JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 117.38.8.138

117.38.8.138 was found in our database!

This IP was reported 102 times. Confidence of Abuse is 0%: ?

ISP	CHINANET Shanxi(SN) province network
Usage Type	Fixed Line ISP
ASN	AS4809
Domain Name	xa.sn.cn
Country	🇨🇳 China
City	Xi'an, Shaanxi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 117.38.8.138

Whois 117.38.8.138

IP Abuse Reports for 117.38.8.138:

This IP address has been reported a total of 102 times from 66 distinct sources. 117.38.8.138 was first reported on April 28th 2026, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 AdrianT	2026-05-29 06:30:25 (3 months ago)	SSH brute force	Brute-Force SSH
🇺🇸 oof	2026-05-20 07:28:22 (3 months ago)	May 20 07:28:11 GT sshd[3897240]: Failed password for root from 117.38.8.138 port 48900 ssh2 May 20 ... show more May 20 07:28:11 GT sshd[3897240]: Failed password for root from 117.38.8.138 port 48900 ssh2 May 20 07:28:14 GT sshd[3897242]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.38.8.138 user=root May 20 07:28:17 GT sshd[3897242]: Failed password for root from 117.38.8.138 port 53056 ssh2 May 20 07:28:20 GT sshd[3897244]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.38.8.138 user=root May 20 07:28:22 GT sshd[3897244]: Failed password for root from 117.38.8.138 port 56292 ssh2 ... show less	Brute-Force SSH
🇦🇺 trentwiles.com	2026-05-20 04:38:53 (3 months ago)	Unauthorized connection attempt detected from IP address 117.38.8.138 to port 22222 [SYD]	Port Scan
🇬🇧 HyperSpeed	2026-05-19 23:50:38 (3 months ago)	May 19 23:50:28 UK1 sshd[3494226]: Failed password for root from 117.38.8.138 port 39330 ssh2 May 19 ... show more May 19 23:50:28 UK1 sshd[3494226]: Failed password for root from 117.38.8.138 port 39330 ssh2 May 19 23:50:30 UK1 sshd[3494228]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.38.8.138 user=root May 19 23:50:32 UK1 sshd[3494228]: Failed password for root from 117.38.8.138 port 45487 ssh2 May 19 23:50:36 UK1 sshd[3494230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.38.8.138 user=root May 19 23:50:38 UK1 sshd[3494230]: Failed password for root from 117.38.8.138 port 50810 ssh2 ... show less	Brute-Force SSH
🇪🇸 guille-rodriguez	2026-05-19 16:25:21 (3 months ago)	SSH BruteForce detected by Fail2Ban (failures=8, source=VPSPSCZP)	Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-19 05:30:07 (3 months ago)	117.38.8.138 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports ... show more 117.38.8.138 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 19 00:29:00 15084 sshd[6009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.153.104.6 user=root May 19 00:29:03 15084 sshd[6009]: Failed password for root from 61.153.104.6 port 55040 ssh2 May 19 00:29:05 15084 sshd[6078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.153.104.6 user=root May 19 00:29:07 15084 sshd[6078]: Failed password for root from 61.153.104.6 port 55046 ssh2 May 19 00:29:25 15084 sshd[6102]: Failed password for root from 61.153.104.6 port 51836 ssh2 May 19 00:29:45 15084 sshd[6164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.38.8.138 user=root IP Addresses Blocked: 61.153.104.6 (CN/China/-) show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-05-18 22:15:26 (3 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/117.38.8.138	SSH
🇩🇪 Justin F. \| AS204464	2026-05-18 18:29:26 (3 months ago)	Honeypot [nx-infrastructure]: Empty payload (likely service probe); 2233 [1] TCP Reported by: Justin ... show more Honeypot [nx-infrastructure]: Empty payload (likely service probe); 2233 [1] TCP Reported by: Justin F. show less	Port Scan
🇺🇸 bigscoots.com	2026-05-18 15:25:55 (3 months ago)	117.38.8.138 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports ... show more 117.38.8.138 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 18 09:35:26 14039 sshd[11008]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.173.83.231 user=root May 18 09:35:28 14039 sshd[11008]: Failed password for root from 43.173.83.231 port 54918 ssh2 May 18 10:25:38 14039 sshd[19410]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.38.8.138 user=root May 18 09:28:07 14039 sshd[9779]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.173.83.231 user=root May 18 09:28:09 14039 sshd[9779]: Failed password for root from 43.173.83.231 port 46718 ssh2 IP Addresses Blocked: 43.173.83.231 (US/United States/-) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-18 13:32:13 (3 months ago)	(sshd) Failed SSH login from 117.38.8.138 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction ... show more (sshd) Failed SSH login from 117.38.8.138 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: May 18 08:31:57 14190 sshd[16002]: Did not receive identification string from 117.38.8.138 port 42596 May 18 08:31:59 14190 sshd[16003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.38.8.138 user=root May 18 08:32:01 14190 sshd[16003]: Failed password for root from 117.38.8.138 port 42916 ssh2 May 18 08:32:02 14190 sshd[16090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.38.8.138 user=root May 18 08:32:05 14190 sshd[16090]: Failed password for root from 117.38.8.138 port 45394 ssh2 show less	Brute-Force SSH
🇩🇪 LRob	2026-05-18 02:30:12 (3 months ago)	SSH abuse or brute-force attack detected by Fail2Ban in ssh jail	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-05-17 22:16:14 (3 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/117.38.8.138 2026-05-17 08: ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/117.38.8.138 2026-05-17 08:36:53 ["uname -s -m"] show less	SSH
🇩🇪 jjjjj	2026-05-17 19:31:10 (3 months ago)	ssh fail2ban: 2026-05-17 20:30:59 +01:00 auth fail: user=root 2026-05-17 20:31:01 +01:00 wrong passw ... show more ssh fail2ban: 2026-05-17 20:30:59 +01:00 auth fail: user=root 2026-05-17 20:31:01 +01:00 wrong password: user=root, port=37964 2026-05-17 20:31:02 +01:00 conn closed by authing user root, port=37964 [preauth] 2026-05-17 20:31:03 +01:00 auth fail: user=root 2026-05-17 20:31:05 +01:00 wrong password: user=root, port=55068 2026-05-17 20:31:05 +01:00 conn closed by authing user root, port=55068 [preauth] 2026-05-17 20:31:06 +01:00 auth fail: user=root 2026-05-17 20:31:09 +01:00 wrong password: user=root, port=57978 (automated) show less	Brute-Force SSH
🇭🇰 pengpeng	2026-05-17 11:53:11 (3 months ago)	May 17 19:53:05 ser162528253480 sshd[2360528]: Failed password for root from 117.38.8.138 port 39738 ... show more May 17 19:53:05 ser162528253480 sshd[2360528]: Failed password for root from 117.38.8.138 port 39738 ssh2 May 17 19:53:07 ser162528253480 sshd[2360530]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.38.8.138 user=root May 17 19:53:10 ser162528253480 sshd[2360530]: Failed password for root from 117.38.8.138 port 42624 ssh2 ... show less	Brute-Force SSH
🇩🇪 NxtGenIT	2026-05-17 11:23:32 (3 months ago)	Cowrie Honeypot hit, Event Type: cowrie.login.failed, Username: root, Password: ---fuck_you----	Brute-Force

Showing 1 to 15 of 102 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.73.160.213

🇮🇳 185.193.19.226

🇨🇳 124.66.75.189

🇵🇭 122.53.126.18

🇹🇼 114.26.75.10

🇨🇳 58.51.182.4

🇨🇳 14.103.111.16

🇬🇧 193.8.186.29

🇺🇾 186.53.196.157

🇪🇸 145.249.109.100

🇨🇳 120.42.32.2

🇨🇳 112.102.221.37

🇺🇸 66.132.195.126

🇺🇸 207.46.13.9

🇬🇧 172.68.205.250

🇧🇷 170.84.225.2

🇧🇬 88.213.208.75

🇮🇹 88.147.30.59

🇺🇸 2604:a880:400:d1:0:4:e8dc:6001

🇪🇹 197.156.97.81