JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 139.159.246.8

139.159.246.8 was found in our database!

This IP was reported 81 times. Confidence of Abuse is 11%: ?

11%

ISP	Huawei Public Cloud Service (Huawei Software Technologies Co.,Ltd)
Usage Type	Data Center/Web Hosting/Transit
ASN	AS55990
Hostname(s)	ecs-139-159-246-8.compute.hwclouds-dns.com
Domain Name	huawei.com
Country	🇨🇳 China
City	Guangzhou, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 139.159.246.8

Whois 139.159.246.8

IP Abuse Reports for 139.159.246.8:

This IP address has been reported a total of 81 times from 58 distinct sources. 139.159.246.8 was first reported on April 21st 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-07-21 14:19:19 (5 days ago)	ICS Labs identified 139.159.246.8 as a malicious indicator from threat intelligence.	Hacking
🇮🇳 evicky2002	2026-06-29 10:48:52 (3 weeks ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇧🇷 ICS Labs	2026-05-15 15:24:13 (2 months ago)	ICS Labs identified 139.159.246.8 as a malicious indicator from threat intelligence.	Hacking
🇨🇳 ThreatBook.io	2026-05-14 22:44:53 (2 months ago)	ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/139.159.246.8	Brute-Force
🇺🇸 bigscoots.com	2026-05-14 07:45:52 (2 months ago)	139.159.246.8 (CN/-/ecs-139-159-246-8.compute.hwclouds-dns.com), 5 distributed sshd attacks on accou ... show more 139.159.246.8 (CN/-/ecs-139-159-246-8.compute.hwclouds-dns.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 14 02:42:30 15292 sshd[13262]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.114.17.26 user=root May 14 02:42:32 15292 sshd[13262]: Failed password for root from 210.114.17.26 port 55406 ssh2 May 14 02:45:26 15292 sshd[14226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.159.246.8 user=root May 14 02:27:05 15292 sshd[10912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.224.109.126 user=root May 14 02:27:06 15292 sshd[10912]: Failed password for root from 52.224.109.126 port 32824 ssh2 IP Addresses Blocked: 210.114.17.26 (KR/-/-) show less	Brute-Force SSH
🇧🇷 helix	2026-05-14 07:09:18 (2 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-14 06:35:49 (2 months ago)	(sshd) Failed SSH login from 139.159.246.8 (CN/China/ecs-139-159-246-8.compute.hwclouds-dns.com): 5 ... show more (sshd) Failed SSH login from 139.159.246.8 (CN/China/ecs-139-159-246-8.compute.hwclouds-dns.com): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: May 14 01:29:10 13961 sshd[5621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.159.246.8 user=root May 14 01:29:12 13961 sshd[5621]: Failed password for root from 139.159.246.8 port 43332 ssh2 May 14 01:30:48 13961 sshd[5734]: Invalid user linux from 139.159.246.8 port 33274 May 14 01:30:50 13961 sshd[5734]: Failed password for invalid user linux from 139.159.246.8 port 33274 ssh2 May 14 01:35:31 13961 sshd[6200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.159.246.8 user=root show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-14 04:25:44 (2 months ago)	139.159.246.8 (CN/-/ecs-139-159-246-8.compute.hwclouds-dns.com), 5 distributed sshd attacks on accou ... show more 139.159.246.8 (CN/-/ecs-139-159-246-8.compute.hwclouds-dns.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 13 23:19:31 15518 sshd[4395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.159.246.8 user=root May 13 23:19:33 15518 sshd[4395]: Failed password for root from 139.159.246.8 port 48454 ssh2 May 13 23:17:19 15518 sshd[4213]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.153.30.53 user=root May 13 23:17:20 15518 sshd[4213]: Failed password for root from 43.153.30.53 port 39432 ssh2 May 13 23:25:39 15518 sshd[4957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.153.30.53 user=root IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-14 03:38:12 (2 months ago)	139.159.246.8 (CN/-/ecs-139-159-246-8.compute.hwclouds-dns.com), 5 distributed sshd attacks on accou ... show more 139.159.246.8 (CN/-/ecs-139-159-246-8.compute.hwclouds-dns.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 13 22:33:37 15251 sshd[30054]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.109.200.241 user=root May 13 22:33:40 15251 sshd[30054]: Failed password for root from 223.109.200.241 port 17421 ssh2 May 13 22:37:42 15251 sshd[30424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.159.246.8 user=root May 13 22:06:30 15251 sshd[27587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.109.200.241 user=root May 13 22:06:32 15251 sshd[27587]: Failed password for root from 223.109.200.241 port 30795 ssh2 IP Addresses Blocked: 223.109.200.241 (CN/-/-) show less	Brute-Force SSH
🇫🇷 f-d-m	2026-05-14 03:23:33 (2 months ago)	ssh-bruteforce/k3	Brute-Force SSH
🇺🇸 amit177	2026-05-14 03:19:00 (2 months ago)		Brute-Force SSH
🇺🇸 anon333	2026-05-14 01:33:30 (2 months ago)	Hacker syslog review 1778722410	Hacking
🇦🇺 Epic29	2026-05-13 20:22:51 (2 months ago)	2026-05-14T06:15:54.125746+10:00 sleep-salami sshd[712307]: Disconnected from authenticating user ro ... show more 2026-05-14T06:15:54.125746+10:00 sleep-salami sshd[712307]: Disconnected from authenticating user root 139.159.246.8 port 59490 [preauth] 2026-05-14T06:19:22.176680+10:00 sleep-salami sshd[712345]: Disconnected from authenticating user root 139.159.246.8 port 50552 [preauth] 2026-05-14T06:22:04.340061+10:00 sleep-salami sshd[712371]: Invalid user ayjtnzjc from 139.159.246.8 port 48790 2026-05-14T06:22:04.563327+10:00 sleep-salami sshd[712371]: Disconnected from invalid user ayjtnzjc 139.159.246.8 port 48790 [preauth] 2026-05-14T06:22:50.319586+10:00 sleep-salami sshd[712376]: Disconnected from authenticating user root 139.159.246.8 port 44654 [preauth] ... show less	Brute-Force SSH
🇩🇪 yvoictra	2026-05-13 18:52:41 (2 months ago)	2026-05-13T20:52:39.335500+02:00 titan sshd[508345]: pam_unix(sshd:auth): authentication failure; lo ... show more 2026-05-13T20:52:39.335500+02:00 titan sshd[508345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.159.246.8 user=root 2026-05-13T20:52:41.356451+02:00 titan sshd[508345]: Failed password for root from 139.159.246.8 port 50206 ssh2 ... show less	Brute-Force SSH
🇺🇸 kemonos.net	2026-05-13 17:28:19 (2 months ago)	2026-05-13T17:28:16.625629+00:00 vultr sshd[1877611]: pam_unix(sshd:auth): authentication failure; l ... show more 2026-05-13T17:28:16.625629+00:00 vultr sshd[1877611]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.159.246.8 user=root 2026-05-13T17:28:18.250689+00:00 vultr sshd[1877611]: Failed password for root from 139.159.246.8 port 57266 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 81 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇿 213.230.127.104

🇵🇰 202.69.42.10

🇻🇪 190.97.232.245

🇳🇱 176.65.148.93

🇭🇰 152.32.174.171

🇺🇸 66.132.172.16

🇵🇱 57.128.223.80

🇺🇸 35.252.182.43

🇰🇷 220.80.225.19

🇷🇺 176.113.88.138

🇺🇸 107.135.117.245

🇨🇦 104.223.84.233

🇧🇩 103.86.198.162

🇻🇳 103.3.244.107

🇫🇷 85.217.140.35

🇳🇱 77.239.124.241

🇬🇧 77.100.199.213

🇺🇸 66.132.172.251

🇺🇸 64.62.156.182

🇺🇸 64.62.156.66