AbuseIPDB » 8.138.3.104

8.138.3.104 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 21%: ?

21%

ISP	Aliyun Computing Co. Ltd
Usage Type	Data Center/Web Hosting/Transit
Domain Name	aliyun.com
Country	China
City	Guangzhou, Guangdong

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 8.138.3.104

Whois 8.138.3.104

IP Abuse Reports for 8.138.3.104:

This IP address has been reported a total of 8 times from 7 distinct sources. 8.138.3.104 was first reported on June 26th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Hirte	2024-09-20 07:32:56 (3 weeks ago)	LT: TCP-Scanner. Port: 6379	Port Scan
Mr.Singh	2024-09-20 00:30:28 (3 weeks ago)	NFT blocked 8.138.3.104 on 20-Sep-2024..	Port Scan Brute-Force
IP Analyzer	2024-09-19 23:46:07 (3 weeks ago)	Unauthorized connection attempt from IP address 8.138.3.104 on Port 6379	Port Scan
Elysium Security	2024-09-19 14:07:03 (3 weeks ago)	Mass port scanning on a whole network	Port Scan
Linuxmalwarehuntingnl	2024-07-01 10:57:18 (3 months ago)	Unauthorized connection attempt	Brute-Force
bigscoots.com	2024-06-26 20:20:12 (3 months ago)	8.138.3.104 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ... show more8.138.3.104 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 26 15:20:11 16332 sshd[27864]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.33.73.235 user=root Jun 26 15:12:56 16332 sshd[27310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.138.3.104 user=root Jun 26 15:12:58 16332 sshd[27310]: Failed password for root from 8.138.3.104 port 35974 ssh2 Jun 26 15:15:06 16332 sshd[27509]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.33.73.235 user=root Jun 26 15:15:09 16332 sshd[27509]: Failed password for root from 101.33.73.235 port 39570 ssh2 IP Addresses Blocked: 101.33.73.235 (KR/South Korea/-) show less	Brute-Force SSH
Savvii	2024-06-26 19:33:26 (3 months ago)	20 attempts against mh-ssh on tin	Brute-Force SSH
bigscoots.com	2024-06-26 19:16:35 (3 months ago)	(sshd) Failed SSH login from 8.138.3.104 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: ... show more(sshd) Failed SSH login from 8.138.3.104 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Jun 26 14:15:28 15736 sshd[25966]: Invalid user ftpadmin from 8.138.3.104 port 42516 Jun 26 14:15:31 15736 sshd[25966]: Failed password for invalid user ftpadmin from 8.138.3.104 port 42516 ssh2 Jun 26 14:16:17 15736 sshd[26155]: Invalid user student from 8.138.3.104 port 48794 Jun 26 14:16:19 15736 sshd[26155]: Failed password for invalid user student from 8.138.3.104 port 48794 ssh2 Jun 26 14:16:27 15736 sshd[26170]: Invalid user test3 from 8.138.3.104 port 49954 show less	Brute-Force SSH