必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Hong Kong

运营商(isp): Hong Kong Telecommunications (HKT) Limited

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attackbots
Unauthorized connection attempt from IP address 42.200.148.126 on Port 445(SMB)
2020-04-01 02:17:28
相同子网IP讨论:
IP 类型 评论内容 时间
42.200.148.195 attackspam
Automatic report - Banned IP Access
2020-10-04 03:57:01
42.200.148.195 attack
 TCP (SYN) 42.200.148.195:10932 -> port 23, len 44
2020-10-03 19:58:58
42.200.148.195 attack
HK_MAINT-HK-PCCW-BIA-CS_<177>1589056271 [1:2403342:57153] ET CINS Active Threat Intelligence Poor Reputation IP TCP group 22 [Classification: Misc Attack] [Priority: 2]:  {TCP} 42.200.148.195:16016
2020-05-10 04:47:39
42.200.148.195 attackspam
Unauthorized connection attempt detected from IP address 42.200.148.195 to port 4567 [J]
2020-01-23 00:37:22
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.200.148.126
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60223
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.200.148.126.			IN	A

;; AUTHORITY SECTION:
.			448	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020033101 1800 900 604800 86400

;; Query time: 103 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Apr 01 02:17:24 CST 2020
;; MSG SIZE  rcvd: 118
HOST信息:
126.148.200.42.in-addr.arpa domain name pointer 42-200-148-126.static.imsbiz.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
126.148.200.42.in-addr.arpa	name = 42-200-148-126.static.imsbiz.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
92.118.160.49 attackbotsspam
Unauthorized connection attempt detected from IP address 92.118.160.49 to port 6379
2020-03-27 04:28:49
51.178.55.87 attackspambots
Mar 26 20:46:47 ns382633 sshd\[5898\]: Invalid user rq from 51.178.55.87 port 38562
Mar 26 20:46:47 ns382633 sshd\[5898\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.55.87
Mar 26 20:46:49 ns382633 sshd\[5898\]: Failed password for invalid user rq from 51.178.55.87 port 38562 ssh2
Mar 26 20:54:01 ns382633 sshd\[7121\]: Invalid user ph from 51.178.55.87 port 49640
Mar 26 20:54:01 ns382633 sshd\[7121\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.55.87
2020-03-27 03:58:49
203.223.189.155 attackbots
SSH Bruteforce attack
2020-03-27 03:57:58
220.149.231.165 attack
Mar 26 18:14:50 *** sshd[30918]: User root from 220.149.231.165 not allowed because not listed in AllowUsers
2020-03-27 03:53:12
188.131.212.175 attackbotsspam
firewall-block, port(s): 8545/tcp
2020-03-27 04:27:56
92.118.160.57 attackbotsspam
Automatic report - Banned IP Access
2020-03-27 04:15:12
23.250.7.86 attackspambots
Invalid user cacti from 23.250.7.86 port 39280
2020-03-27 04:13:42
197.214.16.147 attack
seems to be a brute force pw attacker
2020-03-27 04:19:45
210.1.19.131 attack
Mar 26 17:38:26 ns392434 sshd[372]: Invalid user shiqian from 210.1.19.131 port 47758
Mar 26 17:38:26 ns392434 sshd[372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.1.19.131
Mar 26 17:38:26 ns392434 sshd[372]: Invalid user shiqian from 210.1.19.131 port 47758
Mar 26 17:38:28 ns392434 sshd[372]: Failed password for invalid user shiqian from 210.1.19.131 port 47758 ssh2
Mar 26 17:46:52 ns392434 sshd[673]: Invalid user inter from 210.1.19.131 port 55814
Mar 26 17:46:52 ns392434 sshd[673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.1.19.131
Mar 26 17:46:52 ns392434 sshd[673]: Invalid user inter from 210.1.19.131 port 55814
Mar 26 17:46:53 ns392434 sshd[673]: Failed password for invalid user inter from 210.1.19.131 port 55814 ssh2
Mar 26 17:51:28 ns392434 sshd[702]: Invalid user couchdb from 210.1.19.131 port 34992
2020-03-27 04:08:15
92.118.161.21 attackbots
Fail2Ban Ban Triggered
2020-03-27 03:54:46
111.229.48.106 attackbotsspam
Mar 26 17:20:58 gw1 sshd[25714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.48.106
Mar 26 17:21:00 gw1 sshd[25714]: Failed password for invalid user sshuser from 111.229.48.106 port 47988 ssh2
...
2020-03-27 03:56:04
192.169.190.108 attackspam
Invalid user miniadmin from 192.169.190.108 port 38342
2020-03-27 04:10:14
76.98.155.215 attackspam
Mar 26 21:06:13 vps sshd[673447]: Failed password for invalid user enterprise from 76.98.155.215 port 52516 ssh2
Mar 26 21:09:54 vps sshd[694644]: Invalid user satin from 76.98.155.215 port 36912
Mar 26 21:09:54 vps sshd[694644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-76-98-155-215.hsd1.de.comcast.net
Mar 26 21:09:57 vps sshd[694644]: Failed password for invalid user satin from 76.98.155.215 port 36912 ssh2
Mar 26 21:13:29 vps sshd[718903]: Invalid user qf from 76.98.155.215 port 49496
...
2020-03-27 04:16:21
156.211.87.155 attack
Mar 26 13:18:28 nxxxxxxx sshd[29368]: Invalid user admin from 156.211.87.155
Mar 26 13:18:30 nxxxxxxx sshd[29368]: Failed password for invalid user admin from 156.211.87.155 port 54184 ssh2
Mar 26 13:18:32 nxxxxxxx sshd[29378]: Invalid user admin from 156.211.87.155


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=156.211.87.155
2020-03-27 04:15:35
106.124.143.24 attackbotsspam
Invalid user amexbta from 106.124.143.24 port 59935
2020-03-27 04:28:22

最近上报的IP列表

122.117.189.103 116.109.215.219 101.51.227.14 51.77.193.44
111.248.161.148 1.2.130.55 36.75.142.180 27.5.227.70
116.97.183.174 206.189.195.33 149.34.37.46 1.78.16.81
94.253.42.137 41.76.172.25 218.58.250.67 64.227.4.253
83.239.167.62 86.154.145.50 46.201.30.134 139.45.193.29