必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
42.156.139.7 attackspambots
Automated report (2020-08-24T11:55:46+08:00). Misbehaving bot detected at this address.
2020-08-24 13:08:11
42.156.139.151 attackspambots
ICMP MH Probe, Scan /Distributed -
2020-02-13 22:26:41
42.156.139.60 attackspambots
The IP has triggered Cloudflare WAF. CF-Ray: 5410f168bac7ebd9 | WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: theme-suka.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 06:59:11
42.156.139.16 attackspam
The IP has triggered Cloudflare WAF. CF-Ray: 5413b9b13abceef2 | WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/2 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 04:20:39
42.156.139.46 attackspambots
The IP has triggered Cloudflare WAF. CF-Ray: 5415cf340f7d7704 | WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/2 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 02:08:22
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.156.139.154
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62236
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;42.156.139.154.			IN	A

;; AUTHORITY SECTION:
.			289	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022062600 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 26 23:37:31 CST 2022
;; MSG SIZE  rcvd: 107
HOST信息:
154.139.156.42.in-addr.arpa domain name pointer shenmaspider-42-156-139-154.crawl.sm.cn.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
154.139.156.42.in-addr.arpa	name = shenmaspider-42-156-139-154.crawl.sm.cn.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
82.221.105.7 attack
ET CINS Active Threat Intelligence Poor Reputation IP group 76 - port: 2067 proto: TCP cat: Misc Attack
2019-10-22 05:46:20
104.244.225.177 attackbotsspam
2019-10-21 x@x
2019-10-21 21:09:03 unexpected disconnection while reading SMTP command from ([104.244.225.177]) [104.244.225.177]:6457 I=[10.100.18.21]:25 (error: Connection reset by peer)
2019-10-21 x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=104.244.225.177
2019-10-22 05:58:01
94.23.70.116 attack
2019-10-21T21:41:27.481160abusebot.cloudsearch.cf sshd\[13896\]: Invalid user hz from 94.23.70.116 port 40200
2019-10-21T21:41:27.485751abusebot.cloudsearch.cf sshd\[13896\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.23.70.116
2019-10-22 05:52:28
189.68.76.52 attackspam
2019-10-21 17:01:49,303 WARN  [ImapSSLServer-288] [ip=127.0.0.1;oip=189.68.76.52;via=10.142.0.2(nginx/1.7.1);ua=Zimbra/8.6.0_GA_1153;cid=1931;] security - cmd=Auth; account=josecarlos@primeboating.com.br; protocol=imap; error=authentication failed for [josecarlos@primeboating.com.br], account lockout;
2019-10-21 17:02:03,351 WARN  [ImapSSLServer-288] [ip=127.0.0.1;oip=189.68.76.52;via=Microsoft Outlook/16.0,10.142.0.2(nginx/1.7.1);ua=Zimbra/8.6.0_GA_1153;cid=1932;] security - cmd=Auth; account=josecarlos@primeboating.com.br; protocol=imap; error=authentication failed for [josecarlos@primeboating.com.br], account lockout;
2019-10-21 17:02:16,755 WARN  [ImapSSLServer-288] [ip=127.0.0.1;oip=189.68.76.52;via=Microsoft Outlook/16.0,10.142.0.2(nginx/1.7.1);ua=Zimbra/8.6.0_GA_1153;cid=1933;] security - cmd=Auth; account=josecarlos@primeboating.com.br; protocol=imap; error=authentication failed for [josecarlos@primeboating.com.br], account lockout;
2019-10-21 17:02:27,979 WARN  [ImapSSLServer-
...
2019-10-22 06:22:03
117.103.2.226 attackbotsspam
Oct 22 01:04:51 gw1 sshd[2004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.103.2.226
Oct 22 01:04:53 gw1 sshd[2004]: Failed password for invalid user craig from 117.103.2.226 port 50458 ssh2
...
2019-10-22 05:51:57
35.189.121.161 attack
Chat Spam
2019-10-22 05:53:14
171.236.158.162 attack
Oct 21 21:55:25 nirvana postfix/smtpd[18382]: warning: hostname dynamic-ip-adsl.viettel.vn does not resolve to address 171.236.158.162
Oct 21 21:55:25 nirvana postfix/smtpd[18382]: connect from unknown[171.236.158.162]
Oct 21 21:55:28 nirvana postfix/smtpd[18382]: warning: unknown[171.236.158.162]: SASL PLAIN authentication failed: authentication failure
Oct 21 21:55:29 nirvana postfix/smtpd[18382]: warning: unknown[171.236.158.162]: SASL PLAIN authentication failed: authentication failure
Oct 21 21:55:29 nirvana postfix/smtpd[18382]: warning: unknown[171.236.158.162]: SASL PLAIN authentication failed: authentication failure
Oct 21 21:55:30 nirvana postfix/smtpd[18382]: warning: unknown[171.236.158.162]: SASL PLAIN authentication failed: authentication failure


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=171.236.158.162
2019-10-22 06:08:20
46.176.37.169 attack
Telnet Server BruteForce Attack
2019-10-22 06:01:28
185.59.103.123 attackspam
Honeypot attack, port: 445, PTR: serafimfoma.esxi1.sim-networks.net.
2019-10-22 05:48:00
61.133.232.251 attackbotsspam
Oct 21 22:04:43 lnxmysql61 sshd[9693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.133.232.251
Oct 21 22:04:43 lnxmysql61 sshd[9693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.133.232.251
2019-10-22 06:00:41
117.91.254.162 attackspambots
Oct 21 15:55:28 esmtp postfix/smtpd[1107]: lost connection after AUTH from unknown[117.91.254.162]
Oct 21 15:55:29 esmtp postfix/smtpd[1190]: lost connection after AUTH from unknown[117.91.254.162]
Oct 21 15:55:30 esmtp postfix/smtpd[1107]: lost connection after AUTH from unknown[117.91.254.162]
Oct 21 15:55:30 esmtp postfix/smtpd[1190]: lost connection after AUTH from unknown[117.91.254.162]
Oct 21 15:55:31 esmtp postfix/smtpd[1107]: lost connection after AUTH from unknown[117.91.254.162]

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=117.91.254.162
2019-10-22 06:16:43
200.69.236.112 attackspambots
Automatic report - Banned IP Access
2019-10-22 06:21:11
61.74.118.139 attackspam
Invalid user schulz from 61.74.118.139 port 57386
2019-10-22 06:13:54
81.171.56.207 attack
Brute forcing RDP port 3389
2019-10-22 06:04:06
91.92.214.64 attack
Honeypot attack, port: 445, PTR: PTR record not found
2019-10-22 05:45:51

最近上报的IP列表

42.156.138.229 169.229.126.54 169.229.126.67 169.229.126.136
169.229.126.171 169.229.128.181 169.229.128.235 169.229.129.10
169.229.129.18 169.229.56.17 169.229.129.65 169.229.129.86
169.229.91.179 169.229.129.179 169.229.130.51 169.229.130.3
169.229.130.184 180.76.37.43 180.76.38.21 180.76.38.27