Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Tencent Cloud Computing (Beijing) Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbotsspam
Apr 22 08:31:08 vmd17057 sshd[2147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.5.132 
Apr 22 08:31:10 vmd17057 sshd[2147]: Failed password for invalid user ubuntu from 139.155.5.132 port 48530 ssh2
...
2020-04-22 15:47:46
attackbotsspam
2020-04-06T01:22:28.748326linuxbox-skyline sshd[92395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.5.132  user=root
2020-04-06T01:22:31.297781linuxbox-skyline sshd[92395]: Failed password for root from 139.155.5.132 port 40346 ssh2
...
2020-04-06 16:21:29
attackspam
Mar 28 04:55:45 mout sshd[13951]: Connection closed by 139.155.5.132 port 54084 [preauth]
2020-03-28 12:04:11
attack
Feb 15 00:43:44 mout sshd[6032]: Did not receive identification string from 139.155.5.132 port 49650
2020-02-15 08:51:20
attackspam
Jan  3 13:17:40 ws24vmsma01 sshd[122831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.5.132
Jan  3 13:17:42 ws24vmsma01 sshd[122831]: Failed password for invalid user xxm from 139.155.5.132 port 38658 ssh2
...
2020-01-04 04:59:30
attackbots
$f2bV_matches
2019-12-24 17:25:27
attackspam
Dec 12 13:52:23 firewall sshd[10643]: Invalid user rpm from 139.155.5.132
Dec 12 13:52:25 firewall sshd[10643]: Failed password for invalid user rpm from 139.155.5.132 port 41720 ssh2
Dec 12 14:00:08 firewall sshd[10905]: Invalid user cayely from 139.155.5.132
...
2019-12-13 01:16:08
attackbots
Dec  5 10:19:58 microserver sshd[33133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.5.132  user=root
Dec  5 10:20:01 microserver sshd[33133]: Failed password for root from 139.155.5.132 port 47844 ssh2
Dec  5 10:26:49 microserver sshd[34408]: Invalid user faith from 139.155.5.132 port 51050
Dec  5 10:26:49 microserver sshd[34408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.5.132
Dec  5 10:26:51 microserver sshd[34408]: Failed password for invalid user faith from 139.155.5.132 port 51050 ssh2
Dec  5 10:40:21 microserver sshd[36629]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.5.132  user=backup
Dec  5 10:40:23 microserver sshd[36629]: Failed password for backup from 139.155.5.132 port 57440 ssh2
Dec  5 10:47:02 microserver sshd[37502]: Invalid user liedl from 139.155.5.132 port 60634
Dec  5 10:47:02 microserver sshd[37502]: pam_unix(sshd:auth): authentica
2019-12-05 19:42:24
attack
Nov 22 09:19:32 sauna sshd[164247]: Failed password for root from 139.155.5.132 port 56342 ssh2
Nov 22 09:23:51 sauna sshd[164288]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.5.132
...
2019-11-22 17:01:23
attackbots
Nov 14 00:22:24 dedicated sshd[13918]: Invalid user 123456 from 139.155.5.132 port 56392
2019-11-14 07:35:34
attackbots
Nov 10 13:55:36 ArkNodeAT sshd\[13850\]: Invalid user ts from 139.155.5.132
Nov 10 13:55:36 ArkNodeAT sshd\[13850\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.5.132
Nov 10 13:55:38 ArkNodeAT sshd\[13850\]: Failed password for invalid user ts from 139.155.5.132 port 41058 ssh2
2019-11-10 21:09:10
attackspam
Oct 28 01:56:03 plusreed sshd[30371]: Invalid user Official@123 from 139.155.5.132
...
2019-10-28 15:41:51
attackbotsspam
2019-10-24T23:06:38.899800abusebot-7.cloudsearch.cf sshd\[16322\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.5.132  user=root
2019-10-25 07:23:37
attackbotsspam
Oct 22 21:49:21 root sshd[21032]: Failed password for root from 139.155.5.132 port 46142 ssh2
Oct 22 22:07:18 root sshd[21196]: Failed password for root from 139.155.5.132 port 33206 ssh2
...
2019-10-23 04:22:06
attack
*Port Scan* detected from 139.155.5.132 (CN/China/-). 4 hits in the last 20 seconds
2019-09-16 18:48:33
attackbots
Sep 14 20:55:45 hpm sshd\[30761\]: Invalid user albrecht from 139.155.5.132
Sep 14 20:55:45 hpm sshd\[30761\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.5.132
Sep 14 20:55:47 hpm sshd\[30761\]: Failed password for invalid user albrecht from 139.155.5.132 port 35840 ssh2
Sep 14 21:00:12 hpm sshd\[31152\]: Invalid user iw from 139.155.5.132
Sep 14 21:00:12 hpm sshd\[31152\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.5.132
2019-09-15 16:37:17
Comments on same subnet:
IP Type Details Datetime
139.155.53.77 attackbotsspam
SSH/22 MH Probe, BF, Hack -
2020-10-08 05:45:43
139.155.53.77 attackbots
SSH/22 MH Probe, BF, Hack -
2020-10-07 14:00:02
139.155.59.174 attackspambots
Lines containing failures of 139.155.59.174
Aug 11 21:27:20 mx-in-01 sshd[3137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.59.174  user=r.r
Aug 11 21:27:22 mx-in-01 sshd[3137]: Failed password for r.r from 139.155.59.174 port 60478 ssh2
Aug 11 21:27:23 mx-in-01 sshd[3137]: Received disconnect from 139.155.59.174 port 60478:11: Bye Bye [preauth]
Aug 11 21:27:23 mx-in-01 sshd[3137]: Disconnected from authenticating user r.r 139.155.59.174 port 60478 [preauth]
Aug 11 21:38:10 mx-in-01 sshd[4208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.59.174  user=r.r


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=139.155.59.174
2020-08-14 22:30:05
139.155.59.174 attack
Aug 12 15:26:56 ns381471 sshd[15904]: Failed password for root from 139.155.59.174 port 59018 ssh2
2020-08-12 21:42:41
139.155.50.40 attack
Mar 17 06:37:35 l03 sshd[32251]: Invalid user xhchen from 139.155.50.40 port 37016
...
2020-03-17 15:59:53
139.155.50.40 attackbots
Invalid user trung from 139.155.50.40 port 40006
2020-03-12 08:04:57
139.155.50.40 attack
Feb 21 05:57:30 localhost sshd\[19932\]: Invalid user daniel from 139.155.50.40
Feb 21 05:57:30 localhost sshd\[19932\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.50.40
Feb 21 05:57:32 localhost sshd\[19932\]: Failed password for invalid user daniel from 139.155.50.40 port 47252 ssh2
Feb 21 05:59:32 localhost sshd\[19963\]: Invalid user git from 139.155.50.40
Feb 21 05:59:32 localhost sshd\[19963\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.50.40
...
2020-02-21 13:09:07
139.155.55.30 attack
Feb 17 23:30:50 vpn01 sshd[11711]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.55.30
Feb 17 23:30:52 vpn01 sshd[11711]: Failed password for invalid user nam from 139.155.55.30 port 49686 ssh2
...
2020-02-18 08:33:08
139.155.55.30 attackbots
Feb 12 00:45:23 silence02 sshd[1948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.55.30
Feb 12 00:45:25 silence02 sshd[1948]: Failed password for invalid user hbjung from 139.155.55.30 port 55684 ssh2
Feb 12 00:47:45 silence02 sshd[2204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.55.30
2020-02-12 10:23:32
139.155.55.30 attack
Feb  5 02:54:45 vps46666688 sshd[5031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.55.30
Feb  5 02:54:47 vps46666688 sshd[5031]: Failed password for invalid user shonta from 139.155.55.30 port 51042 ssh2
...
2020-02-05 14:06:44
139.155.50.40 attackspam
Feb  3 08:33:28 silence02 sshd[2745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.50.40
Feb  3 08:33:30 silence02 sshd[2745]: Failed password for invalid user 12qwaszx from 139.155.50.40 port 54248 ssh2
Feb  3 08:36:18 silence02 sshd[2918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.50.40
2020-02-03 15:46:44
139.155.50.40 attack
Unauthorized connection attempt detected from IP address 139.155.50.40 to port 2220 [J]
2020-02-02 19:29:29
139.155.55.30 attackbotsspam
Unauthorized connection attempt detected from IP address 139.155.55.30 to port 2220 [J]
2020-01-13 04:25:47
139.155.55.30 attack
Jan  2 01:24:37 server sshd\[8478\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.55.30  user=root
Jan  2 01:24:39 server sshd\[8478\]: Failed password for root from 139.155.55.30 port 48428 ssh2
Jan  2 01:55:13 server sshd\[15428\]: Invalid user mckain from 139.155.55.30
Jan  2 01:55:13 server sshd\[15428\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.55.30 
Jan  2 01:55:15 server sshd\[15428\]: Failed password for invalid user mckain from 139.155.55.30 port 36350 ssh2
...
2020-01-02 08:46:11
139.155.50.40 attack
Jan  1 07:29:46 MK-Soft-VM7 sshd[10618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.50.40 
Jan  1 07:29:48 MK-Soft-VM7 sshd[10618]: Failed password for invalid user vcsa from 139.155.50.40 port 55266 ssh2
...
2020-01-01 14:51:31
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.155.5.132
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23415
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.155.5.132.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019091500 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Sep 15 16:37:10 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 132.5.155.139.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 132.5.155.139.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
222.186.175.150 attackbotsspam
Oct 14 14:58:11 debian sshd[11174]: Unable to negotiate with 222.186.175.150 port 27110: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth]
Oct 14 17:00:07 debian sshd[16673]: Unable to negotiate with 222.186.175.150 port 4442: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth]
...
2019-10-15 05:12:26
41.84.131.10 attackbots
2019-10-14T20:49:25.362977shield sshd\[4135\]: Invalid user abcd!@\#123 from 41.84.131.10 port 32239
2019-10-14T20:49:25.368409shield sshd\[4135\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.84.131.10
2019-10-14T20:49:27.732279shield sshd\[4135\]: Failed password for invalid user abcd!@\#123 from 41.84.131.10 port 32239 ssh2
2019-10-14T20:54:02.646923shield sshd\[4705\]: Invalid user moogle from 41.84.131.10 port 52918
2019-10-14T20:54:02.652350shield sshd\[4705\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.84.131.10
2019-10-15 05:01:22
180.64.71.114 attackbots
2019-10-14T21:57:20.2188121240 sshd\[3017\]: Invalid user test from 180.64.71.114 port 38222
2019-10-14T21:57:20.2216351240 sshd\[3017\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.64.71.114
2019-10-14T21:57:22.9119391240 sshd\[3017\]: Failed password for invalid user test from 180.64.71.114 port 38222 ssh2
...
2019-10-15 05:27:07
81.171.81.153 attackbots
Brute forcing RDP port 3389
2019-10-15 05:26:01
45.55.20.128 attack
Oct 14 10:50:33 hpm sshd\[31411\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.20.128  user=root
Oct 14 10:50:35 hpm sshd\[31411\]: Failed password for root from 45.55.20.128 port 44779 ssh2
Oct 14 10:55:00 hpm sshd\[31757\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.20.128  user=root
Oct 14 10:55:02 hpm sshd\[31757\]: Failed password for root from 45.55.20.128 port 37137 ssh2
Oct 14 10:59:26 hpm sshd\[32184\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.20.128  user=root
2019-10-15 05:10:40
182.253.188.11 attackbotsspam
F2B jail: sshd. Time: 2019-10-14 23:15:35, Reported by: VKReport
2019-10-15 05:18:03
176.107.131.128 attackbots
Oct 14 21:05:53 ip-172-31-1-72 sshd\[5986\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.107.131.128  user=root
Oct 14 21:05:56 ip-172-31-1-72 sshd\[5986\]: Failed password for root from 176.107.131.128 port 53752 ssh2
Oct 14 21:14:50 ip-172-31-1-72 sshd\[6242\]: Invalid user ts from 176.107.131.128
Oct 14 21:14:50 ip-172-31-1-72 sshd\[6242\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.107.131.128
Oct 14 21:14:52 ip-172-31-1-72 sshd\[6242\]: Failed password for invalid user ts from 176.107.131.128 port 39690 ssh2
2019-10-15 05:18:16
95.173.186.148 attackspam
Oct 14 21:06:44 localhost sshd\[91175\]: Invalid user uvho from 95.173.186.148 port 37200
Oct 14 21:06:44 localhost sshd\[91175\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.173.186.148
Oct 14 21:06:47 localhost sshd\[91175\]: Failed password for invalid user uvho from 95.173.186.148 port 37200 ssh2
Oct 14 21:10:40 localhost sshd\[91331\]: Invalid user merlyn from 95.173.186.148 port 49730
Oct 14 21:10:40 localhost sshd\[91331\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.173.186.148
...
2019-10-15 05:15:32
200.178.251.146 attack
Automatic report - XMLRPC Attack
2019-10-15 05:24:16
34.92.7.232 attackbotsspam
Oct 14 23:51:23 www5 sshd\[349\]: Invalid user qwerroot from 34.92.7.232
Oct 14 23:51:23 www5 sshd\[349\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.92.7.232
Oct 14 23:51:25 www5 sshd\[349\]: Failed password for invalid user qwerroot from 34.92.7.232 port 50534 ssh2
...
2019-10-15 05:13:19
106.13.150.163 attack
F2B jail: sshd. Time: 2019-10-14 23:00:55, Reported by: VKReport
2019-10-15 05:12:11
68.48.240.245 attackspambots
Oct 14 22:41:34 lnxded64 sshd[1840]: Failed password for root from 68.48.240.245 port 52650 ssh2
Oct 14 22:45:29 lnxded64 sshd[2700]: Failed password for root from 68.48.240.245 port 36870 ssh2
2019-10-15 05:14:32
66.185.210.121 attackbots
Oct 14 20:14:50 localhost sshd\[89508\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.185.210.121  user=root
Oct 14 20:14:52 localhost sshd\[89508\]: Failed password for root from 66.185.210.121 port 50462 ssh2
Oct 14 20:19:04 localhost sshd\[89616\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.185.210.121  user=root
Oct 14 20:19:07 localhost sshd\[89616\]: Failed password for root from 66.185.210.121 port 35156 ssh2
Oct 14 20:23:13 localhost sshd\[89790\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.185.210.121  user=root
...
2019-10-15 05:01:53
188.166.251.87 attackbotsspam
Oct 14 10:52:44 tdfoods sshd\[15504\]: Invalid user securityc from 188.166.251.87
Oct 14 10:52:44 tdfoods sshd\[15504\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.251.87
Oct 14 10:52:46 tdfoods sshd\[15504\]: Failed password for invalid user securityc from 188.166.251.87 port 40009 ssh2
Oct 14 10:57:20 tdfoods sshd\[15857\]: Invalid user pigeon from 188.166.251.87
Oct 14 10:57:20 tdfoods sshd\[15857\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.251.87
2019-10-15 05:05:54
196.52.43.121 attackspam
Automatic report - Port Scan Attack
2019-10-15 05:22:37

Recently Reported IPs

43.248.189.64 0.234.207.181 66.42.50.252 97.86.61.125
220.132.106.115 81.150.208.196 23.129.141.209 187.74.122.134
198.45.176.140 178.217.43.12 181.29.211.17 146.144.157.214
23.241.82.132 123.108.200.150 212.19.9.148 61.69.200.87
50.185.190.126 177.190.70.221 177.124.77.150 51.68.143.28