必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
42.156.139.7 attackspambots
Automated report (2020-08-24T11:55:46+08:00). Misbehaving bot detected at this address.
2020-08-24 13:08:11
42.156.139.151 attackspambots
ICMP MH Probe, Scan /Distributed -
2020-02-13 22:26:41
42.156.139.60 attackspambots
The IP has triggered Cloudflare WAF. CF-Ray: 5410f168bac7ebd9 | WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: theme-suka.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 06:59:11
42.156.139.16 attackspam
The IP has triggered Cloudflare WAF. CF-Ray: 5413b9b13abceef2 | WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/2 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 04:20:39
42.156.139.46 attackspambots
The IP has triggered Cloudflare WAF. CF-Ray: 5415cf340f7d7704 | WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/2 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 02:08:22
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.156.139.33
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20500
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;42.156.139.33.			IN	A

;; AUTHORITY SECTION:
.			199	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022062600 1800 900 604800 86400

;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 26 23:39:01 CST 2022
;; MSG SIZE  rcvd: 106
HOST信息:
33.139.156.42.in-addr.arpa domain name pointer shenmaspider-42-156-139-33.crawl.sm.cn.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
33.139.156.42.in-addr.arpa	name = shenmaspider-42-156-139-33.crawl.sm.cn.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
78.15.65.54 attackspam
Sep 10 13:44:35 django sshd[78985]: Invalid user pi from 78.15.65.54
Sep 10 13:44:35 django sshd[78987]: Invalid user pi from 78.15.65.54
Sep 10 13:44:35 django sshd[78987]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=dynamic-adsl-78-15-65-54.clienti.tiscali.hostname 
Sep 10 13:44:35 django sshd[78985]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=dynamic-adsl-78-15-65-54.clienti.tiscali.hostname 
Sep 10 13:44:37 django sshd[78985]: Failed password for invalid user pi from 78.15.65.54 port 35544 ssh2
Sep 10 13:44:37 django sshd[78987]: Failed password for invalid user pi from 78.15.65.54 port 35546 ssh2
Sep 10 13:44:37 django sshd[78986]: Connection closed by 78.15.65.54
Sep 10 13:44:37 django sshd[78988]: Connection closed by 78.15.65.54


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=78.15.65.54
2019-09-11 03:40:01
177.212.70.28 attackspam
Sep 10 07:24:38 bilbo sshd[16180]: Invalid user ubnt from 177.212.70.28
Sep 10 07:25:40 bilbo sshd[18328]: Invalid user admin from 177.212.70.28
Sep 10 07:25:43 bilbo sshd[18332]: Invalid user admin from 177.212.70.28
Sep 10 07:25:45 bilbo sshd[18334]: Invalid user admin from 177.212.70.28
...
2019-09-11 03:30:09
190.0.22.66 attack
Sep 10 08:10:08 php1 sshd\[1953\]: Invalid user ansible from 190.0.22.66
Sep 10 08:10:08 php1 sshd\[1953\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.0.22.66
Sep 10 08:10:10 php1 sshd\[1953\]: Failed password for invalid user ansible from 190.0.22.66 port 35470 ssh2
Sep 10 08:17:08 php1 sshd\[2816\]: Invalid user oracle from 190.0.22.66
Sep 10 08:17:08 php1 sshd\[2816\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.0.22.66
2019-09-11 03:20:57
91.214.179.43 attackspambots
proto=tcp  .  spt=33669  .  dpt=25  .     (listed on Blocklist de  Sep 09)     (464)
2019-09-11 02:59:14
146.88.240.34 attackspambots
Aug 28 10:11:35 mercury kernel: [UFW ALLOW] IN=eth0 OUT= MAC=f2:3c:91:bc:4d:f8:84:78:ac:5a:1a:41:08:00 SRC=146.88.240.34 DST=109.74.200.221 LEN=76 TOS=0x00 PREC=0x00 TTL=55 ID=1200 DF PROTO=UDP SPT=57959 DPT=123 LEN=56 
...
2019-09-11 02:57:45
185.164.63.234 attack
2019-09-10T11:55:48.544420abusebot-8.cloudsearch.cf sshd\[24174\]: Invalid user 123qwe123 from 185.164.63.234 port 54906
2019-09-11 03:39:29
118.96.39.112 attackspam
Sep 10 12:49:14 lvps87-230-18-106 sshd[28787]: reveeclipse mapping checking getaddrinfo for 112.static.118-96-39.astinet.telkom.net.id [118.96.39.112] failed - POSSIBLE BREAK-IN ATTEMPT!
Sep 10 12:49:14 lvps87-230-18-106 sshd[28787]: Invalid user dspace from 118.96.39.112
Sep 10 12:49:14 lvps87-230-18-106 sshd[28787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.96.39.112 
Sep 10 12:49:16 lvps87-230-18-106 sshd[28787]: Failed password for invalid user dspace from 118.96.39.112 port 36906 ssh2
Sep 10 12:49:16 lvps87-230-18-106 sshd[28787]: Received disconnect from 118.96.39.112: 11: Bye Bye [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=118.96.39.112
2019-09-11 03:31:08
41.38.254.127 attackspambots
Unauthorised access (Sep 10) SRC=41.38.254.127 LEN=52 TTL=115 ID=21072 DF TCP DPT=445 WINDOW=8192 SYN
2019-09-11 02:55:31
182.76.70.129 attackspambots
$f2bV_matches_ltvn
2019-09-11 03:17:03
194.58.171.172 attackbots
Unauthorized connection attempt from IP address 194.58.171.172 on Port 445(SMB)
2019-09-11 03:04:18
92.247.147.170 attackspambots
Sep  9 14:16:34 our-server-hostname postfix/smtpd[8733]: connect from unknown[92.247.147.170]
Sep x@x
Sep x@x
Sep  9 14:16:40 our-server-hostname postfix/smtpd[8733]: lost connection after RCPT from unknown[92.247.147.170]
Sep  9 14:16:40 our-server-hostname postfix/smtpd[8733]: disconnect from unknown[92.247.147.170]
Sep  9 14:42:07 our-server-hostname postfix/smtpd[17105]: connect from unknown[92.247.147.170]
Sep x@x
Sep  9 14:42:09 our-server-hostname postfix/smtpd[17105]: lost connection after RCPT from unknown[92.247.147.170]
Sep  9 14:42:09 our-server-hostname postfix/smtpd[17105]: disconnect from unknown[92.247.147.170]
Sep  9 15:20:42 our-server-hostname postfix/smtpd[19917]: connect from unknown[92.247.147.170]
Sep x@x
Sep x@x
Sep  9 15:20:44 our-server-hostname postfix/smtpd[19917]: lost connection after RCPT from unknown[92.247.147.170]
Sep  9 15:20:44 our-server-hostname postfix/smtpd[19917]: disconnect from unknown[92.247.147.170]
Sep  9 15:41:56 our-server........
-------------------------------
2019-09-11 03:02:41
186.215.143.149 attackbots
Aug  2 11:55:15 mercury auth[25723]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=admin@lukegirvin.com rhost=186.215.143.149
...
2019-09-11 03:32:27
178.128.54.223 attack
Sep 10 21:17:26 core sshd[27369]: Invalid user 1 from 178.128.54.223 port 13192
Sep 10 21:17:28 core sshd[27369]: Failed password for invalid user 1 from 178.128.54.223 port 13192 ssh2
...
2019-09-11 03:17:52
45.178.3.60 attack
2019-09-10 12:45:29 H=(adev.com) [45.178.3.60]:59120 I=[10.100.18.25]:25 sender verify fail for : Unrouteable address
2019-09-10 x@x
2019-09-10 12:45:30 unexpected disconnection while reading SMTP command from (adev.com) [45.178.3.60]:59120 I=[10.100.18.25]:25


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=45.178.3.60
2019-09-11 03:15:05
121.162.135.172 attackbotsspam
[Wed Jul 24 11:48:02.508640 2019] [access_compat:error] [pid 13140] [client 121.162.135.172:52347] AH01797: client denied by server configuration: /var/www/html/luke/wp-login.php
...
2019-09-11 03:00:56

最近上报的IP列表

42.156.139.28 169.229.91.129 121.146.234.249 137.226.74.92
137.226.78.40 188.143.233.238 137.226.107.182 137.226.111.233
137.226.251.198 137.226.249.88 137.226.84.55 137.226.250.31
180.76.85.18 180.76.85.128 180.76.87.188 180.76.110.170
49.85.141.125 180.76.8.248 42.156.138.17 180.76.83.17