AbuseIPDB » 43.138.104.59

43.138.104.59 was found in our database!

This IP was reported 1,962 times. Confidence of Abuse is 27%: ?

27%

ISP	Tencent Cloud Computing (Beijing) Co. Ltd
Usage Type	Data Center/Web Hosting/Transit
Domain Name	tencent.com
Country	China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 43.138.104.59

Whois 43.138.104.59

IP Abuse Reports for 43.138.104.59:

This IP address has been reported a total of 1,962 times from 389 distinct sources. 43.138.104.59 was first reported on August 8th 2022, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
nikoladd	20 Sep 2022	Sep 21 03:06:25 server2 sshd\[10656\]: Invalid user git from 43.138.104.59 Sep 21 03:06:25 ser ... show moreSep 21 03:06:25 server2 sshd\[10656\]: Invalid user git from 43.138.104.59 Sep 21 03:06:25 server2 sshd\[10660\]: User root from 43.138.104.59 not allowed because not listed in AllowUsers Sep 21 03:06:25 server2 sshd\[10658\]: User root from 43.138.104.59 not allowed because not listed in AllowUsers Sep 21 03:06:25 server2 sshd\[10654\]: Invalid user user from 43.138.104.59 Sep 21 03:06:25 server2 sshd\[10652\]: User root from 43.138.104.59 not allowed because not listed in AllowUsers Sep 21 03:06:25 server2 sshd\[10648\]: User root from 43.138.104.59 not allowed because not listed in AllowUsers Sep 21 03:06:25 server2 sshd\[10662\]: Invalid user ubuntu from 43.138.104.59 Sep 21 03:06:25 server2 sshd\[10655\]: User root from 43.138.104.59 not allowed because not listed in AllowUsers Sep 21 03:06:25 server2 sshd\[10651\]: Invalid user odoo from 43.138.104.59 show less	Brute-Force
www.blocklist.de	20 Sep 2022	Lines containing failures of 43.138.104.59 (max 1000) Sep 21 00:27:01 ntop sshd[3627301]: Conn ... show moreLines containing failures of 43.138.104.59 (max 1000) Sep 21 00:27:01 ntop sshd[3627301]: Connection closed by 43.138.104.59 port 46268 [preauth] Sep 21 00:27:02 ntop sshd[3627300]: Connection closed by 43.138.104.59 port 46311 [preauth] Sep 21 00:27:06 ntop sshd[3627304]: Connection closed by 43.138.104.59 port 46286 [preauth] Sep 21 01:54:43 ntop sshd[3735790]: Connection reset by 43.138.104.59 port 40542 Sep 21 01:54:43 ntop sshd[3735792]: User r.r from 43.138.104.59 not allowed because not listed in AllowUsers Sep 21 01:54:43 ntop sshd[3735791]: User mysql from 43.138.104.59 not allowed because not listed in AllowUsers Sep 21 01:54:43 ntop sshd[3735793]: AD user testuser from 43.138.104.59 port 47474 Sep 21 01:54:43 ntop sshd[3735794]: AD user ubuntu from 43.138.104.59 port 47478 Sep 21 01:54:43 ntop sshd[3735791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.138.104.59 user=mysql Sep 21 01:54:44 ntop sshd[3735793]: pam_........ ------------------------------ show less	FTP Brute-Force Hacking
Anonymous	20 Sep 2022	Hit honeypot r.	Port Scan Hacking Exploited Host
Anonymous	20 Sep 2022	Sep 21 01:50:29 abendstille sshd\[2999235\]: Invalid user mysql from 43.138.104.59 Sep 21 01:5 ... show moreSep 21 01:50:29 abendstille sshd\[2999235\]: Invalid user mysql from 43.138.104.59 Sep 21 01:50:29 abendstille sshd\[2999235\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.138.104.59 Sep 21 01:50:29 abendstille sshd\[2999232\]: Invalid user odoo from 43.138.104.59 Sep 21 01:50:29 abendstille sshd\[2999237\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.138.104.59 user=root Sep 21 01:50:29 abendstille sshd\[2999234\]: Invalid user testuser from 43.138.104.59 ... show less	Brute-Force
Anonymous	20 Sep 2022	Sep 21 00:58:55 scw-0c4b63 sshd[61486]: Invalid user guest from 43.138.104.59 port 58768 Sep 2 ... show moreSep 21 00:58:55 scw-0c4b63 sshd[61486]: Invalid user guest from 43.138.104.59 port 58768 Sep 21 00:58:55 scw-0c4b63 sshd[61491]: Invalid user user from 43.138.104.59 port 58816 Sep 21 00:58:55 scw-0c4b63 sshd[61500]: Invalid user git from 43.138.104.59 port 58784 show less	Brute-Force SSH
smtp.com.es	20 Sep 2022	Brute force attempt	Brute-Force SSH
etienne	20 Sep 2022	Sep 20 22:50:06 Thrain6 sshd[1739541]: Invalid user postgres from 43.138.104.59 port 55790 Sep ... show moreSep 20 22:50:06 Thrain6 sshd[1739541]: Invalid user postgres from 43.138.104.59 port 55790 Sep 20 22:50:06 Thrain6 sshd[1739537]: Invalid user git from 43.138.104.59 port 55778 Sep 20 22:50:06 Thrain6 sshd[1739526]: Invalid user testuser from 43.138.104.59 port 55772 Sep 20 22:50:07 Thrain6 sshd[1739548]: Invalid user ubuntu from 43.138.104.59 port 55776 Sep 20 22:50:07 Thrain6 sshd[1739524]: Invalid user guest from 43.138.104.59 port 55760 ... show less	Brute-Force
chlouis	20 Sep 2022	Sep 21 00:03:45 gateway38 sshd[90213]: Invalid user admin from 43.138.104.59 port 35052 Sep 21 ... show moreSep 21 00:03:45 gateway38 sshd[90213]: Invalid user admin from 43.138.104.59 port 35052 Sep 21 00:03:45 gateway38 sshd[90223]: Invalid user mysql from 43.138.104.59 port 35022 Sep 21 00:03:45 gateway38 sshd[90228]: Invalid user odoo from 43.138.104.59 port 35023 Sep 21 00:03:45 gateway38 sshd[90205]: Invalid user ubuntu from 43.138.104.59 port 35036 Sep 21 00:03:45 gateway38 sshd[90219]: Invalid user testuser from 43.138.104.59 port 35032 Sep 21 00:03:45 gateway38 sshd[90220]: Invalid user git from 43.138.104.59 port 35042 Sep 21 00:03:45 gateway38 sshd[90244]: Invalid user postgres from 43.138.104.59 port 35048 Sep 21 00:03:45 gateway38 sshd[90246]: Invalid user mysql from 43.138.104.59 port 35070 Sep 21 00:03:45 gateway38 sshd[90245]: Invalid user test from 43.138.104.59 port 35084 Sep 21 00:03:45 gateway38 sshd[90202]: Invalid user testuser from 43.138.104.59 port 35044 ... show less	Brute-Force SSH
onkeltom	13 Aug 2022	Unauthorized VPN login attempts	VPN IP Hacking
joy.lin	12 Aug 2022	Message meets Alert condition The following critical firewall event was detected: SSL VPN log ... show moreMessage meets Alert condition The following critical firewall event was detected: SSL VPN login fail. show less	VPN IP Port Scan
onkeltom	10 Aug 2022	Unauthorized VPN login attempts	VPN IP Hacking
onkeltom	08 Aug 2022	Unauthorized VPN login attempts	VPN IP Hacking

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩