42.156.138.11 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
42.156.138.94	attackbotsspam	The IP has triggered Cloudflare WAF. CF-Ray: 541577b5aee6e821 \| WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/2 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 04:46:31
42.156.138.40	attack	The IP has triggered Cloudflare WAF. CF-Ray: 54157a78e8eeeb99 \| WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/2 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 02:29:54

类型

评论内容

时间

42.156.138.94

attackbotsspam

The IP has triggered Cloudflare WAF. CF-Ray: 541577b5aee6e821 | WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/2 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 04:46:31

42.156.138.40

attack

The IP has triggered Cloudflare WAF. CF-Ray: 54157a78e8eeeb99 | WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/2 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 02:29:54

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.156.138.11
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34947
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;42.156.138.11.			IN	A

;; AUTHORITY SECTION:
.			504	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022062600 1800 900 604800 86400

;; Query time: 22 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 26 21:58:34 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

11.138.156.42.in-addr.arpa domain name pointer shenmaspider-42-156-138-11.crawl.sm.cn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
11.138.156.42.in-addr.arpa	name = shenmaspider-42-156-138-11.crawl.sm.cn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
46.142.18.165	attackbots	Failed password for root from 46.142.18.165 port 48337 ssh2 Invalid user damares from 46.142.18.165 port 54103 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165-18-142-46.pool.kielnet.net Invalid user damares from 46.142.18.165 port 54103 Failed password for invalid user damares from 46.142.18.165 port 54103 ssh2	2020-09-01 07:13:50
46.101.149.23	attackspambots	Aug 31 23:01:01 dev0-dcde-rnet sshd[370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.149.23 Aug 31 23:01:03 dev0-dcde-rnet sshd[370]: Failed password for invalid user admin from 46.101.149.23 port 60882 ssh2 Aug 31 23:15:36 dev0-dcde-rnet sshd[468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.149.23	2020-09-01 07:08:48
206.189.127.6	attackbotsspam	invalid user gavin from 206.189.127.6 port 46872 ssh2	2020-09-01 06:44:12
51.91.250.49	attack	Sep 1 00:37:19 haigwepa sshd[6589]: Failed password for root from 51.91.250.49 port 54398 ssh2 ...	2020-09-01 06:46:19
27.205.213.6	attackbotsspam	Portscan detected	2020-09-01 07:15:49
200.119.110.137	attackspambots	Unauthorised access (Sep 1) SRC=200.119.110.137 LEN=52 TTL=112 ID=10927 DF TCP DPT=445 WINDOW=8192 SYN	2020-09-01 06:54:50
106.245.228.122	attackbotsspam	invalid user test2 from 106.245.228.122 port 40167 ssh2	2020-09-01 07:10:24
91.101.26.68	attackbots	Port 22 Scan, PTR: None	2020-09-01 07:01:53
111.231.71.53	attackbotsspam	Aug 31 23:23:22 srv-ubuntu-dev3 sshd[4339]: Invalid user domain from 111.231.71.53 Aug 31 23:23:22 srv-ubuntu-dev3 sshd[4339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.71.53 Aug 31 23:23:22 srv-ubuntu-dev3 sshd[4339]: Invalid user domain from 111.231.71.53 Aug 31 23:23:23 srv-ubuntu-dev3 sshd[4339]: Failed password for invalid user domain from 111.231.71.53 port 48602 ssh2 Aug 31 23:27:30 srv-ubuntu-dev3 sshd[4728]: Invalid user svn from 111.231.71.53 Aug 31 23:27:30 srv-ubuntu-dev3 sshd[4728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.71.53 Aug 31 23:27:30 srv-ubuntu-dev3 sshd[4728]: Invalid user svn from 111.231.71.53 Aug 31 23:27:32 srv-ubuntu-dev3 sshd[4728]: Failed password for invalid user svn from 111.231.71.53 port 47730 ssh2 Aug 31 23:31:31 srv-ubuntu-dev3 sshd[5216]: Invalid user uat from 111.231.71.53 ...	2020-09-01 07:00:47
164.90.151.183	attack	(smtpauth) Failed SMTP AUTH login from 164.90.151.183 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2020-08-31 17:59:16 dovecot_login authenticator failed for (ADMIN) [164.90.151.183]:47318: 535 Incorrect authentication data (set_id=commerciale@tecnirosa.com.br) 2020-08-31 18:02:21 dovecot_login authenticator failed for (ADMIN) [164.90.151.183]:57620: 535 Incorrect authentication data (set_id=amministrazione@tecnirosa.com.br) 2020-08-31 18:05:25 dovecot_login authenticator failed for (ADMIN) [164.90.151.183]:39640: 535 Incorrect authentication data (set_id=comercial@tecnirosa.com.br) 2020-08-31 18:08:30 dovecot_login authenticator failed for (ADMIN) [164.90.151.183]:49916: 535 Incorrect authentication data (set_id=auctions@tecnirosa.com.br) 2020-08-31 18:11:37 dovecot_login authenticator failed for (ADMIN) [164.90.151.183]:60176: 535 Incorrect authentication data (set_id=auction@tecnirosa.com.br)	2020-09-01 06:47:25
176.113.115.132	attack	Aug 31 23:11:09 srv1 dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=176.113.115.132, lip=94.237.92.191, TLS, session=<3MRS1zKujciwcXOE> Aug 31 23:11:15 srv1 dovecot: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=176.113.115.132, lip=94.237.92.191, TLS, session=<3LNs1zKu98iwcXOE> Aug 31 23:11:21 srv1 dovecot: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=176.113.115.132, lip=94.237.92.191, session= Aug 31 23:11:27 srv1 dovecot: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=176.113.115.132, lip=94.237.92.191, session=<5aMg2DKupMuwcXOE> Aug 31 23:11:29 srv1 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=176 ...	2020-09-01 06:53:35
142.93.146.198	attack	firewall-block, port(s): 22/tcp	2020-09-01 06:45:18
115.159.198.41	attackspam	Aug 31 23:37:37 OPSO sshd\[21581\]: Invalid user zt from 115.159.198.41 port 32830 Aug 31 23:37:37 OPSO sshd\[21581\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.198.41 Aug 31 23:37:40 OPSO sshd\[21581\]: Failed password for invalid user zt from 115.159.198.41 port 32830 ssh2 Aug 31 23:42:52 OPSO sshd\[22549\]: Invalid user magno from 115.159.198.41 port 35358 Aug 31 23:42:52 OPSO sshd\[22549\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.198.41	2020-09-01 07:03:37
45.142.120.147	attackspam	2020-09-01 00:50:30 dovecot_login authenticator failed for \(User\) \[45.142.120.147\]: 535 Incorrect authentication data \(set_id=hcs@no-server.de\) 2020-09-01 00:50:40 dovecot_login authenticator failed for \(User\) \[45.142.120.147\]: 535 Incorrect authentication data \(set_id=hcs@no-server.de\) 2020-09-01 00:50:44 dovecot_login authenticator failed for \(User\) \[45.142.120.147\]: 535 Incorrect authentication data \(set_id=hcs@no-server.de\) 2020-09-01 00:50:44 dovecot_login authenticator failed for \(User\) \[45.142.120.147\]: 535 Incorrect authentication data \(set_id=hcs@no-server.de\) 2020-09-01 00:51:09 dovecot_login authenticator failed for \(User\) \[45.142.120.147\]: 535 Incorrect authentication data \(set_id=dev-chat-service@no-server.de\) 2020-09-01 00:51:17 dovecot_login authenticator failed for \(User\) \[45.142.120.147\]: 535 Incorrect authentication data \(set_id=dev-chat-service@no-server.de\) 2020-09-01 00:51:21 dovecot_login authenticator failed for \(User\) \[45.1 ...	2020-09-01 07:05:11
75.137.147.184	attackbots	SSH Invalid Login	2020-09-01 06:52:58

最近上报的IP列表

137.226.222.234	106.11.153.10	42.236.102.23	95.221.51.130
96.1.26.177	96.35.184.218	96.39.234.213	96.67.65.150
137.226.237.192	169.229.19.171	169.229.19.151	169.229.19.163
169.229.19.190	169.229.20.138	169.229.20.35	169.229.21.23
169.229.42.141	169.229.42.197	169.229.42.187	169.229.42.241