JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.228.57.137

111.228.57.137 was found in our database!

This IP was reported 209 times. Confidence of Abuse is 100%: ?

100%

ISP	eleven street,No. 18 Institute of Jingdong headquarters
Usage Type	Commercial
ASN	AS141679
Domain Name	jd.com
Country	🇨🇳 China
City	Tianjin, Tianjin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.228.57.137

Whois 111.228.57.137

IP Abuse Reports for 111.228.57.137:

This IP address has been reported a total of 209 times from 148 distinct sources. 111.228.57.137 was first reported on February 5th 2026, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Faeeth	2026-06-05 17:53:35 (4 weeks ago)	Multiple hits on Honeypot UID:PTRW50NM46 Port:Ssh (22)	Brute-Force SSH
🇩🇪 Panter	2026-06-05 16:25:32 (4 weeks ago)	Bruteforce detected by fail2ban SSH	Brute-Force SSH
🇧🇷 wagnerbocchi	2026-06-05 16:17:08 (4 weeks ago)	2026-06-05T13:16:59.917931-03:00 pentest sshd[3684262]: pam_unix(sshd:auth): authentication failure; ... show more 2026-06-05T13:16:59.917931-03:00 pentest sshd[3684262]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.228.57.137 user=root 2026-06-05T13:17:01.665972-03:00 pentest sshd[3684262]: Failed password for root from 111.228.57.137 port 53104 ssh2 2026-06-05T13:17:04.998761-03:00 pentest sshd[3684296]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.228.57.137 user=root 2026-06-05T13:17:07.434726-03:00 pentest sshd[3684296]: Failed password for root from 111.228.57.137 port 42062 ssh2 ... show less	Brute-Force SSH
🇰🇷 hanb.jp	2026-06-05 07:59:30 (4 weeks ago)	Jun 5 07:59:25 v4bgp sshd[306956]: Failed password for root from 111.228.57.137 port 33722 ssh2 Jun ... show more Jun 5 07:59:25 v4bgp sshd[306956]: Failed password for root from 111.228.57.137 port 33722 ssh2 Jun 5 07:59:28 v4bgp sshd[306958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.228.57.137 user=root Jun 5 07:59:30 v4bgp sshd[306958]: Failed password for root from 111.228.57.137 port 41778 ssh2 ... show less	Brute-Force SSH
🇬🇧 andypiper	2026-06-05 01:01:04 (4 weeks ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇩🇪 LRob	2026-06-05 00:15:11 (4 weeks ago)	SSH abuse or brute-force attack detected by Fail2Ban in ssh jail	Brute-Force SSH
🇺🇸 RAP	2026-06-04 22:54:58 (4 weeks ago)	2026-06-04 22:54:58 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇫🇮 KnightIndustries	2026-06-04 21:33:46 (4 weeks ago)	2026-06-04T23:33:41.013288+02:00 milkyway sshd[2508506]: Failed password for root from 111.228.57.13 ... show more 2026-06-04T23:33:41.013288+02:00 milkyway sshd[2508506]: Failed password for root from 111.228.57.137 port 40622 ssh2 2026-06-04T23:33:43.348793+02:00 milkyway sshd[2508514]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.228.57.137 user=root 2026-06-04T23:33:45.466147+02:00 milkyway sshd[2508514]: Failed password for root from 111.228.57.137 port 50454 ssh2 ... show less	Brute-Force SSH
🇯🇵 chirorist	2026-06-04 20:12:27 (1 month ago)	2026-06-05T05:12:20.353454 vps1.chirorist.org sshd[2159818]: Failed password for root from 111.228.5 ... show more 2026-06-05T05:12:20.353454 vps1.chirorist.org sshd[2159818]: Failed password for root from 111.228.57.137 port 33248 ssh2 2026-06-05T05:12:20.910132 vps1.chirorist.org sshd[2159822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.228.57.137 user=root 2026-06-05T05:12:22.676189 vps1.chirorist.org sshd[2159822]: Failed password for root from 111.228.57.137 port 47326 ssh2 2026-06-05T05:12:23.636987 vps1.chirorist.org sshd[2159824]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.228.57.137 user=root 2026-06-05T05:12:25.483829 vps1.chirorist.org sshd[2159824]: Failed password for root from 111.228.57.137 port 47330 ssh2 ... show less	Brute-Force SSH
🇬🇧 PeravixGroup	2026-06-04 18:34:42 (1 month ago)	Honeypot detection: SSH brute-force authentication attempt on port 22. Severity: MEDIUM. Aaran.cloud	SSH Brute-Force
🇮🇹 alph44	2026-06-04 14:15:45 (1 month ago)	SSH brute force attack detected: 5 failed attempts	Brute-Force
🇩🇪 ipcop.net	2026-06-04 14:15:19 (1 month ago)	2026-06-04T16:15:09.908491+02:00 router01.mhm.de.mersrv.de sshd[3446136]: Connection closed by authe ... show more 2026-06-04T16:15:09.908491+02:00 router01.mhm.de.mersrv.de sshd[3446136]: Connection closed by authenticating user root 111.228.57.137 port 33694 [preauth] 2026-06-04T16:15:11.998146+02:00 router01.mhm.de.mersrv.de sshd[3446390]: Connection closed by authenticating user root 111.228.57.137 port 34586 [preauth] 2026-06-04T16:15:14.116610+02:00 router01.mhm.de.mersrv.de sshd[3446394]: Connection closed by authenticating user root 111.228.57.137 port 34602 [preauth] 2026-06-04T16:15:17.013948+02:00 router01.mhm.de.mersrv.de sshd[3446407]: Connection closed by authenticating user root 111.228.57.137 port 34612 [preauth] 2026-06-04T16:15:19.433329+02:00 router01.mhm.de.mersrv.de sshd[3446414]: Connection closed by authenticating user root 111.228.57.137 port 34626 [preauth] show less	Brute-Force
Anonymous	2026-06-04 11:58:36 (1 month ago)	2026-06-04T11:58:19.461639+00:00 de-fra2-nat643 sshd[1194925]: Invalid user user from 111.228.57.137 ... show more 2026-06-04T11:58:19.461639+00:00 de-fra2-nat643 sshd[1194925]: Invalid user user from 111.228.57.137 port 36004 2026-06-04T11:58:20.838177+00:00 de-fra2-nat643 sshd[1194927]: Invalid user user from 111.228.57.137 port 36014 2026-06-04T11:58:35.725307+00:00 de-fra2-nat643 sshd[1194929]: Invalid user user from 111.228.57.137 port 51382 ... show less	Brute-Force SSH
🇺🇸 shadowlab	2026-06-04 11:42:31 (1 month ago)	2026-06-04T04:42:20.818760-07:00 shadownetworks.org sshd[423226]: Failed password for root from 111. ... show more 2026-06-04T04:42:20.818760-07:00 shadownetworks.org sshd[423226]: Failed password for root from 111.228.57.137 port 49804 ssh2 2026-06-04T04:42:23.479988-07:00 shadownetworks.org sshd[423268]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.228.57.137 user=root 2026-06-04T04:42:25.814955-07:00 shadownetworks.org sshd[423268]: Failed password for root from 111.228.57.137 port 46776 ssh2 2026-06-04T04:42:29.188011-07:00 shadownetworks.org sshd[423335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.228.57.137 user=root 2026-06-04T04:42:30.677461-07:00 shadownetworks.org sshd[423335]: Failed password for root from 111.228.57.137 port 46790 ssh2 ... show less	Brute-Force SSH
🇺🇸 johuang92	2026-06-04 06:09:33 (1 month ago)	Cowrie SSH honeypot: session 492b27c18327 \| 1 login attempt(s) \| 1 file transfer(s) \| classified as: ... show more Cowrie SSH honeypot: session 492b27c18327 \| 1 login attempt(s) \| 1 file transfer(s) \| classified as: brute_force, malware_deployment show less	Brute-Force SSH IoT Targeted

Showing 1 to 15 of 209 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 240b:4002:14:9200:89d:8f4e:8a4f:96b9

🇫🇮 178.20.210.208

🇫🇮 147.185.133.241

🇫🇮 147.185.133.239

🇸🇬 144.48.6.26

🇨🇳 115.190.203.239

🇺🇸 107.150.99.104

🇷🇺 104.28.156.66

🇳🇱 91.92.40.240

🇨🇳 58.255.236.182

🇧🇪 198.235.24.175

🇮🇩 103.76.120.81

🇺🇸 91.230.168.82

🇨🇳 61.156.113.239

🇺🇸 47.253.11.8

🇮🇩 43.157.224.197

🇺🇸 192.178.66.86

🇧🇴 181.115.147.5

🇷🇺 176.195.129.185

🇺🇸 98.159.37.51