JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

8.217.138.160

Recent Activity

Abuse Confidence Score

100% Critical

34 reports

32 reporters · latest 5 hours ago

ISP: Aliyun Computing Co.LTD
Usage Type: Data Center/Web Hosting/Transit
ASN: AS45102
Domain Name: alibaba-inc.com
Country: 🇭🇰 Hong Kong
City: Hong Kong

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

34 from 32 distinct reporters

First reported

September 25th 2026

Most recent report

5 hours ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 8 🇫🇷 France 6 🇩🇪 Germany 4

Most common categories SSH 29 Brute-Force 26 Port Scan 3 Hacking 2 Bad Web Bot 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ACE-INFORMATIQUE.NC	2026-10-28 19:00:21 (5 hours ago)	Brute-Force + SSH (honeypot) blocked by Fail2ban	Brute-Force SSH
🇩🇪 laotuo	2026-10-28 18:27:57 (6 hours ago)	Oct 28 19:27:54 h2930838 sshd[18691]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.217.138.160 Oct 28 19:27:56 h2930838 sshd[18691]: Failed password for invalid user deploy from 8.217.138.160 port 58416 s ... show more Oct 28 19:27:54 h2930838 sshd[18691]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.217.138.160 Oct 28 19:27:56 h2930838 sshd[18691]: Failed password for invalid user deploy from 8.217.138.160 port 58416 ssh2 show less	Brute-Force SSH
Anonymous	2026-10-28 00:59:34 (23 hours ago)	2026-10-28T00:59:31.488039+00:00 nbg01-02-secure sshd[273853]: Invalid user mysql from 8.217.138.160 port 33494 2026-10-28T00:59:31.711618+00:00 nbg01-02-secure sshd[273853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ... show more 2026-10-28T00:59:31.488039+00:00 nbg01-02-secure sshd[273853]: Invalid user mysql from 8.217.138.160 port 33494 2026-10-28T00:59:31.711618+00:00 nbg01-02-secure sshd[273853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.217.138.160 2026-10-28T00:59:33.531984+00:00 nbg01-02-secure sshd[273853]: Failed password for invalid user mysql from 8.217.138.160 port 33494 ssh2 ... show less	Brute-Force
🇫🇷 balint1414	2026-10-27 23:51:45 (1 day ago)	Oct 28 00:51:28 mail sshd[96517]: Failed password for invalid user kafka from 8.217.138.160 port 50248 ssh2 Oct 28 00:51:35 mail sshd[99287]: Failed password for invalid user user from 8.217.138.160 port 50300 ssh2 Oct 28 00:51:44 mail sshd[102254]: ... show more Oct 28 00:51:28 mail sshd[96517]: Failed password for invalid user kafka from 8.217.138.160 port 50248 ssh2 Oct 28 00:51:35 mail sshd[99287]: Failed password for invalid user user from 8.217.138.160 port 50300 ssh2 Oct 28 00:51:44 mail sshd[102254]: Failed password for invalid user solana from 8.217.138.160 port 35252 ssh2 show less	Brute-Force SSH
🇩🇪 NetWatch	2026-10-27 23:49:51 (1 day ago)	NetWatch sensor network: The IP 8.217.138.160 executed unauthorized SSH login attempts.	Brute-Force SSH
🇫🇷 John Doe	2026-10-27 23:48:34 (1 day ago)	$f2bV_matches	Brute-Force SSH
🇦🇹 urnilxfgbez	2026-10-27 23:45:00 (1 day ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 qtland	2026-10-27 23:33:24 (1 day ago)	2026-10-27T23:33:20.090421+00:00 relay-lax sshd[11500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.217.138.160 2026-10-27T23:33:22.357542+00:00 relay-lax sshd[11500]: Failed password for invalid user adm ... show more 2026-10-27T23:33:20.090421+00:00 relay-lax sshd[11500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.217.138.160 2026-10-27T23:33:22.357542+00:00 relay-lax sshd[11500]: Failed password for invalid user admin from 8.217.138.160 port 51832 ssh2 2026-10-27T23:33:23.849485+00:00 relay-lax sshd[11500]: Connection closed by invalid user admin 8.217.138.160 port 51832 [preauth] ... show less	Brute-Force SSH
Anonymous	2026-10-27 23:27:38 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/ssh-bf. Ip: 8.217.138.160 - ASN: 45102 (Alibaba US Technology Co., Ltd.) - Maliciousness Score is 0 %	SSH Brute-Force
🇩🇪 yvoictra	2026-10-27 21:01:53 (1 day ago)	Bloqueado automáticamente por CrowdSec. Escenario: crowdsecurity/ssh-bf	Brute-Force SSH
🇺🇸 hyena	2026-10-27 20:15:17 (1 day ago)	Multiple unauthorized login attempts via SSH.	SSH
🇵🇱 Nevex	2026-10-27 20:15:12 (1 day ago)	Failed 5 attempts using usernames: deploy, ubuntu, apache, www and ftp	Brute-Force SSH
🇧🇷 radardatelecom	2026-10-27 16:51:03 (1 day ago)	Blocked by Radar da Telecom firewall — abuseipdb	Bad Web Bot Web App Attack
🇫🇮 GG UNLUCKI	2026-10-27 16:05:19 (1 day ago)	SSH brute-force attempt detected by Fail2Ban. Invalid login attempt against sshd.	Brute-Force SSH
🇵🇱 Server	2026-10-27 15:29:20 (1 day ago)	Invalid 5 SSH connections in span of 15 minutes (honeypot)	Brute-Force SSH

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇹🇼 198.235.24.45

🇳🇱 195.178.110.228

🇺🇸 191.102.139.99

🇳🇱 138.226.239.19

🇰🇷 115.160.76.23

🇨🇳 113.122.132.115

🇷🇺 87.250.224.123

🇳🇱 64.205.72.145

🇬🇧 35.234.136.205

🇺🇸 20.163.59.145

🇺🇸 216.180.246.130

🇺🇿 213.230.87.54

🇺🇸 205.210.31.91

🇦🇷 181.209.110.91

🇺🇸 172.69.6.238

🇺🇸 162.216.149.29

🇻🇳 160.250.64.9

🇮🇳 103.168.241.32

🇩🇪 85.216.81.75

🇻🇪 38.172.56.14