42.120.160.121

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Aliyun Computing Co. Ltd

Hostname: unknown

Organization: unknown

Usage Type: Search Engine Spider

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 54361032bca7eef6 \| WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/2 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 05:49:02

Type

Details

Datetime

attackspam

The IP has triggered Cloudflare WAF. CF-Ray: 54361032bca7eef6 | WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/2 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-12 05:49:02

Comments on same subnet:

IP	Type	Details	Datetime
42.120.160.50	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5433760a38afe4c4 \| WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/2 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 01:37:52
42.120.160.112	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 5415ee769a19eb51 \| WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: theme-suka.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 07:21:48
42.120.160.51	attack	The IP has triggered Cloudflare WAF. CF-Ray: 541558d4fe79e7c5 \| WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/2 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 02:09:18
42.120.160.123	attackbotsspam	The IP has triggered Cloudflare WAF. CF-Ray: 5416f9cdfa82e7a4 \| WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/2 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 01:44:21

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.120.160.121
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36059
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.120.160.121.			IN	A

;; AUTHORITY SECTION:
.			508	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019121101 1800 900 604800 86400

;; Query time: 127 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Dec 12 05:48:59 CST 2019
;; MSG SIZE  rcvd: 118

Host info

121.160.120.42.in-addr.arpa domain name pointer shenmaspider-42-120-160-121.crawl.sm.cn.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
121.160.120.42.in-addr.arpa	name = shenmaspider-42-120-160-121.crawl.sm.cn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
92.18.125.33	attack	Automatic report - Port Scan Attack	2020-06-03 01:00:44
54.38.190.48	attackbots	Jun 2 12:13:30 web8 sshd\[25852\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.190.48 user=root Jun 2 12:13:32 web8 sshd\[25852\]: Failed password for root from 54.38.190.48 port 55578 ssh2 Jun 2 12:17:06 web8 sshd\[27648\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.190.48 user=root Jun 2 12:17:08 web8 sshd\[27648\]: Failed password for root from 54.38.190.48 port 59672 ssh2 Jun 2 12:20:40 web8 sshd\[29319\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.190.48 user=root	2020-06-03 01:28:24
125.210.191.239	attack	Unauthorized access or intrusion attempt detected from Thor banned IP	2020-06-03 00:47:43
51.77.223.80	attack	SSH Honeypot -> SSH Bruteforce / Login	2020-06-03 00:58:32
118.25.144.49	attackspambots	(sshd) Failed SSH login from 118.25.144.49 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 2 19:32:21 s1 sshd[5381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.144.49 user=root Jun 2 19:32:22 s1 sshd[5381]: Failed password for root from 118.25.144.49 port 33776 ssh2 Jun 2 19:37:22 s1 sshd[5550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.144.49 user=root Jun 2 19:37:25 s1 sshd[5550]: Failed password for root from 118.25.144.49 port 36204 ssh2 Jun 2 19:41:08 s1 sshd[5663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.144.49 user=root	2020-06-03 01:13:28
210.113.7.61	attack	May 28 10:13:31 v2202003116398111542 sshd[11229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.113.7.61 user=root	2020-06-03 01:24:02
168.121.149.0	attackbotsspam	2020-06-02 06:55:29.368597-0500 localhost smtpd[76742]: NOQUEUE: reject: RCPT from unknown[168.121.149.0]: 554 5.7.1 Service unavailable; Client host [168.121.149.0] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/168.121.149.0; from= to= proto=ESMTP helo=<[168.121.149.0]>	2020-06-03 01:25:41
58.213.68.94	attackspambots	Jun 2 14:10:56 Ubuntu-1404-trusty-64-minimal sshd\[6829\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.68.94 user=root Jun 2 14:10:59 Ubuntu-1404-trusty-64-minimal sshd\[6829\]: Failed password for root from 58.213.68.94 port 51670 ssh2 Jun 2 15:03:32 Ubuntu-1404-trusty-64-minimal sshd\[24386\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.68.94 user=root Jun 2 15:03:34 Ubuntu-1404-trusty-64-minimal sshd\[24386\]: Failed password for root from 58.213.68.94 port 45490 ssh2 Jun 2 15:07:42 Ubuntu-1404-trusty-64-minimal sshd\[24081\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.68.94 user=root	2020-06-03 01:23:12
35.239.78.81	attack	May 28 12:25:47 v2202003116398111542 sshd[10303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.239.78.81 user=root	2020-06-03 00:47:57
52.164.227.171	attack	Unauthorised access (Jun 2) SRC=52.164.227.171 LEN=40 TTL=241 ID=60890 TCP DPT=445 WINDOW=1024 SYN	2020-06-03 00:52:43
175.139.1.34	attackbots	Jun 2 18:22:15 vpn01 sshd[8473]: Failed password for root from 175.139.1.34 port 53148 ssh2 ...	2020-06-03 00:54:27
175.24.132.222	attack	Jun 2 14:03:15 mellenthin sshd[20937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.132.222 user=root Jun 2 14:03:17 mellenthin sshd[20937]: Failed password for invalid user root from 175.24.132.222 port 55180 ssh2	2020-06-03 01:19:27
54.39.156.177	attackbotsspam	prod6 ...	2020-06-03 00:56:50
176.109.234.68	attackbots	" "	2020-06-03 00:59:05
84.107.215.228	attackbotsspam	port scan and connect, tcp 443 (https)	2020-06-03 01:18:07

Recently Reported IPs

124.90.54.231	124.90.50.234	124.64.63.125	123.191.145.182
121.237.2.186	119.237.65.200	182.110.116.141	119.96.106.11
119.39.47.191	116.252.0.213	116.252.0.75	116.252.0.53
116.26.172.131	112.120.52.83	111.224.221.109	111.206.222.185
111.206.221.4	111.206.198.241	110.80.155.65	106.122.229.91