This IP address has been reported a total of
6
times from
6 distinct
sources.
42.3.158.118 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 2
reports;
Australia
with 1
report;
Germany
with 1
report.
The most common categories in these recent reports were:
Brute-Force
3
times;
Port Scan
3
times;
SSH
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
42.3.158.118 (HK/Hong Kong/42-3-158-118.ptr.netvigator.com), 5 distributed sshd attacks on account [ ...
show more42.3.158.118 (HK/Hong Kong/42-3-158-118.ptr.netvigator.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct 6 07:07:25 syd2 sshd[2170562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.17.187.156 user=root
Oct 6 07:07:27 syd2 sshd[2170562]: Failed password for root from 59.17.187.156 port 48060 ssh2
Oct 6 06:37:30 syd2 sshd[2164585]: Failed password for root from 42.3.158.118 port 50488 ssh2
Oct 6 07:05:31 syd2 sshd[2170157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.47.167.83 user=root
Oct 6 07:05:34 syd2 sshd[2170157]: Failed password for root from 118.47.167.83 port 59114 ssh2
IP Addresses Blocked:
59.17.187.156 (KR/South Korea/-)
show less
SSH credential brute-force observed by honeypot.
Source IP: 42.3.158.118
Targeted device: Ubuntu ser ...
show moreSSH credential brute-force observed by honeypot.
Source IP: 42.3.158.118
Targeted device: Ubuntu server
First seen: 27 Sep 2026 12:38:26 UTC
Last seen: 27 Sep 2026 12:38:26 UTC
Attempts: 1
Client: SSH-2.0-Go
Sample credentials: operator:operator
show less
Repeated failed login attempts, for example: Failed password for invalid user admin from 42.3.158.11 ...
show moreRepeated failed login attempts, for example: Failed password for invalid user admin from 42.3.158.118 port 49008 ssh2 (SSH port 22)
show less
