Check an IP Address, Domain Name, Subnet, or ASN

8.138.156.180 was found in our database!

$ whois 8.138.156.180

country·🇨🇳 China

city·Guangzhou

isp·Hangzhou Alibaba Advertising Co.,Ltd.

asn·AS37963

network·Standard

$ sikker risk 8.138.156.180scoring →

confidence

40%Medium

first_seen·Jan 23, 2026

last_seen·24d ago

sessions·8

events·36

$ sikker protocols 8.138.156.180

SSH

8 / 36

$ sikker summary 8.138.156.180

8.138.156.180 has a threat confidence score of 40%. This IP address from China (AS37963, Hangzhou Alibaba Advertising Co.,Ltd.) has been observed in 8 honeypot sessions targeting SSH protocols. First observed on January 23, 2026, most recently active March 5, 2026.

$ sikker primitives 8.138.156.180

ssh_sleep_2_seconds2 ssh_scp_sink_mode_upload_to_usr_work2 ssh_create_usr_work_directory1 ssh_uname_machine_architecture1 ssh_hex_encoded_ok_probe_via_echo1 ssh_chmod_execute_work32_in_usr_work1 ssh_chmod_execute_work64_in_usr_work1 ssh_execute_work32_with_root_and_password_arguments1 ssh_execute_work64_with_root_and_password_arguments1

$ sikker related 8.138.156.180

🇨🇳·More threats fromChina→AS·More threats fromHangzhou Alibaba Advertising Co.,Ltd.→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
47.109.53.221	84%	6,649
106.14.173.166	81%	9
8.152.99.77	88%	4,234
47.93.1.160	80%	19,228
182.92.11.80	60%	279

IP Address	Confidence	Events
47.109.53.221	84%	6,649
106.14.173.166	81%	9
175.42.32.205	96%	4,174
162.14.155.172	94%	171
117.72.215.199	77%	145