Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Make a comment on this IP
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
42.156.139.7 attackspambots 
Automated report (2020-08-24T11:55:46+08:00). Misbehaving bot detected at this address.
 2020-08-24 13:08:11
42.156.139.151 attackspambots 
ICMP MH Probe, Scan /Distributed -
 2020-02-13 22:26:41
42.156.139.60 attackspambots 
The IP has triggered Cloudflare WAF. CF-Ray: 5410f168bac7ebd9 | WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: theme-suka.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
 2019-12-08 06:59:11
42.156.139.16 attackspam 
The IP has triggered Cloudflare WAF. CF-Ray: 5413b9b13abceef2 | WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/2 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
 2019-12-08 04:20:39
42.156.139.46 attackspambots 
The IP has triggered Cloudflare WAF. CF-Ray: 5415cf340f7d7704 | WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/2 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
 2019-12-08 02:08:22
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.156.139.215
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2293
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;42.156.139.215.			IN	A

;; AUTHORITY SECTION:
.			107	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022063001 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jul 01 02:46:57 CST 2022
;; MSG SIZE  rcvd: 107
Host info
215.139.156.42.in-addr.arpa domain name pointer shenmaspider-42-156-139-215.crawl.sm.cn.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
215.139.156.42.in-addr.arpa	name = shenmaspider-42-156-139-215.crawl.sm.cn.

Authoritative answers can be found from:
Related IP info:
42.156.139.86
42.156.139.173
42.156.139.136
42.156.139.125
42.156.139.162
42.156.139.220
42.156.139.226
42.156.139.90
42.156.139.73
42.156.139.69
42.156.139.174
42.156.139.99
42.156.139.203
42.156.139.219
42.156.139.240
42.156.139.89
42.156.139.26
42.156.139.60
42.156.139.39
42.156.139.93
42.156.139.177
42.156.139.56
42.156.139.251
42.156.139.22
42.156.139.43
42.156.139.187
42.156.139.161
42.156.139.12
42.156.139.113
42.156.139.124
42.156.139.3
42.156.139.185
42.156.139.179
42.156.139.249
42.156.139.235
42.156.139.141
42.156.139.53
42.156.139.70
42.156.139.176
42.156.139.95
42.156.139.201
42.156.139.231
42.156.139.216
42.156.139.204
42.156.139.154
42.156.139.104
42.156.139.230
42.156.139.71
42.156.139.253
42.156.139.42
42.156.139.30
42.156.139.217
42.156.139.190
42.156.139.127
42.156.139.178
42.156.139.132
42.156.139.188
42.156.139.227
42.156.139.110
42.156.139.195
42.156.139.19
42.156.139.196
42.156.139.45
42.156.139.239
42.156.139.64
42.156.139.96
42.156.139.75
42.156.139.252
42.156.139.181
42.156.139.193
42.156.139.218
42.156.139.248
42.156.139.122
42.156.139.11
42.156.139.9
42.156.139.206
42.156.139.208
42.156.139.169
42.156.139.170
42.156.139.57
42.156.139.244
42.156.139.116
42.156.139.65
42.156.139.236
42.156.139.153
42.156.139.2
42.156.139.146
42.156.139.58
42.156.139.191
42.156.139.160
42.156.139.55
42.156.139.59
42.156.139.25
42.156.139.108
42.156.139.225
42.156.139.115
42.156.139.128
42.156.139.36
42.156.139.121
42.156.139.210
42.156.139.107
42.156.139.228
42.156.139.143
42.156.139.49
42.156.139.250
42.156.139.183
42.156.139.229
42.156.139.29
42.156.139.47
42.156.139.31
42.156.139.52
42.156.139.145
42.156.139.135
42.156.139.166
42.156.139.18
42.156.139.171
42.156.139.5
42.156.139.41
42.156.139.106
42.156.139.8
42.156.139.112
42.156.139.102
42.156.139.213
42.156.139.23
42.156.139.61
42.156.139.148
42.156.139.77
42.156.139.245
42.156.139.105
42.156.139.109
42.156.139.44
42.156.139.237
42.156.139.54
42.156.139.223
42.156.139.138
42.156.139.133
42.156.139.76
42.156.139.85
42.156.139.74
42.156.139.10
42.156.139.209
42.156.139.27
42.156.139.197
42.156.139.242
42.156.139.165
42.156.139.232
42.156.139.101
42.156.139.200
42.156.139.182
42.156.139.78
42.156.139.6
42.156.139.119
42.156.139.150
42.156.139.205
42.156.139.21
42.156.139.155
42.156.139.94
42.156.139.84
42.156.139.80
42.156.139.215
42.156.139.129
42.156.139.212
42.156.139.142
42.156.139.202
42.156.139.233
42.156.139.87
42.156.139.83
42.156.139.152
42.156.139.91
42.156.139.207
42.156.139.149
42.156.139.140
42.156.139.100
42.156.139.37
42.156.139.211
42.156.139.40
42.156.139.46
42.156.139.158
42.156.139.241
42.156.139.214
42.156.139.168
42.156.139.194
42.156.139.151
42.156.139.139
42.156.139.130
42.156.139.134
42.156.139.222
42.156.139.72
42.156.139.33
42.156.139.63
42.156.139.32
42.156.139.172
42.156.139.137
42.156.139.28
42.156.139.247
42.156.139.175
42.156.139.79
42.156.139.243
42.156.139.131
42.156.139.17
42.156.139.14
42.156.139.114
42.156.139.48
42.156.139.34
42.156.139.92
42.156.139.246
42.156.139.88
42.156.139.16
42.156.139.97
42.156.139.24
42.156.139.167
42.156.139.164
42.156.139.51
42.156.139.15
42.156.139.254
42.156.139.144
42.156.139.199
42.156.139.224
42.156.139.50
42.156.139.66
42.156.139.123
42.156.139.163
42.156.139.103
42.156.139.68
42.156.139.82
42.156.139.192
42.156.139.38
42.156.139.7
42.156.139.180
42.156.139.234
42.156.139.111
42.156.139.189
42.156.139.159
42.156.139.1
42.156.139.81
42.156.139.157
42.156.139.120
42.156.139.13
42.156.139.221
42.156.139.147
42.156.139.126
42.156.139.20
42.156.139.98
42.156.139.156
42.156.139.184
42.156.139.117
42.156.139.198
42.156.139.67
42.156.139.118
42.156.139.62
42.156.139.35
42.156.139.4
42.156.139.186
42.156.139.238
Related comments:
IP Type Details Datetime
192.3.73.158 attackbotsspam 
Aug 10 07:08:53 mout sshd[18154]: Did not receive identification string from 192.3.73.158 port 51455
 2020-08-10 15:10:48
193.27.14.206 attackbotsspam 
Phishing email sender
 2020-08-10 15:24:28
167.99.235.248 attack 
2020-08-10T06:55:02.446612vps751288.ovh.net sshd\[17240\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.235.248  user=root
2020-08-10T06:55:04.374959vps751288.ovh.net sshd\[17240\]: Failed password for root from 167.99.235.248 port 48616 ssh2
2020-08-10T06:59:06.821040vps751288.ovh.net sshd\[17268\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.235.248  user=root
2020-08-10T06:59:09.246084vps751288.ovh.net sshd\[17268\]: Failed password for root from 167.99.235.248 port 38316 ssh2
2020-08-10T07:03:07.230630vps751288.ovh.net sshd\[17312\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.235.248  user=root
 2020-08-10 15:24:47
218.92.0.246 attackbots 
Aug 10 08:35:47 nextcloud sshd\[6093\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.246  user=root
Aug 10 08:35:49 nextcloud sshd\[6093\]: Failed password for root from 218.92.0.246 port 59964 ssh2
Aug 10 08:36:03 nextcloud sshd\[6093\]: Failed password for root from 218.92.0.246 port 59964 ssh2
 2020-08-10 14:43:45
112.19.94.19 attackbots 
Banned for a week because repeated abuses, for example SSH, but not only
 2020-08-10 14:46:07
213.87.44.152 attackbots 
Aug 10 07:50:29 minden010 sshd[10897]: Failed password for root from 213.87.44.152 port 40660 ssh2
Aug 10 07:54:38 minden010 sshd[12189]: Failed password for root from 213.87.44.152 port 50618 ssh2
...
 2020-08-10 14:46:35
223.171.46.146 attack 
$f2bV_matches
 2020-08-10 14:55:46
175.24.8.247 attackbots 
2020-08-10T07:18:04.733266centos sshd[4617]: Failed password for root from 175.24.8.247 port 54934 ssh2
2020-08-10T07:20:44.376399centos sshd[4991]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.8.247  user=root
2020-08-10T07:20:45.993454centos sshd[4991]: Failed password for root from 175.24.8.247 port 36112 ssh2
...
 2020-08-10 14:55:25
35.222.85.218 attackbots 
[2020-08-10 03:07:23] NOTICE[1185] chan_sip.c: Registration from '' failed for '35.222.85.218:58167' - Wrong password
[2020-08-10 03:07:23] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-10T03:07:23.660-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="888",SessionID="0x7f10c402a0b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/35.222.85.218/58167",Challenge="1e05266e",ReceivedChallenge="1e05266e",ReceivedHash="11e70a69bdcab61035513ffd8c87d76a"
[2020-08-10 03:07:45] NOTICE[1185] chan_sip.c: Registration from '' failed for '35.222.85.218:53026' - Wrong password
[2020-08-10 03:07:45] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-10T03:07:45.780-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="888",SessionID="0x7f10c405ea98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/35.222.85.218/530
...
 2020-08-10 15:12:40
211.159.153.62 attackspam 
Bruteforce detected by fail2ban
 2020-08-10 14:44:04
185.236.23.151 attackspambots 
Email rejected due to spam filtering
 2020-08-10 15:20:07
118.24.70.248 attackspambots 
Banned for a week because repeated abuses, for example SSH, but not only
 2020-08-10 14:51:50
187.102.16.211 attack 
(smtpauth) Failed SMTP AUTH login from 187.102.16.211 (BR/Brazil/187-102-16-211.ghnet.com.br): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-08-10 08:23:36 plain authenticator failed for ([187.102.16.211]) [187.102.16.211]: 535 Incorrect authentication data (set_id=info@allasdairy.ir)
 2020-08-10 14:53:14
170.246.206.235 attackbots 
Attempted Brute Force (dovecot)
 2020-08-10 14:57:06
190.153.249.99 attackbots 
Banned for a week because repeated abuses, for example SSH, but not only
 2020-08-10 15:17:00

Recently Reported IPs

94.102.54.71 209.251.238.56 176.119.7.219 94.102.54.6
106.11.152.237 186.116.174.114 197.248.184.158 180.76.62.183
94.102.54.79 94.102.53.152 89.248.162.130 94.102.49.145
89.248.163.144 42.156.138.155 89.248.161.194 94.102.50.208
65.210.57.5 89.248.161.147 42.156.139.106 89.248.161.154