必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Shanghai

省份(region): Shanghai

国家(country): China

运营商(isp): Shanghai Blue Cloud Technology Co. Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
Aug 23 17:07:50 ns381471 sshd[28828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.228.125
Aug 23 17:07:52 ns381471 sshd[28828]: Failed password for invalid user teamspeak3 from 42.159.228.125 port 24398 ssh2
2020-08-23 23:17:17
attack
2020-08-04T08:48:02.257931centos sshd[3089]: Failed password for root from 42.159.228.125 port 39618 ssh2
2020-08-04T08:52:44.714108centos sshd[3367]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.228.125  user=root
2020-08-04T08:52:46.836220centos sshd[3367]: Failed password for root from 42.159.228.125 port 34149 ssh2
...
2020-08-04 16:41:47
attack
SSH Invalid Login
2020-08-01 07:34:55
attackspambots
Invalid user renyazhou from 42.159.228.125 port 34818
2020-07-29 20:01:00
attackspam
Jul 28 17:03:37 mout sshd[17530]: Invalid user fjseclib from 42.159.228.125 port 62168
2020-07-28 23:51:17
attack
Jul 24 06:32:10 rocket sshd[28538]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.228.125
Jul 24 06:32:12 rocket sshd[28538]: Failed password for invalid user gitolite3 from 42.159.228.125 port 58492 ssh2
Jul 24 06:37:53 rocket sshd[29365]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.228.125
...
2020-07-24 13:54:10
attackbots
Jul 18 16:33:20 vm1 sshd[13464]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.228.125
Jul 18 16:33:23 vm1 sshd[13464]: Failed password for invalid user webmaster from 42.159.228.125 port 28597 ssh2
...
2020-07-19 00:11:34
attackbots
$f2bV_matches
2020-07-15 02:51:03
attackspam
authentication failure
2020-07-09 19:48:37
attack
Jun 28 22:59:30 localhost sshd\[13008\]: Invalid user testdev from 42.159.228.125
Jun 28 22:59:30 localhost sshd\[13008\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.228.125
Jun 28 22:59:33 localhost sshd\[13008\]: Failed password for invalid user testdev from 42.159.228.125 port 32717 ssh2
Jun 28 23:02:17 localhost sshd\[13213\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.228.125  user=root
Jun 28 23:02:19 localhost sshd\[13213\]: Failed password for root from 42.159.228.125 port 64821 ssh2
...
2020-06-29 08:25:32
attackspam
2020-06-26T23:22:43.510308hostname sshd[18878]: Invalid user wei from 42.159.228.125 port 44858
2020-06-26T23:22:45.530804hostname sshd[18878]: Failed password for invalid user wei from 42.159.228.125 port 44858 ssh2
2020-06-26T23:26:39.466205hostname sshd[22063]: Invalid user bot from 42.159.228.125 port 25975
...
2020-06-27 17:51:53
attack
SSH Brute-Forcing (server2)
2020-06-08 22:32:37
attackbotsspam
Jun  4 10:45:40 gw1 sshd[25423]: Failed password for root from 42.159.228.125 port 45096 ssh2
...
2020-06-04 13:49:33
attack
2020-06-02T17:34:36.440259centos sshd[1899]: Failed password for root from 42.159.228.125 port 26844 ssh2
2020-06-02T17:38:42.536599centos sshd[2151]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.228.125  user=root
2020-06-02T17:38:44.800124centos sshd[2151]: Failed password for root from 42.159.228.125 port 19191 ssh2
...
2020-06-03 01:48:57
attackspam
May 27 20:15:11 electroncash sshd[40977]: Failed password for invalid user sako from 42.159.228.125 port 62227 ssh2
May 27 20:20:04 electroncash sshd[42460]: Invalid user allen from 42.159.228.125 port 10289
May 27 20:20:04 electroncash sshd[42460]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.228.125 
May 27 20:20:04 electroncash sshd[42460]: Invalid user allen from 42.159.228.125 port 10289
May 27 20:20:06 electroncash sshd[42460]: Failed password for invalid user allen from 42.159.228.125 port 10289 ssh2
...
2020-05-28 04:15:46
attackbots
2020-05-25T01:58:03.122787billing sshd[13555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.228.125  user=root
2020-05-25T01:58:05.152959billing sshd[13555]: Failed password for root from 42.159.228.125 port 11711 ssh2
2020-05-25T02:02:53.275899billing sshd[24597]: Invalid user a from 42.159.228.125 port 11078
...
2020-05-25 03:50:51
attackbotsspam
SSH Bruteforce attack
2020-04-28 23:40:30
attackbots
Apr 25 07:52:17 eventyay sshd[1989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.228.125
Apr 25 07:52:19 eventyay sshd[1989]: Failed password for invalid user harley from 42.159.228.125 port 60865 ssh2
Apr 25 07:56:39 eventyay sshd[2173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.228.125
...
2020-04-25 17:52:11
attackbots
Apr 22 14:00:17 DAAP sshd[32106]: Invalid user mz from 42.159.228.125 port 48830
Apr 22 14:00:18 DAAP sshd[32106]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.228.125
Apr 22 14:00:17 DAAP sshd[32106]: Invalid user mz from 42.159.228.125 port 48830
Apr 22 14:00:19 DAAP sshd[32106]: Failed password for invalid user mz from 42.159.228.125 port 48830 ssh2
Apr 22 14:05:07 DAAP sshd[32174]: Invalid user admin from 42.159.228.125 port 45247
...
2020-04-22 20:23:26
attack
Apr 19 12:21:13 ncomp sshd[11086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.228.125  user=root
Apr 19 12:21:15 ncomp sshd[11086]: Failed password for root from 42.159.228.125 port 34755 ssh2
Apr 19 12:30:24 ncomp sshd[11274]: Invalid user na from 42.159.228.125
2020-04-19 18:47:54
attackspam
Apr 11 05:14:17 mockhub sshd[32748]: Failed password for root from 42.159.228.125 port 64567 ssh2
Apr 11 05:18:47 mockhub sshd[464]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.228.125
...
2020-04-11 22:43:50
attackspambots
Apr  2 00:03:29 pve sshd[28438]: Failed password for root from 42.159.228.125 port 35614 ssh2
Apr  2 00:07:47 pve sshd[29173]: Failed password for root from 42.159.228.125 port 31341 ssh2
2020-04-02 07:21:14
attack
Mar 29 04:11:03 XXX sshd[8481]: Invalid user ois from 42.159.228.125 port 16119
2020-03-30 08:30:08
attackspam
Invalid user ois from 42.159.228.125 port 30506
2020-03-30 05:30:12
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.159.228.125
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19840
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.159.228.125.			IN	A

;; AUTHORITY SECTION:
.			558	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020032901 1800 900 604800 86400

;; Query time: 84 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Mar 30 05:30:09 CST 2020
;; MSG SIZE  rcvd: 118
HOST信息:
Host 125.228.159.42.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 125.228.159.42.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
210.152.12.39 attackspam
Jul  4 12:14:12 scw-focused-cartwright sshd[21821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.152.12.39
Jul  4 12:14:14 scw-focused-cartwright sshd[21821]: Failed password for invalid user anita from 210.152.12.39 port 52236 ssh2
2020-07-04 20:17:14
222.186.180.17 attackbots
Jul  4 14:41:13 ns381471 sshd[20277]: Failed password for root from 222.186.180.17 port 29220 ssh2
Jul  4 14:41:27 ns381471 sshd[20277]: error: maximum authentication attempts exceeded for root from 222.186.180.17 port 29220 ssh2 [preauth]
2020-07-04 20:50:45
45.55.176.173 attackspam
Jul  4 14:36:42 h1745522 sshd[23166]: Invalid user fabienne from 45.55.176.173 port 36498
Jul  4 14:36:42 h1745522 sshd[23166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.176.173
Jul  4 14:36:42 h1745522 sshd[23166]: Invalid user fabienne from 45.55.176.173 port 36498
Jul  4 14:36:44 h1745522 sshd[23166]: Failed password for invalid user fabienne from 45.55.176.173 port 36498 ssh2
Jul  4 14:39:33 h1745522 sshd[23407]: Invalid user test2 from 45.55.176.173 port 34988
Jul  4 14:39:33 h1745522 sshd[23407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.176.173
Jul  4 14:39:33 h1745522 sshd[23407]: Invalid user test2 from 45.55.176.173 port 34988
Jul  4 14:39:35 h1745522 sshd[23407]: Failed password for invalid user test2 from 45.55.176.173 port 34988 ssh2
Jul  4 14:42:27 h1745522 sshd[23642]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.176.173
...
2020-07-04 20:49:50
122.51.254.9 attack
Jul  4 08:11:54 ny01 sshd[18208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.254.9
Jul  4 08:11:56 ny01 sshd[18208]: Failed password for invalid user test from 122.51.254.9 port 59662 ssh2
Jul  4 08:21:15 ny01 sshd[19317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.254.9
2020-07-04 20:27:50
45.55.156.19 attackbotsspam
2020-07-04T12:26:56.626158shield sshd\[11057\]: Invalid user shipping from 45.55.156.19 port 36660
2020-07-04T12:26:56.629932shield sshd\[11057\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.156.19
2020-07-04T12:26:59.207790shield sshd\[11057\]: Failed password for invalid user shipping from 45.55.156.19 port 36660 ssh2
2020-07-04T12:30:07.528594shield sshd\[12747\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.156.19  user=root
2020-07-04T12:30:09.659883shield sshd\[12747\]: Failed password for root from 45.55.156.19 port 33844 ssh2
2020-07-04 20:44:34
49.234.16.16 attack
Jul  4 14:08:18 h1745522 sshd[21455]: Invalid user karaz from 49.234.16.16 port 54396
Jul  4 14:08:18 h1745522 sshd[21455]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.16.16
Jul  4 14:08:18 h1745522 sshd[21455]: Invalid user karaz from 49.234.16.16 port 54396
Jul  4 14:08:20 h1745522 sshd[21455]: Failed password for invalid user karaz from 49.234.16.16 port 54396 ssh2
Jul  4 14:11:24 h1745522 sshd[21743]: Invalid user c1 from 49.234.16.16 port 58300
Jul  4 14:11:24 h1745522 sshd[21743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.16.16
Jul  4 14:11:24 h1745522 sshd[21743]: Invalid user c1 from 49.234.16.16 port 58300
Jul  4 14:11:26 h1745522 sshd[21743]: Failed password for invalid user c1 from 49.234.16.16 port 58300 ssh2
Jul  4 14:14:20 h1745522 sshd[21940]: Invalid user ldx from 49.234.16.16 port 33962
...
2020-07-04 20:24:26
62.150.135.41 attackspambots
Port 22 Scan, PTR: None
2020-07-04 20:49:38
116.253.209.14 attackbots
proto=tcp  .  spt=37532  .  dpt=25  .     Listed on    abuseat-org plus zen-spamhaus and rbldns-ru     (155)
2020-07-04 20:37:48
222.186.175.150 attack
2020-07-04T12:55:25.586929mail.csmailer.org sshd[25835]: Failed password for root from 222.186.175.150 port 17142 ssh2
2020-07-04T12:55:28.208683mail.csmailer.org sshd[25835]: Failed password for root from 222.186.175.150 port 17142 ssh2
2020-07-04T12:55:32.445795mail.csmailer.org sshd[25835]: Failed password for root from 222.186.175.150 port 17142 ssh2
2020-07-04T12:55:32.446177mail.csmailer.org sshd[25835]: error: maximum authentication attempts exceeded for root from 222.186.175.150 port 17142 ssh2 [preauth]
2020-07-04T12:55:32.446198mail.csmailer.org sshd[25835]: Disconnecting: Too many authentication failures [preauth]
...
2020-07-04 20:55:58
180.76.101.244 attackspam
Jul  4 14:05:21 server sshd[31428]: Failed password for invalid user benjamin from 180.76.101.244 port 35840 ssh2
Jul  4 14:09:32 server sshd[3866]: Failed password for root from 180.76.101.244 port 54730 ssh2
Jul  4 14:14:04 server sshd[9067]: Failed password for invalid user blumberg from 180.76.101.244 port 45392 ssh2
2020-07-04 20:42:25
61.50.99.26 attack
Jul  4 15:14:26 hosting sshd[22359]: Invalid user rabbitmq from 61.50.99.26 port 40015
...
2020-07-04 20:19:17
12.171.245.139 attack
Port 22 Scan, PTR: None
2020-07-04 20:34:04
106.54.255.11 attackbotsspam
Jul  4 14:02:41 server sshd[10501]: Failed password for invalid user lfs from 106.54.255.11 port 56770 ssh2
Jul  4 14:06:29 server sshd[13658]: Failed password for invalid user test from 106.54.255.11 port 44960 ssh2
Jul  4 14:14:28 server sshd[19968]: Failed password for invalid user rust from 106.54.255.11 port 49584 ssh2
2020-07-04 20:16:32
46.38.148.6 attackspam
2020-07-04 12:16:10 auth_plain authenticator failed for (User) [46.38.148.6]: 535 Incorrect authentication data (set_id=a2@csmailer.org)
2020-07-04 12:16:38 auth_plain authenticator failed for (User) [46.38.148.6]: 535 Incorrect authentication data (set_id=forestry@csmailer.org)
2020-07-04 12:17:09 auth_plain authenticator failed for (User) [46.38.148.6]: 535 Incorrect authentication data (set_id=vino@csmailer.org)
2020-07-04 12:17:39 auth_plain authenticator failed for (User) [46.38.148.6]: 535 Incorrect authentication data (set_id=locations@csmailer.org)
2020-07-04 12:18:09 auth_plain authenticator failed for (User) [46.38.148.6]: 535 Incorrect authentication data (set_id=gloria@csmailer.org)
...
2020-07-04 20:22:20
124.251.110.164 attackspambots
Jul  4 14:11:50 nextcloud sshd\[18143\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.251.110.164  user=root
Jul  4 14:11:52 nextcloud sshd\[18143\]: Failed password for root from 124.251.110.164 port 50426 ssh2
Jul  4 14:13:53 nextcloud sshd\[20290\]: Invalid user soham from 124.251.110.164
Jul  4 14:13:53 nextcloud sshd\[20290\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.251.110.164
2020-07-04 20:51:12

最近上报的IP列表

112.252.28.246 12.103.65.143 209.33.89.102 186.56.220.205
94.9.1.195 113.42.142.197 204.234.11.217 167.98.8.88
125.106.250.80 78.88.123.14 49.188.154.235 81.34.111.14
24.193.80.174 100.243.127.25 141.14.248.135 219.172.105.152
96.251.22.143 37.159.107.103 124.149.139.134 109.191.7.145