JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 218.107.13.104

218.107.13.104 was found in our database!

This IP was reported 123 times. Confidence of Abuse is 51%: ?

51%

ISP	China Unicom Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS17622
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 218.107.13.104

Whois 218.107.13.104

IP Abuse Reports for 218.107.13.104:

This IP address has been reported a total of 123 times from 63 distinct sources. 218.107.13.104 was first reported on March 28th 2023, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 neron	2026-08-28 21:09:09 (11 hours ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇺🇸 xmission.com	2026-08-28 03:41:18 (1 day ago)	Blocked by UFW (TCP on 9101) Source port: 22715 TTL: 49 Packet length: 52 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 9101) Source port: 22715 TTL: 49 Packet length: 52 TOS: 0x08 This report (for 218.107.13.104) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇻🇳 scuslon	2026-08-28 01:18:49 (1 day ago)	RdpGuard detected brute-force attempt on RDP	Brute-Force
🇺🇸 valornode	2026-08-27 19:37:58 (1 day ago)	sshd ban: 3 attempts in 86400s. Server: valornode.net	Brute-Force SSH
🇺🇸 valornode	2026-08-27 12:40:11 (1 day ago)	Detected by CrowdSec on vps-stl1-e8650a7b: CrowdSec: crowdsecurity/ssh-slow-bf \| ASN: 17622 (China U ... show more Detected by CrowdSec on vps-stl1-e8650a7b: CrowdSec: crowdsecurity/ssh-slow-bf \| ASN: 17622 (China Unicom Guangzhou network) \| Country: CN \| Range: 218.107.0.0/18 show less	Brute-Force SSH
🇺🇸 CGT Software Webmaster	2026-08-27 10:29:23 (1 day ago)	2026-08-27T03:29:19.398375-07:00 safe-flag-1.localdomain sshd[1325376]: pam_unix(sshd:auth): authent ... show more 2026-08-27T03:29:19.398375-07:00 safe-flag-1.localdomain sshd[1325376]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.107.13.104 2026-08-27T03:29:21.293673-07:00 safe-flag-1.localdomain sshd[1325376]: Failed password for invalid user admin from 218.107.13.104 port 53529 ssh2 2026-08-27T03:29:22.495507-07:00 safe-flag-1.localdomain sshd[1325380]: Invalid user admin from 218.107.13.104 port 58285 ... show less	Port Scan Brute-Force
🇹🇷 neron	2026-08-26 21:00:50 (2 days ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇺🇸 LotPhantom	2026-08-18 06:49:09 (1 week ago)	2026-08-18T06:49:09.153586+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-08-18T06:49:09.153586+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=218.107.13.104 DST=157.230.217.55 LEN=52 TOS=0x00 PREC=0x00 TTL=108 ID=5674 DF PROTO=TCP SPT=65530 DPT=5985 WINDOW=65535 RES=0x00 SYN URGP=0 2026-08-18T06:49:09.499371+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=218.107.13.104 DST=157.230.217.55 LEN=52 TOS=0x00 PREC=0x00 TTL=108 ID=5675 DF PROTO=TCP SPT=7962 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇺🇸 xmission.com	2026-08-07 12:55:58 (3 weeks ago)	Blocked by UFW (TCP on 9101) Source port: 50992 TTL: 49 Packet length: 48 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 9101) Source port: 50992 TTL: 49 Packet length: 48 TOS: 0x08 This report (for 218.107.13.104) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇩 digitalsekuriti.id	2026-08-03 08:53:32 (3 weeks ago)	2026-08-03T15:53:26.061489 mail.atmatech.id sshd[317196]: Failed password for invalid user admin fro ... show more 2026-08-03T15:53:26.061489 mail.atmatech.id sshd[317196]: Failed password for invalid user admin from 218.107.13.104 port 14572 ssh2 2026-08-03T15:53:27.199532 mail.atmatech.id sshd[317201]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.107.13.104 user=root 2026-08-03T15:53:29.279556 mail.atmatech.id sshd[317201]: Failed password for root from 218.107.13.104 port 5365 ssh2 ... show less	Brute-Force SSH
🇧🇷 helix	2026-07-31 03:49:11 (4 weeks ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇨🇦 paradoxnetworks	2026-07-29 20:14:27 (4 weeks ago)	2026-07-29T20:14:22.189564+00:00 waf sshd-session[882736]: pam_unix(sshd:auth): authentication failu ... show more 2026-07-29T20:14:22.189564+00:00 waf sshd-session[882736]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.107.13.104 2026-07-29T20:14:24.263255+00:00 waf sshd-session[882736]: Failed password for invalid user admin from 218.107.13.104 port 51618 ssh2 2026-07-29T20:14:26.109754+00:00 waf sshd-session[882777]: Invalid user admin from 218.107.13.104 port 51669 ... show less	Brute-Force SSH
🇧🇷 helix	2026-07-22 03:14:17 (1 month ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇺🇸 arqueiro	2026-07-20 13:12:00 (1 month ago)	35 tentativas de senha falha do IP 218.107.13.104 em 5min.	Brute-Force SSH
Anonymous	2026-07-20 05:57:43 (1 month ago)	Invalid SSH user admin from 218.107.13.104	Brute-Force SSH

Showing 1 to 15 of 123 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.253.9.154

🇧🇷 167.249.25.195

🇳🇱 138.226.239.10

🇩🇪 109.91.4.177

🇳🇴 104.233.9.219

🇺🇸 64.31.55.44

🇮🇩 36.66.72.4

🇬🇧 35.203.210.132

🇺🇸 4.249.17.214

🇭🇰 199.45.154.181

🇺🇸 172.253.9.219

🇺🇸 159.65.216.50

🇨🇳 123.9.208.86

🇫🇷 85.217.140.49

🇺🇸 34.145.186.93

🇺🇸 17.166.20.201

🇮🇩 210.210.144.230

🇬🇧 195.96.139.203

🇻🇪 181.191.227.173

🇺🇸 162.216.149.111