104.42.126.249

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): Microsoft Corporation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	[2020-06-22 10:08:16] NOTICE[1273] chan_sip.c: Registration from '' failed for '104.42.126.249:62692' - Wrong password [2020-06-22 10:08:16] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-22T10:08:16.777-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="qwerty1234",SessionID="0x7f31c02ff098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.42.126.249/62692",Challenge="1da7a42e",ReceivedChallenge="1da7a42e",ReceivedHash="d411429833e27710a85d651fc7024e56" [2020-06-22 10:10:23] NOTICE[1273] chan_sip.c: Registration from '' failed for '104.42.126.249:65365' - Wrong password [2020-06-22 10:10:23] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-22T10:10:23.362-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="qwerty12345",SessionID="0x7f31c04ccc48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAd ...	2020-06-22 22:21:15
attackspam	[2020-06-21 07:27:35] NOTICE[1273] chan_sip.c: Registration from '' failed for '104.42.126.249:52773' - Wrong password [2020-06-21 07:27:35] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-21T07:27:35.296-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1001",SessionID="0x7f31c02f97a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.42.126.249/52773",Challenge="4287faf8",ReceivedChallenge="4287faf8",ReceivedHash="bee9ea31ad79495dc21591c3fb468bc5" [2020-06-21 07:29:21] NOTICE[1273] chan_sip.c: Registration from '' failed for '104.42.126.249:58206' - Wrong password [2020-06-21 07:29:21] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-21T07:29:21.457-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1001",SessionID="0x7f31c0045328",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.42.126 ...	2020-06-21 19:29:26

类型

评论内容

时间

attackspam

[2020-06-22 10:08:16] NOTICE[1273] chan_sip.c: Registration from '' failed for '104.42.126.249:62692' - Wrong password
[2020-06-22 10:08:16] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-22T10:08:16.777-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="qwerty1234",SessionID="0x7f31c02ff098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.42.126.249/62692",Challenge="1da7a42e",ReceivedChallenge="1da7a42e",ReceivedHash="d411429833e27710a85d651fc7024e56"
[2020-06-22 10:10:23] NOTICE[1273] chan_sip.c: Registration from '' failed for '104.42.126.249:65365' - Wrong password
[2020-06-22 10:10:23] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-22T10:10:23.362-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="qwerty12345",SessionID="0x7f31c04ccc48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAd
...

2020-06-22 22:21:15

attackspam

[2020-06-21 07:27:35] NOTICE[1273] chan_sip.c: Registration from '' failed for '104.42.126.249:52773' - Wrong password
[2020-06-21 07:27:35] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-21T07:27:35.296-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1001",SessionID="0x7f31c02f97a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.42.126.249/52773",Challenge="4287faf8",ReceivedChallenge="4287faf8",ReceivedHash="bee9ea31ad79495dc21591c3fb468bc5"
[2020-06-21 07:29:21] NOTICE[1273] chan_sip.c: Registration from '' failed for '104.42.126.249:58206' - Wrong password
[2020-06-21 07:29:21] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-21T07:29:21.457-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1001",SessionID="0x7f31c0045328",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.42.126
...

2020-06-21 19:29:26

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.42.126.249
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27936
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.42.126.249.			IN	A

;; AUTHORITY SECTION:
.			511	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020062100 1800 900 604800 86400

;; Query time: 107 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 21 19:29:23 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

Host 249.126.42.104.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 249.126.42.104.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
190.171.134.164	attack	Repeated RDP login failures. Last user: Administrador	2020-04-02 12:47:20
1.63.153.11	attackbotsspam	04/01/2020-23:59:10.215847 1.63.153.11 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	2020-04-02 12:21:50
61.177.172.128	attackbotsspam	Apr 2 04:35:01 vlre-nyc-1 sshd\[31783\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.128 user=root Apr 2 04:35:03 vlre-nyc-1 sshd\[31783\]: Failed password for root from 61.177.172.128 port 49416 ssh2 Apr 2 04:35:05 vlre-nyc-1 sshd\[31783\]: Failed password for root from 61.177.172.128 port 49416 ssh2 Apr 2 04:35:08 vlre-nyc-1 sshd\[31783\]: Failed password for root from 61.177.172.128 port 49416 ssh2 Apr 2 04:35:11 vlre-nyc-1 sshd\[31783\]: Failed password for root from 61.177.172.128 port 49416 ssh2 ...	2020-04-02 12:40:23
180.76.183.59	attack	$f2bV_matches	2020-04-02 12:06:06
212.64.92.108	attackbots	Repeated RDP login failures. Last user: Auditor	2020-04-02 12:44:55
182.75.139.26	attack	$f2bV_matches	2020-04-02 12:21:11
177.126.207.248	attackbots	Repeated RDP login failures. Last user: Administrator	2020-04-02 12:32:35
212.237.33.112	attackbotsspam	Apr 2 00:54:16 vps46666688 sshd[22882]: Failed password for root from 212.237.33.112 port 38008 ssh2 Apr 2 00:59:13 vps46666688 sshd[22914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.33.112 ...	2020-04-02 12:19:32
140.143.67.215	attack	Repeated RDP login failures. Last user: User2	2020-04-02 12:33:52
94.191.90.85	attackspambots	Apr 2 06:51:43 lukav-desktop sshd\[26975\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.90.85 user=root Apr 2 06:51:45 lukav-desktop sshd\[26975\]: Failed password for root from 94.191.90.85 port 50132 ssh2 Apr 2 06:59:14 lukav-desktop sshd\[27294\]: Invalid user dk from 94.191.90.85 Apr 2 06:59:14 lukav-desktop sshd\[27294\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.90.85 Apr 2 06:59:15 lukav-desktop sshd\[27294\]: Failed password for invalid user dk from 94.191.90.85 port 51746 ssh2	2020-04-02 12:15:37
159.65.91.105	attackbots	Apr 2 06:10:37 srv-ubuntu-dev3 sshd[102749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.91.105 user=root Apr 2 06:10:39 srv-ubuntu-dev3 sshd[102749]: Failed password for root from 159.65.91.105 port 41062 ssh2 Apr 2 06:14:27 srv-ubuntu-dev3 sshd[103417]: Invalid user test from 159.65.91.105 Apr 2 06:14:27 srv-ubuntu-dev3 sshd[103417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.91.105 Apr 2 06:14:27 srv-ubuntu-dev3 sshd[103417]: Invalid user test from 159.65.91.105 Apr 2 06:14:29 srv-ubuntu-dev3 sshd[103417]: Failed password for invalid user test from 159.65.91.105 port 52016 ssh2 Apr 2 06:18:19 srv-ubuntu-dev3 sshd[104174]: Invalid user zxchen from 159.65.91.105 Apr 2 06:18:19 srv-ubuntu-dev3 sshd[104174]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.91.105 Apr 2 06:18:19 srv-ubuntu-dev3 sshd[104174]: Invalid user zxchen fro ...	2020-04-02 12:20:16
3.9.13.43	attackbots	Repeated RDP login failures. Last user: Johnh	2020-04-02 12:43:20
222.186.31.83	attackbots	Apr 2 07:02:28 ift sshd\[31078\]: Failed password for root from 222.186.31.83 port 28208 ssh2Apr 2 07:02:30 ift sshd\[31078\]: Failed password for root from 222.186.31.83 port 28208 ssh2Apr 2 07:02:32 ift sshd\[31078\]: Failed password for root from 222.186.31.83 port 28208 ssh2Apr 2 07:08:06 ift sshd\[31944\]: Failed password for root from 222.186.31.83 port 30034 ssh2Apr 2 07:08:08 ift sshd\[31944\]: Failed password for root from 222.186.31.83 port 30034 ssh2 ...	2020-04-02 12:11:32
222.186.175.23	attackspam	Apr 2 06:18:20 santamaria sshd\[14926\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.23 user=root Apr 2 06:18:22 santamaria sshd\[14926\]: Failed password for root from 222.186.175.23 port 63284 ssh2 Apr 2 06:18:24 santamaria sshd\[14926\]: Failed password for root from 222.186.175.23 port 63284 ssh2 ...	2020-04-02 12:20:01
177.94.241.14	attackspam	Repeated RDP login failures. Last user: Dell	2020-04-02 12:48:47

最近上报的IP列表

103.230.217.163	178.157.15.104	139.130.13.204	47.57.105.129
253.188.33.63	18.144.145.204	197.85.154.229	91.205.69.150
150.0.123.1	244.13.182.154	40.91.170.253	209.49.48.0
228.241.210.178	206.15.148.67	150.191.227.117	234.9.112.146
45.59.126.232	7.126.227.134	140.143.106.104	10.152.110.187