Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Make a comment on this IP
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
42.156.139.7 attackspambots 
Automated report (2020-08-24T11:55:46+08:00). Misbehaving bot detected at this address.
 2020-08-24 13:08:11
42.156.139.151 attackspambots 
ICMP MH Probe, Scan /Distributed -
 2020-02-13 22:26:41
42.156.139.60 attackspambots 
The IP has triggered Cloudflare WAF. CF-Ray: 5410f168bac7ebd9 | WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: theme-suka.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
 2019-12-08 06:59:11
42.156.139.16 attackspam 
The IP has triggered Cloudflare WAF. CF-Ray: 5413b9b13abceef2 | WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/2 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
 2019-12-08 04:20:39
42.156.139.46 attackspambots 
The IP has triggered Cloudflare WAF. CF-Ray: 5415cf340f7d7704 | WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/2 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
 2019-12-08 02:08:22
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.156.139.154
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62236
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;42.156.139.154.			IN	A

;; AUTHORITY SECTION:
.			289	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022062600 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 26 23:37:31 CST 2022
;; MSG SIZE  rcvd: 107
Host info
154.139.156.42.in-addr.arpa domain name pointer shenmaspider-42-156-139-154.crawl.sm.cn.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
154.139.156.42.in-addr.arpa	name = shenmaspider-42-156-139-154.crawl.sm.cn.

Authoritative answers can be found from:
Related IP info:
42.156.139.161
42.156.139.54
42.156.139.102
42.156.139.28
42.156.139.126
42.156.139.219
42.156.139.251
42.156.139.76
42.156.139.57
42.156.139.12
42.156.139.168
42.156.139.125
42.156.139.207
42.156.139.148
42.156.139.61
42.156.139.128
42.156.139.185
42.156.139.139
42.156.139.174
42.156.139.13
42.156.139.93
42.156.139.97
42.156.139.115
42.156.139.229
42.156.139.169
42.156.139.246
42.156.139.74
42.156.139.190
42.156.139.41
42.156.139.173
42.156.139.227
42.156.139.133
42.156.139.237
42.156.139.35
42.156.139.166
42.156.139.84
42.156.139.124
42.156.139.71
42.156.139.59
42.156.139.157
42.156.139.238
42.156.139.226
42.156.139.187
42.156.139.176
42.156.139.60
42.156.139.184
42.156.139.85
42.156.139.36
42.156.139.37
42.156.139.121
42.156.139.194
42.156.139.144
42.156.139.253
42.156.139.112
42.156.139.178
42.156.139.158
42.156.139.167
42.156.139.109
42.156.139.17
42.156.139.136
42.156.139.199
42.156.139.225
42.156.139.80
42.156.139.236
42.156.139.106
42.156.139.108
42.156.139.149
42.156.139.23
42.156.139.2
42.156.139.244
42.156.139.27
42.156.139.247
42.156.139.150
42.156.139.180
42.156.139.183
42.156.139.189
42.156.139.250
42.156.139.77
42.156.139.202
42.156.139.123
42.156.139.51
42.156.139.9
42.156.139.82
42.156.139.83
42.156.139.119
42.156.139.154
42.156.139.156
42.156.139.15
42.156.139.47
42.156.139.81
42.156.139.69
42.156.139.159
42.156.139.135
42.156.139.75
42.156.139.86
42.156.139.230
42.156.139.200
42.156.139.213
42.156.139.25
42.156.139.162
42.156.139.164
42.156.139.8
42.156.139.79
42.156.139.22
42.156.139.221
42.156.139.62
42.156.139.228
42.156.139.248
42.156.139.101
42.156.139.163
42.156.139.21
42.156.139.153
42.156.139.87
42.156.139.212
42.156.139.145
42.156.139.211
42.156.139.46
42.156.139.171
42.156.139.179
42.156.139.222
42.156.139.241
42.156.139.192
42.156.139.130
42.156.139.122
42.156.139.58
42.156.139.73
42.156.139.50
42.156.139.215
42.156.139.1
42.156.139.40
42.156.139.137
42.156.139.64
42.156.139.11
42.156.139.232
42.156.139.233
42.156.139.118
42.156.139.201
42.156.139.18
42.156.139.146
42.156.139.254
42.156.139.175
42.156.139.234
42.156.139.67
42.156.139.172
42.156.139.38
42.156.139.116
42.156.139.16
42.156.139.142
42.156.139.114
42.156.139.95
42.156.139.110
42.156.139.14
42.156.139.98
42.156.139.107
42.156.139.7
42.156.139.96
42.156.139.155
42.156.139.151
42.156.139.39
42.156.139.29
42.156.139.31
42.156.139.242
42.156.139.78
42.156.139.143
42.156.139.209
42.156.139.188
42.156.139.6
42.156.139.231
42.156.139.68
42.156.139.182
42.156.139.138
42.156.139.100
42.156.139.245
42.156.139.24
42.156.139.30
42.156.139.186
42.156.139.113
42.156.139.105
42.156.139.203
42.156.139.239
42.156.139.4
42.156.139.181
42.156.139.65
42.156.139.90
42.156.139.89
42.156.139.165
42.156.139.20
42.156.139.72
42.156.139.240
42.156.139.117
42.156.139.103
42.156.139.88
42.156.139.66
42.156.139.223
42.156.139.193
42.156.139.56
42.156.139.217
42.156.139.249
42.156.139.99
42.156.139.160
42.156.139.170
42.156.139.197
42.156.139.218
42.156.139.44
42.156.139.140
42.156.139.33
42.156.139.195
42.156.139.111
42.156.139.132
42.156.139.120
42.156.139.70
42.156.139.198
42.156.139.205
42.156.139.48
42.156.139.204
42.156.139.129
42.156.139.235
42.156.139.127
42.156.139.45
42.156.139.34
42.156.139.191
42.156.139.32
42.156.139.210
42.156.139.220
42.156.139.19
42.156.139.94
42.156.139.5
42.156.139.177
42.156.139.49
42.156.139.91
42.156.139.63
42.156.139.208
42.156.139.26
42.156.139.206
42.156.139.252
42.156.139.52
42.156.139.243
42.156.139.216
42.156.139.3
42.156.139.104
42.156.139.134
42.156.139.214
42.156.139.196
42.156.139.10
42.156.139.152
42.156.139.92
42.156.139.53
42.156.139.141
42.156.139.55
42.156.139.147
42.156.139.43
42.156.139.42
42.156.139.224
42.156.139.131
Related comments:
IP Type Details Datetime
122.116.244.252 attackbots 
 TCP (SYN) 122.116.244.252:41129 -> port 23, len 40
 2020-08-22 06:57:34
54.36.162.121 attack 
Aug 22 00:32:18 ip40 sshd[8074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.162.121 
Aug 22 00:32:21 ip40 sshd[8074]: Failed password for invalid user www from 54.36.162.121 port 52724 ssh2
...
 2020-08-22 06:56:26
47.111.160.38 attackspambots 
Aug 22 01:27:03 lukav-desktop sshd\[11369\]: Invalid user marc from 47.111.160.38
Aug 22 01:27:03 lukav-desktop sshd\[11369\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.111.160.38
Aug 22 01:27:05 lukav-desktop sshd\[11369\]: Failed password for invalid user marc from 47.111.160.38 port 47564 ssh2
Aug 22 01:28:40 lukav-desktop sshd\[11985\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.111.160.38  user=root
Aug 22 01:28:41 lukav-desktop sshd\[11985\]: Failed password for root from 47.111.160.38 port 33840 ssh2
 2020-08-22 06:57:49
95.181.131.153 attackbots 
2020-08-21 22:29:50,734 fail2ban.actions        [937]: NOTICE  [sshd] Ban 95.181.131.153
2020-08-21 23:07:33,614 fail2ban.actions        [937]: NOTICE  [sshd] Ban 95.181.131.153
2020-08-21 23:42:32,344 fail2ban.actions        [937]: NOTICE  [sshd] Ban 95.181.131.153
2020-08-22 00:17:42,410 fail2ban.actions        [937]: NOTICE  [sshd] Ban 95.181.131.153
2020-08-22 00:57:43,671 fail2ban.actions        [937]: NOTICE  [sshd] Ban 95.181.131.153
...
 2020-08-22 07:16:54
106.110.111.165 attackbots 
Lines containing failures of 106.110.111.165
Aug 21 12:27:26 neweola sshd[19260]: Invalid user bob from 106.110.111.165 port 41700
Aug 21 12:27:26 neweola sshd[19260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.110.111.165 
Aug 21 12:27:27 neweola sshd[19260]: Failed password for invalid user bob from 106.110.111.165 port 41700 ssh2
Aug 21 12:27:28 neweola sshd[19260]: Received disconnect from 106.110.111.165 port 41700:11: Bye Bye [preauth]
Aug 21 12:27:28 neweola sshd[19260]: Disconnected from invalid user bob 106.110.111.165 port 41700 [preauth]
Aug 21 12:44:23 neweola sshd[20035]: Invalid user lines from 106.110.111.165 port 41828
Aug 21 12:44:23 neweola sshd[20035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.110.111.165 
Aug 21 12:44:26 neweola sshd[20035]: Failed password for invalid user lines from 106.110.111.165 port 41828 ssh2
Aug 21 12:44:28 neweola sshd[20035]: R........
------------------------------
 2020-08-22 07:19:47
113.31.105.250 attack 
Aug 22 00:51:03 cosmoit sshd[10951]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.31.105.250
 2020-08-22 07:16:10
183.6.107.68 attackbots 
Invalid user odoo from 183.6.107.68 port 54736
 2020-08-22 06:58:05
94.176.187.142 attackbotsspam 
(Aug 21)  LEN=52 TTL=114 ID=10054 DF TCP DPT=445 WINDOW=8192 SYN 
 (Aug 21)  LEN=48 TTL=117 ID=21486 DF TCP DPT=445 WINDOW=8192 SYN 
 (Aug 21)  LEN=48 TTL=117 ID=4791 DF TCP DPT=445 WINDOW=8192 SYN 
 (Aug 21)  LEN=48 TTL=114 ID=1170 DF TCP DPT=445 WINDOW=8192 SYN 
 (Aug 21)  LEN=48 TTL=117 ID=14330 DF TCP DPT=445 WINDOW=8192 SYN 
 (Aug 21)  LEN=48 TTL=114 ID=8917 DF TCP DPT=445 WINDOW=8192 SYN 
 (Aug 21)  LEN=48 TTL=117 ID=32005 DF TCP DPT=445 WINDOW=8192 SYN 
 (Aug 21)  LEN=48 TTL=114 ID=2434 DF TCP DPT=445 WINDOW=8192 SYN 
 (Aug 21)  LEN=48 TTL=117 ID=26907 DF TCP DPT=445 WINDOW=8192 SYN 
 (Aug 20)  LEN=48 TTL=117 ID=29517 DF TCP DPT=445 WINDOW=8192 SYN 
 (Aug 20)  LEN=48 TTL=117 ID=24429 DF TCP DPT=445 WINDOW=8192 SYN 
 (Aug 20)  LEN=48 TTL=117 ID=24753 DF TCP DPT=445 WINDOW=8192 SYN 
 (Aug 20)  LEN=48 TTL=114 ID=20757 DF TCP DPT=445 WINDOW=8192 SYN 
 (Aug 20)  LEN=52 TTL=114 ID=14688 DF TCP DPT=445 WINDOW=8192 SYN 
 (Aug 20)  LEN=52 TTL=114 ID=26667 DF TCP DPT=445 WINDOW=8192 SYN ...
 2020-08-22 07:21:14
1.245.61.144 attackbotsspam 
Invalid user socket from 1.245.61.144 port 56843
 2020-08-22 07:11:53
167.71.3.160 attackspambots 
Aug 22 01:04:49 *host* sshd\[30158\]: Unable to negotiate with 167.71.3.160 port 52858: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 \[preauth\]
 2020-08-22 07:22:48
139.198.18.230 attackspam 
Invalid user benny from 139.198.18.230 port 35266
 2020-08-22 07:06:07
186.206.157.34 attackbotsspam 
Aug 22 00:45:01 electroncash sshd[30180]: Failed password for invalid user ftp from 186.206.157.34 port 3332 ssh2
Aug 22 00:49:23 electroncash sshd[31408]: Invalid user bdl from 186.206.157.34 port 31258
Aug 22 00:49:23 electroncash sshd[31408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.206.157.34 
Aug 22 00:49:23 electroncash sshd[31408]: Invalid user bdl from 186.206.157.34 port 31258
Aug 22 00:49:26 electroncash sshd[31408]: Failed password for invalid user bdl from 186.206.157.34 port 31258 ssh2
...
 2020-08-22 06:54:57
165.227.225.195 attackbots 
$f2bV_matches
 2020-08-22 07:13:37
124.167.226.214 attackbots 
Invalid user amal from 124.167.226.214 port 34964
 2020-08-22 07:12:17
103.45.183.85 attackspambots 
port scan and connect, tcp 1433 (ms-sql-s)
 2020-08-22 06:58:51

Recently Reported IPs

42.156.138.229 169.229.126.54 169.229.126.67 169.229.126.136
169.229.126.171 169.229.128.181 169.229.128.235 169.229.129.10
169.229.129.18 169.229.56.17 169.229.129.65 169.229.129.86
169.229.91.179 169.229.129.179 169.229.130.51 169.229.130.3
169.229.130.184 180.76.37.43 180.76.38.21 180.76.38.27