必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Tencent Cloud Computing (Beijing) Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
Oct 13 17:13:10 plg sshd[6381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.2.6 
Oct 13 17:13:11 plg sshd[6381]: Failed password for invalid user linuxtester from 139.155.2.6 port 48062 ssh2
Oct 13 17:16:11 plg sshd[6413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.2.6 
Oct 13 17:16:12 plg sshd[6413]: Failed password for invalid user vd from 139.155.2.6 port 48306 ssh2
Oct 13 17:19:06 plg sshd[6440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.2.6 
Oct 13 17:19:08 plg sshd[6440]: Failed password for invalid user paul from 139.155.2.6 port 48550 ssh2
Oct 13 17:21:47 plg sshd[6480]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.2.6  user=root
...
2020-10-13 23:43:24
attack
Oct 13 01:32:32 eventyay sshd[3848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.2.6
Oct 13 01:32:33 eventyay sshd[3848]: Failed password for invalid user daniel from 139.155.2.6 port 60996 ssh2
Oct 13 01:35:41 eventyay sshd[3928]: Failed password for root from 139.155.2.6 port 52552 ssh2
...
2020-10-13 07:38:07
attackspam
2020-08-25T13:27:15.781281randservbullet-proofcloud-66.localdomain sshd[4059]: Invalid user xti from 139.155.2.6 port 55116
2020-08-25T13:27:15.785484randservbullet-proofcloud-66.localdomain sshd[4059]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.2.6
2020-08-25T13:27:15.781281randservbullet-proofcloud-66.localdomain sshd[4059]: Invalid user xti from 139.155.2.6 port 55116
2020-08-25T13:27:17.711932randservbullet-proofcloud-66.localdomain sshd[4059]: Failed password for invalid user xti from 139.155.2.6 port 55116 ssh2
...
2020-08-26 01:05:57
attackbots
Jul 25 12:10:19 firewall sshd[24499]: Invalid user ts3 from 139.155.2.6
Jul 25 12:10:21 firewall sshd[24499]: Failed password for invalid user ts3 from 139.155.2.6 port 41846 ssh2
Jul 25 12:14:28 firewall sshd[24588]: Invalid user iptv from 139.155.2.6
...
2020-07-26 02:30:03
attackbots
$f2bV_matches
2020-07-24 14:59:10
attackspam
2020-07-12T00:57:59+0200 Failed SSH Authentication/Brute Force Attack. (Server 4)
2020-07-12 08:01:16
attackbots
Jun 22 11:32:43 dhoomketu sshd[951176]: Failed password for invalid user pod from 139.155.2.6 port 38652 ssh2
Jun 22 11:34:19 dhoomketu sshd[951189]: Invalid user deploy from 139.155.2.6 port 52252
Jun 22 11:34:19 dhoomketu sshd[951189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.2.6 
Jun 22 11:34:19 dhoomketu sshd[951189]: Invalid user deploy from 139.155.2.6 port 52252
Jun 22 11:34:20 dhoomketu sshd[951189]: Failed password for invalid user deploy from 139.155.2.6 port 52252 ssh2
...
2020-06-22 18:45:41
attack
May 14 14:34:46 ip-172-31-62-245 sshd\[6376\]: Invalid user stefano from 139.155.2.6\
May 14 14:34:48 ip-172-31-62-245 sshd\[6376\]: Failed password for invalid user stefano from 139.155.2.6 port 58562 ssh2\
May 14 14:39:04 ip-172-31-62-245 sshd\[6441\]: Invalid user internet from 139.155.2.6\
May 14 14:39:07 ip-172-31-62-245 sshd\[6441\]: Failed password for invalid user internet from 139.155.2.6 port 46692 ssh2\
May 14 14:43:04 ip-172-31-62-245 sshd\[6565\]: Invalid user zero from 139.155.2.6\
2020-05-15 03:20:57
相同子网IP讨论:
IP 类型 评论内容 时间
139.155.204.28 attack
$f2bV_matches
2020-10-06 19:16:03
139.155.225.13 attack
SSH auth scanning - multiple failed logins
2020-10-06 05:44:10
139.155.225.13 attack
SSH auth scanning - multiple failed logins
2020-10-05 21:48:50
139.155.225.13 attackbotsspam
SSH auth scanning - multiple failed logins
2020-10-05 13:42:05
139.155.226.188 attackbots
2020-10-01T19:09:20.473230mail.broermann.family sshd[21573]: Invalid user git from 139.155.226.188 port 51440
2020-10-01T19:09:20.478600mail.broermann.family sshd[21573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.226.188
2020-10-01T19:09:20.473230mail.broermann.family sshd[21573]: Invalid user git from 139.155.226.188 port 51440
2020-10-01T19:09:22.659008mail.broermann.family sshd[21573]: Failed password for invalid user git from 139.155.226.188 port 51440 ssh2
2020-10-01T19:15:45.461831mail.broermann.family sshd[22073]: Invalid user proxy from 139.155.226.188 port 52706
...
2020-10-02 05:30:38
139.155.226.188 attackbots
Oct  1 15:37:49 server sshd[22762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.226.188
Oct  1 15:37:51 server sshd[22762]: Failed password for invalid user mmx from 139.155.226.188 port 36540 ssh2
Oct  1 15:51:11 server sshd[23652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.226.188  user=root
Oct  1 15:51:13 server sshd[23652]: Failed password for invalid user root from 139.155.226.188 port 41544 ssh2
2020-10-01 21:51:50
139.155.225.13 attackbots
SSH Bruteforce attack
2020-09-26 07:19:44
139.155.225.13 attack
Invalid user projects from 139.155.225.13 port 35996
2020-09-26 00:30:33
139.155.225.13 attack
Sep 25 08:57:15 ns382633 sshd\[2161\]: Invalid user svn from 139.155.225.13 port 44512
Sep 25 08:57:15 ns382633 sshd\[2161\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.225.13
Sep 25 08:57:17 ns382633 sshd\[2161\]: Failed password for invalid user svn from 139.155.225.13 port 44512 ssh2
Sep 25 09:02:30 ns382633 sshd\[3133\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.225.13  user=root
Sep 25 09:02:31 ns382633 sshd\[3133\]: Failed password for root from 139.155.225.13 port 33606 ssh2
2020-09-25 16:06:29
139.155.20.7 attackbotsspam
Sep 22 09:27:36 django-0 sshd[20937]: Invalid user ftpuser from 139.155.20.7
...
2020-09-22 18:10:23
139.155.21.34 attack
SSH login attempts.
2020-09-09 00:18:04
139.155.21.34 attackspambots
SSH login attempts.
2020-09-08 15:49:56
139.155.21.34 attack
Lines containing failures of 139.155.21.34
Sep  7 02:16:25 v2hgb sshd[5602]: Invalid user ubnt from 139.155.21.34 port 38778
Sep  7 02:16:25 v2hgb sshd[5602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.21.34 
Sep  7 02:16:27 v2hgb sshd[5602]: Failed password for invalid user ubnt from 139.155.21.34 port 38778 ssh2
Sep  7 02:16:27 v2hgb sshd[5602]: Received disconnect from 139.155.21.34 port 38778:11: Bye Bye [preauth]
Sep  7 02:16:27 v2hgb sshd[5602]: Disconnected from invalid user ubnt 139.155.21.34 port 38778 [preauth]
Sep  7 02:37:10 v2hgb sshd[7634]: Connection closed by 139.155.21.34 port 39446 [preauth]
Sep  7 02:41:12 v2hgb sshd[8175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.21.34  user=r.r
Sep  7 02:41:14 v2hgb sshd[8175]: Failed password for r.r from 139.155.21.34 port 58590 ssh2
Sep  7 02:41:15 v2hgb sshd[8175]: Received disconnect from 139.155.21.34 por........
------------------------------
2020-09-08 08:24:38
139.155.21.34 attack
Invalid user git from 139.155.21.34 port 43078
2020-09-02 20:36:28
139.155.21.34 attackbotsspam
Jul 24 10:30:38 server sshd[8988]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.21.34
Jul 24 10:30:39 server sshd[8988]: Failed password for invalid user admin from 139.155.21.34 port 53580 ssh2
Jul 24 10:38:03 server sshd[10333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.21.34
2020-09-02 12:30:53
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.155.2.6
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22092
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.155.2.6.			IN	A

;; AUTHORITY SECTION:
.			388	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020051401 1800 900 604800 86400

;; Query time: 118 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri May 15 03:20:53 CST 2020
;; MSG SIZE  rcvd: 115
HOST信息:
Host 6.2.155.139.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 6.2.155.139.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
104.92.95.64 attackspam
12/05/2019-16:19:02.694604 104.92.95.64 Protocol: 6 SURICATA TLS invalid record/traffic
2019-12-05 23:31:37
188.254.0.226 attackspambots
2019-12-05T15:39:20.172545abusebot-2.cloudsearch.cf sshd\[28388\]: Invalid user guest from 188.254.0.226 port 34378
2019-12-06 00:06:07
36.72.112.4 attackspambots
Wordpress attack
2019-12-05 23:55:52
120.29.75.66 attackbots
Portscan or hack attempt detected by psad/fwsnort
2019-12-06 00:02:06
123.207.9.172 attackspambots
Dec  5 15:55:04 OPSO sshd\[15842\]: Invalid user osix from 123.207.9.172 port 40004
Dec  5 15:55:04 OPSO sshd\[15842\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.9.172
Dec  5 15:55:06 OPSO sshd\[15842\]: Failed password for invalid user osix from 123.207.9.172 port 40004 ssh2
Dec  5 16:03:54 OPSO sshd\[18501\]: Invalid user redgie from 123.207.9.172 port 47384
Dec  5 16:03:54 OPSO sshd\[18501\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.9.172
2019-12-05 23:36:31
138.36.22.120 attackspam
Telnet/23 MH Probe, BF, Hack -
2019-12-06 00:10:40
45.171.198.56 attack
[6300:Dec  5 15:56:10 j320955 sshd[8389]: Disconnecting: Too many authentication failures for r.r from 45.171.198.56 port 48709 ssh2 [preauth]
6301:Dec  5 15:56:15 j320955 sshd[8436]: Disconnecting: Too many authentication failures for r.r from 45.171.198.56 port 48726 ssh2 [preauth]
6302:Dec  5 15:56:22 j320955 sshd[8438]: Received disconnect from 45.171.198.56: 11: disconnected by user [preauth]
6303:Dec  5 15:56:27 j320955 sshd[8440]: Invalid user admin from 45.171.198.56
6305:Dec  5 15:56:28 j320955 sshd[8440]: Disconnecting: Too many authentication failures for invalid user admin from 45.171.198.56 port 48757 ssh2 [preauth]
6306:Dec  5 15:56:33 j320955 sshd[8447]: Invalid user admin from 45.171.198.56
6308:Dec  5 15:56:34 j320955 sshd[8447]: Disconnecting: Too many authentication failures for invalid user admin from 45.171.198.56 port 48769 ssh2 [preauth]
6309:Dec  5 15:56:40 j320955 sshd[8449]: Invalid user admin from 45.171.198.56
6311:Dec  5 15:56:40 j320955 sshd........
------------------------------
2019-12-05 23:38:26
185.62.85.150 attackspam
2019-12-05T15:55:43.810924  sshd[23008]: Invalid user ardizone from 185.62.85.150 port 39274
2019-12-05T15:55:43.825319  sshd[23008]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.62.85.150
2019-12-05T15:55:43.810924  sshd[23008]: Invalid user ardizone from 185.62.85.150 port 39274
2019-12-05T15:55:45.635758  sshd[23008]: Failed password for invalid user ardizone from 185.62.85.150 port 39274 ssh2
2019-12-05T16:04:02.215072  sshd[23160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.62.85.150  user=root
2019-12-05T16:04:04.196524  sshd[23160]: Failed password for root from 185.62.85.150 port 35004 ssh2
...
2019-12-05 23:28:04
81.198.247.247 attackbotsspam
Telnet/23 MH Probe, BF, Hack -
2019-12-05 23:25:14
179.127.174.175 attackspambots
Unauthorised access (Dec  5) SRC=179.127.174.175 LEN=52 TOS=0x10 PREC=0x40 TTL=116 ID=15741 DF TCP DPT=445 WINDOW=8192 SYN
2019-12-05 23:33:52
112.64.32.118 attackbotsspam
2019-12-05T15:41:35.665377abusebot-6.cloudsearch.cf sshd\[29569\]: Invalid user backup from 112.64.32.118 port 49022
2019-12-06 00:09:02
47.91.90.132 attackspambots
2019-12-05T09:55:20.450230ns547587 sshd\[18197\]: Invalid user martgran from 47.91.90.132 port 36774
2019-12-05T09:55:20.456028ns547587 sshd\[18197\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.91.90.132
2019-12-05T09:55:22.441706ns547587 sshd\[18197\]: Failed password for invalid user martgran from 47.91.90.132 port 36774 ssh2
2019-12-05T10:03:50.437118ns547587 sshd\[21757\]: Invalid user tushar from 47.91.90.132 port 47262
...
2019-12-05 23:41:20
187.19.5.247 attack
Dec  6 01:22:36 our-server-hostname postfix/smtpd[23074]: connect from unknown[187.19.5.247]
Dec x@x
Dec x@x
Dec x@x
Dec x@x
Dec x@x
Dec x@x
Dec x@x
Dec x@x
Dec x@x
Dec x@x
Dec x@x
Dec  6 01:22:49 our-server-hostname postfix/smtpd[23074]: disconnect from unknown[187.19.5.247]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=187.19.5.247
2019-12-05 23:48:38
192.99.151.33 attackbots
Dec  5 16:14:43 srv01 sshd[14310]: Invalid user peresh from 192.99.151.33 port 42440
Dec  5 16:14:43 srv01 sshd[14310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.151.33
Dec  5 16:14:43 srv01 sshd[14310]: Invalid user peresh from 192.99.151.33 port 42440
Dec  5 16:14:46 srv01 sshd[14310]: Failed password for invalid user peresh from 192.99.151.33 port 42440 ssh2
Dec  5 16:20:17 srv01 sshd[14780]: Invalid user guest from 192.99.151.33 port 52414
...
2019-12-05 23:39:35
45.120.153.88 attackspam
Dec  5 10:41:35 plusreed sshd[12112]: Invalid user handle from 45.120.153.88
...
2019-12-05 23:50:25

最近上报的IP列表

49.88.168.29 78.98.144.134 167.99.186.215 45.95.168.176
221.2.144.76 39.37.130.154 114.67.207.225 62.24.196.138
47.240.20.196 49.68.223.77 222.117.7.182 219.217.204.103
135.83.53.130 158.69.0.38 155.66.25.122 130.0.79.108
48.111.115.111 76.66.75.184 161.217.177.150 167.36.164.94