必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Weiyi Network Technology Co. Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackbotsspam
Nov 29 21:17:31 php1 sshd\[29750\]: Invalid user guhl from 42.157.129.158
Nov 29 21:17:31 php1 sshd\[29750\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
Nov 29 21:17:33 php1 sshd\[29750\]: Failed password for invalid user guhl from 42.157.129.158 port 52992 ssh2
Nov 29 21:22:01 php1 sshd\[30202\]: Invalid user yoyo from 42.157.129.158
Nov 29 21:22:01 php1 sshd\[30202\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
2019-11-30 15:39:22
attackbotsspam
5x Failed Password
2019-11-27 09:29:52
attackspam
2019-11-24T22:55:46.982759abusebot-8.cloudsearch.cf sshd\[24162\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158  user=root
2019-11-25 09:06:07
attack
Nov 23 20:21:05 auw2 sshd\[7055\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158  user=root
Nov 23 20:21:07 auw2 sshd\[7055\]: Failed password for root from 42.157.129.158 port 34970 ssh2
Nov 23 20:29:46 auw2 sshd\[7738\]: Invalid user praefect from 42.157.129.158
Nov 23 20:29:46 auw2 sshd\[7738\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
Nov 23 20:29:48 auw2 sshd\[7738\]: Failed password for invalid user praefect from 42.157.129.158 port 41002 ssh2
2019-11-24 14:50:54
attackbots
Nov 15 18:50:43 web1 sshd\[15631\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158  user=bin
Nov 15 18:50:44 web1 sshd\[15631\]: Failed password for bin from 42.157.129.158 port 45574 ssh2
Nov 15 18:56:25 web1 sshd\[16099\]: Invalid user students from 42.157.129.158
Nov 15 18:56:25 web1 sshd\[16099\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
Nov 15 18:56:26 web1 sshd\[16099\]: Failed password for invalid user students from 42.157.129.158 port 54118 ssh2
2019-11-16 13:09:11
attack
Nov 13 01:28:32 srv2 sshd\[4663\]: Invalid user triplex from 42.157.129.158
Nov 13 01:28:32 srv2 sshd\[4663\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
Nov 13 01:28:34 srv2 sshd\[4663\]: Failed password for invalid user triplex from 42.157.129.158 port 59484 ssh2
...
2019-11-13 15:55:47
attackbotsspam
2019-10-27T05:00:30.093431abusebot-8.cloudsearch.cf sshd\[8276\]: Invalid user web5 from 42.157.129.158 port 38978
2019-10-27 14:04:50
attack
$f2bV_matches
2019-10-19 00:17:35
attackspambots
F2B jail: sshd. Time: 2019-10-16 08:04:44, Reported by: VKReport
2019-10-16 14:08:56
attack
Oct 10 18:34:55 root sshd[26974]: Failed password for root from 42.157.129.158 port 39360 ssh2
Oct 10 18:41:02 root sshd[27073]: Failed password for root from 42.157.129.158 port 45506 ssh2
...
2019-10-11 01:27:08
attackbotsspam
Sep 29 20:49:45 game-panel sshd[3038]: Failed password for backup from 42.157.129.158 port 54146 ssh2
Sep 29 20:56:48 game-panel sshd[3279]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
Sep 29 20:56:50 game-panel sshd[3279]: Failed password for invalid user lab from 42.157.129.158 port 43030 ssh2
2019-09-30 05:05:14
attackspambots
2019-09-28T18:23:25.8054681240 sshd\[30174\]: Invalid user ro from 42.157.129.158 port 38170
2019-09-28T18:23:25.8091051240 sshd\[30174\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
2019-09-28T18:23:28.0332811240 sshd\[30174\]: Failed password for invalid user ro from 42.157.129.158 port 38170 ssh2
...
2019-09-29 00:44:18
attackspam
Sep 27 17:24:09 game-panel sshd[17890]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
Sep 27 17:24:11 game-panel sshd[17890]: Failed password for invalid user openvpn from 42.157.129.158 port 42652 ssh2
Sep 27 17:30:41 game-panel sshd[18146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
2019-09-28 01:42:51
attackbots
ssh brute force
2019-09-25 18:45:03
attackbots
Sep 17 10:51:55 srv206 sshd[5425]: Invalid user flatron from 42.157.129.158
...
2019-09-17 19:38:51
attackspambots
Sep  5 09:42:29 hanapaa sshd\[7672\]: Invalid user 1 from 42.157.129.158
Sep  5 09:42:29 hanapaa sshd\[7672\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
Sep  5 09:42:31 hanapaa sshd\[7672\]: Failed password for invalid user 1 from 42.157.129.158 port 51342 ssh2
Sep  5 09:47:45 hanapaa sshd\[8106\]: Invalid user q1w2e3 from 42.157.129.158
Sep  5 09:47:45 hanapaa sshd\[8106\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
2019-09-06 03:50:16
attackspambots
Sep  3 11:32:42 MK-Soft-VM7 sshd\[15401\]: Invalid user ma from 42.157.129.158 port 37632
Sep  3 11:32:42 MK-Soft-VM7 sshd\[15401\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
Sep  3 11:32:44 MK-Soft-VM7 sshd\[15401\]: Failed password for invalid user ma from 42.157.129.158 port 37632 ssh2
...
2019-09-03 19:36:25
attackbotsspam
Aug 31 15:36:46 ip-172-31-1-72 sshd\[9031\]: Invalid user thomas from 42.157.129.158
Aug 31 15:36:46 ip-172-31-1-72 sshd\[9031\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
Aug 31 15:36:48 ip-172-31-1-72 sshd\[9031\]: Failed password for invalid user thomas from 42.157.129.158 port 58214 ssh2
Aug 31 15:45:30 ip-172-31-1-72 sshd\[9357\]: Invalid user admin from 42.157.129.158
Aug 31 15:45:30 ip-172-31-1-72 sshd\[9357\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
2019-09-01 01:10:38
attack
Aug 31 07:15:23 MK-Soft-VM6 sshd\[1208\]: Invalid user bridget from 42.157.129.158 port 34900
Aug 31 07:15:23 MK-Soft-VM6 sshd\[1208\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
Aug 31 07:15:25 MK-Soft-VM6 sshd\[1208\]: Failed password for invalid user bridget from 42.157.129.158 port 34900 ssh2
...
2019-08-31 15:17:55
attack
2019-08-26T06:22:15.997473enmeeting.mahidol.ac.th sshd\[22268\]: Invalid user chuan from 42.157.129.158 port 35752
2019-08-26T06:22:16.011673enmeeting.mahidol.ac.th sshd\[22268\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
2019-08-26T06:22:18.302085enmeeting.mahidol.ac.th sshd\[22268\]: Failed password for invalid user chuan from 42.157.129.158 port 35752 ssh2
...
2019-08-26 08:28:35
attackbotsspam
Aug 22 14:17:16 lcdev sshd\[16719\]: Invalid user corrina from 42.157.129.158
Aug 22 14:17:16 lcdev sshd\[16719\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
Aug 22 14:17:18 lcdev sshd\[16719\]: Failed password for invalid user corrina from 42.157.129.158 port 34002 ssh2
Aug 22 14:25:27 lcdev sshd\[17682\]: Invalid user oz from 42.157.129.158
Aug 22 14:25:27 lcdev sshd\[17682\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
2019-08-23 08:26:51
attackbots
2019-08-16T06:55:09.141936abusebot-7.cloudsearch.cf sshd\[22571\]: Invalid user dovecot from 42.157.129.158 port 37164
2019-08-16 15:08:54
attackspam
Aug 15 11:29:07 vtv3 sshd\[21485\]: Invalid user demouser from 42.157.129.158 port 40124
Aug 15 11:29:07 vtv3 sshd\[21485\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
Aug 15 11:29:09 vtv3 sshd\[21485\]: Failed password for invalid user demouser from 42.157.129.158 port 40124 ssh2
Aug 15 11:37:19 vtv3 sshd\[25611\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158  user=root
Aug 15 11:37:22 vtv3 sshd\[25611\]: Failed password for root from 42.157.129.158 port 60618 ssh2
Aug 15 11:54:10 vtv3 sshd\[1428\]: Invalid user test from 42.157.129.158 port 45148
Aug 15 11:54:10 vtv3 sshd\[1428\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
Aug 15 11:54:13 vtv3 sshd\[1428\]: Failed password for invalid user test from 42.157.129.158 port 45148 ssh2
Aug 15 12:02:45 vtv3 sshd\[5689\]: Invalid user mathlida from 42.157.129.158 port 37416
Aug 15
2019-08-15 20:35:32
attackspambots
Aug 10 08:55:57 www sshd\[46350\]: Invalid user justin from 42.157.129.158
Aug 10 08:55:57 www sshd\[46350\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
Aug 10 08:55:59 www sshd\[46350\]: Failed password for invalid user justin from 42.157.129.158 port 39270 ssh2
...
2019-08-10 14:20:03
相同子网IP讨论:
IP 类型 评论内容 时间
42.157.129.26 attackspambots
Honeypot attack, port: 445, PTR: PTR record not found
2020-01-12 06:52:26
42.157.129.46 attack
Dec  9 21:05:56 hcbbdb sshd\[8037\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.46  user=news
Dec  9 21:05:58 hcbbdb sshd\[8037\]: Failed password for news from 42.157.129.46 port 40414 ssh2
Dec  9 21:11:58 hcbbdb sshd\[8758\]: Invalid user 12345 from 42.157.129.46
Dec  9 21:11:58 hcbbdb sshd\[8758\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.46
Dec  9 21:12:00 hcbbdb sshd\[8758\]: Failed password for invalid user 12345 from 42.157.129.46 port 41156 ssh2
2019-12-10 05:22:55
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.157.129.158
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40486
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.157.129.158.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081000 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Aug 10 14:19:55 CST 2019
;; MSG SIZE  rcvd: 118
HOST信息:
Host 158.129.157.42.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 158.129.157.42.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
87.7.205.49 attack
Jul 14 16:17:32 finn sshd[12271]: Invalid user sammy from 87.7.205.49 port 60271
Jul 14 16:17:32 finn sshd[12271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.7.205.49
Jul 14 16:17:34 finn sshd[12271]: Failed password for invalid user sammy from 87.7.205.49 port 60271 ssh2
Jul 14 16:17:34 finn sshd[12271]: Received disconnect from 87.7.205.49 port 60271:11: Bye Bye [preauth]
Jul 14 16:17:34 finn sshd[12271]: Disconnected from 87.7.205.49 port 60271 [preauth]
Jul 14 16:29:46 finn sshd[15095]: Invalid user andrea from 87.7.205.49 port 63943
Jul 14 16:29:46 finn sshd[15095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.7.205.49
Jul 14 16:29:48 finn sshd[15095]: Failed password for invalid user andrea from 87.7.205.49 port 63943 ssh2
Jul 14 16:29:48 finn sshd[15095]: Received disconnect from 87.7.205.49 port 63943:11: Bye Bye [preauth]
Jul 14 16:29:48 finn sshd[15095]: Disconnected ........
-------------------------------
2019-07-15 10:14:15
218.26.97.162 attackbotsspam
IP: 218.26.97.162
ASN: AS4837 CHINA UNICOM China169 Backbone
Port: IMAP over TLS protocol 993
Found in one or more Blacklists
Date: 14/07/2019 10:15:10 PM UTC
2019-07-15 10:08:54
178.156.202.79 attackbotsspam
HTTP SQL Injection Attempt, PTR: slot0.minegums.tk.
2019-07-15 09:44:29
80.245.113.202 attackspam
[portscan] Port scan
2019-07-15 09:24:14
83.14.215.162 attackbotsspam
Jul 15 03:58:22 core01 sshd\[15123\]: Invalid user wasadmin from 83.14.215.162 port 44858
Jul 15 03:58:22 core01 sshd\[15123\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.14.215.162
...
2019-07-15 10:08:01
5.196.137.213 attack
Jul 14 21:53:26 vps200512 sshd\[29247\]: Invalid user gerhard from 5.196.137.213
Jul 14 21:53:26 vps200512 sshd\[29247\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.137.213
Jul 14 21:53:28 vps200512 sshd\[29247\]: Failed password for invalid user gerhard from 5.196.137.213 port 50294 ssh2
Jul 14 21:58:27 vps200512 sshd\[29297\]: Invalid user centos from 5.196.137.213
Jul 14 21:58:27 vps200512 sshd\[29297\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.137.213
2019-07-15 10:03:36
23.228.101.194 attackbots
ECShop Remote Code Execution Vulnerability, PTR: PTR record not found
2019-07-15 09:38:20
51.75.201.55 attackspam
Jul 14 21:27:31 debian sshd\[12211\]: Invalid user jeff from 51.75.201.55 port 46716
Jul 14 21:27:31 debian sshd\[12211\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.201.55
Jul 14 21:27:33 debian sshd\[12211\]: Failed password for invalid user jeff from 51.75.201.55 port 46716 ssh2
...
2019-07-15 09:36:54
162.241.178.219 attack
Jul 15 03:07:20 dev0-dcde-rnet sshd[7333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.241.178.219
Jul 15 03:07:21 dev0-dcde-rnet sshd[7333]: Failed password for invalid user abc from 162.241.178.219 port 44260 ssh2
Jul 15 03:12:03 dev0-dcde-rnet sshd[7368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.241.178.219
2019-07-15 09:49:18
188.0.152.205 attackbotsspam
Port scan: Attack repeated for 24 hours
2019-07-15 09:45:40
14.231.167.75 attackbotsspam
Brute force attempt
2019-07-15 10:06:45
116.52.9.220 attackbotsspam
Jul 14 23:29:01 *** sshd[5328]: Did not receive identification string from 116.52.9.220
2019-07-15 10:09:53
122.152.203.83 attackspam
Jul 15 01:48:41 animalibera sshd[30390]: Invalid user rh from 122.152.203.83 port 43918
...
2019-07-15 10:01:09
168.167.92.147 attackspam
Spam Timestamp : 14-Jul-19 21:53 _ BlockList Provider  combined abuse _ (605)
2019-07-15 09:53:32
41.138.55.94 attackspambots
Jul 15 03:26:50 vps647732 sshd[30219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.138.55.94
Jul 15 03:26:52 vps647732 sshd[30219]: Failed password for invalid user vbox from 41.138.55.94 port 36755 ssh2
...
2019-07-15 09:44:51

最近上报的IP列表

244.209.112.55 82.169.174.77 138.97.226.244 11.150.217.20
186.216.71.122 103.249.111.201 85.198.130.133 35.225.249.169
191.53.249.98 167.99.60.231 93.147.22.31 117.96.235.39
5.107.31.42 121.128.153.234 171.229.76.15 211.104.72.244
113.185.109.228 14.162.212.255 36.83.100.128 42.82.93.128