Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Hong Kong

Internet Service Provider: Hong Kong Telecommunications (HKT) Limited

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackbots
Unauthorized connection attempt from IP address 42.200.148.126 on Port 445(SMB)
2020-04-01 02:17:28
Comments on same subnet:
IP Type Details Datetime
42.200.148.195 attackspam
Automatic report - Banned IP Access
2020-10-04 03:57:01
42.200.148.195 attack
 TCP (SYN) 42.200.148.195:10932 -> port 23, len 44
2020-10-03 19:58:58
42.200.148.195 attack
HK_MAINT-HK-PCCW-BIA-CS_<177>1589056271 [1:2403342:57153] ET CINS Active Threat Intelligence Poor Reputation IP TCP group 22 [Classification: Misc Attack] [Priority: 2]:  {TCP} 42.200.148.195:16016
2020-05-10 04:47:39
42.200.148.195 attackspam
Unauthorized connection attempt detected from IP address 42.200.148.195 to port 4567 [J]
2020-01-23 00:37:22
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.200.148.126
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60223
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.200.148.126.			IN	A

;; AUTHORITY SECTION:
.			448	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020033101 1800 900 604800 86400

;; Query time: 103 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Apr 01 02:17:24 CST 2020
;; MSG SIZE  rcvd: 118
Host info
126.148.200.42.in-addr.arpa domain name pointer 42-200-148-126.static.imsbiz.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
126.148.200.42.in-addr.arpa	name = 42-200-148-126.static.imsbiz.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
210.65.138.65 attackbotsspam
Nov 30 01:21:58 nextcloud sshd\[22767\]: Invalid user mitten from 210.65.138.65
Nov 30 01:21:58 nextcloud sshd\[22767\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.65.138.65
Nov 30 01:21:59 nextcloud sshd\[22767\]: Failed password for invalid user mitten from 210.65.138.65 port 54510 ssh2
...
2019-11-30 08:45:20
117.117.165.131 attackspam
Nov 30 01:20:26 MK-Soft-VM5 sshd[5155]: Failed password for root from 117.117.165.131 port 51795 ssh2
...
2019-11-30 08:31:38
115.178.24.72 attackspambots
Nov 29 20:19:10 ws24vmsma01 sshd[132503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.178.24.72
Nov 29 20:19:12 ws24vmsma01 sshd[132503]: Failed password for invalid user eyolf from 115.178.24.72 port 33018 ssh2
...
2019-11-30 08:40:21
218.92.0.181 attack
Nov 30 01:27:30 SilenceServices sshd[1925]: Failed password for root from 218.92.0.181 port 39503 ssh2
Nov 30 01:27:41 SilenceServices sshd[1925]: error: maximum authentication attempts exceeded for root from 218.92.0.181 port 39503 ssh2 [preauth]
Nov 30 01:27:47 SilenceServices sshd[2002]: Failed password for root from 218.92.0.181 port 12856 ssh2
2019-11-30 08:31:08
61.128.178.227 attack
Bruteforcing port 3389 (Remote Desktop) - Exceed maximum 10 attempts/hour
2019-11-30 08:52:39
116.85.5.88 attack
Nov 29 14:18:29 hanapaa sshd\[14429\]: Invalid user dovecot from 116.85.5.88
Nov 29 14:18:29 hanapaa sshd\[14429\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.85.5.88
Nov 29 14:18:32 hanapaa sshd\[14429\]: Failed password for invalid user dovecot from 116.85.5.88 port 42858 ssh2
Nov 29 14:22:10 hanapaa sshd\[14728\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.85.5.88  user=sshd
Nov 29 14:22:11 hanapaa sshd\[14728\]: Failed password for sshd from 116.85.5.88 port 48768 ssh2
2019-11-30 08:27:23
129.204.200.85 attack
Nov 29 21:24:43 firewall sshd[25798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.200.85
Nov 29 21:24:43 firewall sshd[25798]: Invalid user hokim from 129.204.200.85
Nov 29 21:24:45 firewall sshd[25798]: Failed password for invalid user hokim from 129.204.200.85 port 33618 ssh2
...
2019-11-30 08:33:27
112.85.42.227 attackspam
Nov 29 19:22:20 TORMINT sshd\[17448\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.227  user=root
Nov 29 19:22:22 TORMINT sshd\[17448\]: Failed password for root from 112.85.42.227 port 15145 ssh2
Nov 29 19:27:40 TORMINT sshd\[17810\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.227  user=root
...
2019-11-30 08:39:01
13.238.201.122 attackbotsspam
3389BruteforceFW23
2019-11-30 08:23:52
87.206.247.190 attack
[portscan] Port scan
2019-11-30 08:15:28
222.186.180.147 attack
Nov 29 20:01:52 server sshd\[29354\]: Failed password for root from 222.186.180.147 port 14088 ssh2
Nov 29 20:01:52 server sshd\[29356\]: Failed password for root from 222.186.180.147 port 20652 ssh2
Nov 30 03:33:26 server sshd\[18314\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.147  user=root
Nov 30 03:33:27 server sshd\[18314\]: Failed password for root from 222.186.180.147 port 52712 ssh2
Nov 30 03:33:30 server sshd\[18314\]: Failed password for root from 222.186.180.147 port 52712 ssh2
...
2019-11-30 08:37:13
211.93.4.82 attack
Nov 30 00:19:33 ns3042688 courier-imapd: LOGIN FAILED, method=PLAIN, ip=\[::ffff:211.93.4.82\]
...
2019-11-30 08:29:15
129.211.45.88 attackspambots
Nov 30 00:51:54 ns381471 sshd[31282]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.45.88
Nov 30 00:51:56 ns381471 sshd[31282]: Failed password for invalid user otis from 129.211.45.88 port 34104 ssh2
2019-11-30 08:47:17
170.106.36.56 attackspam
" "
2019-11-30 08:16:02
106.13.124.124 attackspambots
Nov 30 01:20:07 MK-Soft-VM4 sshd[32588]: Failed password for root from 106.13.124.124 port 48588 ssh2
Nov 30 01:26:37 MK-Soft-VM4 sshd[3682]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.124.124 
...
2019-11-30 08:27:49

Recently Reported IPs

122.117.189.103 116.109.215.219 101.51.227.14 51.77.193.44
111.248.161.148 1.2.130.55 36.75.142.180 27.5.227.70
116.97.183.174 206.189.195.33 149.34.37.46 1.78.16.81
94.253.42.137 41.76.172.25 218.58.250.67 64.227.4.253
83.239.167.62 86.154.145.50 46.201.30.134 139.45.193.29