Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Shanghai Blue Cloud Technology Co. Ltd

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
Oct 25 20:56:00 game-panel sshd[3087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.4.104
Oct 25 20:56:02 game-panel sshd[3087]: Failed password for invalid user QWEqwe!@# from 42.159.4.104 port 51804 ssh2
Oct 25 21:01:27 game-panel sshd[3249]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.4.104
2019-10-26 05:46:27
attackspambots
Invalid user samura from 42.159.4.104 port 55332
2019-10-19 19:08:21
attackspam
2019-10-12T01:13:45.235757tmaserv sshd\[2585\]: Failed password for invalid user 123 from 42.159.4.104 port 49400 ssh2
2019-10-12T02:17:54.621797tmaserv sshd\[5400\]: Invalid user P@ssw0rd01 from 42.159.4.104 port 47030
2019-10-12T02:17:54.626266tmaserv sshd\[5400\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.4.104
2019-10-12T02:17:56.061745tmaserv sshd\[5400\]: Failed password for invalid user P@ssw0rd01 from 42.159.4.104 port 47030 ssh2
2019-10-12T02:22:52.508357tmaserv sshd\[5584\]: Invalid user P@ssw0rd01 from 42.159.4.104 port 53366
2019-10-12T02:22:52.514450tmaserv sshd\[5584\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.4.104
...
2019-10-12 07:57:54
attackbots
Oct  5 06:59:24 MK-Soft-VM6 sshd[5459]: Failed password for root from 42.159.4.104 port 52008 ssh2
...
2019-10-05 13:43:48
attackspam
2019-09-02T09:14:39.592700abusebot-8.cloudsearch.cf sshd\[4725\]: Invalid user miguel from 42.159.4.104 port 60670
2019-09-02 17:28:20
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.159.4.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45005
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.159.4.104.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081501 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Aug 15 23:02:03 CST 2019
;; MSG SIZE  rcvd: 116
Host info
Host 104.4.159.42.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 104.4.159.42.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
42.99.180.135 attackspambots
Sep 13 20:15:47 pkdns2 sshd\[11749\]: Invalid user hubert from 42.99.180.135Sep 13 20:15:49 pkdns2 sshd\[11749\]: Failed password for invalid user hubert from 42.99.180.135 port 43700 ssh2Sep 13 20:18:30 pkdns2 sshd\[11863\]: Invalid user 888888 from 42.99.180.135Sep 13 20:18:32 pkdns2 sshd\[11863\]: Failed password for invalid user 888888 from 42.99.180.135 port 39136 ssh2Sep 13 20:21:12 pkdns2 sshd\[12016\]: Invalid user blaster from 42.99.180.135Sep 13 20:21:14 pkdns2 sshd\[12016\]: Failed password for invalid user blaster from 42.99.180.135 port 34586 ssh2
...
2020-09-14 12:28:29
49.65.247.4 attackspambots
Invalid user semenzato from 49.65.247.4 port 23546
2020-09-14 12:34:39
156.215.221.17 attack
1600016363 - 09/13/2020 18:59:23 Host: 156.215.221.17/156.215.221.17 Port: 445 TCP Blocked
2020-09-14 12:38:23
79.0.147.19 attackbotsspam
Telnet Server BruteForce Attack
2020-09-14 12:57:38
157.245.163.0 attackbotsspam
srv02 Mass scanning activity detected Target: 21503  ..
2020-09-14 12:51:50
78.38.23.114 attackspambots
SMB Server BruteForce Attack
2020-09-14 12:48:41
106.52.240.160 attack
$f2bV_matches
2020-09-14 12:46:08
212.83.128.2 attackspambots
 TCP (SYN) 212.83.128.2:54868 -> port 8080, len 40
2020-09-14 12:20:45
119.96.230.241 attackbotsspam
Sep 13 18:52:34 abendstille sshd\[13969\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.96.230.241  user=root
Sep 13 18:52:36 abendstille sshd\[13969\]: Failed password for root from 119.96.230.241 port 44496 ssh2
Sep 13 18:56:02 abendstille sshd\[18169\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.96.230.241  user=root
Sep 13 18:56:04 abendstille sshd\[18169\]: Failed password for root from 119.96.230.241 port 33312 ssh2
Sep 13 18:59:18 abendstille sshd\[21185\]: Invalid user carlos from 119.96.230.241
...
2020-09-14 12:40:27
81.147.185.11 attackbotsspam
Lines containing failures of 81.147.185.11
Sep 10 11:14:17 own sshd[13590]: Invalid user pi from 81.147.185.11 port 44962
Sep 10 11:14:17 own sshd[13591]: Invalid user pi from 81.147.185.11 port 44970
Sep 10 11:14:17 own sshd[13590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.147.185.11
Sep 10 11:14:17 own sshd[13591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.147.185.11


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=81.147.185.11
2020-09-14 12:50:28
106.75.141.160 attackbots
$f2bV_matches
2020-09-14 12:58:35
145.239.85.228 attackspambots
Sep 14 01:26:19 firewall sshd[10302]: Failed password for root from 145.239.85.228 port 59706 ssh2
Sep 14 01:30:33 firewall sshd[10380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.85.228  user=root
Sep 14 01:30:35 firewall sshd[10380]: Failed password for root from 145.239.85.228 port 44550 ssh2
...
2020-09-14 12:31:08
111.231.71.157 attackspambots
Sep 14 06:29:39 host2 sshd[1453522]: Failed password for root from 111.231.71.157 port 46726 ssh2
Sep 14 06:29:38 host2 sshd[1453522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.71.157  user=root
Sep 14 06:29:39 host2 sshd[1453522]: Failed password for root from 111.231.71.157 port 46726 ssh2
Sep 14 06:31:55 host2 sshd[1453577]: Invalid user logan from 111.231.71.157 port 42328
Sep 14 06:31:55 host2 sshd[1453577]: Invalid user logan from 111.231.71.157 port 42328
...
2020-09-14 12:47:52
191.33.135.120 attack
php WP PHPmyadamin ABUSE blocked for 12h
2020-09-14 12:54:16
134.35.103.5 attackspambots
Automatic report - Port Scan Attack
2020-09-14 12:17:15

Recently Reported IPs

167.114.47.81 160.27.163.143 137.62.100.32 103.10.120.122
75.170.235.236 205.24.99.127 159.139.132.207 103.227.9.50
222.154.102.53 17.164.12.95 190.246.25.189 26.191.58.248
156.57.230.134 20.151.212.108 122.154.132.175 183.166.1.181
119.60.119.77 188.222.136.206 101.204.83.146 144.237.124.44