必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Zhejiang Taobao Network Co. Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Search Engine Spider

用户上报:
类型 评论内容 时间
attackspambots
The IP has triggered Cloudflare WAF. CF-Ray: 5415cf340f7d7704 | WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/2 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 02:08:22
相同子网IP讨论:
IP 类型 评论内容 时间
42.156.139.7 attackspambots
Automated report (2020-08-24T11:55:46+08:00). Misbehaving bot detected at this address.
2020-08-24 13:08:11
42.156.139.151 attackspambots
ICMP MH Probe, Scan /Distributed -
2020-02-13 22:26:41
42.156.139.60 attackspambots
The IP has triggered Cloudflare WAF. CF-Ray: 5410f168bac7ebd9 | WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: theme-suka.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 06:59:11
42.156.139.16 attackspam
The IP has triggered Cloudflare WAF. CF-Ray: 5413b9b13abceef2 | WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/2 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 04:20:39
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.156.139.46
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9508
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.156.139.46.			IN	A

;; AUTHORITY SECTION:
.			542	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019120700 1800 900 604800 86400

;; Query time: 117 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Dec 08 02:08:19 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
46.139.156.42.in-addr.arpa domain name pointer shenmaspider-42-156-139-46.crawl.sm.cn.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
46.139.156.42.in-addr.arpa	name = shenmaspider-42-156-139-46.crawl.sm.cn.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
185.69.24.243 attackspambots
DATE:2020-05-12 08:54:00, IP:185.69.24.243, PORT:ssh SSH brute force auth (docker-dc)
2020-05-12 16:19:56
37.49.226.212 attack
2020-05-12T07:29:34.537588randservbullet-proofcloud-66.localdomain sshd[1292]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.49.226.212  user=root
2020-05-12T07:29:36.981325randservbullet-proofcloud-66.localdomain sshd[1292]: Failed password for root from 37.49.226.212 port 43212 ssh2
2020-05-12T07:29:40.470127randservbullet-proofcloud-66.localdomain sshd[1295]: Invalid user admin from 37.49.226.212 port 33942
...
2020-05-12 16:17:31
27.70.92.216 attackspam
firewall-block, port(s): 9530/tcp
2020-05-12 16:43:28
51.68.71.129 spambotsattack
dammit
2020-05-12 16:31:46
175.198.83.204 attackspambots
...
2020-05-12 16:13:49
87.251.74.163 attackbots
May 12 09:57:53 debian-2gb-nbg1-2 kernel: \[11529136.527632\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=87.251.74.163 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=56044 PROTO=TCP SPT=45709 DPT=3302 WINDOW=1024 RES=0x00 SYN URGP=0
2020-05-12 16:23:24
101.96.113.50 attackspambots
Invalid user cychen from 101.96.113.50 port 47094
2020-05-12 16:46:24
116.105.195.243 attackspam
2020-05-12T09:55:22.291863shiva sshd[2039]: Invalid user user from 116.105.195.243 port 18634
2020-05-12T09:55:59.436866shiva sshd[2044]: Invalid user admin from 116.105.195.243 port 29242
2020-05-12T09:56:11.451001shiva sshd[2047]: Invalid user admin from 116.105.195.243 port 19886
2020-05-12T09:56:24.095418shiva sshd[2064]: Invalid user admin from 116.105.195.243 port 57620
...
2020-05-12 16:22:11
105.22.35.254 attackspam
firewall-block, port(s): 23/tcp
2020-05-12 16:35:33
5.11.185.89 attackbotsspam
port 23
2020-05-12 16:25:19
180.246.126.62 attack
F2B blocked SSH BF
2020-05-12 16:21:49
51.254.248.18 attackbots
May 12 09:50:00 ArkNodeAT sshd\[19374\]: Invalid user idz from 51.254.248.18
May 12 09:50:00 ArkNodeAT sshd\[19374\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.248.18
May 12 09:50:02 ArkNodeAT sshd\[19374\]: Failed password for invalid user idz from 51.254.248.18 port 52310 ssh2
2020-05-12 16:19:24
84.2.226.70 attackspambots
Invalid user postgres from 84.2.226.70 port 45434
2020-05-12 16:43:11
173.252.95.23 attackbots
[Tue May 12 10:50:36.509570 2020] [:error] [pid 4667:tid 140143871072000] [client 173.252.95.23:60624] [client 173.252.95.23] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "202"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding."] [data "1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/disquss-v2.js"] [unique_id "XrodDHfX6Pwr632XfqBBPgAAtgA"]
...
2020-05-12 16:15:02
159.203.82.104 attackbotsspam
SSH invalid-user multiple login attempts
2020-05-12 16:27:02

最近上报的IP列表

203.223.138.60 226.30.68.105 214.75.108.29 181.219.203.8
221.13.12.157 201.11.85.180 78.115.47.99 191.62.20.173
221.13.12.143 188.118.170.48 92.232.84.34 85.144.28.114
209.72.61.37 132.129.74.250 10.148.109.124 220.181.108.184
191.235.115.139 50.171.247.249 33.146.253.22 101.114.55.70