnt-55d23 sshd[7128]: Failed password for root from 206.189.132.8 port 35558 ssh2	2020-06-08 02:51:35
188.166.217.55	attackspambots	$f2bV_matches \| Triggered by Fail2Ban at Vostok web server	2020-06-08 02:56:55
142.44.139.12	attackbotsspam	Jun 7 20:38:38 [Censored Hostname] sshd[13436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.139.12 Jun 7 20:38:40 [Censored Hostname] sshd[13436]: Failed password for invalid user advance from 142.44.139.12 port 52840 ssh2[...]	2020-06-08 02:46:55
45.113.69.153	attack	45.113.69.153 (CA/Canada/-), 13 distributed sshd attacks on account [root] in the last 3600 secs	2020-06-08 02:36:50

最近上报的IP列表

247.196.189.99	121.237.143.13	121.89.210.241	116.108.3.125
115.225.95.233	115.224.89.232	115.55.79.5	115.44.253.219
113.237.251.90	113.141.70.240	113.103.57.113	113.88.4.31
113.87.44.22	112.233.82.175	110.153.69.177	110.6.192.196
109.127.132.251	103.68.156.186	101.200.180.119	95.181.2.222