JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

139.189.113.166

Recent Activity

Abuse Confidence Score

90% Critical

19 reports

17 reporters · latest 47 minutes ago

ISP: China Telecom
Usage Type: Fixed Line ISP
ASN: AS4134
Domain Name: ct1000.com
Country: 🇨🇳 China
City: Xiuying, Hainan

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

19 from 17 distinct reporters

First reported

November 12th 2026

Most recent report

47 minutes ago

Last 60 days

Top reporter locations 🇩🇪 Germany 4 🇫🇷 France 3 🇮🇹 Italy 3

Most common categories Brute-Force 19 SSH 3 DDoS Attack 1 Open Proxy 1 Email Spam 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-11-13 06:22:45 UTC · (47 minutes ago)	Authentication failure	Brute-Force
🇮🇹 CoreTech srl	2026-11-13 06:17:32 UTC · (52 minutes ago)	"SMTP Login failed": count(IP)=24.0is-6411d9d7 07:12:26.493 [111.125.254.245] SMTP Login failed: Incorrect password for user [[email protected]]is-6411d9d7 07:12:26.493 [111.125.254.245] SMTP Login failed: Username or password is in ... show more "SMTP Login failed": count(IP)=24.0is-6411d9d7 07:12:26.493 [111.125.254.245] SMTP Login failed: Incorrect password for user [[email protected]]is-6411d9d7 07:12:26.493 [111.125.254.245] SMTP Login failed: Username or password is incorrect.is-6411d9d7 07:13:45.111 [157.66.242.75] SMTP Login failed: Incorrect password for user [[email protected]]is-6411d9d7 07:13:45.111 [157.66.242.75] SMTP Login failed: Username or password is incorrect.Smartermail 07:16:03.235 [139.189.113.166] SMTP Login failed: Domain [grassihome.it] not foundSmartermail 07:16:03.235 [139.189.113.166] SMTP Login failed: Username or password is incorrect.Smartermail 07:16:27.917 [42.104.221.81] SMTP Login failed: Username or password is incorrect.Smartermail 07:16:27.917 [42.104.221.81] SMTP Login failed: User [sabrina.b] not foundis-6411d9d7 07:16:29.011 [116.96.44.38] SMTP Login failed: Username or password is incorrect. show less	Brute-Force
🇩🇪 tentwentyfour	2026-11-13 05:10:17 UTC · (1 hour ago)	Blocked for probing SSH accounts	Brute-Force SSH
🇵🇱 ZiBoTo	2026-11-13 04:42:35 UTC · (2 hours ago)	Nov 13 05:42:34 lawenda postfix/smtpd[7989]: warning: unknown[139.189.113.166]: SASL PLAIN authentication failed: (reason unavailable), [email protected] ...	Brute-Force
🇫🇷 Stara	2026-11-13 04:10:50 UTC · (2 hours ago)	Distributed smtpauth, imapd and ftp login attacks or more than 2 temp blocks in the last 259200 secs	Brute-Force DDoS Attack
🇩🇪 vanlueckn	2026-11-13 04:00:11 UTC · (3 hours ago)	2026-11-13T06:00:06.237055+02:00 nfs-server-fra2 sshd-session[188512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.189.113.166 2026-11-13T06:00:08.731002+02:00 nfs-server-fra2 sshd-session[188512]: Fail ... show more 2026-11-13T06:00:06.237055+02:00 nfs-server-fra2 sshd-session[188512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.189.113.166 2026-11-13T06:00:08.731002+02:00 nfs-server-fra2 sshd-session[188512]: Failed password for invalid user admin from 139.189.113.166 port 18540 ssh2 2026-11-13T06:00:10.538476+02:00 nfs-server-fra2 sshd-session[188512]: Connection closed by invalid user admin 139.189.113.166 port 18540 [preauth] ... show less	Brute-Force SSH
🇮🇹 CoreTech srl	2026-11-13 02:22:34 UTC · (4 hours ago)	Smartermail 03:17:40.824 [170.82.209.196] SMTP Login failed: User [alessandro.m] not foundSmartermail 03:17:40.824 [170.82.209.196] SMTP Login failed: Username or password is incorrect.mail3-dc1 03:17:47.065 [151.28.162.101] SMTP Login failed: Userna ... show more Smartermail 03:17:40.824 [170.82.209.196] SMTP Login failed: User [alessandro.m] not foundSmartermail 03:17:40.824 [170.82.209.196] SMTP Login failed: Username or password is incorrect.mail3-dc1 03:17:47.065 [151.28.162.101] SMTP Login failed: Username or password is incorrect.mail3-dc1 03:17:47.065 [151.28.162.101] SMTP Login failed: User [eleonora] not foundSmartermail 03:21:00.489 [27.64.4.104] SMTP Login failed: Incorrect password for user [[email protected]]Smartermail 03:21:00.489 [27.64.4.104] SMTP Login failed: Username or password is incorrect.Smartermail 03:22:19.477 [139.189.113.166] SMTP Login failed: Username or password is incorrect.Smartermail 03:22:19.477 [139.189.113.166] SMTP Login failed: Domain [noleggiolorini.it] not foundmail3-dc1 03:22:21.664 [45.86.202.15] SMTP Login failed: Incorrect password for user [[email protected]]mail3-dc1 03:22:22.609 [45.86.202.15] SMTP Login failed: Username or password is incorrect. show less	Brute-Force Open Proxy
🇫🇷 UM3	2026-11-13 01:09:36 UTC · (6 hours ago)	Exim Auth Failed	Brute-Force
Anonymous	2026-11-13 00:55:42 UTC · (6 hours ago)	139.189.113.166 detected on srv01	Brute-Force
🇨🇿 lp	2026-11-13 00:46:08 UTC · (6 hours ago)	Email account brute force: 1 attempts were recorded from 139.189.113.166 2026-11-13T01:30:29+0100 warning: unknown[139.189.113.166]: SASL authentication failed	Brute-Force
🇮🇩 aaKenshin	2026-11-12 23:42:59 UTC · (7 hours ago)	Observed 1 failed authentication events from this IP in Carbonio audit between 2026-11-12T23:34:09Z and 2026-11-12T23:34:09Z. In the same 86400 second observation window, the targeted account had 34 failures from 32 distinct source IPs. Other IPs act ... show more Observed 1 failed authentication events from this IP in Carbonio audit between 2026-11-12T23:34:09Z and 2026-11-12T23:34:09Z. In the same 86400 second observation window, the targeted account had 34 failures from 32 distinct source IPs. Other IPs activity is not attributed to this IP. IP-specific event times (UTC): 2026-11-12T23:34:09Z. Successful access is not established. show less	Brute-Force
🇫🇷 RefF	2026-11-12 23:35:49 UTC · (7 hours ago)	SMTP brute-force	Brute-Force
Anonymous	2026-11-12 23:09:04 UTC · (8 hours ago)		Brute-Force Email Spam
🇨🇿 lp	2026-11-12 22:01:18 UTC · (9 hours ago)	Email account brute force: 1 attempts were recorded from 139.189.113.166 2026-11-12T22:40:08+0100 warning: unknown[139.189.113.166]: SASL authentication failed	Brute-Force
🇬🇧 Aetherweb Ark	2026-11-12 21:59:56 UTC · (9 hours ago)	139.189.113.166 (CN/China/-), N distributed smtpauth attacks on account in the last X secs	Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 216.218.206.80

🇳🇱 195.178.110.30

🇩🇪 194.88.98.90

🇩🇪 167.172.98.91

🇺🇸 147.185.132.81

🇺🇸 147.78.183.126

🇺🇸 34.197.70.90

🇺🇸 147.185.132.209

🇵🇰 110.39.160.123

🇮🇳 103.179.95.103

🇮🇳 103.55.89.5

🇻🇪 82.86.105.149

🇺🇸 71.6.233.166

🇬🇧 5.226.140.120

🇧🇷 187.19.254.10

🇬🇧 178.239.163.2

🇻🇳 171.243.148.7

🇮🇳 152.59.38.218

🇺🇸 147.90.241.37

🇨🇦 142.177.161.195