42.200.148.126

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Hong Kong

运营商(isp): Hong Kong Telecommunications (HKT) Limited

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Unauthorized connection attempt from IP address 42.200.148.126 on Port 445(SMB)	2020-04-01 02:17:28

相同子网IP讨论:

IP	类型	评论内容	时间
42.200.148.195	attackspam	Automatic report - Banned IP Access	2020-10-04 03:57:01
42.200.148.195	attack	TCP (SYN) 42.200.148.195:10932 -> port 23, len 44	2020-10-03 19:58:58
42.200.148.195	attack	HK_MAINT-HK-PCCW-BIA-CS_<177>1589056271 [1:2403342:57153] ET CINS Active Threat Intelligence Poor Reputation IP TCP group 22 [Classification: Misc Attack] [Priority: 2]: {TCP} 42.200.148.195:16016	2020-05-10 04:47:39
42.200.148.195	attackspam	Unauthorized connection attempt detected from IP address 42.200.148.195 to port 4567 [J]	2020-01-23 00:37:22

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.200.148.126
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60223
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.200.148.126.			IN	A

;; AUTHORITY SECTION:
.			448	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020033101 1800 900 604800 86400

;; Query time: 103 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Apr 01 02:17:24 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

126.148.200.42.in-addr.arpa domain name pointer 42-200-148-126.static.imsbiz.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
126.148.200.42.in-addr.arpa	name = 42-200-148-126.static.imsbiz.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
92.63.194.7	attackbotsspam	Mar 17 22:07:14 *** sshd[29126]: Invalid user operator from 92.63.194.7	2020-03-18 06:17:38
200.56.60.157	attack	Brute Force	2020-03-18 06:48:54
122.51.57.31	attack	port scan and connect, tcp 1433 (ms-sql-s)	2020-03-18 06:27:08
92.63.194.32	attackbotsspam	$f2bV_matches \| Triggered by Fail2Ban at Vostok web server	2020-03-18 06:52:51
171.11.235.176	attack	port scan and connect, tcp 23 (telnet)	2020-03-18 06:58:46
139.199.23.233	attackspam	20 attempts against mh-ssh on echoip	2020-03-18 06:44:24
92.63.194.106	attackbotsspam	Mar 17 22:07:10 *** sshd[29120]: Invalid user user from 92.63.194.106	2020-03-18 06:25:38
86.253.33.116	attackspambots	firewall-block, port(s): 23/tcp	2020-03-18 06:29:30
178.171.91.84	attackbotsspam	Chat Spam	2020-03-18 06:24:34
139.155.118.190	attackspam	Mar 17 11:34:10 mockhub sshd[7944]: Failed password for root from 139.155.118.190 port 52958 ssh2 ...	2020-03-18 06:25:20
156.54.137.206	attackbots	[munged]::443 156.54.137.206 - - [17/Mar/2020:19:15:44 +0100] "POST /[munged]: HTTP/1.1" 200 6865 "-" "-" [munged]::443 156.54.137.206 - - [17/Mar/2020:19:16:00 +0100] "POST /[munged]: HTTP/1.1" 200 6807 "-" "-" [munged]::443 156.54.137.206 - - [17/Mar/2020:19:16:16 +0100] "POST /[munged]: HTTP/1.1" 200 6807 "-" "-" [munged]::443 156.54.137.206 - - [17/Mar/2020:19:16:32 +0100] "POST /[munged]: HTTP/1.1" 200 6807 "-" "-" [munged]::443 156.54.137.206 - - [17/Mar/2020:19:16:47 +0100] "POST /[munged]: HTTP/1.1" 200 6807 "-" "-" [munged]::443 156.54.137.206 - - [17/Mar/2020:19:17:03 +0100] "POST /[munged]: HTTP/1.1" 200 6807 "-" "-" [munged]::443 156.54.137.206 - - [17/Mar/2020:19:17:19 +0100] "POST /[munged]: HTTP/1.1" 200 6807 "-" "-" [munged]::443 156.54.137.206 - - [17/Mar/2020:19:17:35 +0100] "POST /[munged]: HTTP/1.1" 200 6807 "-" "-" [munged]::443 156.54.137.206 - - [17/Mar/2020:19:17:51 +0100] "POST /[munged]: HTTP/1.1" 200 6807 "-" "-" [munged]::443 156.54.137.206 - - [17/Mar/2020:19:18:07 +0100] "POST /[	2020-03-18 07:00:57
92.63.194.107	attackbots	Mar 17 22:07:11 *** sshd[29122]: Invalid user admin from 92.63.194.107	2020-03-18 06:20:58
89.64.87.139	attackspambots	1584469104 - 03/17/2020 19:18:24 Host: 89.64.87.139/89.64.87.139 Port: 445 TCP Blocked	2020-03-18 06:35:07
111.229.85.222	attackspam	Mar 17 19:36:11 ws24vmsma01 sshd[102878]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.85.222 Mar 17 19:36:12 ws24vmsma01 sshd[102878]: Failed password for invalid user ec2-user from 111.229.85.222 port 52272 ssh2 ...	2020-03-18 06:51:13
91.212.38.194	attack	[2020-03-17 15:05:29] NOTICE[1148][C-00012ce9] chan_sip.c: Call from '' (91.212.38.194:5071) to extension '01246843737838' rejected because extension not found in context 'public'. [2020-03-17 15:05:29] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-03-17T15:05:29.677-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="01246843737838",SessionID="0x7fd82ca9d388",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/91.212.38.194/5071",ACLName="no_extension_match" [2020-03-17 15:11:33] NOTICE[1148][C-00012cee] chan_sip.c: Call from '' (91.212.38.194:5080) to extension '0046843737838' rejected because extension not found in context 'public'. [2020-03-17 15:11:33] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-03-17T15:11:33.884-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="0046843737838",SessionID="0x7fd82ca712e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/91.212.38 ...	2020-03-18 06:51:31

最近上报的IP列表

122.117.189.103	116.109.215.219	101.51.227.14	51.77.193.44
111.248.161.148	1.2.130.55	36.75.142.180	27.5.227.70
116.97.183.174	206.189.195.33	149.34.37.46	1.78.16.81
94.253.42.137	41.76.172.25	218.58.250.67	64.227.4.253
83.239.167.62	86.154.145.50	46.201.30.134	139.45.193.29