This IP address has been reported a total of
453
times from
287 distinct
sources.
170.130.201.42 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot caught web brute force / scanning from United States; 46 events recorded by kiosk-watchtowe ...
show moreHoneypot caught web brute force / scanning from United States; 46 events recorded by kiosk-watchtower (Cowrie + canary stack). Automated report from honeypot, please do not contact owner.
show less
ICMP + TCP portscan or auth bruteforce on ports: 2222 domain ssh telnet :
Firewall: Within 2026-05-1 ...
show moreICMP + TCP portscan or auth bruteforce on ports: 2222 domain ssh telnet :
Firewall: Within 2026-05-10 16:01:23 - 2026-05-10 16:01:23 CEST(+0200) identified: unallowed access from 170.130.201.42/32 on port 23(telnet) (1 trial)
Fail2ban: Within 2026-05-10 16:01:23 - 2026-05-10 16:01:24 CEST(+0200) banned: 5 times by fail2ban[firewall]; 5 times by fail2ban[recidive]
show less
Attack detected by Fortinet - apache: Apache.HTTP.Server.cgi-bin.Path.Traversal - 2026-05-10 18:49:5 ...
show moreAttack detected by Fortinet - apache: Apache.HTTP.Server.cgi-bin.Path.Traversal - 2026-05-10 18:49:51 - Source Port 46346
show less
Connection to port 80 with data transfer.
Data preview: POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/ ...
show moreConnection to port 80 with data transfer.
Data preview: POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
Host: 51.21.134.169
show less
2026-05-10T18:30:58.894380-07:00 cm0app00.cyberstadium.com sshd[4091607]: Invalid user admin from 17 ...
show more2026-05-10T18:30:58.894380-07:00 cm0app00.cyberstadium.com sshd[4091607]: Invalid user admin from 170.130.201.42 port 35342
2026-05-10T18:31:29.418812-07:00 cm0app00.cyberstadium.com sshd[4091845]: Invalid user orangepi from 170.130.201.42 port 50074
2026-05-10T18:35:01.925833-07:00 cm0app00.cyberstadium.com sshd[4093553]: Invalid user test from 170.130.201.42 port 48724
2026-05-10T18:35:32.247197-07:00 cm0app00.cyberstadium.com sshd[4093784]: Invalid user user from 170.130.201.42 port 45774
2026-05-10T18:36:32.870503-07:00 cm0app00.cyberstadium.com sshd[4094268]: Invalid user admin from 170.130.201.42 port 36578
...
show less
(sshd) Failed SSH login from 170.130.201.42 (US/-/fileagi.com): 5 in the last 3600 secs; Ports: *; D ...
show more(sshd) Failed SSH login from 170.130.201.42 (US/-/fileagi.com): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: May 10 20:30:47 14506 sshd[24474]: Invalid user admin from 170.130.201.42 port 60594
May 10 20:30:49 14506 sshd[24474]: Failed password for invalid user admin from 170.130.201.42 port 60594 ssh2
May 10 20:31:19 14506 sshd[24573]: Invalid user orangepi from 170.130.201.42 port 47132
May 10 20:31:21 14506 sshd[24573]: Failed password for invalid user orangepi from 170.130.201.42 port 47132 ssh2
May 10 20:31:52 14506 sshd[24625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.130.201.42 user=root
show less
2026-05-10T21:31:27.838109-04:00 debian sshd[379226]: Invalid user orangepi from 170.130.201.42 port ...
show more2026-05-10T21:31:27.838109-04:00 debian sshd[379226]: Invalid user orangepi from 170.130.201.42 port 34634
2026-05-10T21:31:27.841282-04:00 debian sshd[379226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.130.201.42
2026-05-10T21:31:30.111124-04:00 debian sshd[379226]: Failed password for invalid user orangepi from 170.130.201.42 port 34634 ssh2
2026-05-10T21:32:02.658984-04:00 debian sshd[379300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.130.201.42 user=root
2026-05-10T21:32:04.731905-04:00 debian sshd[379300]: Failed password for root from 170.130.201.42 port 45818 ssh2
...
show less
Brute-Force
SSH
Showing 106 to
120
of 453 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩