Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       139.189.0.0 - 139.189.255.255
CIDR:           139.189.0.0/16
NetName:        APNIC-ERX-139-189-0-0
NetHandle:      NET-139-189-0-0-1
Parent:         NET139 (NET-139-0-0-0-0)
NetType:        Early Registrations, Transferred to APNIC
OriginAS:       
Organization:   Asia Pacific Network Information Centre (APNIC)
RegDate:        2010-11-03
Updated:        2010-11-17
Comment:        This IP address range is not registered in the ARIN database.
Comment:        This range was transferred to the APNIC Whois Database as
Comment:        part of the ERX (Early Registration Transfer) project.
Comment:        For details, refer to the APNIC Whois Database via
Comment:        WHOIS.APNIC.NET or http://wq.apnic.net/apnic-bin/whois.pl
Comment:        
Comment:        ** IMPORTANT NOTE: APNIC is the Regional Internet Registry
Comment:        for the Asia Pacific region.  APNIC does not operate networks
Comment:        using this IP address range and is not able to investigate
Comment:        spam or abuse reports relating to these addresses.  For more
Comment:        help, refer to http://www.apnic.net/apnic-info/whois_search2/abuse-and-spamming
Ref:            https://rdap.arin.net/registry/ip/139.189.0.0

ResourceLink:  https://apps.db.ripe.net/db-web-ui/query
ResourceLink:  whois.apnic.net


OrgName:        Asia Pacific Network Information Centre
OrgId:          APNIC
Address:        PO Box 3646
City:           South Brisbane
StateProv:      QLD
PostalCode:     4101
Country:        AU
RegDate:        
Updated:        2012-01-24
Ref:            https://rdap.arin.net/registry/entity/APNIC

ReferralServer:  whois://whois.apnic.net
ResourceLink:  http://wq.apnic.net/whois-search/static/search.html

OrgTechHandle: AWC12-ARIN
OrgTechName:   APNIC Whois Contact
OrgTechPhone:  +61 7 3858 3188 
OrgTechEmail:  search-apnic-not-arin@apnic.net
OrgTechRef:    https://rdap.arin.net/registry/entity/AWC12-ARIN

OrgAbuseHandle: AWC12-ARIN
OrgAbuseName:   APNIC Whois Contact
OrgAbusePhone:  +61 7 3858 3188 
OrgAbuseEmail:  search-apnic-not-arin@apnic.net
OrgAbuseRef:    https://rdap.arin.net/registry/entity/AWC12-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#



Found a referral to whois.apnic.net.

% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '139.189.0.0 - 139.189.127.255'

% Abuse contact for '139.189.0.0 - 139.189.127.255' is 'hnlinj@21cn.com'

inetnum:        139.189.0.0 - 139.189.127.255
netname:        CHINANET
descr:          China Telecom
descr:          Data Network Management Division
descr:          Network Operation & Maintenance Department
descr:          No 19 Chaoyangmen North Street
descr:          Dongcheng District
country:        CN
admin-c:        LZ8-AP
tech-c:         LZ8-AP
abuse-c:        AC2533-AP
status:         ALLOCATED NON-PORTABLE
mnt-by:         MAINT-CN-CHINANET-HI
mnt-lower:      MAINT-CN-CHINANET-HI
mnt-routes:     MAINT-CN-CHINANET-HI
mnt-irt:        IRT-CHINANET-HI
last-modified:  2022-01-12T13:25:46Z
source:         APNIC

irt:            IRT-CHINANET-HI
address:        20th Floor,TelecomCenter Building
address:        NanHai Avenue,HaiKou HaiNan province
e-mail:         hnlinj@21cn.com
abuse-mailbox:  hnlinj@21cn.com
admin-c:        LZ8-AP
tech-c:         LZ8-AP
auth:           # Filtered
remarks:        hnlinj@21cn.com was validated on 2026-07-20
mnt-by:         MAINT-CN-CHINANET-HI
last-modified:  2026-07-20T02:35:17Z
source:         APNIC

role:           ABUSE CHINANETHI
country:        ZZ
address:        20th Floor,TelecomCenter Building
address:        NanHai Avenue,HaiKou HaiNan province
phone:          +000000000
e-mail:         hnlinj@21cn.com
admin-c:        LZ8-AP
tech-c:         LZ8-AP
nic-hdl:        AC2533-AP
remarks:        Generated from irt object IRT-CHINANET-HI
remarks:        hnlinj@21cn.com was validated on 2026-07-20
abuse-mailbox:  hnlinj@21cn.com
mnt-by:         APNIC-ABUSE
last-modified:  2026-07-20T02:35:45Z
source:         APNIC

person:         liuqing zheng
address:        20th Floor,TelecomCenter Building
address:        NanHai Avenue,HaiKou HaiNan province
country:        CN
phone:          +86-898-66816971
fax-no:         +86-898-66785993
e-mail:         089866775500@189.cn
nic-hdl:        LZ8-AP
mnt-by:         MAINT-CN-CHINANET-HI
last-modified:  2014-01-24T09:05:01Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.189.115.109
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58401
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.189.115.109.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026092601 1800 900 604800 86400

;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Sep 27 06:30:12 CST 2026
;; MSG SIZE  rcvd: 108
Host info
Host 109.115.189.139.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 109.115.189.139.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
165.22.76.96 attackbots
2020-08-10 07:00:55.491212-0500  localhost sshd[20341]: Failed password for root from 165.22.76.96 port 54080 ssh2
2020-08-11 00:35:08
192.200.215.91 attack
REQUESTED PAGE: /wp-content/plugins/videowhisper-video-presentation/vp/translation.php
2020-08-11 00:45:19
161.82.172.94 attackbotsspam
Banned for a week because repeated abuses, for example SSH, but not only
2020-08-11 01:11:18
34.68.127.147 attack
Aug 10 18:20:09 vps1 sshd[12884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.68.127.147  user=root
Aug 10 18:20:11 vps1 sshd[12884]: Failed password for invalid user root from 34.68.127.147 port 55888 ssh2
Aug 10 18:23:05 vps1 sshd[12915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.68.127.147  user=root
Aug 10 18:23:07 vps1 sshd[12915]: Failed password for invalid user root from 34.68.127.147 port 53450 ssh2
Aug 10 18:26:08 vps1 sshd[12955]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.68.127.147  user=root
Aug 10 18:26:10 vps1 sshd[12955]: Failed password for invalid user root from 34.68.127.147 port 51015 ssh2
Aug 10 18:29:12 vps1 sshd[12995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.68.127.147  user=root
...
2020-08-11 01:16:11
61.106.15.74 attackbotsspam
Unauthorised access (Aug 10) SRC=61.106.15.74 LEN=48 TOS=0x10 PREC=0x40 TTL=115 ID=31434 DF TCP DPT=445 WINDOW=8192 SYN
2020-08-11 01:06:13
40.73.101.69 attackspambots
Aug 10 08:11:26 vm0 sshd[19488]: Failed password for root from 40.73.101.69 port 59012 ssh2
Aug 10 14:04:00 vm0 sshd[8880]: Failed password for root from 40.73.101.69 port 53276 ssh2
...
2020-08-11 01:24:17
45.95.168.172 attackspam
 TCP (SYN) 45.95.168.172:28865 -> port 22, len 48
2020-08-11 00:59:58
117.232.67.181 attackspambots
Unauthorised access (Aug 10) SRC=117.232.67.181 LEN=52 TOS=0x08 TTL=106 ID=6272 DF TCP DPT=445 WINDOW=8192 SYN
2020-08-11 00:37:59
113.31.125.177 attackbotsspam
2020-08-08 14:11:51 server sshd[84042]: Failed password for invalid user root from 113.31.125.177 port 33260 ssh2
2020-08-11 00:46:47
104.248.56.150 attackbots
Repeated brute force against a port
2020-08-11 01:12:35
79.112.143.33 attack
Automatic report - Banned IP Access
2020-08-11 01:15:55
177.99.87.241 attackspam
Automatic report - Port Scan Attack
2020-08-11 00:39:41
106.53.220.175 attackbotsspam
Banned for a week because repeated abuses, for example SSH, but not only
2020-08-11 00:35:39
106.12.208.31 attackbots
Aug 10 18:24:35 nextcloud sshd\[27013\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.208.31  user=root
Aug 10 18:24:37 nextcloud sshd\[27013\]: Failed password for root from 106.12.208.31 port 34052 ssh2
Aug 10 18:32:56 nextcloud sshd\[4517\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.208.31  user=root
2020-08-11 01:08:21
51.77.151.175 attack
2020-08-10T15:52:14.723014vps773228.ovh.net sshd[26804]: Failed password for invalid user 4255 from 51.77.151.175 port 38982 ssh2
2020-08-10T15:56:06.571915vps773228.ovh.net sshd[26834]: Invalid user manager123 from 51.77.151.175 port 47830
2020-08-10T15:56:06.581613vps773228.ovh.net sshd[26834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.ip-51-77-151.eu
2020-08-10T15:56:06.571915vps773228.ovh.net sshd[26834]: Invalid user manager123 from 51.77.151.175 port 47830
2020-08-10T15:56:07.925339vps773228.ovh.net sshd[26834]: Failed password for invalid user manager123 from 51.77.151.175 port 47830 ssh2
...
2020-08-11 01:03:29

Recently Reported IPs

130.12.180.138 157.66.54.189 35.192.204.184 213.180.203.232
20.38.35.133 43.98.196.52 254.60.51.57 40.124.178.103
24.242.66.11 225.31.74.112 230.10.225.149 224.77.172.3
40.80.203.186 224.206.149.210 45.74.28.65 112.251.144.236
112.8.135.220 104.155.207.153 40.76.224.207 217.11.249.149