42.157.129.158

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Weiyi Network Technology Co. Ltd

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	Nov 29 21:17:31 php1 sshd\[29750\]: Invalid user guhl from 42.157.129.158 Nov 29 21:17:31 php1 sshd\[29750\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158 Nov 29 21:17:33 php1 sshd\[29750\]: Failed password for invalid user guhl from 42.157.129.158 port 52992 ssh2 Nov 29 21:22:01 php1 sshd\[30202\]: Invalid user yoyo from 42.157.129.158 Nov 29 21:22:01 php1 sshd\[30202\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158	2019-11-30 15:39:22
attackbotsspam	5x Failed Password	2019-11-27 09:29:52
attackspam	2019-11-24T22:55:46.982759abusebot-8.cloudsearch.cf sshd\[24162\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158 user=root	2019-11-25 09:06:07
attack	Nov 23 20:21:05 auw2 sshd\[7055\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158 user=root Nov 23 20:21:07 auw2 sshd\[7055\]: Failed password for root from 42.157.129.158 port 34970 ssh2 Nov 23 20:29:46 auw2 sshd\[7738\]: Invalid user praefect from 42.157.129.158 Nov 23 20:29:46 auw2 sshd\[7738\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158 Nov 23 20:29:48 auw2 sshd\[7738\]: Failed password for invalid user praefect from 42.157.129.158 port 41002 ssh2	2019-11-24 14:50:54
attackbots	Nov 15 18:50:43 web1 sshd\[15631\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158 user=bin Nov 15 18:50:44 web1 sshd\[15631\]: Failed password for bin from 42.157.129.158 port 45574 ssh2 Nov 15 18:56:25 web1 sshd\[16099\]: Invalid user students from 42.157.129.158 Nov 15 18:56:25 web1 sshd\[16099\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158 Nov 15 18:56:26 web1 sshd\[16099\]: Failed password for invalid user students from 42.157.129.158 port 54118 ssh2	2019-11-16 13:09:11
attack	Nov 13 01:28:32 srv2 sshd\[4663\]: Invalid user triplex from 42.157.129.158 Nov 13 01:28:32 srv2 sshd\[4663\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158 Nov 13 01:28:34 srv2 sshd\[4663\]: Failed password for invalid user triplex from 42.157.129.158 port 59484 ssh2 ...	2019-11-13 15:55:47
attackbotsspam	2019-10-27T05:00:30.093431abusebot-8.cloudsearch.cf sshd\[8276\]: Invalid user web5 from 42.157.129.158 port 38978	2019-10-27 14:04:50
attack	$f2bV_matches	2019-10-19 00:17:35
attackspambots	F2B jail: sshd. Time: 2019-10-16 08:04:44, Reported by: VKReport	2019-10-16 14:08:56
attack	Oct 10 18:34:55 root sshd[26974]: Failed password for root from 42.157.129.158 port 39360 ssh2 Oct 10 18:41:02 root sshd[27073]: Failed password for root from 42.157.129.158 port 45506 ssh2 ...	2019-10-11 01:27:08
attackbotsspam	Sep 29 20:49:45 game-panel sshd[3038]: Failed password for backup from 42.157.129.158 port 54146 ssh2 Sep 29 20:56:48 game-panel sshd[3279]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158 Sep 29 20:56:50 game-panel sshd[3279]: Failed password for invalid user lab from 42.157.129.158 port 43030 ssh2	2019-09-30 05:05:14
attackspambots	2019-09-28T18:23:25.8054681240 sshd\[30174\]: Invalid user ro from 42.157.129.158 port 38170 2019-09-28T18:23:25.8091051240 sshd\[30174\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158 2019-09-28T18:23:28.0332811240 sshd\[30174\]: Failed password for invalid user ro from 42.157.129.158 port 38170 ssh2 ...	2019-09-29 00:44:18
attackspam	Sep 27 17:24:09 game-panel sshd[17890]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158 Sep 27 17:24:11 game-panel sshd[17890]: Failed password for invalid user openvpn from 42.157.129.158 port 42652 ssh2 Sep 27 17:30:41 game-panel sshd[18146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158	2019-09-28 01:42:51
attackbots	ssh brute force	2019-09-25 18:45:03
attackbots	Sep 17 10:51:55 srv206 sshd[5425]: Invalid user flatron from 42.157.129.158 ...	2019-09-17 19:38:51
attackspambots	Sep 5 09:42:29 hanapaa sshd\[7672\]: Invalid user 1 from 42.157.129.158 Sep 5 09:42:29 hanapaa sshd\[7672\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158 Sep 5 09:42:31 hanapaa sshd\[7672\]: Failed password for invalid user 1 from 42.157.129.158 port 51342 ssh2 Sep 5 09:47:45 hanapaa sshd\[8106\]: Invalid user q1w2e3 from 42.157.129.158 Sep 5 09:47:45 hanapaa sshd\[8106\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158	2019-09-06 03:50:16
attackspambots	Sep 3 11:32:42 MK-Soft-VM7 sshd\[15401\]: Invalid user ma from 42.157.129.158 port 37632 Sep 3 11:32:42 MK-Soft-VM7 sshd\[15401\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158 Sep 3 11:32:44 MK-Soft-VM7 sshd\[15401\]: Failed password for invalid user ma from 42.157.129.158 port 37632 ssh2 ...	2019-09-03 19:36:25
attackbotsspam	Aug 31 15:36:46 ip-172-31-1-72 sshd\[9031\]: Invalid user thomas from 42.157.129.158 Aug 31 15:36:46 ip-172-31-1-72 sshd\[9031\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158 Aug 31 15:36:48 ip-172-31-1-72 sshd\[9031\]: Failed password for invalid user thomas from 42.157.129.158 port 58214 ssh2 Aug 31 15:45:30 ip-172-31-1-72 sshd\[9357\]: Invalid user admin from 42.157.129.158 Aug 31 15:45:30 ip-172-31-1-72 sshd\[9357\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158	2019-09-01 01:10:38
attack	Aug 31 07:15:23 MK-Soft-VM6 sshd\[1208\]: Invalid user bridget from 42.157.129.158 port 34900 Aug 31 07:15:23 MK-Soft-VM6 sshd\[1208\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158 Aug 31 07:15:25 MK-Soft-VM6 sshd\[1208\]: Failed password for invalid user bridget from 42.157.129.158 port 34900 ssh2 ...	2019-08-31 15:17:55
attack	2019-08-26T06:22:15.997473enmeeting.mahidol.ac.th sshd\[22268\]: Invalid user chuan from 42.157.129.158 port 35752 2019-08-26T06:22:16.011673enmeeting.mahidol.ac.th sshd\[22268\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158 2019-08-26T06:22:18.302085enmeeting.mahidol.ac.th sshd\[22268\]: Failed password for invalid user chuan from 42.157.129.158 port 35752 ssh2 ...	2019-08-26 08:28:35
attackbotsspam	Aug 22 14:17:16 lcdev sshd\[16719\]: Invalid user corrina from 42.157.129.158 Aug 22 14:17:16 lcdev sshd\[16719\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158 Aug 22 14:17:18 lcdev sshd\[16719\]: Failed password for invalid user corrina from 42.157.129.158 port 34002 ssh2 Aug 22 14:25:27 lcdev sshd\[17682\]: Invalid user oz from 42.157.129.158 Aug 22 14:25:27 lcdev sshd\[17682\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158	2019-08-23 08:26:51
attackbots	2019-08-16T06:55:09.141936abusebot-7.cloudsearch.cf sshd\[22571\]: Invalid user dovecot from 42.157.129.158 port 37164	2019-08-16 15:08:54
attackspam	Aug 15 11:29:07 vtv3 sshd\[21485\]: Invalid user demouser from 42.157.129.158 port 40124 Aug 15 11:29:07 vtv3 sshd\[21485\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158 Aug 15 11:29:09 vtv3 sshd\[21485\]: Failed password for invalid user demouser from 42.157.129.158 port 40124 ssh2 Aug 15 11:37:19 vtv3 sshd\[25611\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158 user=root Aug 15 11:37:22 vtv3 sshd\[25611\]: Failed password for root from 42.157.129.158 port 60618 ssh2 Aug 15 11:54:10 vtv3 sshd\[1428\]: Invalid user test from 42.157.129.158 port 45148 Aug 15 11:54:10 vtv3 sshd\[1428\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158 Aug 15 11:54:13 vtv3 sshd\[1428\]: Failed password for invalid user test from 42.157.129.158 port 45148 ssh2 Aug 15 12:02:45 vtv3 sshd\[5689\]: Invalid user mathlida from 42.157.129.158 port 37416 Aug 15	2019-08-15 20:35:32
attackspambots	Aug 10 08:55:57 www sshd\[46350\]: Invalid user justin from 42.157.129.158 Aug 10 08:55:57 www sshd\[46350\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158 Aug 10 08:55:59 www sshd\[46350\]: Failed password for invalid user justin from 42.157.129.158 port 39270 ssh2 ...	2019-08-10 14:20:03

Comments on same subnet:

IP	Type	Details	Datetime
42.157.129.26	attackspambots	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-12 06:52:26
42.157.129.46	attack	Dec 9 21:05:56 hcbbdb sshd\[8037\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.46 user=news Dec 9 21:05:58 hcbbdb sshd\[8037\]: Failed password for news from 42.157.129.46 port 40414 ssh2 Dec 9 21:11:58 hcbbdb sshd\[8758\]: Invalid user 12345 from 42.157.129.46 Dec 9 21:11:58 hcbbdb sshd\[8758\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.46 Dec 9 21:12:00 hcbbdb sshd\[8758\]: Failed password for invalid user 12345 from 42.157.129.46 port 41156 ssh2	2019-12-10 05:22:55

Type

Details

Datetime

42.157.129.26

attackspambots

Honeypot attack, port: 445, PTR: PTR record not found

2020-01-12 06:52:26

42.157.129.46

attack

Dec  9 21:05:56 hcbbdb sshd\[8037\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.46  user=news
Dec  9 21:05:58 hcbbdb sshd\[8037\]: Failed password for news from 42.157.129.46 port 40414 ssh2
Dec  9 21:11:58 hcbbdb sshd\[8758\]: Invalid user 12345 from 42.157.129.46
Dec  9 21:11:58 hcbbdb sshd\[8758\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.46
Dec  9 21:12:00 hcbbdb sshd\[8758\]: Failed password for invalid user 12345 from 42.157.129.46 port 41156 ssh2

2019-12-10 05:22:55

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.157.129.158
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40486
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.157.129.158.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081000 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Aug 10 14:19:55 CST 2019
;; MSG SIZE  rcvd: 118

Host info

Host 158.129.157.42.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 158.129.157.42.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
51.75.24.200	attackspam	May 21 09:39:01 server sshd[12423]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.24.200 May 21 09:39:03 server sshd[12423]: Failed password for invalid user eaf from 51.75.24.200 port 34136 ssh2 May 21 09:42:36 server sshd[12915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.24.200 ...	2020-05-21 15:51:15
103.36.103.48	attack	Invalid user bvh from 103.36.103.48 port 56432	2020-05-21 16:18:27
117.0.155.147	attackbots	May 21 05:54:17 ArkNodeAT sshd\[27228\]: Invalid user tit0nich from 117.0.155.147 May 21 05:54:17 ArkNodeAT sshd\[27228\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.0.155.147 May 21 05:54:20 ArkNodeAT sshd\[27228\]: Failed password for invalid user tit0nich from 117.0.155.147 port 63426 ssh2	2020-05-21 15:48:47
152.67.7.117	attackspambots	2020-05-21T06:45:23.095856abusebot-7.cloudsearch.cf sshd[14574]: Invalid user huwenbo from 152.67.7.117 port 34092 2020-05-21T06:45:23.102273abusebot-7.cloudsearch.cf sshd[14574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.67.7.117 2020-05-21T06:45:23.095856abusebot-7.cloudsearch.cf sshd[14574]: Invalid user huwenbo from 152.67.7.117 port 34092 2020-05-21T06:45:25.546320abusebot-7.cloudsearch.cf sshd[14574]: Failed password for invalid user huwenbo from 152.67.7.117 port 34092 ssh2 2020-05-21T06:50:22.810741abusebot-7.cloudsearch.cf sshd[14821]: Invalid user jip from 152.67.7.117 port 49936 2020-05-21T06:50:22.817222abusebot-7.cloudsearch.cf sshd[14821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.67.7.117 2020-05-21T06:50:22.810741abusebot-7.cloudsearch.cf sshd[14821]: Invalid user jip from 152.67.7.117 port 49936 2020-05-21T06:50:24.975217abusebot-7.cloudsearch.cf sshd[14821]: Failed pass ...	2020-05-21 15:55:46
138.68.4.8	attackspam	May 21 10:11:21 lukav-desktop sshd\[20846\]: Invalid user ltr from 138.68.4.8 May 21 10:11:21 lukav-desktop sshd\[20846\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.4.8 May 21 10:11:23 lukav-desktop sshd\[20846\]: Failed password for invalid user ltr from 138.68.4.8 port 53486 ssh2 May 21 10:14:44 lukav-desktop sshd\[637\]: Invalid user icn from 138.68.4.8 May 21 10:14:44 lukav-desktop sshd\[637\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.4.8	2020-05-21 16:19:16
93.170.52.199	attack	May 20 19:02:27 eddieflores sshd\[9745\]: Invalid user modb from 93.170.52.199 May 20 19:02:27 eddieflores sshd\[9745\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.170.52.199 May 20 19:02:30 eddieflores sshd\[9745\]: Failed password for invalid user modb from 93.170.52.199 port 54950 ssh2 May 20 19:06:07 eddieflores sshd\[10043\]: Invalid user oxq from 93.170.52.199 May 20 19:06:07 eddieflores sshd\[10043\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.170.52.199	2020-05-21 15:49:47
137.59.65.30	attackbotsspam	May 21 05:53:58 icecube postfix/smtpd[55164]: NOQUEUE: reject: RCPT from unknown[137.59.65.30]: 553 5.7.1 : Sender address rejected: not logged in; from= to= proto=ESMTP helo=<[127.0.0.1]>	2020-05-21 15:58:28
77.247.108.119	attackbots	May 21 08:55:01 debian-2gb-nbg1-2 kernel: \[12302924.109671\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=77.247.108.119 DST=195.201.40.59 LEN=40 TOS=0x08 PREC=0x20 TTL=242 ID=39786 PROTO=TCP SPT=42525 DPT=5038 WINDOW=1024 RES=0x00 SYN URGP=0	2020-05-21 15:59:00
113.53.147.144	attack	Honeypot hit.	2020-05-21 16:10:43
185.176.27.26	attackbotsspam	05/21/2020-03:53:19.044858 185.176.27.26 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2020-05-21 16:12:27
198.98.51.63	attackspambots	Port scan on 1 port(s): 53413	2020-05-21 16:01:16
222.105.177.33	attack	Invalid user pzl from 222.105.177.33 port 52806	2020-05-21 15:43:26
66.70.178.3	attackspambots	May 21 03:54:03 ssh2 sshd[97586]: User root from ns546847.ip-66-70-178.net not allowed because not listed in AllowUsers May 21 03:54:03 ssh2 sshd[97586]: Failed password for invalid user root from 66.70.178.3 port 58712 ssh2 May 21 03:54:04 ssh2 sshd[97586]: Failed password for invalid user root from 66.70.178.3 port 58712 ssh2 ...	2020-05-21 15:55:24
95.85.9.94	attackspam	Invalid user qej from 95.85.9.94 port 60851	2020-05-21 15:46:22
194.152.206.12	attack	Invalid user ull from 194.152.206.12 port 53410	2020-05-21 16:14:27

Recently Reported IPs

244.209.112.55	82.169.174.77	138.97.226.244	11.150.217.20
186.216.71.122	103.249.111.201	85.198.130.133	35.225.249.169
191.53.249.98	167.99.60.231	93.147.22.31	117.96.235.39
5.107.31.42	121.128.153.234	171.229.76.15	211.104.72.244
113.185.109.228	14.162.212.255	36.83.100.128	42.82.93.128