27.206.222.140

Basic Info

City: Heze

Region: Shandong

Country: China

Internet Service Provider: China Unicom Shandong Province Network

Hostname: unknown

Organization: CHINA UNICOM China169 Backbone

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	port scan and connect, tcp 23 (telnet)	2019-07-29 00:51:47

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 27.206.222.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55639
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;27.206.222.140.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072800 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jul 29 00:51:40 CST 2019
;; MSG SIZE  rcvd: 118

Host info

Host 140.222.206.27.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 140.222.206.27.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
222.165.148.98	attackbots	TCP (SYN) 222.165.148.98:57006 -> port 445, len 52	2020-09-08 03:53:04
132.255.148.209	attackspam	Unauthorized connection attempt from IP address 132.255.148.209 on Port 445(SMB)	2020-09-08 03:46:28
212.34.243.234	attackbotsspam	Unauthorized connection attempt from IP address 212.34.243.234 on Port 445(SMB)	2020-09-08 03:40:10
94.31.85.173	attackspambots	Sep 6 19:08:29 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=94.31.85.173, lip=5.9.254.190, session=\ Sep 6 19:08:31 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=94.31.85.173, lip=5.9.254.190, session=\ Sep 6 19:08:55 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 181 secs\): user=\, method=PLAIN, rip=94.31.85.173, lip=5.9.254.190, session=\ Sep 6 19:14:03 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=94.31.85.173, lip=5.9.254.190, session=\ Sep 6 19:14:05 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\< ...	2020-09-08 03:38:31
180.242.234.6	attack	Unauthorized connection attempt from IP address 180.242.234.6 on Port 445(SMB)	2020-09-08 04:03:57
213.6.65.130	attackspam	Attempted connection to port 445.	2020-09-08 04:08:27
179.210.121.225	attack	Sep 7 12:24:22 *** sshd[25056]: User root from 179.210.121.225 not allowed because not listed in AllowUsers	2020-09-08 03:54:32
154.220.96.130	attackspambots	Automatic report - Banned IP Access	2020-09-08 04:03:09
71.6.199.23	attackbots	TCP (SYN) 71.6.199.23:29011 -> port 5000, len 44	2020-09-08 03:48:13
1.39.31.17	attack	Unauthorised login to NAS	2020-09-08 03:51:38
1.54.7.223	attackspam	Unauthorized connection attempt from IP address 1.54.7.223 on Port 445(SMB)	2020-09-08 03:56:09
93.174.93.195	attack	93.174.93.195 was recorded 5 times by 4 hosts attempting to connect to the following ports: 41032,41033. Incident counter (4h, 24h, all-time): 5, 33, 13785	2020-09-08 04:01:43
193.57.40.74	attack	Unauthorised access (Sep 7) SRC=193.57.40.74 LEN=40 PREC=0x20 TTL=248 ID=2605 TCP DPT=445 WINDOW=1024 SYN Unauthorised access (Sep 7) SRC=193.57.40.74 LEN=40 PREC=0x20 TTL=248 ID=46122 TCP DPT=445 WINDOW=1024 SYN Unauthorised access (Sep 7) SRC=193.57.40.74 LEN=40 PREC=0x20 TTL=248 ID=21429 TCP DPT=445 WINDOW=1024 SYN Unauthorised access (Sep 7) SRC=193.57.40.74 LEN=40 PREC=0x20 TTL=248 ID=24666 TCP DPT=445 WINDOW=1024 SYN	2020-09-08 03:44:23
212.35.187.132	attackspambots	Unauthorized connection attempt from IP address 212.35.187.132 on Port 445(SMB)	2020-09-08 03:58:51
123.206.23.158	attack	Sep 7 20:57:30 h2829583 sshd[19351]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.23.158	2020-09-08 03:36:11

Recently Reported IPs

174.85.69.46	178.232.105.26	228.165.226.211	68.183.67.118
126.56.178.240	128.78.146.219	210.77.112.189	218.142.207.246
225.67.92.58	90.71.3.161	114.236.79.42	207.0.233.45
49.69.175.172	77.92.32.184	84.157.202.53	95.210.208.119
184.186.51.26	190.255.122.91	120.69.27.243	173.240.24.72