139.155.82.146

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Tencent Cloud Computing (Beijing) Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	Jul 3 04:17:55 ns37 sshd[2826]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.82.146 Jul 3 04:17:55 ns37 sshd[2826]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.82.146 Jul 3 04:17:57 ns37 sshd[2826]: Failed password for invalid user operatore from 139.155.82.146 port 36040 ssh2	2020-07-03 20:37:49
attack	21 attempts against mh-ssh on cloud	2020-06-28 01:36:28

类型

评论内容

时间

attackspambots

Jul  3 04:17:55 ns37 sshd[2826]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.82.146
Jul  3 04:17:55 ns37 sshd[2826]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.82.146
Jul  3 04:17:57 ns37 sshd[2826]: Failed password for invalid user operatore from 139.155.82.146 port 36040 ssh2

2020-07-03 20:37:49

attack

21 attempts against mh-ssh on cloud

2020-06-28 01:36:28

相同子网IP讨论:

IP	类型	评论内容	时间
139.155.82.119	attackspam	Oct 13 16:41:09 serwer sshd\[8687\]: Invalid user romero from 139.155.82.119 port 45912 Oct 13 16:41:09 serwer sshd\[8687\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.82.119 Oct 13 16:41:11 serwer sshd\[8687\]: Failed password for invalid user romero from 139.155.82.119 port 45912 ssh2 ...	2020-10-14 03:27:21
139.155.82.119	attackbotsspam	Oct 13 12:22:10 meumeu sshd[488126]: Invalid user philipp from 139.155.82.119 port 60342 Oct 13 12:22:10 meumeu sshd[488126]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.82.119 Oct 13 12:22:10 meumeu sshd[488126]: Invalid user philipp from 139.155.82.119 port 60342 Oct 13 12:22:13 meumeu sshd[488126]: Failed password for invalid user philipp from 139.155.82.119 port 60342 ssh2 Oct 13 12:26:17 meumeu sshd[488460]: Invalid user elke from 139.155.82.119 port 57342 Oct 13 12:26:17 meumeu sshd[488460]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.82.119 Oct 13 12:26:17 meumeu sshd[488460]: Invalid user elke from 139.155.82.119 port 57342 Oct 13 12:26:19 meumeu sshd[488460]: Failed password for invalid user elke from 139.155.82.119 port 57342 ssh2 Oct 13 12:31:41 meumeu sshd[488848]: Invalid user test4 from 139.155.82.119 port 54744 ...	2020-10-13 18:46:03
139.155.82.193	attack	Oct 5 14:08:35 hidden sshd[17390]: Failed password for hidden from 139.155.82.193 port 34290 ssh2 Oct 5 14:13:43 hidden sshd[19273]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.82.193 user=root Oct 5 14:13:45 hidden sshd[19273]: Failed password for hidden from 139.155.82.193 port 36978 ssh2 Oct 5 14:18:53 hidden sshd[21047]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.82.193 user=root Oct 5 14:18:55 hidden sshd[21047]: Failed password for hidden from 139.155.82.193 port 39664 ssh2	2020-10-06 05:07:42
139.155.82.193	attackspam	Oct 5 14:08:35 hidden sshd[17390]: Failed password for hidden from 139.155.82.193 port 34290 ssh2 Oct 5 14:13:43 hidden sshd[19273]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.82.193 user=root Oct 5 14:13:45 hidden sshd[19273]: Failed password for hidden from 139.155.82.193 port 36978 ssh2 Oct 5 14:18:53 hidden sshd[21047]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.82.193 user=root Oct 5 14:18:55 hidden sshd[21047]: Failed password for hidden from 139.155.82.193 port 39664 ssh2	2020-10-05 21:11:37
139.155.82.193	attack	SSH/22 MH Probe, BF, Hack -	2020-10-05 13:01:56
139.155.82.119	attackspam	Sep 1 14:25:28 master sshd[31101]: Failed password for invalid user riana from 139.155.82.119 port 53916 ssh2 Sep 1 14:46:22 master sshd[31850]: Failed password for invalid user sysadmin from 139.155.82.119 port 58530 ssh2 Sep 1 14:49:23 master sshd[31868]: Failed password for invalid user zj from 139.155.82.119 port 43608 ssh2 Sep 1 14:52:29 master sshd[31963]: Failed password for invalid user terry from 139.155.82.119 port 60022 ssh2 Sep 1 14:55:26 master sshd[32027]: Failed password for root from 139.155.82.119 port 55884 ssh2 Sep 1 14:58:30 master sshd[32043]: Failed password for invalid user pokus from 139.155.82.119 port 37782 ssh2 Sep 1 15:01:25 master sshd[32515]: Failed password for invalid user teresa from 139.155.82.119 port 37870 ssh2 Sep 1 15:04:28 master sshd[32533]: Failed password for invalid user zt from 139.155.82.119 port 46416 ssh2 Sep 1 15:07:32 master sshd[32599]: Failed password for invalid user ftp-user from 139.155.82.119 port 59826 ssh2	2020-09-01 20:44:36
139.155.82.119	attackbotsspam	Aug 28 11:47:12 ny01 sshd[22401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.82.119 Aug 28 11:47:14 ny01 sshd[22401]: Failed password for invalid user wz from 139.155.82.119 port 46152 ssh2 Aug 28 11:49:02 ny01 sshd[22692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.82.119	2020-08-29 02:43:59
139.155.82.119	attack	Aug 18 08:46:44 vm0 sshd[4421]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.82.119 Aug 18 08:46:46 vm0 sshd[4421]: Failed password for invalid user zenbot from 139.155.82.119 port 53678 ssh2 ...	2020-08-18 15:05:04
139.155.82.119	attack	Aug 11 06:51:52 ip40 sshd[24478]: Failed password for root from 139.155.82.119 port 60398 ssh2 ...	2020-08-11 13:44:42
139.155.82.119	attackbotsspam	Jul 23 00:55:11 sso sshd[6439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.82.119 Jul 23 00:55:13 sso sshd[6439]: Failed password for invalid user pm from 139.155.82.119 port 50300 ssh2 ...	2020-07-23 07:44:11
139.155.82.119	attack	Jul 22 01:15:06 vps46666688 sshd[21307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.82.119 Jul 22 01:15:08 vps46666688 sshd[21307]: Failed password for invalid user rosie from 139.155.82.119 port 57890 ssh2 ...	2020-07-22 12:15:44
139.155.82.119	attackbotsspam	2020-06-25T03:51:54.147926ionos.janbro.de sshd[31935]: Invalid user mysql from 139.155.82.119 port 36764 2020-06-25T03:51:56.591257ionos.janbro.de sshd[31935]: Failed password for invalid user mysql from 139.155.82.119 port 36764 ssh2 2020-06-25T03:54:06.789213ionos.janbro.de sshd[31945]: Invalid user nelson from 139.155.82.119 port 39430 2020-06-25T03:54:07.006456ionos.janbro.de sshd[31945]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.82.119 2020-06-25T03:54:06.789213ionos.janbro.de sshd[31945]: Invalid user nelson from 139.155.82.119 port 39430 2020-06-25T03:54:08.796987ionos.janbro.de sshd[31945]: Failed password for invalid user nelson from 139.155.82.119 port 39430 ssh2 2020-06-25T03:56:21.954227ionos.janbro.de sshd[31959]: Invalid user ventura from 139.155.82.119 port 42098 2020-06-25T03:56:22.188777ionos.janbro.de sshd[31959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.82.119 ...	2020-06-25 12:48:22
139.155.82.119	attack	SSH Attack	2020-06-14 04:14:20
139.155.82.119	attack	2020-05-06T07:03:20.560778shield sshd\[18695\]: Invalid user admin from 139.155.82.119 port 58206 2020-05-06T07:03:20.563636shield sshd\[18695\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.82.119 2020-05-06T07:03:22.965704shield sshd\[18695\]: Failed password for invalid user admin from 139.155.82.119 port 58206 ssh2 2020-05-06T07:05:54.345172shield sshd\[19211\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.82.119 user=root 2020-05-06T07:05:56.556412shield sshd\[19211\]: Failed password for root from 139.155.82.119 port 56766 ssh2	2020-05-06 15:20:39
139.155.82.119	attackbots	(sshd) Failed SSH login from 139.155.82.119 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 4 22:23:49 elude sshd[17160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.82.119 user=root May 4 22:23:51 elude sshd[17160]: Failed password for root from 139.155.82.119 port 52264 ssh2 May 4 22:25:31 elude sshd[17436]: Invalid user qifan from 139.155.82.119 port 41610 May 4 22:25:33 elude sshd[17436]: Failed password for invalid user qifan from 139.155.82.119 port 41610 ssh2 May 4 22:26:04 elude sshd[17527]: Invalid user gabby from 139.155.82.119 port 48822	2020-05-05 05:52:12

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.155.82.146
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62149
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.155.82.146.			IN	A

;; AUTHORITY SECTION:
.			597	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020062701 1800 900 604800 86400

;; Query time: 50 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 28 01:36:22 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

Host 146.82.155.139.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 146.82.155.139.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
202.70.72.233	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-07-04 10:53:06
125.124.32.85	attackspam	$f2bV_matches	2020-07-04 11:07:18
202.154.191.106	attackspambots	VNC brute force attack detected by fail2ban	2020-07-04 11:06:07
192.241.185.120	attackbotsspam	Jul 3 22:14:13 Tower sshd[33552]: Connection from 192.241.185.120 port 49608 on 192.168.10.220 port 22 rdomain "" Jul 3 22:14:14 Tower sshd[33552]: Invalid user db2fenc1 from 192.241.185.120 port 49608 Jul 3 22:14:14 Tower sshd[33552]: error: Could not get shadow information for NOUSER Jul 3 22:14:14 Tower sshd[33552]: Failed password for invalid user db2fenc1 from 192.241.185.120 port 49608 ssh2 Jul 3 22:14:14 Tower sshd[33552]: Received disconnect from 192.241.185.120 port 49608:11: Bye Bye [preauth] Jul 3 22:14:14 Tower sshd[33552]: Disconnected from invalid user db2fenc1 192.241.185.120 port 49608 [preauth]	2020-07-04 11:17:47
104.248.246.4	attackspam	no	2020-07-04 11:18:42
37.49.224.224	attackbotsspam	TCP (SYN) 37.49.224.224:33467 -> port 22, len 40	2020-07-04 10:48:11
119.82.135.53	attackspambots	Jul 3 23:25:11 vlre-nyc-1 sshd\[28588\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.82.135.53 user=root Jul 3 23:25:13 vlre-nyc-1 sshd\[28588\]: Failed password for root from 119.82.135.53 port 50672 ssh2 Jul 3 23:28:07 vlre-nyc-1 sshd\[28681\]: Invalid user hadoop from 119.82.135.53 Jul 3 23:28:07 vlre-nyc-1 sshd\[28681\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.82.135.53 Jul 3 23:28:09 vlre-nyc-1 sshd\[28681\]: Failed password for invalid user hadoop from 119.82.135.53 port 36860 ssh2 ...	2020-07-04 11:11:22
172.86.125.151	attack	2020-07-03T21:56:36.134015sorsha.thespaminator.com sshd[31650]: Failed password for root from 172.86.125.151 port 54114 ssh2 2020-07-03T21:59:20.284580sorsha.thespaminator.com sshd[31672]: Invalid user prashant from 172.86.125.151 port 35322 ...	2020-07-04 11:31:06
222.186.175.217	attackspam	Jul 3 22:56:09 NPSTNNYC01T sshd[23002]: Failed password for root from 222.186.175.217 port 18336 ssh2 Jul 3 22:56:21 NPSTNNYC01T sshd[23002]: error: maximum authentication attempts exceeded for root from 222.186.175.217 port 18336 ssh2 [preauth] Jul 3 22:56:34 NPSTNNYC01T sshd[23042]: Failed password for root from 222.186.175.217 port 63258 ssh2 ...	2020-07-04 11:01:19
52.66.197.212	attackspambots	Jul 4 02:06:54 vps639187 sshd\[26938\]: Invalid user admin from 52.66.197.212 port 47832 Jul 4 02:06:54 vps639187 sshd\[26938\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.66.197.212 Jul 4 02:06:56 vps639187 sshd\[26938\]: Failed password for invalid user admin from 52.66.197.212 port 47832 ssh2 ...	2020-07-04 11:00:32
188.235.146.137	attackspambots	TCP (SYN) 188.235.146.137:24140 -> port 52869, len 44	2020-07-04 11:20:44
222.186.31.83	attackspam	2020-07-04T03:24:37.796693abusebot-2.cloudsearch.cf sshd[11610]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.83 user=root 2020-07-04T03:24:40.338242abusebot-2.cloudsearch.cf sshd[11610]: Failed password for root from 222.186.31.83 port 58499 ssh2 2020-07-04T03:24:42.235471abusebot-2.cloudsearch.cf sshd[11610]: Failed password for root from 222.186.31.83 port 58499 ssh2 2020-07-04T03:24:37.796693abusebot-2.cloudsearch.cf sshd[11610]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.83 user=root 2020-07-04T03:24:40.338242abusebot-2.cloudsearch.cf sshd[11610]: Failed password for root from 222.186.31.83 port 58499 ssh2 2020-07-04T03:24:42.235471abusebot-2.cloudsearch.cf sshd[11610]: Failed password for root from 222.186.31.83 port 58499 ssh2 2020-07-04T03:24:37.796693abusebot-2.cloudsearch.cf sshd[11610]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruse ...	2020-07-04 11:29:16
37.150.116.106	attackspambots	Honeypot attack, port: 5555, PTR: 37.150.116.106.megaline.telecom.kz.	2020-07-04 11:16:48
109.94.119.128	attackspambots	port scan and connect, tcp 23 (telnet)	2020-07-04 10:50:11
218.92.0.248	attackspam	2020-07-04T05:58:01.013552snf-827550 sshd[30941]: Failed password for root from 218.92.0.248 port 16897 ssh2 2020-07-04T05:58:04.589120snf-827550 sshd[30941]: Failed password for root from 218.92.0.248 port 16897 ssh2 2020-07-04T05:58:08.222207snf-827550 sshd[30941]: Failed password for root from 218.92.0.248 port 16897 ssh2 ...	2020-07-04 11:05:42

最近上报的IP列表

204.241.109.5	204.156.116.74	181.40.240.187	24.163.109.179
53.231.96.140	193.8.82.84	138.61.12.245	59.175.149.55
174.211.35.240	15.59.77.149	131.159.152.130	145.40.180.0
181.91.26.113	169.0.238.108	26.205.239.218	41.236.57.233
114.105.36.120	92.63.196.27	95.104.29.90	164.163.211.4