JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 8.138.13.20

8.138.13.20 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 95%: ?

95%

ISP	Aliyun Computing Co.LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Guangzhou, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 8.138.13.20

Whois 8.138.13.20

IP Abuse Reports for 8.138.13.20:

This IP address has been reported a total of 17 times from 16 distinct sources. 8.138.13.20 was first reported on July 25th 2026, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 iNetWorker	2026-07-26 14:40:31 (13 hours ago)	firewall-block, port(s): 2222/tcp	Port Scan
🇺🇸 MPL	2026-07-26 11:17:48 (16 hours ago)	tcp/2222 (4 or more attempts)	Port Scan
🇫🇮 6kilowatti	2026-07-26 08:27:22 (19 hours ago)	2026-07-26T11:27:21.917607+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ... show more 2026-07-26T11:27:21.917607+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=8.138.13.20 DST=83.148.240.21 LEN=60 TOS=0x00 PREC=0x00 TTL=46 ID=20356 DF PROTO=TCP SPT=49396 DPT=2222 WINDOW=29200 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇵🇱 webadmin	2026-07-26 02:24:34 (1 day ago)	Failed password for nexus from 8.138.13.20 port 51410 ssh2 Failed password for root from 8.138.13.20 ... show more Failed password for nexus from 8.138.13.20 port 51410 ssh2 Failed password for root from 8.138.13.20 port 33292 ssh2 show less	SSH
🇫🇮 bittiguru.fi	2026-07-26 02:15:48 (1 day ago)	Brute Force	Brute-Force SSH
Anonymous	2026-07-26 01:32:10 (1 day ago)	suricata IPS/IDS detection, ruleset ET SCAN Potential SSH Scan	Port Scan
Anonymous	2026-07-26 01:25:06 (1 day ago)	(sshd) Failed SSH login from 8.138.13.20 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: ... show more (sshd) Failed SSH login from 8.138.13.20 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Jul 25 21:24:52 server5 sshd[25977]: Invalid user hadoop from 8.138.13.20 Jul 25 21:24:52 server5 sshd[25977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.138.13.20 Jul 25 21:24:54 server5 sshd[25977]: Failed password for invalid user hadoop from 8.138.13.20 port 51912 ssh2 Jul 25 21:24:59 server5 sshd[25990]: Invalid user admin from 8.138.13.20 Jul 25 21:24:59 server5 sshd[25990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.138.13.20 show less	Brute-Force
🇺🇸 vertali	2026-07-26 00:58:56 (1 day ago)	CSF/LFD blocked 8.138.13.20 after LF_SSHD on * (inout, perm=1, ttl=1s). Reason: (sshd) Failed SSH lo ... show more CSF/LFD blocked 8.138.13.20 after LF_SSHD on * (inout, perm=1, ttl=1s). Reason: (sshd) Failed SSH login from 8.138.13.20 (CN/China/-): 5 in the last 3600 secs. Evidence: Jul 25 19:58:37 paladin sshd-session[930970]: Invalid user test from 8.138.13.20 port 37142 show less	Brute-Force SSH
🇫🇷 [email protected]	2026-07-26 00:53:37 (1 day ago)	Jul 26 02:53:24 mail6 sshd-session[455331]: Failed password for invalid user hadoop from 8.138.13.20 ... show more Jul 26 02:53:24 mail6 sshd-session[455331]: Failed password for invalid user hadoop from 8.138.13.20 port 35006 ssh2 Jul 26 02:53:33 mail6 sshd-session[455379]: Invalid user epic from 8.138.13.20 port 60766 Jul 26 02:53:33 mail6 sshd-session[455379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.138.13.20 Jul 26 02:53:35 mail6 sshd-session[455379]: Failed password for invalid user epic from 8.138.13.20 port 60766 ssh2 Jul 26 02:53:36 mail6 sshd-session[455394]: User debian from 8.138.13.20 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇩🇪 nicosqc	2026-07-25 23:15:58 (1 day ago)	Invalid user nagios from 8.138.13.20 port 60026	Brute-Force SSH
🇦🇹 urnilxfgbez	2026-07-25 22:45:00 (1 day ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇦🇺 vftable	2026-07-25 22:26:34 (1 day ago)	2026-07-25T22:26:30.257999+00:00 kyana sshd[798308]: pam_unix(sshd:auth): authentication failure; lo ... show more 2026-07-25T22:26:30.257999+00:00 kyana sshd[798308]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.138.13.20 2026-07-25T22:26:32.125745+00:00 kyana sshd[798308]: Failed password for invalid user deploy from 8.138.13.20 port 53052 ssh2 2026-07-25T22:26:33.178811+00:00 kyana sshd[798308]: Connection closed by invalid user deploy 8.138.13.20 port 53052 [preauth] ... show less	Brute-Force SSH
Anonymous	2026-07-25 21:03:41 (1 day ago)	Fail2ban (sshd jail): 2 failed SSH attempts from 8.138.13.20.	Brute-Force SSH
🇷🇴 gtheo99	2026-07-25 20:51:42 (1 day ago)	(sshd) Failed SSH login from 8.138.13.20 (CN/China/-): 2 in the last 900 secs	SSH Brute-Force
🇨🇿 lp	2026-07-25 16:48:43 (1 day ago)	SSH Brute force: 1 attempts were recorded from 8.138.13.20 2026-07-25T17:46:19+02:00 Invalid user wq ... show more SSH Brute force: 1 attempts were recorded from 8.138.13.20 2026-07-25T17:46:19+02:00 Invalid user wqmarlduiqkmgs from 8.138.13.20 port 58418 show less	Brute-Force SSH

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.104

🇲🇦 196.119.25.130

🇺🇸 74.249.178.114

🇸🇬 47.79.11.55

🇰🇷 16.184.25.25

🇮🇪 3.254.173.246

🇺🇸 209.209.59.230

🇺🇸 207.90.244.19

🇹🇼 198.235.24.117

🇫🇮 185.148.3.54

🇩🇪 178.104.30.11

🇮🇳 140.245.17.17

🇩🇪 51.195.39.150

🇸🇬 47.82.49.239

🇸🇬 47.82.15.200

🇸🇬 47.82.14.205

🇸🇬 47.82.14.191

🇸🇬 47.82.14.43

🇸🇬 47.79.11.119

🇩🇪 46.101.106.108