Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
42.156.139.7 attackspambots
Automated report (2020-08-24T11:55:46+08:00). Misbehaving bot detected at this address.
2020-08-24 13:08:11
42.156.139.151 attackspambots
ICMP MH Probe, Scan /Distributed -
2020-02-13 22:26:41
42.156.139.60 attackspambots
The IP has triggered Cloudflare WAF. CF-Ray: 5410f168bac7ebd9 | WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: theme-suka.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 06:59:11
42.156.139.16 attackspam
The IP has triggered Cloudflare WAF. CF-Ray: 5413b9b13abceef2 | WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/2 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 04:20:39
42.156.139.46 attackspambots
The IP has triggered Cloudflare WAF. CF-Ray: 5415cf340f7d7704 | WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/2 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 02:08:22
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.156.139.131
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1848
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;42.156.139.131.			IN	A

;; AUTHORITY SECTION:
.			288	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022062600 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 26 23:29:31 CST 2022
;; MSG SIZE  rcvd: 107
Host info
131.139.156.42.in-addr.arpa domain name pointer shenmaspider-42-156-139-131.crawl.sm.cn.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
131.139.156.42.in-addr.arpa	name = shenmaspider-42-156-139-131.crawl.sm.cn.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
212.48.74.27 attackspambots
Oct 11 22:35:34 web-01 postfix/smtpd[5375]: NOQUEUE: reject: RCPT from heat.forensic-accounting-information.com[185.245.218.60]: 550 5.1.1 : Recipient address rejected: User unknown in virtual mailbox table; from= to= proto=ESMTP helo=
2020-10-12 17:35:56
85.108.196.251 attackbots
Unauthorized connection attempt from IP address 85.108.196.251 on Port 445(SMB)
2020-10-12 17:31:32
177.131.167.57 attackspambots
Unauthorized connection attempt from IP address 177.131.167.57 on Port 445(SMB)
2020-10-12 17:24:32
119.29.247.187 attack
$f2bV_matches
2020-10-12 17:36:50
112.85.42.184 attackbots
Oct 12 11:22:46 minden010 sshd[5226]: Failed password for root from 112.85.42.184 port 20804 ssh2
Oct 12 11:22:49 minden010 sshd[5226]: Failed password for root from 112.85.42.184 port 20804 ssh2
Oct 12 11:22:52 minden010 sshd[5226]: Failed password for root from 112.85.42.184 port 20804 ssh2
Oct 12 11:22:55 minden010 sshd[5226]: Failed password for root from 112.85.42.184 port 20804 ssh2
...
2020-10-12 17:23:28
113.53.238.195 attackbots
SSH login attempts.
2020-10-12 17:28:57
218.92.0.184 attackspambots
2020-10-12T09:16:53.785294abusebot-4.cloudsearch.cf sshd[12203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.184  user=root
2020-10-12T09:16:55.782514abusebot-4.cloudsearch.cf sshd[12203]: Failed password for root from 218.92.0.184 port 53771 ssh2
2020-10-12T09:16:58.698535abusebot-4.cloudsearch.cf sshd[12203]: Failed password for root from 218.92.0.184 port 53771 ssh2
2020-10-12T09:16:53.785294abusebot-4.cloudsearch.cf sshd[12203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.184  user=root
2020-10-12T09:16:55.782514abusebot-4.cloudsearch.cf sshd[12203]: Failed password for root from 218.92.0.184 port 53771 ssh2
2020-10-12T09:16:58.698535abusebot-4.cloudsearch.cf sshd[12203]: Failed password for root from 218.92.0.184 port 53771 ssh2
2020-10-12T09:16:53.785294abusebot-4.cloudsearch.cf sshd[12203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rho
...
2020-10-12 17:27:28
193.111.198.162 attackbots
Oct 12 10:45:52 rancher-0 sshd[13272]: Invalid user berthold from 193.111.198.162 port 54260
Oct 12 10:45:55 rancher-0 sshd[13272]: Failed password for invalid user berthold from 193.111.198.162 port 54260 ssh2
...
2020-10-12 17:36:22
94.53.86.22 attackbotsspam
Unauthorized connection attempt detected from IP address 94.53.86.22 to port 23
2020-10-12 17:31:10
112.85.42.173 attackbots
Oct 12 11:05:58 marvibiene sshd[15162]: Failed password for root from 112.85.42.173 port 24780 ssh2
Oct 12 11:06:02 marvibiene sshd[15162]: Failed password for root from 112.85.42.173 port 24780 ssh2
2020-10-12 17:21:49
120.53.223.186 attack
Oct 12 02:29:34 vps647732 sshd[29091]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.53.223.186
Oct 12 02:29:36 vps647732 sshd[29091]: Failed password for invalid user spiridon from 120.53.223.186 port 41268 ssh2
...
2020-10-12 17:11:51
200.70.56.204 attack
Oct 12 08:20:30 h2427292 sshd\[10690\]: Invalid user db2fenc2 from 200.70.56.204
Oct 12 08:20:30 h2427292 sshd\[10690\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.70.56.204 
Oct 12 08:20:32 h2427292 sshd\[10690\]: Failed password for invalid user db2fenc2 from 200.70.56.204 port 45860 ssh2
...
2020-10-12 17:30:55
113.88.165.227 attackspam
Unauthorized connection attempt from IP address 113.88.165.227 on Port 445(SMB)
2020-10-12 17:21:19
112.53.203.29 attackspam
112.53.203.29 (CN/China/-), 3 distributed sshd attacks on account [ubnt] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct 11 16:45:28 internal2 sshd[29629]: Invalid user ubnt from 112.53.203.29 port 49068
Oct 11 16:44:19 internal2 sshd[29063]: Invalid user ubnt from 185.244.39.29 port 33518
Oct 11 16:21:16 internal2 sshd[20901]: Invalid user ubnt from 183.196.178.155 port 41566

IP Addresses Blocked:
2020-10-12 17:39:30
171.15.17.90 attackspambots
SSH Brute-Force reported by Fail2Ban
2020-10-12 17:13:08

Recently Reported IPs

42.156.139.43 180.76.148.119 169.229.89.130 169.229.88.217
169.229.117.94 169.229.117.80 186.216.164.116 74.118.199.142
169.229.126.45 190.205.160.250 169.229.91.191 169.229.127.24
120.29.88.1 169.229.127.237 169.229.199.31 78.236.50.113
137.226.251.34 180.76.113.107 137.226.75.180 111.121.225.0