必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
42.156.138.94 attackbotsspam
The IP has triggered Cloudflare WAF. CF-Ray: 541577b5aee6e821 | WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/2 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 04:46:31
42.156.138.40 attack
The IP has triggered Cloudflare WAF. CF-Ray: 54157a78e8eeeb99 | WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/2 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 02:29:54
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.156.138.191
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64486
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;42.156.138.191.			IN	A

;; AUTHORITY SECTION:
.			263	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022062600 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 26 23:09:54 CST 2022
;; MSG SIZE  rcvd: 107
HOST信息:
191.138.156.42.in-addr.arpa domain name pointer shenmaspider-42-156-138-191.crawl.sm.cn.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
191.138.156.42.in-addr.arpa	name = shenmaspider-42-156-138-191.crawl.sm.cn.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
222.186.180.147 attack
2019-10-28T21:52:34.734724lon01.zurich-datacenter.net sshd\[585\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.147  user=root
2019-10-28T21:52:37.060289lon01.zurich-datacenter.net sshd\[585\]: Failed password for root from 222.186.180.147 port 42244 ssh2
2019-10-28T21:52:41.244777lon01.zurich-datacenter.net sshd\[585\]: Failed password for root from 222.186.180.147 port 42244 ssh2
2019-10-28T21:52:45.313813lon01.zurich-datacenter.net sshd\[585\]: Failed password for root from 222.186.180.147 port 42244 ssh2
2019-10-28T21:52:49.262957lon01.zurich-datacenter.net sshd\[585\]: Failed password for root from 222.186.180.147 port 42244 ssh2
...
2019-10-29 04:52:55
37.187.0.20 attackbots
Oct 28 21:27:37 SilenceServices sshd[15118]: Failed password for root from 37.187.0.20 port 43550 ssh2
Oct 28 21:31:41 SilenceServices sshd[17729]: Failed password for root from 37.187.0.20 port 53612 ssh2
2019-10-29 04:49:41
5.13.254.105 attackspambots
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/5.13.254.105/ 
 
 RO - 1H : (34)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : RO 
 NAME ASN : ASN8708 
 
 IP : 5.13.254.105 
 
 CIDR : 5.12.0.0/14 
 
 PREFIX COUNT : 236 
 
 UNIQUE IP COUNT : 2129408 
 
 
 ATTACKS DETECTED ASN8708 :  
  1H - 1 
  3H - 3 
  6H - 7 
 12H - 12 
 24H - 27 
 
 DateTime : 2019-10-28 21:11:02 
 
 INFO :
2019-10-29 05:01:45
200.209.174.76 attackbotsspam
Oct 28 21:10:28 v22018076622670303 sshd\[14350\]: Invalid user sixtynine from 200.209.174.76 port 56800
Oct 28 21:10:28 v22018076622670303 sshd\[14350\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.209.174.76
Oct 28 21:10:30 v22018076622670303 sshd\[14350\]: Failed password for invalid user sixtynine from 200.209.174.76 port 56800 ssh2
...
2019-10-29 05:23:16
120.224.72.89 attackbots
Oct 28 13:38:32 server sshd\[6188\]: Invalid user ubuntu from 120.224.72.89
Oct 28 13:38:32 server sshd\[6188\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.224.72.89 
Oct 28 13:38:34 server sshd\[6188\]: Failed password for invalid user ubuntu from 120.224.72.89 port 34940 ssh2
Oct 28 23:11:24 server sshd\[10570\]: Invalid user www from 120.224.72.89
Oct 28 23:11:24 server sshd\[10570\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.224.72.89 
...
2019-10-29 04:46:22
175.211.112.250 attack
2019-10-28T20:11:05.847787abusebot-5.cloudsearch.cf sshd\[22044\]: Invalid user bjorn from 175.211.112.250 port 38096
2019-10-29 04:58:30
45.136.111.109 attack
Oct 28 20:37:32 h2177944 kernel: \[5167223.380503\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=57246 PROTO=TCP SPT=44934 DPT=2121 WINDOW=1024 RES=0x00 SYN URGP=0 
Oct 28 20:37:43 h2177944 kernel: \[5167233.941085\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=13960 PROTO=TCP SPT=44934 DPT=9999 WINDOW=1024 RES=0x00 SYN URGP=0 
Oct 28 20:44:21 h2177944 kernel: \[5167632.002546\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=45334 PROTO=TCP SPT=44934 DPT=9191 WINDOW=1024 RES=0x00 SYN URGP=0 
Oct 28 21:07:26 h2177944 kernel: \[5169016.702820\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=45258 PROTO=TCP SPT=44934 DPT=9292 WINDOW=1024 RES=0x00 SYN URGP=0 
Oct 28 21:11:25 h2177944 kernel: \[5169255.636166\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214.
2019-10-29 04:46:50
202.113.3.218 attack
Fail2Ban Ban Triggered
2019-10-29 05:19:01
170.210.60.30 attack
Oct 28 10:29:22 hpm sshd\[14138\]: Invalid user xiongnihao from 170.210.60.30
Oct 28 10:29:22 hpm sshd\[14138\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.210.60.30
Oct 28 10:29:24 hpm sshd\[14138\]: Failed password for invalid user xiongnihao from 170.210.60.30 port 56677 ssh2
Oct 28 10:38:05 hpm sshd\[14863\]: Invalid user 1234 from 170.210.60.30
Oct 28 10:38:05 hpm sshd\[14863\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.210.60.30
2019-10-29 04:44:55
187.0.160.130 attackspam
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/187.0.160.130/ 
 
 BR - 1H : (430)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : BR 
 NAME ASN : ASN28240 
 
 IP : 187.0.160.130 
 
 CIDR : 187.0.160.0/24 
 
 PREFIX COUNT : 8 
 
 UNIQUE IP COUNT : 2048 
 
 
 ATTACKS DETECTED ASN28240 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2019-10-28 21:10:44 
 
 INFO : Port SSH 22 Scan Detected and Blocked by ADMIN  - data recovery
2019-10-29 05:13:20
217.68.215.32 attackspam
slow and persistent scanner
2019-10-29 05:20:41
114.46.108.166 attackspam
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/114.46.108.166/ 
 
 TW - 1H : (224)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : TW 
 NAME ASN : ASN3462 
 
 IP : 114.46.108.166 
 
 CIDR : 114.46.0.0/16 
 
 PREFIX COUNT : 390 
 
 UNIQUE IP COUNT : 12267520 
 
 
 ATTACKS DETECTED ASN3462 :  
  1H - 17 
  3H - 78 
  6H - 172 
 12H - 181 
 24H - 217 
 
 DateTime : 2019-10-28 21:10:52 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-10-29 05:08:32
107.170.227.141 attackbotsspam
Oct 28 21:58:27 localhost sshd\[830\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.227.141  user=root
Oct 28 21:58:29 localhost sshd\[830\]: Failed password for root from 107.170.227.141 port 48364 ssh2
Oct 28 22:02:27 localhost sshd\[1240\]: Invalid user hdduser from 107.170.227.141 port 58364
Oct 28 22:02:27 localhost sshd\[1240\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.227.141
2019-10-29 05:14:32
159.65.88.161 attackbots
SSH bruteforce (Triggered fail2ban)
2019-10-29 04:46:08
178.62.54.233 attackbots
2019-10-28T20:52:12.121355shield sshd\[14162\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.54.233  user=root
2019-10-28T20:52:13.759509shield sshd\[14162\]: Failed password for root from 178.62.54.233 port 55864 ssh2
2019-10-28T20:56:04.545011shield sshd\[15255\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.54.233  user=root
2019-10-28T20:56:06.371477shield sshd\[15255\]: Failed password for root from 178.62.54.233 port 46945 ssh2
2019-10-28T20:59:53.011207shield sshd\[15958\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.54.233  user=root
2019-10-29 05:05:26

最近上报的IP列表

180.76.148.69 169.229.170.200 169.229.171.53 169.229.171.67
169.229.173.227 169.229.171.161 137.226.249.180 59.126.87.60
45.85.117.141 137.226.232.204 180.76.139.63 137.226.232.250
46.209.217.132 137.226.31.20 137.226.230.57 137.226.230.84
137.226.229.178 137.226.231.51 180.76.36.15 180.76.36.0