JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 8.138.35.149

8.138.35.149 was found in our database!

This IP was reported 148 times. Confidence of Abuse is 100%: ?

100%

ISP	Aliyun Computing Co.LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Guangzhou, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 8.138.35.149

Whois 8.138.35.149

IP Abuse Reports for 8.138.35.149:

This IP address has been reported a total of 148 times from 92 distinct sources. 8.138.35.149 was first reported on June 21st 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 SiyCah	2026-08-07 06:00:11 (2 weeks ago)	8.138.35.149 fell into Endlessh tarpit; 0/2 total connections are currently still open. Total time w ... show more 8.138.35.149 fell into Endlessh tarpit; 0/2 total connections are currently still open. Total time wasted: 7s. Total bytes sent by tarpit: 709B. Report generated by Endlessh Report Generator v1.2.3 show less	Brute-Force Port Scan SSH Hacking
🇫🇷 sshboga	2026-08-06 18:45:06 (2 weeks ago)	SSH brute-force on cowrie honeypot port 22. 5 login attempt(s). Usernames: adminuser, backup, amir, ... show more SSH brute-force on cowrie honeypot port 22. 5 login attempt(s). Usernames: adminuser, backup, amir, azureuser, admin2. Passwords tried: 123456, adminuser, backup, azureuser, admin2. show less	Brute-Force SSH
🇫🇷 floofy.tech	2026-08-06 18:40:32 (2 weeks ago)	2026-08-06T20:40:51.598929 yip.floofy.tech sshd-session[2628209]: Invalid user admin2 from 8.138.35. ... show more 2026-08-06T20:40:51.598929 yip.floofy.tech sshd-session[2628209]: Invalid user admin2 from 8.138.35.149 port 56282 2026-08-06T20:40:52.684310 yip.floofy.tech sshd-session[2628209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.138.35.149 2026-08-06T20:40:54.611164 yip.floofy.tech sshd-session[2628209]: Failed password for invalid user admin2 from 8.138.35.149 port 56282 ssh2 ... show less	Brute-Force SSH
🇩🇪 EvoX	2026-08-06 18:34:40 (2 weeks ago)	🛡️ Honeypot [bsts-tpot-sensor]: Unauthorized connection attempt detected on 22/SSH • Client: SSH-2.0 ... show more 🛡️ Honeypot [bsts-tpot-sensor]: Unauthorized connection attempt detected on 22/SSH • Client: SSH-2.0-Go show less	SSH Port Scan
🇩🇪 filip2cz	2026-08-06 15:46:56 (2 weeks ago)	Aug 6 17:43:07 system-status sshd[3805188]: Invalid user from 8.138.35.149 port 33824 Aug 6 17:46 ... show more Aug 6 17:43:07 system-status sshd[3805188]: Invalid user from 8.138.35.149 port 33824 Aug 6 17:46:54 system-status sshd[3809818]: Invalid user admin2 from 8.138.35.149 port 56510 Aug 6 17:46:55 system-status sshd[3809873]: Invalid user adminuser from 8.138.35.149 port 34706 ... show less	Brute-Force SSH
🇫🇷 balint1414	2026-08-06 14:03:56 (2 weeks ago)	Aug 6 16:03:51 mail sshd[2956376]: Failed password for invalid user data from 8.138.35.149 port 532 ... show more Aug 6 16:03:51 mail sshd[2956376]: Failed password for invalid user data from 8.138.35.149 port 53278 ssh2 Aug 6 16:03:52 mail sshd[2956210]: Failed password for backup from 8.138.35.149 port 53272 ssh2 Aug 6 16:03:55 mail sshd[2957753]: Failed password for root from 8.138.35.149 port 53284 ssh2 show less	Brute-Force SSH
🇩🇪 SiyCah	2026-08-06 06:00:08 (2 weeks ago)	8.138.35.149 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time w ... show more 8.138.35.149 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 3s. Total bytes sent by tarpit: 304B. Report generated by Endlessh Report Generator v1.2.3 show less	Brute-Force Port Scan SSH Hacking
🇫🇷 adventureric1250gs	2026-08-05 03:42:40 (2 weeks ago)	Aug 5 03:41:20 vps-93630192 sshd[1870312]: Failed password for invalid user root from 8.138.35.149 ... show more Aug 5 03:41:20 vps-93630192 sshd[1870312]: Failed password for invalid user root from 8.138.35.149 port 33430 ssh2 Aug 5 03:42:22 vps-93630192 sshd[1871975]: Invalid user jenkins from 8.138.35.149 port 36660 Aug 5 03:42:22 vps-93630192 sshd[1871975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.138.35.149 Aug 5 03:42:24 vps-93630192 sshd[1871975]: Failed password for invalid user jenkins from 8.138.35.149 port 36660 ssh2 Aug 5 03:42:40 vps-93630192 sshd[1871983]: Invalid user admin from 8.138.35.149 port 53548 ... show less	Brute-Force SSH
🇫🇷 adventureric1250gs	2026-08-05 02:39:32 (2 weeks ago)	Aug 5 02:37:40 vps-93630192 sshd[1764792]: Failed password for invalid user cw from 8.138.35.149 po ... show more Aug 5 02:37:40 vps-93630192 sshd[1764792]: Failed password for invalid user cw from 8.138.35.149 port 41722 ssh2 Aug 5 02:38:59 vps-93630192 sshd[1766457]: User root from 8.138.35.149 not allowed because not listed in AllowUsers Aug 5 02:38:59 vps-93630192 sshd[1766457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.138.35.149 user=root Aug 5 02:39:01 vps-93630192 sshd[1766457]: Failed password for invalid user root from 8.138.35.149 port 43716 ssh2 Aug 5 02:39:31 vps-93630192 sshd[1767885]: Invalid user claude from 8.138.35.149 port 54292 ... show less	Brute-Force SSH
🇫🇷 raid3n09	2026-08-05 01:37:28 (2 weeks ago)	Automated malicious scan and unauthorized access attempt blocked.	Brute-Force Bad Web Bot Web App Attack
🇫🇷 adventureric1250gs	2026-08-05 01:37:02 (2 weeks ago)	Aug 5 01:36:37 vps-93630192 sshd[1664657]: pam_unix(sshd:auth): authentication failure; logname= ui ... show more Aug 5 01:36:37 vps-93630192 sshd[1664657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.138.35.149 Aug 5 01:36:39 vps-93630192 sshd[1664657]: Failed password for invalid user adminuser from 8.138.35.149 port 58232 ssh2 Aug 5 01:36:59 vps-93630192 sshd[1664669]: Invalid user elasticsearch from 8.138.35.149 port 53538 Aug 5 01:36:59 vps-93630192 sshd[1664669]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.138.35.149 Aug 5 01:37:01 vps-93630192 sshd[1664669]: Failed password for invalid user elasticsearch from 8.138.35.149 port 53538 ssh2 ... show less	Brute-Force SSH
🇫🇷 gianluca.demartino75	2026-08-05 01:35:40 (2 weeks ago)	2026-08-05T03:35:37.985679+02:00 vps-49934a4d endlessh[1010779]: 2026-08-05T01:35:37.984Z ACCEPT hos ... show more 2026-08-05T03:35:37.985679+02:00 vps-49934a4d endlessh[1010779]: 2026-08-05T01:35:37.984Z ACCEPT host=::ffff:8.138.35.149 port=46268 fd=4 n=1/4096 ... show less	Brute-Force SSH
🇫🇷 focusnic.com	2026-08-05 01:08:58 (2 weeks ago)	Multiple SSH login attempts from 8.138.35.149 targeting user(s): admin2,adminuser \| Server Managed b ... show more Multiple SSH login attempts from 8.138.35.149 targeting user(s): admin2,adminuser \| Server Managed by Focusnic show less	Brute-Force SSH
🇩🇪 senkodev	2026-08-04 21:03:02 (2 weeks ago)	2026-08-04T23:03:02.029612+02:00 vm1386.de.snk.wtf sshd[463691]: Invalid user from 8.138.35.149 por ... show more 2026-08-04T23:03:02.029612+02:00 vm1386.de.snk.wtf sshd[463691]: Invalid user from 8.138.35.149 port 46412 2026-08-04T23:03:02.279925+02:00 vm1386.de.snk.wtf sshd[463691]: Connection closed by invalid user 8.138.35.149 port 46412 [preauth] ... show less	Brute-Force SSH
🇩🇪 SiyCah	2026-08-04 06:00:03 (2 weeks ago)	8.138.35.149 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time w ... show more 8.138.35.149 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 3s. Total bytes sent by tarpit: 304B. Report generated by Endlessh Report Generator v1.2.3 show less	Brute-Force Port Scan SSH Hacking

Showing 1 to 15 of 148 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.116

🇵🇱 194.180.48.39

🇳🇱 91.92.42.7

🇨🇳 27.17.235.98

🇺🇸 216.74.114.219

🇧🇦 195.222.59.154

🇩🇪 194.187.176.181

🇺🇸 172.236.228.86

🇨🇦 104.233.20.175

🇷🇴 92.118.39.77

🇬🇧 51.195.135.163

🇰🇷 220.87.238.187

🇪🇨 186.46.82.203

🇫🇮 147.185.133.96

🇹🇷 94.78.89.37

🇮🇪 34.244.139.163

🇸🇬 31.76.191.104

🇨🇳 27.25.114.50

🇺🇸 172.237.156.206

🇻🇳 103.172.238.168