42.156.138.44 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
42.156.138.94	attackbotsspam	The IP has triggered Cloudflare WAF. CF-Ray: 541577b5aee6e821 \| WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/2 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 04:46:31
42.156.138.40	attack	The IP has triggered Cloudflare WAF. CF-Ray: 54157a78e8eeeb99 \| WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/2 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 02:29:54

Type

Details

Datetime

42.156.138.94

attackbotsspam

The IP has triggered Cloudflare WAF. CF-Ray: 541577b5aee6e821 | WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/2 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 04:46:31

42.156.138.40

attack

The IP has triggered Cloudflare WAF. CF-Ray: 54157a78e8eeeb99 | WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/2 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 02:29:54

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.156.138.44
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63179
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;42.156.138.44.			IN	A

;; AUTHORITY SECTION:
.			315	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022062501 1800 900 604800 86400

;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 26 13:01:10 CST 2022
;; MSG SIZE  rcvd: 106

Host info

44.138.156.42.in-addr.arpa domain name pointer shenmaspider-42-156-138-44.crawl.sm.cn.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
44.138.156.42.in-addr.arpa	name = shenmaspider-42-156-138-44.crawl.sm.cn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
77.116.30.133	attackspam	Automatic report - Port Scan Attack	2020-01-02 02:05:16
177.223.0.114	attackbots	1577890192 - 01/01/2020 15:49:52 Host: 177.223.0.114/177.223.0.114 Port: 445 TCP Blocked	2020-01-02 01:52:16
111.162.219.111	attackspambots	Fail2Ban Ban Triggered	2020-01-02 01:28:27
152.249.245.68	attack	2020-01-01T14:45:27.621235abusebot-7.cloudsearch.cf sshd[31719]: Invalid user wwwrun from 152.249.245.68 port 35420 2020-01-01T14:45:27.627463abusebot-7.cloudsearch.cf sshd[31719]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.249.245.68 2020-01-01T14:45:27.621235abusebot-7.cloudsearch.cf sshd[31719]: Invalid user wwwrun from 152.249.245.68 port 35420 2020-01-01T14:45:30.015494abusebot-7.cloudsearch.cf sshd[31719]: Failed password for invalid user wwwrun from 152.249.245.68 port 35420 ssh2 2020-01-01T14:47:24.749401abusebot-7.cloudsearch.cf sshd[31818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.249.245.68 user=lp 2020-01-01T14:47:26.866373abusebot-7.cloudsearch.cf sshd[31818]: Failed password for lp from 152.249.245.68 port 52958 ssh2 2020-01-01T14:49:21.927351abusebot-7.cloudsearch.cf sshd[31914]: Invalid user petronela from 152.249.245.68 port 42058 ...	2020-01-02 02:04:37
222.186.30.218	attack	2020-01-01 08:37:18,761 fail2ban.actions [2870]: NOTICE [sshd] Ban 222.186.30.218 2020-01-01 09:38:22,393 fail2ban.actions [2870]: NOTICE [sshd] Ban 222.186.30.218 2020-01-01 15:44:32,283 fail2ban.actions [2870]: NOTICE [sshd] Ban 222.186.30.218 2020-01-01 16:32:59,989 fail2ban.actions [2870]: NOTICE [sshd] Ban 222.186.30.218 2020-01-01 18:22:28,023 fail2ban.actions [2870]: NOTICE [sshd] Ban 222.186.30.218 ...	2020-01-02 01:31:03
219.90.67.89	attack	Jan 1 16:04:34 marvibiene sshd[5160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.90.67.89 user=root Jan 1 16:04:36 marvibiene sshd[5160]: Failed password for root from 219.90.67.89 port 33620 ssh2 Jan 1 16:09:17 marvibiene sshd[5273]: Invalid user aishah from 219.90.67.89 port 39884 ...	2020-01-02 01:40:16
41.40.150.60	attackspam	Fail2Ban Ban Triggered	2020-01-02 02:06:11
222.186.190.2	attackspambots	Jan 1 18:48:54 ns381471 sshd[26267]: Failed password for root from 222.186.190.2 port 59020 ssh2 Jan 1 18:49:08 ns381471 sshd[26267]: error: maximum authentication attempts exceeded for root from 222.186.190.2 port 59020 ssh2 [preauth]	2020-01-02 01:49:48
113.161.160.253	attackbots	firewall-block, port(s): 1433/tcp	2020-01-02 01:39:23
159.65.12.183	attack	Jan 1 16:57:37 sd-53420 sshd\[15988\]: Invalid user merl from 159.65.12.183 Jan 1 16:57:37 sd-53420 sshd\[15988\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.12.183 Jan 1 16:57:38 sd-53420 sshd\[15988\]: Failed password for invalid user merl from 159.65.12.183 port 48132 ssh2 Jan 1 17:01:04 sd-53420 sshd\[17087\]: Invalid user salano from 159.65.12.183 Jan 1 17:01:04 sd-53420 sshd\[17087\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.12.183 ...	2020-01-02 02:00:44
95.213.249.162	attack	firewall-block, port(s): 3389/tcp	2020-01-02 01:42:29
128.234.205.52	attack	Jan 1 15:49:45 grey postfix/smtpd\[23722\]: NOQUEUE: reject: RCPT from unknown\[128.234.205.52\]: 554 5.7.1 Service unavailable\; Client host \[128.234.205.52\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[128.234.205.52\]\; from=\ to=\ proto=ESMTP helo=\<\[128.234.205.52\]\> ...	2020-01-02 01:53:37
178.150.38.63	attackbots	firewall-block, port(s): 23/tcp	2020-01-02 01:31:35
178.157.219.105	attackspam	WordPress wp-login brute force :: 178.157.219.105 0.160 - [01/Jan/2020:14:49:53 0000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 1806 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "HTTP/1.1"	2020-01-02 01:51:26
49.235.139.216	attackspambots	no	2020-01-02 01:44:44

Recently Reported IPs

42.120.160.255	42.156.138.207	180.76.82.122	169.229.182.222
169.229.184.98	169.229.184.2	169.229.184.28	169.229.184.213
169.229.185.87	169.229.253.76	137.226.167.203	180.76.135.7
180.76.94.65	137.226.179.240	137.226.50.44	137.226.131.245
137.226.156.18	218.30.103.7	137.226.243.130	192.183.232.34