101.168.63.111

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
98 reports
47 reporters · latest 10 months ago
ISP
Telstra Limited
Usage Type
Fixed Line ISP
ASN
AS1221
Domain Name
telstra.net
Country
🇦🇺 Australia
City
Sydney, New South Wales
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

101.168.63.111 has been reported 98 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
98 from 47 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 MPL
tcp/2222 (2 or more attempts)
Port Scan
🇩🇪 ps-center
SES-W: TCP-Scanner. Port: 22
Port Scan
🇹🇷 Threat.live
Brute Force, tcp/22
Brute-Force
🇺🇸 sashan
2026-01-05T12:57:03.546920+03:00 gate kernel: nftables: JAIL-SSH IN=wan OUT= MAC= SRC=101.168.63.111 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=21277 DF PROTO=TCP SPT=34506 DPT=22 WINDOW=64240 RES=0x00 SYN URGP=0 ...
Port Scan
🇩🇪 EinfxchFinn
Unauthorized connection attempt to port 22 from 101.168.63.111
Port Scan
🇦🇹 centurion
Unauthorized attempt on siem [22/tcp] Source port: 59456 TTL: 46 Packet length: 60 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan Brute-Force SSH
🇺🇸 MPL
tcp/2222
Port Scan
🇺🇸 ISPLtd
Jan 3 16:50:55 101.168.63.111 TCP SPT=34940 DPT=22 SYN ...
Port Scan SSH
🇺🇸 MPL
tcp/22 (4 or more attempts)
Port Scan
🇪🇸 librebit
Brute force
Brute-Force
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=33654 dstport=22
Port Scan Hacking SSH
🇷🇴 abuse_IP_reporter
Dec 31 23:38:34 server UFW BLOCK SRC=101.168.63.111 DF PROTO=TCP SPT=38450
Port Scan
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=41172 dstport=2222
Port Scan
🇺🇸 ISPLtd
Dec 30 14:05:36 101.168.63.111 TCP SPT=54432 DPT=22 SYN ...
Port Scan SSH
🇩🇪 alive
Confirmed malicious activity observed via T-Pot honeypot Observed 12 events on port 2222 (unknown) from 2025-12-30T14:38:18+00:00 to 2025-12-30T14:39:31.960000+00:00. Sample: {"src_port": 56052, "src_ip": "101.168.63.111", "dest_port": 2222}
SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 162.216.150.5
🇳🇬 152.32.141.9
🇵🇭 112.207.214.170
🇸🇬 43.173.176.12
🇺🇸 32.192.75.123
🇺🇸 8.236.206.184
🇺🇸 195.210.126.176
🇷🇴 193.32.162.15
🇫🇮 176.126.111.121
🇸🇪 158.173.241.218
🇺🇸 132.148.22.172
🇺🇸 91.230.168.209
🇷🇴 80.94.95.116
🇺🇸 45.156.129.112
🇨🇳 39.107.136.130
🇺🇸 13.223.52.88
🇬🇧 5.102.169.102
🇫🇮 216.40.73.34
🇵🇪 190.119.63.98
🇬🇧 185.216.145.178
feedback