Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Tencent Cloud Computing (Beijing) Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspam
Dec 23 01:43:55 server sshd\[32265\]: Invalid user dere from 139.155.74.38
Dec 23 01:43:55 server sshd\[32265\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.74.38 
Dec 23 01:43:57 server sshd\[32265\]: Failed password for invalid user dere from 139.155.74.38 port 46200 ssh2
Dec 23 01:51:17 server sshd\[2004\]: Invalid user backup from 139.155.74.38
Dec 23 01:51:17 server sshd\[2004\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.74.38 
...
2019-12-23 08:29:31
attack
Dec 14 12:16:56 loxhost sshd\[14445\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.74.38  user=root
Dec 14 12:16:58 loxhost sshd\[14445\]: Failed password for root from 139.155.74.38 port 55816 ssh2
Dec 14 12:23:10 loxhost sshd\[14578\]: Invalid user nfs from 139.155.74.38 port 48102
Dec 14 12:23:10 loxhost sshd\[14578\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.74.38
Dec 14 12:23:12 loxhost sshd\[14578\]: Failed password for invalid user nfs from 139.155.74.38 port 48102 ssh2
...
2019-12-14 19:37:14
attack
29 failed attempt(s) in the last 24h
2019-12-03 06:43:58
attackspambots
Dec  1 10:00:15 ny01 sshd[29930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.74.38
Dec  1 10:00:18 ny01 sshd[29930]: Failed password for invalid user rpc from 139.155.74.38 port 42344 ssh2
Dec  1 10:05:05 ny01 sshd[30461]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.74.38
2019-12-01 23:19:43
attack
Nov 27 12:55:37 wbs sshd\[11889\]: Invalid user kristosik from 139.155.74.38
Nov 27 12:55:37 wbs sshd\[11889\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.74.38
Nov 27 12:55:39 wbs sshd\[11889\]: Failed password for invalid user kristosik from 139.155.74.38 port 55596 ssh2
Nov 27 12:59:45 wbs sshd\[12262\]: Invalid user apples from 139.155.74.38
Nov 27 12:59:45 wbs sshd\[12262\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.74.38
2019-11-28 07:15:02
attackspambots
Nov 27 18:13:39 heissa sshd\[12379\]: Invalid user byholt from 139.155.74.38 port 58348
Nov 27 18:13:39 heissa sshd\[12379\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.74.38
Nov 27 18:13:42 heissa sshd\[12379\]: Failed password for invalid user byholt from 139.155.74.38 port 58348 ssh2
Nov 27 18:20:07 heissa sshd\[13338\]: Invalid user nfs from 139.155.74.38 port 51464
Nov 27 18:20:07 heissa sshd\[13338\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.74.38
2019-11-28 03:50:20
attackspambots
$f2bV_matches
2019-11-25 16:14:50
attackbots
SSH brutforce
2019-11-21 02:55:11
attack
Nov 20 08:33:39 vmanager6029 sshd\[21930\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.74.38  user=news
Nov 20 08:33:41 vmanager6029 sshd\[21930\]: Failed password for news from 139.155.74.38 port 35570 ssh2
Nov 20 08:38:55 vmanager6029 sshd\[22011\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.74.38  user=root
2019-11-20 16:18:30
attack
Nov  2 23:09:22 server sshd\[7674\]: Invalid user oracle from 139.155.74.38
Nov  2 23:09:22 server sshd\[7674\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.74.38 
Nov  2 23:09:23 server sshd\[7674\]: Failed password for invalid user oracle from 139.155.74.38 port 45924 ssh2
Nov  2 23:17:54 server sshd\[9669\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.74.38  user=root
Nov  2 23:17:56 server sshd\[9669\]: Failed password for root from 139.155.74.38 port 40336 ssh2
...
2019-11-03 06:20:59
Comments on same subnet:
IP Type Details Datetime
139.155.74.147 attackspambots
Found on   Github Combined on 3 lists    / proto=6  .  srcport=50234  .  dstport=23557  .     (1759)
2020-10-13 22:54:55
139.155.74.147 attackbotsspam
[N3.H3.VM3] Port Scanner Detected Blocked by UFW
2020-10-13 14:15:20
139.155.74.147 attackspambots
[N3.H3.VM3] Port Scanner Detected Blocked by UFW
2020-10-13 06:57:21
139.155.74.147 attackspambots
$f2bV_matches
2020-08-22 14:16:37
139.155.74.147 attack
Aug  5 16:08:38 ns381471 sshd[15732]: Failed password for root from 139.155.74.147 port 56782 ssh2
2020-08-05 22:12:55
139.155.74.13 attackspambots
MLV GET /wp-login.php
2020-08-05 07:43:38
139.155.74.240 attackbotsspam
Invalid user aurore from 139.155.74.240 port 44788
2020-07-31 06:05:44
139.155.74.240 attack
Invalid user idempiere from 139.155.74.240 port 34572
2020-07-30 17:34:31
139.155.74.240 attack
Jul 22 22:03:17 ns381471 sshd[8744]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.74.240
Jul 22 22:03:19 ns381471 sshd[8744]: Failed password for invalid user admin from 139.155.74.240 port 60236 ssh2
2020-07-23 04:14:00
139.155.74.147 attackspambots
Jul 11 23:56:16 ns382633 sshd\[1615\]: Invalid user dauner from 139.155.74.147 port 48023
Jul 11 23:56:16 ns382633 sshd\[1615\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.74.147
Jul 11 23:56:18 ns382633 sshd\[1615\]: Failed password for invalid user dauner from 139.155.74.147 port 48023 ssh2
Jul 12 00:00:58 ns382633 sshd\[2531\]: Invalid user lulli from 139.155.74.147 port 37535
Jul 12 00:00:58 ns382633 sshd\[2531\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.74.147
2020-07-12 07:24:34
139.155.74.240 attackspambots
2020-07-06 UTC: (147x) - VM,acct,acme,admin(4x),administrator,asterisk,azar,b,cacheusr,cam,carrie,comfort,cse,db2inst3,deploy,deployer,dge,dis,drcom,edu,emilio,erica,ethos,evv,frida,gisele,git,gitlab-runner,hadoop,hans,indu,james,jenkins,john1,joomla,kafka(2x),kg,las,lcr,mai,mc,mcserver,me,mf,monitor,mysql(2x),nexus,oem,opscode,oracle(2x),owncloud,pankaj,prashant,prem,premier,r,rachid,remote,roger,root(41x),ryan,sam,scott,sdv,shield,smbuser,stage,stone,student,superman,svaadmin,sysadmin,tahir,tapas,tb,tecnico,test(2x),test3,tomas,tomcat,toor,uat,ubuntu,user(2x),userftp,usher,wangwei,wayne,wbiadmin,webmaster,wfp,work,xt,yjlee,zc,zhangyang,zhangyong,zsh,zzz
2020-07-07 18:15:03
139.155.74.240 attack
Jul  4 23:22:34 ift sshd\[61094\]: Invalid user test from 139.155.74.240Jul  4 23:22:37 ift sshd\[61094\]: Failed password for invalid user test from 139.155.74.240 port 58348 ssh2Jul  4 23:25:31 ift sshd\[61755\]: Invalid user cr from 139.155.74.240Jul  4 23:25:32 ift sshd\[61755\]: Failed password for invalid user cr from 139.155.74.240 port 60934 ssh2Jul  4 23:28:19 ift sshd\[62211\]: Invalid user usuario from 139.155.74.240
...
2020-07-05 05:14:33
139.155.74.240 attackbots
Jun 17 12:31:02 webhost01 sshd[4010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.74.240
Jun 17 12:31:05 webhost01 sshd[4010]: Failed password for invalid user earth from 139.155.74.240 port 54016 ssh2
...
2020-06-17 13:59:50
139.155.74.147 attackspambots
Invalid user admin from 139.155.74.147 port 56158
2020-06-13 16:44:14
139.155.74.147 attackbotsspam
Jun 11 01:32:45 dhoomketu sshd[634888]: Failed password for invalid user mass from 139.155.74.147 port 58408 ssh2
Jun 11 01:34:46 dhoomketu sshd[634960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.74.147  user=root
Jun 11 01:34:47 dhoomketu sshd[634960]: Failed password for root from 139.155.74.147 port 42767 ssh2
Jun 11 01:36:48 dhoomketu sshd[634989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.74.147  user=root
Jun 11 01:36:50 dhoomketu sshd[634989]: Failed password for root from 139.155.74.147 port 55354 ssh2
...
2020-06-11 06:57:17
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.155.74.38
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14339
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.155.74.38.			IN	A

;; AUTHORITY SECTION:
.			560	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110201 1800 900 604800 86400

;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Nov 03 06:20:56 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 38.74.155.139.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 38.74.155.139.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
167.172.156.12 attackbots
Sep 27 11:26:26  sshd\[10369\]: User root from 167.172.156.12 not allowed because not listed in AllowUsersSep 27 11:26:28  sshd\[10369\]: Failed password for invalid user root from 167.172.156.12 port 58048 ssh2
...
2020-09-27 22:36:55
195.62.46.94 attackbots
389/udp
[2020-09-26]1pkt
2020-09-27 22:26:29
218.92.0.158 attack
Sep 27 09:47:46 ny01 sshd[15773]: Failed password for root from 218.92.0.158 port 7485 ssh2
Sep 27 09:47:59 ny01 sshd[15773]: error: maximum authentication attempts exceeded for root from 218.92.0.158 port 7485 ssh2 [preauth]
Sep 27 09:48:05 ny01 sshd[15806]: Failed password for root from 218.92.0.158 port 38930 ssh2
2020-09-27 22:21:51
222.135.218.162 attack
23/tcp
[2020-09-26]1pkt
2020-09-27 22:13:19
45.187.237.138 attack
23/tcp
[2020-09-26]1pkt
2020-09-27 22:42:29
92.246.146.119 attack
Unauthorised access (Sep 27) SRC=92.246.146.119 LEN=40 TOS=0x10 PREC=0x40 TTL=50 ID=53829 TCP DPT=8080 WINDOW=35921 SYN
2020-09-27 22:23:16
116.74.16.227 attack
37215/tcp 37215/tcp 37215/tcp
[2020-09-26]3pkt
2020-09-27 22:49:03
103.145.13.216 attackspambots
TCP ports : 8080 / 8082; UDP port : 9090
2020-09-27 22:32:14
178.128.56.254 attackspambots
Sep 27 11:57:24 vps639187 sshd\[7936\]: Invalid user postgres from 178.128.56.254 port 53732
Sep 27 11:57:24 vps639187 sshd\[7936\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.56.254
Sep 27 11:57:26 vps639187 sshd\[7936\]: Failed password for invalid user postgres from 178.128.56.254 port 53732 ssh2
...
2020-09-27 22:14:15
176.88.31.44 attack
53458/udp
[2020-09-26]1pkt
2020-09-27 22:30:37
104.248.147.78 attackbots
Sep 27 02:28:05 marvibiene sshd[29577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.147.78 
Sep 27 02:28:07 marvibiene sshd[29577]: Failed password for invalid user user2 from 104.248.147.78 port 57762 ssh2
2020-09-27 22:15:00
190.24.58.91 attack
2323/tcp
[2020-09-26]1pkt
2020-09-27 22:07:16
78.187.255.74 attackbotsspam
445/tcp
[2020-09-26]1pkt
2020-09-27 22:27:08
112.33.112.170 attackspambots
Sep 27 16:36:50 mail postfix/smtpd[5337]: warning: unknown[112.33.112.170]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 27 16:36:58 mail postfix/smtpd[5335]: warning: unknown[112.33.112.170]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 27 16:37:10 mail postfix/smtpd[5337]: warning: unknown[112.33.112.170]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-09-27 22:49:37
103.133.106.164 attackspambots
33389/tcp 33389/tcp 33389/tcp
[2020-09-26]3pkt
2020-09-27 22:26:18

Recently Reported IPs

106.12.45.108 217.118.91.67 148.70.118.95 138.197.148.223
31.153.194.85 178.79.153.130 111.95.168.101 144.166.238.219
118.247.59.179 86.165.218.94 209.21.205.5 23.138.228.3
35.64.81.195 120.133.36.87 190.213.238.180 221.196.156.117
95.52.39.73 64.231.175.61 221.225.83.148 185.244.192.250