104.42.126.249

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): Microsoft Corporation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	[2020-06-22 10:08:16] NOTICE[1273] chan_sip.c: Registration from '' failed for '104.42.126.249:62692' - Wrong password [2020-06-22 10:08:16] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-22T10:08:16.777-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="qwerty1234",SessionID="0x7f31c02ff098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.42.126.249/62692",Challenge="1da7a42e",ReceivedChallenge="1da7a42e",ReceivedHash="d411429833e27710a85d651fc7024e56" [2020-06-22 10:10:23] NOTICE[1273] chan_sip.c: Registration from '' failed for '104.42.126.249:65365' - Wrong password [2020-06-22 10:10:23] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-22T10:10:23.362-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="qwerty12345",SessionID="0x7f31c04ccc48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAd ...	2020-06-22 22:21:15
attackspam	[2020-06-21 07:27:35] NOTICE[1273] chan_sip.c: Registration from '' failed for '104.42.126.249:52773' - Wrong password [2020-06-21 07:27:35] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-21T07:27:35.296-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1001",SessionID="0x7f31c02f97a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.42.126.249/52773",Challenge="4287faf8",ReceivedChallenge="4287faf8",ReceivedHash="bee9ea31ad79495dc21591c3fb468bc5" [2020-06-21 07:29:21] NOTICE[1273] chan_sip.c: Registration from '' failed for '104.42.126.249:58206' - Wrong password [2020-06-21 07:29:21] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-21T07:29:21.457-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1001",SessionID="0x7f31c0045328",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.42.126 ...	2020-06-21 19:29:26

类型

评论内容

时间

attackspam

[2020-06-22 10:08:16] NOTICE[1273] chan_sip.c: Registration from '' failed for '104.42.126.249:62692' - Wrong password
[2020-06-22 10:08:16] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-22T10:08:16.777-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="qwerty1234",SessionID="0x7f31c02ff098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.42.126.249/62692",Challenge="1da7a42e",ReceivedChallenge="1da7a42e",ReceivedHash="d411429833e27710a85d651fc7024e56"
[2020-06-22 10:10:23] NOTICE[1273] chan_sip.c: Registration from '' failed for '104.42.126.249:65365' - Wrong password
[2020-06-22 10:10:23] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-22T10:10:23.362-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="qwerty12345",SessionID="0x7f31c04ccc48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAd
...

2020-06-22 22:21:15

attackspam

[2020-06-21 07:27:35] NOTICE[1273] chan_sip.c: Registration from '' failed for '104.42.126.249:52773' - Wrong password
[2020-06-21 07:27:35] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-21T07:27:35.296-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1001",SessionID="0x7f31c02f97a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.42.126.249/52773",Challenge="4287faf8",ReceivedChallenge="4287faf8",ReceivedHash="bee9ea31ad79495dc21591c3fb468bc5"
[2020-06-21 07:29:21] NOTICE[1273] chan_sip.c: Registration from '' failed for '104.42.126.249:58206' - Wrong password
[2020-06-21 07:29:21] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-21T07:29:21.457-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1001",SessionID="0x7f31c0045328",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.42.126
...

2020-06-21 19:29:26

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.42.126.249
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27936
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.42.126.249.			IN	A

;; AUTHORITY SECTION:
.			511	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020062100 1800 900 604800 86400

;; Query time: 107 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 21 19:29:23 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

Host 249.126.42.104.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 249.126.42.104.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
79.5.134.14	attackspambots	Honeypot attack, port: 81, PTR: host14-134-static.5-79-b.business.telecomitalia.it.	2020-01-31 07:49:59
173.254.223.52	attackbotsspam	Unauthorized connection attempt detected from IP address 173.254.223.52 to port 1433 [J]	2020-01-31 07:53:32
203.229.206.22	attackbotsspam	Invalid user anjana from 203.229.206.22 port 56346	2020-01-31 08:10:20
106.54.0.78	attackbotsspam	Automatic report - SSH Brute-Force Attack	2020-01-31 08:11:50
165.22.48.169	attackbotsspam	Jan 31 00:16:55 debian-2gb-nbg1-2 kernel: \[2685476.223889\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=165.22.48.169 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x40 TTL=242 ID=46129 PROTO=TCP SPT=46212 DPT=2377 WINDOW=1024 RES=0x00 SYN URGP=0	2020-01-31 08:14:08
165.22.220.202	attackbots	RDP Brute-Force (Grieskirchen RZ2)	2020-01-31 07:49:16
185.176.27.30	attackbotsspam	01/31/2020-00:14:41.067601 185.176.27.30 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2020-01-31 07:47:16
212.164.233.151	attackbotsspam	Honeypot attack, port: 445, PTR: b-internet.212.164.233.151.nsk.rt.ru.	2020-01-31 08:03:04
137.74.158.143	attackbots	Automatic report - Banned IP Access	2020-01-31 08:07:50
216.143.135.241	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-31 07:42:18
179.111.212.130	attack	Unauthorized connection attempt detected from IP address 179.111.212.130 to port 23 [J]	2020-01-31 07:44:25
182.253.226.212	attackbotsspam	Jan 30 20:33:22 firewall sshd[15259]: Invalid user taarini from 182.253.226.212 Jan 30 20:33:24 firewall sshd[15259]: Failed password for invalid user taarini from 182.253.226.212 port 54755 ssh2 Jan 30 20:36:59 firewall sshd[15398]: Invalid user apoorva from 182.253.226.212 ...	2020-01-31 08:04:02
59.127.224.186	attackbots	Honeypot attack, port: 4567, PTR: 59-127-224-186.HINET-IP.hinet.net.	2020-01-31 08:02:23
120.131.3.119	attackspambots	2020-1-31 12:09:07 AM: failed ssh attempt	2020-01-31 08:06:33
64.225.29.240	attackbotsspam	Unauthorized connection attempt detected, IP banned.	2020-01-31 08:07:07

最近上报的IP列表

103.230.217.163	178.157.15.104	139.130.13.204	47.57.105.129
253.188.33.63	18.144.145.204	197.85.154.229	91.205.69.150
150.0.123.1	244.13.182.154	40.91.170.253	209.49.48.0
228.241.210.178	206.15.148.67	150.191.227.117	234.9.112.146
45.59.126.232	7.126.227.134	140.143.106.104	10.152.110.187