Log in to view charts and search reports for this IP.
Log In
No reports in the last 60 days
115.141.52.139 has been reported 16
times. The most recent report is from
.
The full history is preserved below and remains searchable. A
0% score reflects the absence of recent activity, but
this is not a guarantee that earlier reports were invalid. Abuse confidence score decays,
naturally, over time, when the abusive activity stops.
Dec 11 17:35:27 pegasus sshd[834185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.141.52.139 user=root
Dec 11 17:35:29 pegasus sshd[834185]: Failed password for root from 115.141.52.139 port 52438 ssh2 ...
show moreDec 11 17:35:27 pegasus sshd[834185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.141.52.139 user=root
Dec 11 17:35:29 pegasus sshd[834185]: Failed password for root from 115.141.52.139 port 52438 ssh2
Dec 11 17:35:32 pegasus sshd[834185]: Failed password for root from 115.141.52.139 port 52438 ssh2
Dec 11 17:35:35 pegasus sshd[834185]: Failed password for root from 115.141.52.139 port 52438 ssh2
show less
Dec 9 22:43:08 dsh1621 sshd[947191]: Failed password for root from 115.141.52.139 port 46915 ssh2
Dec 9 22:43:11 dsh1621 sshd[947191]: Failed password for root from 115.141.52.139 port 46915 ssh2
Dec 9 22:43:15 dsh1621 sshd[947191]: Failed passwor ...
show moreDec 9 22:43:08 dsh1621 sshd[947191]: Failed password for root from 115.141.52.139 port 46915 ssh2
Dec 9 22:43:11 dsh1621 sshd[947191]: Failed password for root from 115.141.52.139 port 46915 ssh2
Dec 9 22:43:15 dsh1621 sshd[947191]: Failed password for root from 115.141.52.139 port 46915 ssh2
Dec 9 22:43:18 dsh1621 sshd[947191]: Failed password for root from 115.141.52.139 port 46915 ssh2
Dec 9 22:43:21 dsh1621 sshd[947191]: Failed password for root from 115.141.52.139 port 46915 ssh2
...
show less
2024-12-07T14:24:06.424935-08:00 SJC-NB sshd[269802]: Failed password for root from 115.141.52.139 port 34741 ssh2
2024-12-07T14:24:08.852253-08:00 SJC-NB sshd[269802]: Failed password for root from 115.141.52.139 port 34741 ssh2
2024-12-07T14:24:13. ...
show more2024-12-07T14:24:06.424935-08:00 SJC-NB sshd[269802]: Failed password for root from 115.141.52.139 port 34741 ssh2
2024-12-07T14:24:08.852253-08:00 SJC-NB sshd[269802]: Failed password for root from 115.141.52.139 port 34741 ssh2
2024-12-07T14:24:13.144187-08:00 SJC-NB sshd[269802]: Failed password for root from 115.141.52.139 port 34741 ssh2
...
show less
SSH Brute force: 1 attempts were recorded from 115.141.52.139
2024-12-07T18:49:01+01:00 error: maximum authentication attempts exceeded for root from 115.141.52.139 port 54663 ssh2 [preauth]
Dec 7 05:57:09 pihole sshd[1583498]: error: maximum authentication attempts exceeded for root from 115.141.52.139 port 45889 ssh2 [preauth]
Dec 7 05:57:18 pihole sshd[1583504]: error: maximum authentication attempts exceeded for root from 115.141.5 ...
show moreDec 7 05:57:09 pihole sshd[1583498]: error: maximum authentication attempts exceeded for root from 115.141.52.139 port 45889 ssh2 [preauth]
Dec 7 05:57:18 pihole sshd[1583504]: error: maximum authentication attempts exceeded for root from 115.141.52.139 port 45901 ssh2 [preauth]
Dec 7 05:57:27 pihole sshd[1583506]: error: maximum authentication attempts exceeded for root from 115.141.52.139 port 45913 ssh2 [preauth]
Dec 7 05:57:48 pihole sshd[1583513]: Invalid user admin from 115.141.52.139 port 45942
Dec 7 05:57:48 pihole sshd[1583513]: error: maximum authentication attempts exceeded for invalid user admin from 115.141.52.139 port 45942 ssh2 [preauth]
...
show less
Brute-Force
SSH
Anonymous
115.141.52.139 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Dec 6 19:02:11 server2 sshd[30461]: Failed password for root from 115.141.52.139 port 32 ...
show more115.141.52.139 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Dec 6 19:02:11 server2 sshd[30461]: Failed password for root from 115.141.52.139 port 32856 ssh2
Dec 6 19:01:39 server2 sshd[30363]: Failed password for root from 118.45.205.44 port 58410 ssh2
Dec 6 19:00:59 server2 sshd[30075]: Failed password for root from 213.199.50.63 port 56234 ssh2
Dec 6 18:59:54 server2 sshd[29643]: Failed password for root from 36.26.76.180 port 33706 ssh2
Dec 6 19:01:13 server2 sshd[30200]: Failed password for root from 161.132.53.75 port 55304 ssh2
IP Addresses Blocked:
show less
Dec 6 07:09:54 tv sshd[6633]: Failed password for root from 115.141.52.139 port 46361 ssh2
Dec 6 07:09:58 tv sshd[6633]: Failed password for root from 115.141.52.139 port 46361 ssh2
Dec 6 07:10:07 tv sshd[6633]: error: maximum authentication attem ...
show moreDec 6 07:09:54 tv sshd[6633]: Failed password for root from 115.141.52.139 port 46361 ssh2
Dec 6 07:09:58 tv sshd[6633]: Failed password for root from 115.141.52.139 port 46361 ssh2
Dec 6 07:10:07 tv sshd[6633]: error: maximum authentication attempts exceeded for root from 115.141.52.139 port 46361 ssh2 [preauth]
Dec 6 07:10:18 tv sshd[6829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.141.52.139 user=root
Dec 6 07:10:20 tv sshd[6829]: Failed password for root from 115.141.52.139 port 46406 ssh2
...
show less
2024-12-06T05:16:55.389544+00:00 ns518136 sshd[2505118]: Failed password for root from 115.141.52.139 port 43156 ssh2
2024-12-06T05:16:58.261705+00:00 ns518136 sshd[2505118]: Failed password for root from 115.141.52.139 port 43156 ssh2
2024-12-06T05: ...
show more2024-12-06T05:16:55.389544+00:00 ns518136 sshd[2505118]: Failed password for root from 115.141.52.139 port 43156 ssh2
2024-12-06T05:16:58.261705+00:00 ns518136 sshd[2505118]: Failed password for root from 115.141.52.139 port 43156 ssh2
2024-12-06T05:17:01.330131+00:00 ns518136 sshd[2505118]: Failed password for root from 115.141.52.139 port 43156 ssh2
...
show less
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown