JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 105.159.29.201

105.159.29.201 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 95%: ?

95%

ISP	IAM
Usage Type	Fixed Line ISP
ASN	AS36903
Domain Name	iam.ma
Country	🇲🇦 Morocco
City	Oujda, Oriental

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 105.159.29.201

Whois 105.159.29.201

IP Abuse Reports for 105.159.29.201:

This IP address has been reported a total of 29 times from 25 distinct sources. 105.159.29.201 was first reported on June 8th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 SOC [GOLINE SA]	2026-06-10 04:20:50 (2 weeks ago)	IDS Alert: ET SCAN Potential SSH Scan === ATTACK === Signature: ET SCAN Potential SSH Scan \| SID: 20 ... show more IDS Alert: ET SCAN Potential SSH Scan === ATTACK === Signature: ET SCAN Potential SSH Scan \| SID: 2001219 \| Severity: 2 \| Category: Attempted Information Leak === SOURCE === IP: 105.159.29.201 (IPv4) \| Port: 48504 \| Country: Morocco \| ISP: IAM \| rDNS: None === TARGET === Host: lilys.ch \| IP: 185.54.81.50 \| Port: 22 \| Protocol: TCP \| App: N/A === RESPONSE === Time: 2026-06-10 06:20:50 \| Action: Blocked show less	SSH Brute-Force
🇦🇹 urnilxfgbez	2026-06-09 22:45:00 (2 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 RAP	2026-06-09 07:38:33 (2 weeks ago)	2026-06-09 07:38:33 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇺🇸 meek2100	2026-06-09 06:51:06 (2 weeks ago)	2026-06-08T23:50:59.877932-07:00 mail sshd[340402]: Invalid user user from 105.159.29.201 port 40124 ... show more 2026-06-08T23:50:59.877932-07:00 mail sshd[340402]: Invalid user user from 105.159.29.201 port 40124 2026-06-08T23:51:01.049633-07:00 mail sshd[340404]: Invalid user user from 105.159.29.201 port 40126 2026-06-08T23:51:02.193929-07:00 mail sshd[340406]: Invalid user user from 105.159.29.201 port 40138 2026-06-08T23:51:03.353451-07:00 mail sshd[340408]: Invalid user user from 105.159.29.201 port 40150 2026-06-08T23:51:04.611044-07:00 mail sshd[340410]: Invalid user user from 105.159.29.201 port 40154 show less	Brute-Force SSH
🇸🇰 Portuseco Biling	2026-06-09 04:40:16 (2 weeks ago)	-hosteroid-F2B blocked SSH BF--	Brute-Force SSH
🇨🇭 SOC [GOLINE SA]	2026-06-09 04:38:59 (2 weeks ago)	IDS Alert: ET SCAN Potential SSH Scan === ATTACK === Signature: ET SCAN Potential SSH Scan \| SID: 20 ... show more IDS Alert: ET SCAN Potential SSH Scan === ATTACK === Signature: ET SCAN Potential SSH Scan \| SID: 2001219 \| Severity: 2 \| Category: Attempted Information Leak === SOURCE === IP: 105.159.29.201 (IPv4) \| Port: 48504 \| Country: Morocco \| ISP: IAM \| rDNS: None === TARGET === Host: lilys.ch \| IP: 185.54.81.50 \| Port: 22 \| Protocol: TCP \| App: N/A === RESPONSE === Time: 2026-06-09 06:38:58 \| Action: Blocked show less	SSH Brute-Force
🇳🇬 SiteHUB Agency	2026-06-09 02:48:22 (2 weeks ago)	Brute force activities detected and blocked	Brute-Force
🇫🇮 updown.io	2026-06-09 02:17:09 (2 weeks ago)	2026-06-09T02:16:57.454419+00:00 hel.updn.io sshd[1893849]: Failed password for root from 105.159.29 ... show more 2026-06-09T02:16:57.454419+00:00 hel.updn.io sshd[1893849]: Failed password for root from 105.159.29.201 port 46740 ssh2 2026-06-09T02:17:01.594635+00:00 hel.updn.io sshd[1894295]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=105.159.29.201 user=root 2026-06-09T02:17:03.436098+00:00 hel.updn.io sshd[1894295]: Failed password for root from 105.159.29.201 port 45700 ssh2 2026-06-09T02:17:07.289568+00:00 hel.updn.io sshd[1894853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=105.159.29.201 user=root 2026-06-09T02:17:08.955081+00:00 hel.updn.io sshd[1894853]: Failed password for root from 105.159.29.201 port 47632 ssh2 ... show less	Brute-Force SSH
🇩🇪 LRob.fr	2026-06-09 02:15:03 (2 weeks ago)	SSH abuse or brute-force attack detected by Fail2Ban in ssh jail	Brute-Force SSH
🇫🇷 tecnicorioja	2026-06-09 02:00:15 (2 weeks ago)	Failed password for root Jun 09 03:28:29 port 48986	Brute-Force SSH
🇫🇮 TrafficAnalyser	2026-06-09 01:28:38 (2 weeks ago)	Invalid user user from 105.159.29.201 port 59498	Brute-Force SSH
🇺🇸 MPL	2026-06-09 01:11:51 (2 weeks ago)	tcp/22 (14 or more attempts)	Port Scan
🇨🇿 lp	2026-06-09 00:18:44 (2 weeks ago)	SSH Brute force: 432 attempts were recorded from 105.159.29.201 2026-06-09T00:48:44+02:00 Connection ... show more SSH Brute force: 432 attempts were recorded from 105.159.29.201 2026-06-09T00:48:44+02:00 Connection closed by authenticating user root 105.159.29.201 port 57812 [preauth] 2026-06-09T00:48:45+02:00 Connection closed by authenticating user root 105.159.29.201 port 44048 [preauth] 2026-06-09T00:48:46+02:00 Connection closed by authenticating user root 105.159.29.201 port 44056 [preauth] 2026-06-09T00:48:47+02:00 Connection closed by authenticating user root 105.159.29.201 port 44066 [preauth] 2026-06-09T00:48:47+02:00 Connection closed by authenticating user root 105.159.29.201 port 44080 [preauth] 2026-06-09T00:48:48+02:00 Connection closed by authenticating user root 105.159.29.201 port 44088 [preauth] 2026-06-09T00:48:49+02:00 Connection closed by authenticating user root 105.159.29.201 port 44096 [preauth] 2026-06-09T00:48:50+02:00 Connection closed by authenticating user root 105.159. show less	Brute-Force SSH
🇧🇾 lns.bz	2026-06-09 00:00:29 (2 weeks ago)	SSH bruteforce [BY]	SSH
🇺🇸 yzfdude1	2026-06-08 23:43:22 (2 weeks ago)	Jun 8 17:43:16 hemera sshd[76208]: Failed password for root from 105.159.29.201 port 32976 ssh2 Jun ... show more Jun 8 17:43:16 hemera sshd[76208]: Failed password for root from 105.159.29.201 port 32976 ssh2 Jun 8 17:43:20 hemera sshd[76210]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=105.159.29.201 user=root Jun 8 17:43:22 hemera sshd[76210]: Failed password for root from 105.159.29.201 port 33038 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇬 41.38.46.80

🇶🇦 2600:1900:4260:40e::6d

🇧🇷 177.136.248.227

🇺🇸 172.234.25.61

🇯🇵 160.251.202.50

🇨🇳 118.250.187.246

🇺🇸 74.82.47.29

🇩🇪 43.165.62.10

🇨🇳 14.103.55.226

🇮🇳 2404:6800:4013:813::122

🇹🇼 125.224.7.83

🇺🇦 91.237.242.155

🇱🇹 62.60.130.219

🇺🇸 52.3.156.186

🇳🇱 45.134.225.130

🇺🇸 40.77.167.27

🇹🇭 184.82.167.87

🇯🇵 172.105.218.179

🇳🇱 132.243.121.237

🇳🇱 91.92.242.91