JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 219.140.138.90

219.140.138.90 was found in our database!

This IP was reported 123 times. Confidence of Abuse is 100%: ?

100%

ISP	Chinanet network in Wuhan city Hubei province
Usage Type	Fixed Line ISP
ASN	AS137266
Domain Name	wh.hb.cn
Country	🇨🇳 China
City	Wuhan, Hubei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 219.140.138.90

Whois 219.140.138.90

IP Abuse Reports for 219.140.138.90:

This IP address has been reported a total of 123 times from 97 distinct sources. 219.140.138.90 was first reported on August 1st 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 EGP Abuse Dept	2026-08-18 06:11:12 (3 days ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
Anonymous	2026-08-18 00:47:03 (3 days ago)	Large amount of failed SSH access attempts (brute-force)	Brute-Force SSH
🇩🇪 fynndows.de	2026-08-18 00:44:26 (3 days ago)	2026-08-18T00:44:23.765558+00:00 fynn-epyc3 sshd-session[893938]: pam_unix(sshd:auth): authenticatio ... show more 2026-08-18T00:44:23.765558+00:00 fynn-epyc3 sshd-session[893938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.140.138.90 user=root 2026-08-18T00:44:25.889808+00:00 fynn-epyc3 sshd-session[893938]: Failed password for root from 219.140.138.90 port 5281 ssh2 ... show less	Brute-Force SSH
🇮🇱 spd.co.il	2026-08-17 23:01:46 (3 days ago)	Unauthorized access attempts on ports: 22	Brute-Force SSH
🇩🇪 LoNET	2026-08-17 18:58:21 (3 days ago)	Report 2620154 with IP 3667721 for SSH brute-force attack by source 3662379 via ssh-honeypot/0.2.0+h ... show more Report 2620154 with IP 3667721 for SSH brute-force attack by source 3662379 via ssh-honeypot/0.2.0+http show less	Brute-Force SSH
Anonymous	2026-08-17 17:00:41 (3 days ago)	Knocking on port 22 (endlessh-go)	SSH
🇺🇸 MPL	2026-08-17 16:19:14 (3 days ago)	tcp/22 (4 or more attempts)	Port Scan
🇮🇱 Ilop	2026-08-17 12:30:02 (4 days ago)	[v4-00] Blocked by os-abuseipdb; 4 hits, proto=tcp, ports=22, src_ip=219.140.138.90	Port Scan Hacking
🇩🇪 poseidon00	2026-08-17 10:43:13 (4 days ago)	2026-08-17T10:39:45.536189+00:00 EO-FE-01 sshd[1177903]: Failed password for root from 219.140.138.9 ... show more 2026-08-17T10:39:45.536189+00:00 EO-FE-01 sshd[1177903]: Failed password for root from 219.140.138.90 port 65161 ssh2 2026-08-17T10:43:04.607438+00:00 EO-FE-01 sshd[1178083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.140.138.90 user=root 2026-08-17T10:43:06.944163+00:00 EO-FE-01 sshd[1178083]: Failed password for root from 219.140.138.90 port 39236 ssh2 2026-08-17T10:43:11.263559+00:00 EO-FE-01 sshd[1178165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.140.138.90 user=root 2026-08-17T10:43:13.229053+00:00 EO-FE-01 sshd[1178165]: Failed password for root from 219.140.138.90 port 18987 ssh2 ... show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-08-17 07:20:28 (4 days ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇩🇪 hotbbqsauce	2026-08-17 07:00:57 (4 days ago)	2026-08-17T07:00:51.198422+00:00 blocklabs-server sshd[3209261]: User root from 219.140.138.90 not a ... show more 2026-08-17T07:00:51.198422+00:00 blocklabs-server sshd[3209261]: User root from 219.140.138.90 not allowed because not listed in AllowUsers 2026-08-17T07:00:54.199757+00:00 blocklabs-server sshd[3209263]: User root from 219.140.138.90 not allowed because not listed in AllowUsers 2026-08-17T07:00:56.732595+00:00 blocklabs-server sshd[3209266]: User root from 219.140.138.90 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇯🇵 sh97	2026-08-17 00:24:42 (4 days ago)	JP01-VM: SSH Brute Force from 219.140.138.90 at 2026-08-16 20:24:42 EDT	Brute-Force SSH
🇧🇷 noconex	2026-08-16 23:13:05 (4 days ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 219.140.13 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 219.140.138.90 show less	Port Scan Brute-Force SSH
🇧🇷 diego	2026-08-16 17:06:51 (4 days ago)	[rede-44-49] (sshd) Failed SSH login from 219.140.138.90 (CN/China/-): 5 in the last 3600 secs; Port ... show more [rede-44-49] (sshd) Failed SSH login from 219.140.138.90 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Aug 16 14:03:32 sshd[18265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.140.138.90 user=[USERNAME] Aug 16 14:03:34 sshd[18265]: Failed password for [USERNAME] from 219.140.138.90 port 12793 ssh2 Aug 16 14:06:41 sshd[18469]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.140.138.90 user=[USERNAME] Aug 16 14:06:43 sshd[18469]: Failed password for [USERNAME] from 219.140.138.90 port 38177 ssh2 Aug 16 14: show less	Port Scan
🇺🇸 RAP	2026-08-16 14:10:41 (5 days ago)	2026-08-16 14:10:41 UTC Unauthorized activity to TCP port 22. SSH	SSH

Showing 1 to 15 of 123 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 106.12.220.4

🇮🇷 2.180.1.34

🇳🇱 213.177.179.73

🇱🇹 213.176.26.133

🇺🇸 66.132.186.242

🇱🇹 62.60.130.201

🇸🇬 43.98.169.101

🇨🇦 20.63.64.130

🇫🇷 5.135.106.93

🇭🇰 199.45.154.68

🇻🇪 190.75.248.87

🇺🇸 172.236.96.130

🇹🇼 172.69.221.57

🇩🇪 164.92.161.148

🇺🇸 162.216.150.4

🇺🇸 159.89.132.71

🇮🇳 139.59.0.39

🇺🇸 107.178.97.25

🇧🇬 79.124.62.134

🇺🇸 23.239.21.103