JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 8.213.134.13

8.213.134.13 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 0%: ?

ISP	Alibaba Cloud South Korea
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45102
Domain Name	alibaba-inc.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 8.213.134.13

Whois 8.213.134.13

IP Abuse Reports for 8.213.134.13:

This IP address has been reported a total of 60 times from 34 distinct sources. 8.213.134.13 was first reported on August 8th 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Steph@	2024-10-02 16:39:26 (1 year ago)	Oct 2 18:38:42 srv4 sshd[511889]: Failed password for root from 8.213.134.13 port 43636 ssh2 Oct 2 ... show more Oct 2 18:38:42 srv4 sshd[511889]: Failed password for root from 8.213.134.13 port 43636 ssh2 Oct 2 18:39:01 srv4 sshd[511892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.213.134.13 user=root Oct 2 18:39:03 srv4 sshd[511892]: Failed password for root from 8.213.134.13 port 47468 ssh2 Oct 2 18:39:23 srv4 sshd[511952]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.213.134.13 user=root Oct 2 18:39:26 srv4 sshd[511952]: Failed password for root from 8.213.134.13 port 51294 ssh2 ... show less	Brute-Force SSH
🇹🇷 rtbh.com.tr	2024-09-26 20:54:17 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 ghostwarriors	2024-09-25 17:20:30 (1 year ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇩🇪 mateisr	2024-09-24 16:10:15 (1 year ago)	Fail2Ban - SSHD brute-force SSH server ...	Brute-Force SSH
🇹🇷 rtbh.com.tr	2024-09-02 20:55:02 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2024-09-02 04:55:03 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2024-09-01 20:55:03 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇯🇵 zwh	2024-09-01 19:02:45 (1 year ago)	Port Scan	Port Scan
🇬🇧 Joe-Mark	2024-09-01 15:31:21 (1 year ago)	Found Zonefiles Blacklist / proto=6 . srcport=6135 . dstport=2222 . (963)	Port Scan
🇩🇪 Admins@FBN	2024-09-01 01:33:57 (1 year ago)	FW-PortScan: Traffic Blocked srcport=8878 dstport=23	Port Scan
🇺🇸 TPI-Abuse	2024-09-01 00:30:29 (1 year ago)	(mod_security) mod_security (id:218420) triggered by 8.213.134.13 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:218420) triggered by 8.213.134.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 31 20:30:22.574981 2024] [security2:error] [pid 26743:tid 26743] [client 8.213.134.13:51566] [client 8.213.134.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.73:443\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.73"] [uri "/hello.world"] [unique_id "ZtO1nvV2AFsQnntCkciLOAAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 diego	2024-09-01 00:13:39 (1 year ago)	Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds	DDoS Attack
🇺🇸 RAP	2024-09-01 00:03:21 (1 year ago)	2024-09-01 00:03:21 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 MPL	2024-08-31 23:50:12 (1 year ago)	tcp/2222	Port Scan
🇺🇸 MPL	2024-08-31 23:50:12 (1 year ago)	tcp/2222	Port Scan

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.168

🇻🇳 118.71.206.79

🇷🇴 92.118.39.81

🇫🇷 91.231.89.76

🇫🇷 91.231.89.25

🇺🇸 66.132.186.248

🇺🇸 66.132.186.141

🇩🇪 51.195.44.115

🇳🇱 45.148.10.141

🇺🇦 37.54.233.4

🇳🇱 34.178.169.189

🇺🇸 216.25.89.120

🇵🇱 195.149.224.160

🇬🇧 193.163.125.7

🇺🇦 188.163.5.33

🇷🇺 185.16.214.226

🇰🇷 183.104.26.197

🇺🇸 172.217.36.82

🇫🇮 147.185.133.21

🇩🇪 139.59.142.19