必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Weiyi Network Technology Co. Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackbotsspam
Oct  2 00:59:38 m3061 sshd[5499]: Invalid user xiang from 42.157.131.201
Oct  2 00:59:38 m3061 sshd[5499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.131.201


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=42.157.131.201
2019-10-03 14:05:59
attackspambots
Oct  3 00:43:21 srv206 sshd[24656]: Invalid user sysdba from 42.157.131.201
Oct  3 00:43:21 srv206 sshd[24656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.131.201
Oct  3 00:43:21 srv206 sshd[24656]: Invalid user sysdba from 42.157.131.201
Oct  3 00:43:23 srv206 sshd[24656]: Failed password for invalid user sysdba from 42.157.131.201 port 52730 ssh2
...
2019-10-03 07:13:34
attack
Sep 26 23:03:49 hanapaa sshd\[32154\]: Invalid user adrc from 42.157.131.201
Sep 26 23:03:49 hanapaa sshd\[32154\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.131.201
Sep 26 23:03:51 hanapaa sshd\[32154\]: Failed password for invalid user adrc from 42.157.131.201 port 54030 ssh2
Sep 26 23:07:55 hanapaa sshd\[32525\]: Invalid user kai from 42.157.131.201
Sep 26 23:07:55 hanapaa sshd\[32525\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.131.201
2019-09-27 19:53:07
attackspam
Sep 26 20:37:53 plex sshd[1986]: Invalid user zhao from 42.157.131.201 port 35790
2019-09-27 02:48:46
attack
Sep 21 18:19:09 tdfoods sshd\[24845\]: Invalid user gentry from 42.157.131.201
Sep 21 18:19:09 tdfoods sshd\[24845\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.131.201
Sep 21 18:19:11 tdfoods sshd\[24845\]: Failed password for invalid user gentry from 42.157.131.201 port 58520 ssh2
Sep 21 18:23:26 tdfoods sshd\[25189\]: Invalid user listen from 42.157.131.201
Sep 21 18:23:26 tdfoods sshd\[25189\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.131.201
2019-09-22 19:15:02
attack
Sep 20 08:50:40 hpm sshd\[18288\]: Invalid user user from 42.157.131.201
Sep 20 08:50:40 hpm sshd\[18288\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.131.201
Sep 20 08:50:42 hpm sshd\[18288\]: Failed password for invalid user user from 42.157.131.201 port 33346 ssh2
Sep 20 08:55:09 hpm sshd\[18643\]: Invalid user test101 from 42.157.131.201
Sep 20 08:55:09 hpm sshd\[18643\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.131.201
2019-09-21 03:00:41
attackspambots
Sep 11 01:04:05 friendsofhawaii sshd\[7732\]: Invalid user 119 from 42.157.131.201
Sep 11 01:04:05 friendsofhawaii sshd\[7732\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.131.201
Sep 11 01:04:07 friendsofhawaii sshd\[7732\]: Failed password for invalid user 119 from 42.157.131.201 port 42794 ssh2
Sep 11 01:08:16 friendsofhawaii sshd\[8093\]: Invalid user 162 from 42.157.131.201
Sep 11 01:08:16 friendsofhawaii sshd\[8093\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.131.201
2019-09-12 02:37:03
attack
Sep  9 10:50:05 nextcloud sshd\[23923\]: Invalid user www from 42.157.131.201
Sep  9 10:50:05 nextcloud sshd\[23923\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.131.201
Sep  9 10:50:07 nextcloud sshd\[23923\]: Failed password for invalid user www from 42.157.131.201 port 45444 ssh2
...
2019-09-09 17:03:17
attackspam
Aug 30 08:33:50 lcdev sshd\[16254\]: Invalid user romaric from 42.157.131.201
Aug 30 08:33:50 lcdev sshd\[16254\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.131.201
Aug 30 08:33:53 lcdev sshd\[16254\]: Failed password for invalid user romaric from 42.157.131.201 port 45006 ssh2
Aug 30 08:38:28 lcdev sshd\[16653\]: Invalid user magenta from 42.157.131.201
Aug 30 08:38:28 lcdev sshd\[16653\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.131.201
2019-08-31 05:18:51
attack
Aug 29 18:50:16 server sshd\[27320\]: Invalid user hh from 42.157.131.201 port 48604
Aug 29 18:50:16 server sshd\[27320\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.131.201
Aug 29 18:50:18 server sshd\[27320\]: Failed password for invalid user hh from 42.157.131.201 port 48604 ssh2
Aug 29 18:56:51 server sshd\[20301\]: Invalid user gmod from 42.157.131.201 port 32854
Aug 29 18:56:51 server sshd\[20301\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.131.201
2019-08-30 03:39:36
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.157.131.201
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45817
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.157.131.201.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019082901 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Aug 30 03:39:31 CST 2019
;; MSG SIZE  rcvd: 118
HOST信息:
Host 201.131.157.42.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 201.131.157.42.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
183.2.202.41 attackbots
25.10.2019 23:42:43 Connection to port 5060 blocked by firewall
2019-10-26 08:09:11
79.121.123.160 attackspam
ET CINS Active Threat Intelligence Poor Reputation IP group 71 - port: 9001 proto: TCP cat: Misc Attack
2019-10-26 08:16:41
80.82.77.245 attackbots
25.10.2019 23:51:38 Connection to port 1069 blocked by firewall
2019-10-26 08:15:48
27.115.252.132 attackbotsspam
ET CINS Active Threat Intelligence Poor Reputation IP group 13 - port: 23 proto: TCP cat: Misc Attack
2019-10-26 08:02:07
185.175.93.105 attack
10/26/2019-02:05:41.064640 185.175.93.105 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2019-10-26 08:06:31
45.141.84.29 attack
ET CINS Active Threat Intelligence Poor Reputation IP group 31 - port: 5900 proto: TCP cat: Misc Attack
2019-10-26 08:00:04
117.50.46.176 attackspam
F2B jail: sshd. Time: 2019-10-26 05:54:56, Reported by: VKReport
2019-10-26 12:02:00
45.82.153.35 attackspam
10/25/2019-19:46:41.149220 45.82.153.35 Protocol: 6 ET SCAN NMAP -sS window 1024
2019-10-26 08:19:02
92.222.47.41 attackspam
Oct 26 05:51:00 SilenceServices sshd[6073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.47.41
Oct 26 05:51:02 SilenceServices sshd[6073]: Failed password for invalid user webmaster from 92.222.47.41 port 50160 ssh2
Oct 26 05:54:39 SilenceServices sshd[8314]: Failed password for root from 92.222.47.41 port 59606 ssh2
2019-10-26 12:11:08
120.92.153.47 attack
Oct 26 05:54:18 mail postfix/smtpd[28121]: warning: unknown[120.92.153.47]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct 26 05:54:26 mail postfix/smtpd[28121]: warning: unknown[120.92.153.47]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct 26 05:54:40 mail postfix/smtpd[28121]: warning: unknown[120.92.153.47]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2019-10-26 12:10:49
142.93.113.182 attack
www.geburtshaus-fulda.de 142.93.113.182 \[26/Oct/2019:05:54:58 +0200\] "POST /wp-login.php HTTP/1.1" 200 5785 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
www.geburtshaus-fulda.de 142.93.113.182 \[26/Oct/2019:05:54:59 +0200\] "POST /wp-login.php HTTP/1.1" 200 5789 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-10-26 12:00:27
61.69.254.46 attackspam
Oct 26 09:25:54 areeb-Workstation sshd[9137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.69.254.46
Oct 26 09:25:56 areeb-Workstation sshd[9137]: Failed password for invalid user odete from 61.69.254.46 port 55704 ssh2
...
2019-10-26 12:07:53
185.156.73.14 attackspambots
firewall-block, port(s): 8862/tcp, 33706/tcp, 33707/tcp, 33708/tcp, 40048/tcp, 40049/tcp, 40050/tcp, 40814/tcp
2019-10-26 08:08:31
92.118.160.5 attackspam
25.10.2019 21:19:43 Connection to port 593 blocked by firewall
2019-10-26 08:12:08
193.112.174.67 attack
Oct 26 03:57:10 anodpoucpklekan sshd[41509]: Invalid user ctakes from 193.112.174.67 port 53336
Oct 26 03:57:11 anodpoucpklekan sshd[41509]: Failed password for invalid user ctakes from 193.112.174.67 port 53336 ssh2
...
2019-10-26 12:05:24

最近上报的IP列表

43.254.220.13 180.168.47.238 103.90.97.197 185.165.169.152
177.161.120.32 137.59.1.236 83.103.2.58 14.177.164.39
80.30.139.227 36.7.87.130 109.184.160.174 120.29.44.211
134.73.76.198 213.14.214.229 106.12.48.30 87.202.191.63
103.95.13.216 192.139.15.36 122.226.183.154 85.25.37.143