Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Hong Kong

Internet Service Provider: PCCW IMS Ltd

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackspam
Automatic report - Banned IP Access
2020-10-04 03:57:01
attack
 TCP (SYN) 42.200.148.195:10932 -> port 23, len 44
2020-10-03 19:58:58
attack
HK_MAINT-HK-PCCW-BIA-CS_<177>1589056271 [1:2403342:57153] ET CINS Active Threat Intelligence Poor Reputation IP TCP group 22 [Classification: Misc Attack] [Priority: 2]:  {TCP} 42.200.148.195:16016
2020-05-10 04:47:39
attackspam
Unauthorized connection attempt detected from IP address 42.200.148.195 to port 4567 [J]
2020-01-23 00:37:22
Comments on same subnet:
IP Type Details Datetime
42.200.148.126 attackbots
Unauthorized connection attempt from IP address 42.200.148.126 on Port 445(SMB)
2020-04-01 02:17:28
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.200.148.195
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62381
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.200.148.195.			IN	A

;; AUTHORITY SECTION:
.			134	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012200 1800 900 604800 86400

;; Query time: 69 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 23 00:37:17 CST 2020
;; MSG SIZE  rcvd: 118
Host info
195.148.200.42.in-addr.arpa domain name pointer 42-200-148-195.static.imsbiz.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
195.148.200.42.in-addr.arpa	name = 42-200-148-195.static.imsbiz.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
188.122.82.146 attack
WEB SPAM: вкладывать деньги 
 
покупка акция лукойл физическому
2020-10-01 13:25:51
202.159.24.35 attackspam
Invalid user cb from 202.159.24.35 port 53419
2020-10-01 13:49:50
128.199.99.204 attackspam
Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)
2020-10-01 13:47:13
14.186.251.19 attackspam
20/9/30@16:40:49: FAIL: Alarm-Network address from=14.186.251.19
...
2020-10-01 13:41:04
134.73.154.173 attackspambots
Sep 30 22:40:27 inter-technics sshd[15088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.154.173  user=root
Sep 30 22:40:29 inter-technics sshd[15088]: Failed password for root from 134.73.154.173 port 59920 ssh2
Sep 30 22:40:31 inter-technics sshd[15088]: Failed password for root from 134.73.154.173 port 59920 ssh2
Sep 30 22:40:27 inter-technics sshd[15088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.154.173  user=root
Sep 30 22:40:29 inter-technics sshd[15088]: Failed password for root from 134.73.154.173 port 59920 ssh2
Sep 30 22:40:31 inter-technics sshd[15088]: Failed password for root from 134.73.154.173 port 59920 ssh2
Sep 30 22:40:27 inter-technics sshd[15088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.154.173  user=root
Sep 30 22:40:29 inter-technics sshd[15088]: Failed password for root from 134.73.154.173 port 59920 ssh2
S
...
2020-10-01 13:53:15
173.245.54.170 attack
Ordered merchandise from this up a dress & never received my order. This is supposed to be a company in China. I got ripped off for $74.85.
2020-10-01 13:35:18
87.116.167.49 attackbots
Sep 30 22:40:39 groves sshd[24371]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.116.167.49 
Sep 30 22:40:39 groves sshd[24371]: Invalid user system from 87.116.167.49 port 22222
Sep 30 22:40:40 groves sshd[24371]: Failed password for invalid user system from 87.116.167.49 port 22222 ssh2
...
2020-10-01 13:49:23
45.148.10.65 attackspambots
$f2bV_matches
2020-10-01 13:14:01
167.71.196.176 attackbots
2020-10-01T04:02:48.804798abusebot-6.cloudsearch.cf sshd[5568]: Invalid user allan from 167.71.196.176 port 56016
2020-10-01T04:02:48.811306abusebot-6.cloudsearch.cf sshd[5568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.196.176
2020-10-01T04:02:48.804798abusebot-6.cloudsearch.cf sshd[5568]: Invalid user allan from 167.71.196.176 port 56016
2020-10-01T04:02:51.017587abusebot-6.cloudsearch.cf sshd[5568]: Failed password for invalid user allan from 167.71.196.176 port 56016 ssh2
2020-10-01T04:06:45.059404abusebot-6.cloudsearch.cf sshd[5578]: Invalid user adrian from 167.71.196.176 port 34844
2020-10-01T04:06:45.065215abusebot-6.cloudsearch.cf sshd[5578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.196.176
2020-10-01T04:06:45.059404abusebot-6.cloudsearch.cf sshd[5578]: Invalid user adrian from 167.71.196.176 port 34844
2020-10-01T04:06:47.476817abusebot-6.cloudsearch.cf sshd[5578]: Faile
...
2020-10-01 13:32:00
94.191.23.15 attackbotsspam
Connection to SSH Honeypot - Detected by HoneypotDB
2020-10-01 13:50:15
141.98.9.32 attack
Sep 30 18:59:54 wbs sshd\[32663\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.32  user=root
Sep 30 18:59:56 wbs sshd\[32663\]: Failed password for root from 141.98.9.32 port 36429 ssh2
Sep 30 19:00:19 wbs sshd\[32718\]: Invalid user guest from 141.98.9.32
Sep 30 19:00:19 wbs sshd\[32718\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.32
Sep 30 19:00:21 wbs sshd\[32718\]: Failed password for invalid user guest from 141.98.9.32 port 41525 ssh2
2020-10-01 13:19:07
51.178.87.50 attackbots
Oct  1 05:02:46 ns382633 sshd\[7728\]: Invalid user appluat from 51.178.87.50 port 37116
Oct  1 05:02:46 ns382633 sshd\[7728\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.87.50
Oct  1 05:02:48 ns382633 sshd\[7728\]: Failed password for invalid user appluat from 51.178.87.50 port 37116 ssh2
Oct  1 05:19:46 ns382633 sshd\[11201\]: Invalid user ela from 51.178.87.50 port 39394
Oct  1 05:19:46 ns382633 sshd\[11201\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.87.50
2020-10-01 13:46:34
96.57.82.166 attack
Banned for a week because repeated abuses, for example SSH, but not only
2020-10-01 13:31:29
111.229.45.26 attack
20 attempts against mh-ssh on star
2020-10-01 13:52:37
49.233.47.104 attackspambots
Total attacks: 2
2020-10-01 13:55:28

Recently Reported IPs

181.81.69.63 178.128.92.253 177.52.212.223 175.158.50.225
175.4.255.107 168.232.130.158 167.114.251.122 159.203.98.176
149.126.19.138 149.90.32.127 124.121.43.218 121.181.223.86
120.157.107.203 112.72.79.210 106.118.200.245 106.13.178.103
89.98.199.223 88.250.110.122 86.111.119.229 81.180.69.29