JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 8.136.180.139

8.136.180.139 was found in our database!

This IP was reported 170 times. Confidence of Abuse is 77%: ?

77%

ISP	Aliyun Computing Co.LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 8.136.180.139

Whois 8.136.180.139

IP Abuse Reports for 8.136.180.139:

This IP address has been reported a total of 170 times from 119 distinct sources. 8.136.180.139 was first reported on October 16th 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇰 Spyerfox	2026-07-01 03:03:54 (3 hours ago)	Jul 1 05:03:51 <server> sshd\[5408\]: Invalid user netmet from 8.136.180.139Jul 1 05:03:53 <server ... show more Jul 1 05:03:51 <server> sshd\[5408\]: Invalid user netmet from 8.136.180.139Jul 1 05:03:53 <server> sshd\[5408\]: Failed password for invalid user netmet from 8.136.180.139 port 40204 ssh2 ... show less	Brute-Force SSH
🇨🇦 polycoda	2026-07-01 02:13:39 (3 hours ago)	AutoBlock: 📡 Port Scan (Non Decay-Based)	Port Scan
🇩🇪 FeG Deutschland	2026-06-25 01:12:15 (6 days ago)	Mail: - login with unknown user - bruteforce	Brute-Force
Anonymous	2026-06-24 21:09:15 (6 days ago)	Jun 24 15:05:25 sonne dovecot: auth: passwd-file([email protected],8.136.180.139,<tv9ih/9UzIQ ... show more Jun 24 15:05:25 sonne dovecot: auth: passwd-file([email protected],8.136.180.139,<tv9ih/9UzIQIiLSL>): unknown user Jun 24 16:23:30 sonne dovecot: auth: passwd-file([email protected],8.136.180.139,<VRyingBVEMcIiLSL>): unknown user Jun 24 16:23:30 sonne dovecot: auth: passwd-file([email protected],8.136.180.139,<VRyingBVEMcIiLSL>): unknown user Jun 24 17:40:28 sonne dovecot: auth: passwd-file([email protected],8.136.180.139,<VzfksQFV/JoIiLSL>): unknown user Jun 24 17:40:28 sonne dovecot: auth: passwd-file([email protected],8.136.180.139,<VzfksQFV/JoIiLSL>): unknown user Jun 24 18:19:57 sonne dovecot: auth: passwd-file([email protected],8.136.180.139,<FyQXPwJVGLwIiLSL>): unknown user Jun 24 18:19:57 sonne dovecot: auth: passwd-file([email protected],8.136.180.139,<FyQXPwJVGLwIiLSL>): unknown user Jun 24 19:00:15 sonne dovecot: auth: passwd-file([email protected],8.136.180.139,<H8U3zwJVON0IiLSL>): unknown user Jun 24 19:00:15 sonne dovecot: auth: ... show less	Hacking Brute-Force Exploited Host
🇫🇷 dwmp	2026-06-24 05:33:14 (1 week ago)	Jun 24 04:33:11 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attemp ... show more Jun 24 04:33:11 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 4 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=8.136.180.139, lip=75.119.153.41, TLS, session=<ndresfZUMs4IiLSL> Jun 24 06:53:57 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 3 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=8.136.180.139, lip=75.119.153.41, TLS, session=<0Ux4qfhUauQIiLSL> Jun 24 07:33:14 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 3 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=8.136.180.139, lip=75.119.153.41, TLS, session=<3fz0NflUbJcIiLSL> ... show less	Brute-Force
🇩🇪 FeG Deutschland	2026-06-24 00:02:59 (1 week ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇫🇷 dwmp	2026-06-23 13:19:01 (1 week ago)	Jun 23 14:02:49 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attemp ... show more Jun 23 14:02:49 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=8.136.180.139, lip=75.119.153.41, TLS, session=<QX9BiepU6ogIiLSL> Jun 23 14:40:43 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=8.136.180.139, lip=75.119.153.41, TLS, session=<mOfLEOtUDKoIiLSL> Jun 23 15:19:01 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 4 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=8.136.180.139, lip=75.119.153.41, TLS, session=<pVHUmetUQMsIiLSL> ... show less	Brute-Force
Anonymous	2026-06-23 12:57:04 (1 week ago)	Jun 22 22:36:05 sonne dovecot: auth: passwd-file([email protected],8.136.180.139,<QWdrl91Ueqg ... show more Jun 22 22:36:05 sonne dovecot: auth: passwd-file([email protected],8.136.180.139,<QWdrl91UeqgIiLSL>): unknown user Jun 23 00:41:40 sonne dovecot: auth: passwd-file([email protected],8.136.180.139,<4NmIWN9UxJ0IiLSL>): unknown user Jun 23 01:23:12 sonne dovecot: auth: passwd-file([email protected],8.136.180.139,<cTgS7d9UFL8IiLSL>): unknown user Jun 23 02:04:25 sonne dovecot: auth: passwd-file([email protected],8.136.180.139,<Bad4gOBUdOAIiLSL>): unknown user Jun 23 02:45:36 sonne dovecot: auth: passwd-file([email protected],8.136.180.139,<xbjAE+FUjJMIiLSL>): unknown user Jun 23 04:43:46 sonne dovecot: auth: passwd-file([email protected],8.136.180.139,<JsxZuuJUQokIiLSL>): unknown user Jun 23 05:21:58 sonne dovecot: auth: passwd-file([email protected],8.136.180.139,<KrL3QuNUfKoIiLSL>): unknown user Jun 23 06:39:39 sonne dovecot: auth: passwd-file([email protected],8.136.180.139,<tofIWORU7uwIiLSL>): unknown user Jun 23 07:17:37 sonne dovecot: auth: passwd-file( ... show less	Hacking Brute-Force Exploited Host
🇬🇧 Aetherweb Ark	2026-06-23 05:24:05 (1 week ago)	cphulk brute force one-day block	Brute-Force
Anonymous	2026-06-23 00:25:04 (1 week ago)	Fail2Ban dovecot-docker-host on Security-Instance. Persistent malicious activity detected. Evidence: ... show more Fail2Ban dovecot-docker-host on Security-Instance. Persistent malicious activity detected. Evidence: 2026-06-23T01:02:14.188661+02:00 correu dovecot: imap-login: Disconnected: Connection closed: read(size=569) failed: Connection reset by peer (no auth attempts in 7 secs): user=<>, rip=8.136.180.139, lip=192.168.16.3, TLS handshaking: read(size=569) failed: Connection reset by peer, session=<JwoYot9UxLYIiLSL> 2026-06-23T01:43:56.075472+02:00 correu dovecot: auth: ldap([email protected],8.136.180.139,<rKc3N+BUVNgIiLSL>): unknown user (SHA1 of given password: 84ce31) 2026-06-23T01:43:59.072298+02:00 correu dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 3 secs): user=<[email protected]>, method=PLAIN, rip=8.136.180.139, lip=192.168.16.3, TLS, session=<rKc3 show less	Brute-Force
Anonymous	2026-06-23 00:05:06 (1 week ago)	POP or IMAP failed login attempts detected by Fail2Ban	Brute-Force
Anonymous	2026-06-22 23:02:15 (1 week ago)	Fail2Ban dovecot-docker-host on Security-Instance. Persistent malicious activity detected. Evidence: ... show more Fail2Ban dovecot-docker-host on Security-Instance. Persistent malicious activity detected. Evidence: 2026-06-22T22:57:32.221283+02:00 correu dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 3 secs): user=<[email protected]>, method=PLAIN, rip=8.136.180.139, lip=192.168.16.3, TLS, session=<KGIA5N1UkMEIiLSL> 2026-06-22T23:40:49.193511+02:00 correu dovecot: imap-login: Disconnected: Connection closed: read(size=569) failed: Connection reset by peer (no auth attempts in 6 secs): user=<>, rip=8.136.180.139, lip=192.168.16.3, TLS handshaking: read(size=569) failed: Connection reset by peer, session=<Vu3sft5UxOIIiLSL> 2026-06-23T00:21:55.103884+02:00 correu dovecot: auth: ldap([email protected],8.136.180.139,<IbPnEd9UpJUIiLSL>): unknown user (SHA1 of show less	Brute-Force
🇺🇸 vandomatos	2026-06-22 22:59:46 (1 week ago)	Jun 22 14:37:43 servidor dovecot: imap-login: Disconnected (auth failed, 1 attempts in 3 secs): user ... show more Jun 22 14:37:43 servidor dovecot: imap-login: Disconnected (auth failed, 1 attempts in 3 secs): user=<[email protected]>, method=PLAIN, rip=8.136.180.139, lip=154.53.60.253, TLS, session=<EdCuc95UIpkIiLSL> Jun 22 15:19:13 servidor dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=8.136.180.139, lip=154.53.60.253, TLS, session=<i8MgCN9UVLoIiLSL> Jun 22 15:59:29 servidor dovecot: imap-login: Disconnected (auth failed, 1 attempts in 3 secs): user=<[email protected]>, method=PLAIN, rip=8.136.180.139, lip=154.53.60.253, TLS, session=<FKsVmN9UdNsIiLSL> ... show less	Hacking Spoofing Brute-Force
🇫🇷 dwmp	2026-06-22 22:24:56 (1 week ago)	Jun 22 23:00:53 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attemp ... show more Jun 22 23:00:53 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 3 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=8.136.180.139, lip=75.119.153.41, TLS, session=<GynS791UppAIiLSL> Jun 22 23:44:01 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 3 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=8.136.180.139, lip=75.119.153.41, TLS, session=<yEAEit5U1rEIiLSL> Jun 23 00:24:56 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 4 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=8.136.180.139, lip=75.119.153.41, TLS, session=<4kgoHN9U+tIIiLSL> ... show less	Brute-Force
🇩🇪 FeG Deutschland	2026-06-22 21:58:11 (1 week ago)	Mail: - login with unknown user - bruteforce	Brute-Force

Showing 1 to 15 of 170 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2600:3c00::2000:19ff:fe52:506

🇫🇷 217.113.196.128

🇬🇧 193.163.125.62

🇸🇬 185.200.116.40

🇦🇫 180.94.74.94

🇳🇱 176.65.148.144

🇨🇦 142.180.213.139

🇺🇸 72.57.65.14

🇨🇳 39.144.125.85

🇬🇧 198.244.226.13

🇸🇦 188.50.172.247

🇲🇽 177.245.240.209

🇺🇸 165.154.173.211

🇭🇰 154.221.25.72

🇧🇩 118.179.39.19

🇩🇪 109.91.4.177

🇺🇸 68.51.104.122

🇱🇹 62.60.130.219

🇺🇸 47.251.94.248

🇵🇱 20.215.220.188