139.155.118.138

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Tencent Cloud Computing (Beijing) Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	20 attempts against mh-ssh on cloud.magehost.pro	2020-01-13 08:48:09
attackspambots	Automatic report - Banned IP Access	2020-01-07 19:51:16
attackbots	Jan 3 18:20:41 firewall sshd[31739]: Invalid user testing from 139.155.118.138 Jan 3 18:20:43 firewall sshd[31739]: Failed password for invalid user testing from 139.155.118.138 port 48532 ssh2 Jan 3 18:23:58 firewall sshd[31847]: Invalid user 2309 from 139.155.118.138 ...	2020-01-04 06:06:44
attack	Jan 2 00:32:45 srv-ubuntu-dev3 sshd[107859]: Invalid user kurosawa from 139.155.118.138 Jan 2 00:32:45 srv-ubuntu-dev3 sshd[107859]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.118.138 Jan 2 00:32:45 srv-ubuntu-dev3 sshd[107859]: Invalid user kurosawa from 139.155.118.138 Jan 2 00:32:47 srv-ubuntu-dev3 sshd[107859]: Failed password for invalid user kurosawa from 139.155.118.138 port 53030 ssh2 Jan 2 00:34:56 srv-ubuntu-dev3 sshd[108061]: Invalid user velocix from 139.155.118.138 Jan 2 00:34:56 srv-ubuntu-dev3 sshd[108061]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.118.138 Jan 2 00:34:56 srv-ubuntu-dev3 sshd[108061]: Invalid user velocix from 139.155.118.138 Jan 2 00:34:58 srv-ubuntu-dev3 sshd[108061]: Failed password for invalid user velocix from 139.155.118.138 port 42814 ssh2 Jan 2 00:37:07 srv-ubuntu-dev3 sshd[108348]: pam_unix(sshd:auth): authentication failure; lognam ...	2020-01-02 09:01:39
attackspambots	Jan 1 12:47:17 vps46666688 sshd[9693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.118.138 Jan 1 12:47:20 vps46666688 sshd[9693]: Failed password for invalid user denis from 139.155.118.138 port 55650 ssh2 ...	2020-01-02 03:51:58
attack	Dec 12 14:54:53 *** sshd[25649]: Invalid user adie from 139.155.118.138	2019-12-12 23:01:12
attackspambots	Dec 1 15:33:24 jane sshd[15425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.118.138 Dec 1 15:33:26 jane sshd[15425]: Failed password for invalid user einarsson from 139.155.118.138 port 33974 ssh2 ...	2019-12-02 06:27:31
attackbotsspam	Dec 1 06:16:12 vps666546 sshd\[12399\]: Invalid user archive from 139.155.118.138 port 55678 Dec 1 06:16:12 vps666546 sshd\[12399\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.118.138 Dec 1 06:16:14 vps666546 sshd\[12399\]: Failed password for invalid user archive from 139.155.118.138 port 55678 ssh2 Dec 1 06:20:48 vps666546 sshd\[12624\]: Invalid user skogstad from 139.155.118.138 port 59854 Dec 1 06:20:48 vps666546 sshd\[12624\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.118.138 ...	2019-12-01 13:55:03
attackspambots	Invalid user cazzol from 139.155.118.138 port 58182	2019-11-29 16:14:26
attack	Invalid user pq from 139.155.118.138 port 54650	2019-11-27 05:47:12
attackbots	Nov 20 04:39:03 sachi sshd\[26002\]: Invalid user qwerty from 139.155.118.138 Nov 20 04:39:03 sachi sshd\[26002\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.118.138 Nov 20 04:39:05 sachi sshd\[26002\]: Failed password for invalid user qwerty from 139.155.118.138 port 49580 ssh2 Nov 20 04:44:50 sachi sshd\[26558\]: Invalid user chamberlain from 139.155.118.138 Nov 20 04:44:50 sachi sshd\[26558\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.118.138	2019-11-21 00:57:58
attackspambots	Nov 20 06:10:14 eventyay sshd[20009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.118.138 Nov 20 06:10:16 eventyay sshd[20009]: Failed password for invalid user setup from 139.155.118.138 port 59516 ssh2 Nov 20 06:14:45 eventyay sshd[20039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.118.138 ...	2019-11-20 13:49:28
attackspambots	SSH invalid-user multiple login try	2019-10-29 01:16:28
attack	Oct 27 06:57:38 MK-Soft-VM4 sshd[15337]: Failed password for root from 139.155.118.138 port 59774 ssh2 ...	2019-10-27 14:31:29
attackspambots	Oct 25 03:12:15 php1 sshd\[10347\]: Invalid user Qaz@2020 from 139.155.118.138 Oct 25 03:12:15 php1 sshd\[10347\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.118.138 Oct 25 03:12:16 php1 sshd\[10347\]: Failed password for invalid user Qaz@2020 from 139.155.118.138 port 37718 ssh2 Oct 25 03:18:17 php1 sshd\[10795\]: Invalid user utztrp0 from 139.155.118.138 Oct 25 03:18:17 php1 sshd\[10795\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.118.138	2019-10-26 00:04:38
attackbotsspam	2019-10-18 14:58:33,805 fail2ban.actions: WARNING [ssh] Ban 139.155.118.138	2019-10-18 21:16:18
attack	Sep 3 22:41:33 mail sshd\[20455\]: Invalid user www from 139.155.118.138 port 39164 Sep 3 22:41:33 mail sshd\[20455\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.118.138 Sep 3 22:41:35 mail sshd\[20455\]: Failed password for invalid user www from 139.155.118.138 port 39164 ssh2 Sep 3 22:45:41 mail sshd\[20854\]: Invalid user tony from 139.155.118.138 port 45738 Sep 3 22:45:41 mail sshd\[20854\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.118.138	2019-09-04 06:42:10

Comments on same subnet:

IP	Type	Details	Datetime
139.155.118.190	attackspam	Unauthorized connection attempt detected from IP address 139.155.118.190 to port 594 [T]	2020-05-20 09:48:18
139.155.118.190	attack	Unauthorized connection attempt detected from IP address 139.155.118.190 to port 711 [T]	2020-05-06 07:36:05
139.155.118.190	attackspambots	k+ssh-bruteforce	2020-04-08 16:40:45
139.155.118.190	attackspam	Mar 17 11:34:10 mockhub sshd[7944]: Failed password for root from 139.155.118.190 port 52958 ssh2 ...	2020-03-18 06:25:20
139.155.118.190	attackbots	Feb 8 00:03:19 sd-53420 sshd\[7392\]: Invalid user vin from 139.155.118.190 Feb 8 00:03:19 sd-53420 sshd\[7392\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.118.190 Feb 8 00:03:21 sd-53420 sshd\[7392\]: Failed password for invalid user vin from 139.155.118.190 port 46666 ssh2 Feb 8 00:06:55 sd-53420 sshd\[7672\]: Invalid user cnx from 139.155.118.190 Feb 8 00:06:55 sd-53420 sshd\[7672\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.118.190 ...	2020-02-08 07:40:57
139.155.118.190	attackspambots	2019-09-14T08:56:47.804887suse-nuc sshd[26505]: Invalid user extrim from 139.155.118.190 port 60977 ...	2020-02-07 10:18:24
139.155.118.190	attack	Feb 6 19:16:53 areeb-Workstation sshd[16378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.118.190 Feb 6 19:16:56 areeb-Workstation sshd[16378]: Failed password for invalid user xuy from 139.155.118.190 port 33485 ssh2 ...	2020-02-06 22:07:00
139.155.118.190	attack	Unauthorized connection attempt detected from IP address 139.155.118.190 to port 2220 [J]	2020-01-21 15:24:22
139.155.118.190	attackbots	2020-01-10T23:34:36.0174131495-001 sshd[6202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.118.190 2020-01-10T23:34:36.0103721495-001 sshd[6202]: Invalid user gkd from 139.155.118.190 port 42072 2020-01-10T23:34:37.3459571495-001 sshd[6202]: Failed password for invalid user gkd from 139.155.118.190 port 42072 ssh2 2020-01-11T00:36:40.7825741495-001 sshd[8447]: Invalid user PAs$wOrd1 from 139.155.118.190 port 56311 2020-01-11T00:36:40.7859361495-001 sshd[8447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.118.190 2020-01-11T00:36:40.7825741495-001 sshd[8447]: Invalid user PAs$wOrd1 from 139.155.118.190 port 56311 2020-01-11T00:36:42.6905341495-001 sshd[8447]: Failed password for invalid user PAs$wOrd1 from 139.155.118.190 port 56311 ssh2 2020-01-11T00:40:33.9212971495-001 sshd[8596]: Invalid user abcd1234 from 139.155.118.190 port 37792 2020-01-11T00:40:33.9243691495-001 sshd[8596]: pa ...	2020-01-11 20:42:11
139.155.118.190	attack	$f2bV_matches	2020-01-04 15:33:03
139.155.118.190	attackbotsspam	Invalid user vari from 139.155.118.190 port 60725	2020-01-02 06:26:47
139.155.118.190	attackspambots	Dec 27 17:33:19 server sshd\[10461\]: Invalid user gregory from 139.155.118.190 Dec 27 17:33:19 server sshd\[10461\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.118.190 Dec 27 17:33:22 server sshd\[10461\]: Failed password for invalid user gregory from 139.155.118.190 port 58405 ssh2 Dec 27 17:47:55 server sshd\[14251\]: Invalid user finance from 139.155.118.190 Dec 27 17:47:55 server sshd\[14251\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.118.190 ...	2019-12-28 03:38:14
139.155.118.190	attack	$f2bV_matches	2019-12-27 18:58:33
139.155.118.190	attack	Dec 14 08:29:13 zx01vmsma01 sshd[121272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.118.190 Dec 14 08:29:15 zx01vmsma01 sshd[121272]: Failed password for invalid user chesser from 139.155.118.190 port 54867 ssh2 ...	2019-12-14 20:34:45
139.155.118.190	attack	Dec 12 09:29:43 ArkNodeAT sshd\[18891\]: Invalid user marzulli from 139.155.118.190 Dec 12 09:29:43 ArkNodeAT sshd\[18891\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.118.190 Dec 12 09:29:44 ArkNodeAT sshd\[18891\]: Failed password for invalid user marzulli from 139.155.118.190 port 43847 ssh2	2019-12-12 16:54:22

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.155.118.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23523
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.155.118.138.		IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019090301 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Sep 04 06:42:05 CST 2019
;; MSG SIZE  rcvd: 119

Host info

Host 138.118.155.139.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 138.118.155.139.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
85.209.0.82	attack	SSH brute-force attempt	2020-08-06 01:34:42
103.72.144.228	attackspambots	[ssh] SSH attack	2020-08-06 01:29:29
178.34.190.34	attack	Aug 5 22:42:15 webhost01 sshd[26076]: Failed password for root from 178.34.190.34 port 11119 ssh2 ...	2020-08-06 01:52:37
147.135.253.94	attackspam	[2020-08-05 13:34:06] NOTICE[1248] chan_sip.c: Registration from '' failed for '147.135.253.94:53402' - Wrong password [2020-08-05 13:34:06] SECURITY[1275] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-05T13:34:06.741-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="562",SessionID="0x7f27200a09d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/147.135.253.94/53402",Challenge="043b9b97",ReceivedChallenge="043b9b97",ReceivedHash="e59ff1669fd2fb5f7c6d6b6574e79b84" [2020-08-05 13:34:30] NOTICE[1248] chan_sip.c: Registration from '' failed for '147.135.253.94:60200' - Wrong password [2020-08-05 13:34:30] SECURITY[1275] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-05T13:34:30.545-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="563",SessionID="0x7f27205a5c28",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/147.135.253.94 ...	2020-08-06 01:42:37
216.218.206.93	attack	TCP (SYN) 216.218.206.93:43669 -> port 30005, len 44	2020-08-06 01:48:32
150.109.115.108	attackspambots	Aug 5 19:33:18 lukav-desktop sshd\[4235\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.115.108 user=root Aug 5 19:33:20 lukav-desktop sshd\[4235\]: Failed password for root from 150.109.115.108 port 44316 ssh2 Aug 5 19:36:54 lukav-desktop sshd\[4261\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.115.108 user=root Aug 5 19:36:56 lukav-desktop sshd\[4261\]: Failed password for root from 150.109.115.108 port 43930 ssh2 Aug 5 19:40:22 lukav-desktop sshd\[4520\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.115.108 user=root	2020-08-06 01:31:56
222.186.30.76	attackspam	08/05/2020-13:24:56.649663 222.186.30.76 Protocol: 6 ET SCAN Potential SSH Scan	2020-08-06 01:30:13
116.12.92.250	attackspam	Unauthorized connection attempt from IP address 116.12.92.250 on Port 445(SMB)	2020-08-06 01:17:35
208.109.12.218	attackspam	208.109.12.218 - - [05/Aug/2020:13:44:27 +0100] "POST /wp-login.php HTTP/1.1" 200 2083 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 208.109.12.218 - - [05/Aug/2020:13:44:30 +0100] "POST /wp-login.php HTTP/1.1" 200 2060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 208.109.12.218 - - [05/Aug/2020:13:44:32 +0100] "POST /wp-login.php HTTP/1.1" 200 2063 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-06 01:16:46
187.57.220.20	attackbotsspam	Automatic report - Port Scan Attack	2020-08-06 01:55:02
103.110.84.196	attack	ssh intrusion attempt	2020-08-06 01:21:14
189.209.253.131	attackbots	Automatic report - Port Scan Attack	2020-08-06 01:30:54
122.51.246.233	attackspambots	2020-08-05 07:13:22.140444-0500 localhost sshd[74741]: Failed password for root from 122.51.246.233 port 49782 ssh2	2020-08-06 01:32:35
220.134.96.190	attackspam	Unauthorized connection attempt from IP address 220.134.96.190 on Port 445(SMB)	2020-08-06 01:26:39
190.14.247.226	attackbots	Unauthorized connection attempt from IP address 190.14.247.226 on Port 445(SMB)	2020-08-06 01:18:28

Recently Reported IPs

222.42.192.237	37.136.90.238	91.207.68.242	95.91.214.83
147.189.117.219	14.142.143.94	94.245.201.19	87.186.8.20
201.241.205.214	65.98.180.107	77.240.30.219	247.4.91.17
23.216.164.140	38.246.242.253	144.237.160.253	179.226.115.68
136.29.127.16	164.151.57.172	139.157.30.105	68.1.101.41