IP address

Search at other sites:

.296139.155.150.142

Shodan(more info)

Passive DNS

IP blacklists

blocklist.de SSH

139.155.150.142 is listed on the blocklist.de SSH blacklist.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing SSH attacks.
Type of feed: primary (feed detail page)

Last checked at: 2026-06-12 16:05:01.130000
Was present on blacklist at: 2026-05-25 22:05, 2026-05-26 04:05, 2026-05-26 10:05, 2026-05-26 16:05, 2026-05-26 22:05, 2026-05-27 04:05, 2026-05-27 10:05, 2026-05-27 16:05, 2026-05-29 10:05, 2026-05-29 16:05, 2026-05-29 22:05, 2026-05-30 04:05, 2026-05-30 10:05, 2026-05-30 16:05, 2026-05-30 22:05, 2026-05-31 04:05, 2026-06-01 22:05, 2026-06-02 04:05, 2026-06-02 10:05, 2026-06-02 16:05, 2026-06-02 22:05, 2026-06-03 04:05, 2026-06-03 10:05, 2026-06-03 16:05, 2026-06-03 22:05, 2026-06-04 04:05, 2026-06-04 10:05, 2026-06-04 16:05, 2026-06-04 22:05, 2026-06-05 04:05, 2026-06-05 10:05, 2026-06-05 16:05, 2026-06-05 22:05, 2026-06-08 16:05, 2026-06-08 22:05, 2026-06-09 04:05, 2026-06-09 10:05, 2026-06-09 16:05, 2026-06-09 22:05, 2026-06-10 04:05, 2026-06-10 10:05, 2026-06-10 22:05, 2026-06-11 04:05, 2026-06-11 10:05, 2026-06-11 16:05, 2026-06-11 22:05, 2026-06-12 04:05, 2026-06-12 10:05, 2026-06-12 16:05

spamhaus-pbl

139.155.150.142 is listed on the spamhaus-pbl blacklist.

Description:
Type of feed: (feed detail page)

Last checked at: 2026-06-01 22:07:10.094000
Was present on blacklist at: 2026-05-25 22:07, 2026-06-01 22:07

Echelon SSH connection attempt

139.155.150.142 is listed on the Echelon SSH connection attempt blacklist.

Description: SSH connection attempt detected on port 22 or 2222
Type of feed: primary (feed detail page)

Last checked at: 2026-06-14 09:35:00.311000
Was present on blacklist at: 2026-06-09 09:35, 2026-06-10 09:35, 2026-06-11 09:35, 2026-06-12 09:35, 2026-06-13 09:35, 2026-06-14 09:35

Echelon SSH bruteforce

139.155.150.142 is listed on the Echelon SSH bruteforce blacklist.

Description: Multiple SSH authentication attempts detected
Type of feed: primary (feed detail page)

Last checked at: 2026-06-14 09:35:00.400000
Was present on blacklist at: 2026-06-09 09:35, 2026-06-10 09:35, 2026-06-11 09:35, 2026-06-12 09:35, 2026-06-13 09:35, 2026-06-14 09:35

Threat categories

TL	Role	Category	Details
51	src	login	protocol: ssh port: 22, 2222

---

Warden events (4)

2026-06-14

AttemptLogin (node.ce2b59): 1

2026-06-09

AttemptLogin (node.ce2b59): 1

2026-05-30

AttemptLogin (node.ce2b59): 1

2026-05-28

AttemptLogin (node.ce2b59): 1

DShield reports (IP summary, reports)

2026-05-29

Number of reports: 21

Distinct targets: 3

Origin AS

AS45090 - CNNIC-TENCENT-NET-AP

BGP Prefix

139.155.144.0/20

geo

China, Chengdu

🕑 Asia/Shanghai

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

139.155.0.0 - 139.155.255.255

last_activity

2026-06-14 03:07:22

last_warden_event

2026-06-14 03:07:22

rep

0.2959312606808391

reserved_range

0

Shodan's InternetDB

Open ports: 22, 80

Tags: ai, eol-product, cloud

CPEs: cpe:/o:linux:linux_kernel, cpe:/a:openbsd:openssh:9.6p1, cpe:/o:canonical:ubuntu_linux, cpe:/a:f5:nginx:1.24.0

ts_added

2026-05-25 22:07:01.723000

ts_last_update

2026-06-14 09:36:32.707000

Warden event timeline

DShield event timeline

Presence on blacklists