必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Weiyi Network Technology Co. Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackbotsspam
Nov 29 21:17:31 php1 sshd\[29750\]: Invalid user guhl from 42.157.129.158
Nov 29 21:17:31 php1 sshd\[29750\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
Nov 29 21:17:33 php1 sshd\[29750\]: Failed password for invalid user guhl from 42.157.129.158 port 52992 ssh2
Nov 29 21:22:01 php1 sshd\[30202\]: Invalid user yoyo from 42.157.129.158
Nov 29 21:22:01 php1 sshd\[30202\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
2019-11-30 15:39:22
attackbotsspam
5x Failed Password
2019-11-27 09:29:52
attackspam
2019-11-24T22:55:46.982759abusebot-8.cloudsearch.cf sshd\[24162\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158  user=root
2019-11-25 09:06:07
attack
Nov 23 20:21:05 auw2 sshd\[7055\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158  user=root
Nov 23 20:21:07 auw2 sshd\[7055\]: Failed password for root from 42.157.129.158 port 34970 ssh2
Nov 23 20:29:46 auw2 sshd\[7738\]: Invalid user praefect from 42.157.129.158
Nov 23 20:29:46 auw2 sshd\[7738\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
Nov 23 20:29:48 auw2 sshd\[7738\]: Failed password for invalid user praefect from 42.157.129.158 port 41002 ssh2
2019-11-24 14:50:54
attackbots
Nov 15 18:50:43 web1 sshd\[15631\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158  user=bin
Nov 15 18:50:44 web1 sshd\[15631\]: Failed password for bin from 42.157.129.158 port 45574 ssh2
Nov 15 18:56:25 web1 sshd\[16099\]: Invalid user students from 42.157.129.158
Nov 15 18:56:25 web1 sshd\[16099\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
Nov 15 18:56:26 web1 sshd\[16099\]: Failed password for invalid user students from 42.157.129.158 port 54118 ssh2
2019-11-16 13:09:11
attack
Nov 13 01:28:32 srv2 sshd\[4663\]: Invalid user triplex from 42.157.129.158
Nov 13 01:28:32 srv2 sshd\[4663\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
Nov 13 01:28:34 srv2 sshd\[4663\]: Failed password for invalid user triplex from 42.157.129.158 port 59484 ssh2
...
2019-11-13 15:55:47
attackbotsspam
2019-10-27T05:00:30.093431abusebot-8.cloudsearch.cf sshd\[8276\]: Invalid user web5 from 42.157.129.158 port 38978
2019-10-27 14:04:50
attack
$f2bV_matches
2019-10-19 00:17:35
attackspambots
F2B jail: sshd. Time: 2019-10-16 08:04:44, Reported by: VKReport
2019-10-16 14:08:56
attack
Oct 10 18:34:55 root sshd[26974]: Failed password for root from 42.157.129.158 port 39360 ssh2
Oct 10 18:41:02 root sshd[27073]: Failed password for root from 42.157.129.158 port 45506 ssh2
...
2019-10-11 01:27:08
attackbotsspam
Sep 29 20:49:45 game-panel sshd[3038]: Failed password for backup from 42.157.129.158 port 54146 ssh2
Sep 29 20:56:48 game-panel sshd[3279]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
Sep 29 20:56:50 game-panel sshd[3279]: Failed password for invalid user lab from 42.157.129.158 port 43030 ssh2
2019-09-30 05:05:14
attackspambots
2019-09-28T18:23:25.8054681240 sshd\[30174\]: Invalid user ro from 42.157.129.158 port 38170
2019-09-28T18:23:25.8091051240 sshd\[30174\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
2019-09-28T18:23:28.0332811240 sshd\[30174\]: Failed password for invalid user ro from 42.157.129.158 port 38170 ssh2
...
2019-09-29 00:44:18
attackspam
Sep 27 17:24:09 game-panel sshd[17890]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
Sep 27 17:24:11 game-panel sshd[17890]: Failed password for invalid user openvpn from 42.157.129.158 port 42652 ssh2
Sep 27 17:30:41 game-panel sshd[18146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
2019-09-28 01:42:51
attackbots
ssh brute force
2019-09-25 18:45:03
attackbots
Sep 17 10:51:55 srv206 sshd[5425]: Invalid user flatron from 42.157.129.158
...
2019-09-17 19:38:51
attackspambots
Sep  5 09:42:29 hanapaa sshd\[7672\]: Invalid user 1 from 42.157.129.158
Sep  5 09:42:29 hanapaa sshd\[7672\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
Sep  5 09:42:31 hanapaa sshd\[7672\]: Failed password for invalid user 1 from 42.157.129.158 port 51342 ssh2
Sep  5 09:47:45 hanapaa sshd\[8106\]: Invalid user q1w2e3 from 42.157.129.158
Sep  5 09:47:45 hanapaa sshd\[8106\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
2019-09-06 03:50:16
attackspambots
Sep  3 11:32:42 MK-Soft-VM7 sshd\[15401\]: Invalid user ma from 42.157.129.158 port 37632
Sep  3 11:32:42 MK-Soft-VM7 sshd\[15401\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
Sep  3 11:32:44 MK-Soft-VM7 sshd\[15401\]: Failed password for invalid user ma from 42.157.129.158 port 37632 ssh2
...
2019-09-03 19:36:25
attackbotsspam
Aug 31 15:36:46 ip-172-31-1-72 sshd\[9031\]: Invalid user thomas from 42.157.129.158
Aug 31 15:36:46 ip-172-31-1-72 sshd\[9031\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
Aug 31 15:36:48 ip-172-31-1-72 sshd\[9031\]: Failed password for invalid user thomas from 42.157.129.158 port 58214 ssh2
Aug 31 15:45:30 ip-172-31-1-72 sshd\[9357\]: Invalid user admin from 42.157.129.158
Aug 31 15:45:30 ip-172-31-1-72 sshd\[9357\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
2019-09-01 01:10:38
attack
Aug 31 07:15:23 MK-Soft-VM6 sshd\[1208\]: Invalid user bridget from 42.157.129.158 port 34900
Aug 31 07:15:23 MK-Soft-VM6 sshd\[1208\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
Aug 31 07:15:25 MK-Soft-VM6 sshd\[1208\]: Failed password for invalid user bridget from 42.157.129.158 port 34900 ssh2
...
2019-08-31 15:17:55
attack
2019-08-26T06:22:15.997473enmeeting.mahidol.ac.th sshd\[22268\]: Invalid user chuan from 42.157.129.158 port 35752
2019-08-26T06:22:16.011673enmeeting.mahidol.ac.th sshd\[22268\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
2019-08-26T06:22:18.302085enmeeting.mahidol.ac.th sshd\[22268\]: Failed password for invalid user chuan from 42.157.129.158 port 35752 ssh2
...
2019-08-26 08:28:35
attackbotsspam
Aug 22 14:17:16 lcdev sshd\[16719\]: Invalid user corrina from 42.157.129.158
Aug 22 14:17:16 lcdev sshd\[16719\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
Aug 22 14:17:18 lcdev sshd\[16719\]: Failed password for invalid user corrina from 42.157.129.158 port 34002 ssh2
Aug 22 14:25:27 lcdev sshd\[17682\]: Invalid user oz from 42.157.129.158
Aug 22 14:25:27 lcdev sshd\[17682\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
2019-08-23 08:26:51
attackbots
2019-08-16T06:55:09.141936abusebot-7.cloudsearch.cf sshd\[22571\]: Invalid user dovecot from 42.157.129.158 port 37164
2019-08-16 15:08:54
attackspam
Aug 15 11:29:07 vtv3 sshd\[21485\]: Invalid user demouser from 42.157.129.158 port 40124
Aug 15 11:29:07 vtv3 sshd\[21485\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
Aug 15 11:29:09 vtv3 sshd\[21485\]: Failed password for invalid user demouser from 42.157.129.158 port 40124 ssh2
Aug 15 11:37:19 vtv3 sshd\[25611\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158  user=root
Aug 15 11:37:22 vtv3 sshd\[25611\]: Failed password for root from 42.157.129.158 port 60618 ssh2
Aug 15 11:54:10 vtv3 sshd\[1428\]: Invalid user test from 42.157.129.158 port 45148
Aug 15 11:54:10 vtv3 sshd\[1428\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
Aug 15 11:54:13 vtv3 sshd\[1428\]: Failed password for invalid user test from 42.157.129.158 port 45148 ssh2
Aug 15 12:02:45 vtv3 sshd\[5689\]: Invalid user mathlida from 42.157.129.158 port 37416
Aug 15
2019-08-15 20:35:32
attackspambots
Aug 10 08:55:57 www sshd\[46350\]: Invalid user justin from 42.157.129.158
Aug 10 08:55:57 www sshd\[46350\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
Aug 10 08:55:59 www sshd\[46350\]: Failed password for invalid user justin from 42.157.129.158 port 39270 ssh2
...
2019-08-10 14:20:03
相同子网IP讨论:
IP 类型 评论内容 时间
42.157.129.26 attackspambots
Honeypot attack, port: 445, PTR: PTR record not found
2020-01-12 06:52:26
42.157.129.46 attack
Dec  9 21:05:56 hcbbdb sshd\[8037\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.46  user=news
Dec  9 21:05:58 hcbbdb sshd\[8037\]: Failed password for news from 42.157.129.46 port 40414 ssh2
Dec  9 21:11:58 hcbbdb sshd\[8758\]: Invalid user 12345 from 42.157.129.46
Dec  9 21:11:58 hcbbdb sshd\[8758\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.46
Dec  9 21:12:00 hcbbdb sshd\[8758\]: Failed password for invalid user 12345 from 42.157.129.46 port 41156 ssh2
2019-12-10 05:22:55
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.157.129.158
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40486
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.157.129.158.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081000 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Aug 10 14:19:55 CST 2019
;; MSG SIZE  rcvd: 118
HOST信息:
Host 158.129.157.42.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 158.129.157.42.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
50.3.84.40 attackspambots
Registration form abuse
2020-05-27 12:42:25
175.24.28.164 attack
May 26 18:09:49 php1 sshd\[27120\]: Invalid user pvm from 175.24.28.164
May 26 18:09:49 php1 sshd\[27120\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.28.164
May 26 18:09:51 php1 sshd\[27120\]: Failed password for invalid user pvm from 175.24.28.164 port 51650 ssh2
May 26 18:15:09 php1 sshd\[27722\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.28.164  user=root
May 26 18:15:11 php1 sshd\[27722\]: Failed password for root from 175.24.28.164 port 51424 ssh2
2020-05-27 12:31:18
185.81.157.122 attackspam
SASL broute force
2020-05-27 12:33:58
49.88.112.55 attackspam
May 27 05:56:50 ns381471 sshd[11738]: Failed password for root from 49.88.112.55 port 29400 ssh2
May 27 05:57:03 ns381471 sshd[11738]: error: maximum authentication attempts exceeded for root from 49.88.112.55 port 29400 ssh2 [preauth]
2020-05-27 13:02:01
200.206.81.154 attackbots
$f2bV_matches
2020-05-27 12:49:58
222.186.175.212 attack
2020-05-27T06:44:15.580321ns386461 sshd\[13858\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.212  user=root
2020-05-27T06:44:17.545264ns386461 sshd\[13858\]: Failed password for root from 222.186.175.212 port 19244 ssh2
2020-05-27T06:44:20.466402ns386461 sshd\[13858\]: Failed password for root from 222.186.175.212 port 19244 ssh2
2020-05-27T06:44:23.798589ns386461 sshd\[13858\]: Failed password for root from 222.186.175.212 port 19244 ssh2
2020-05-27T06:44:26.532328ns386461 sshd\[13858\]: Failed password for root from 222.186.175.212 port 19244 ssh2
...
2020-05-27 12:49:37
142.4.6.212 attackbotsspam
Automatic report - XMLRPC Attack
2020-05-27 12:25:58
138.68.105.194 attackbots
May 27 09:42:44 gw1 sshd[11551]: Failed password for root from 138.68.105.194 port 40188 ssh2
...
2020-05-27 12:51:25
210.5.85.150 attackbotsspam
ssh brute force
2020-05-27 12:41:43
37.142.172.26 attack
[portscan] Port scan
2020-05-27 12:56:58
168.197.31.14 attack
2020-05-27T05:46:33.510929vps773228.ovh.net sshd[14312]: Failed password for root from 168.197.31.14 port 36532 ssh2
2020-05-27T05:52:08.322863vps773228.ovh.net sshd[14366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.197.31.14  user=root
2020-05-27T05:52:10.338546vps773228.ovh.net sshd[14366]: Failed password for root from 168.197.31.14 port 38530 ssh2
2020-05-27T05:57:43.076252vps773228.ovh.net sshd[14467]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.197.31.14  user=root
2020-05-27T05:57:45.082047vps773228.ovh.net sshd[14467]: Failed password for root from 168.197.31.14 port 40510 ssh2
...
2020-05-27 12:31:43
50.63.197.130 attackspam
www.xn--netzfundstckderwoche-yec.de 50.63.197.130 [27/May/2020:05:57:31 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
WWW.XN--NETZFUNDSTCKDERWOCHE-YEC.DE 50.63.197.130 [27/May/2020:05:57:31 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
2020-05-27 12:44:34
186.4.182.75 attackspambots
May 27 06:28:47 vps sshd[542872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=host-186-4-182-75.netlife.ec  user=root
May 27 06:28:49 vps sshd[542872]: Failed password for root from 186.4.182.75 port 31227 ssh2
May 27 06:34:09 vps sshd[566075]: Invalid user Cisco from 186.4.182.75 port 23788
May 27 06:34:09 vps sshd[566075]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=host-186-4-182-75.netlife.ec
May 27 06:34:11 vps sshd[566075]: Failed password for invalid user Cisco from 186.4.182.75 port 23788 ssh2
...
2020-05-27 12:56:23
125.132.73.14 attackspam
May 27 06:05:20 nextcloud sshd\[18290\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.132.73.14  user=root
May 27 06:05:22 nextcloud sshd\[18290\]: Failed password for root from 125.132.73.14 port 46407 ssh2
May 27 06:07:54 nextcloud sshd\[20835\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.132.73.14  user=root
2020-05-27 12:43:31
185.147.215.8 attack
[2020-05-27 00:18:26] NOTICE[1157] chan_sip.c: Registration from '' failed for '185.147.215.8:62930' - Wrong password
[2020-05-27 00:18:26] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-27T00:18:26.695-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="7856",SessionID="0x7f5f1039ca78",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.8/62930",Challenge="1ca31b9f",ReceivedChallenge="1ca31b9f",ReceivedHash="e1ad19c36ab9cac21cec0a8ccbc7e406"
[2020-05-27 00:18:52] NOTICE[1157] chan_sip.c: Registration from '' failed for '185.147.215.8:54860' - Wrong password
[2020-05-27 00:18:52] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-27T00:18:52.608-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2498",SessionID="0x7f5f100266a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.8
...
2020-05-27 12:26:19

最近上报的IP列表

244.209.112.55 82.169.174.77 138.97.226.244 11.150.217.20
186.216.71.122 103.249.111.201 85.198.130.133 35.225.249.169
191.53.249.98 167.99.60.231 93.147.22.31 117.96.235.39
5.107.31.42 121.128.153.234 171.229.76.15 211.104.72.244
113.185.109.228 14.162.212.255 36.83.100.128 42.82.93.128