JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.229.141.137

111.229.141.137 was found in our database!

This IP was reported 280 times. Confidence of Abuse is 100%: ?

100%

ISP	Tencent cloud computing (Beijing) Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45090
Domain Name	tencentcloud.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.229.141.137

Whois 111.229.141.137

IP Abuse Reports for 111.229.141.137:

This IP address has been reported a total of 280 times from 85 distinct sources. 111.229.141.137 was first reported on May 18th 2026, and the most recent report was 3 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇴 SpamStoper	2026-06-04 03:24:38 (3 minutes ago)	Fail2Ban - WordPress Hard - Repeated attempts to force authentication and privilege escalation	Brute-Force Web App Attack
🇩🇪 gadix	2026-06-04 03:14:29 (13 minutes ago)	111.229.141.137 - - [04/Jun/2026:04:29:07 +0200] "POST /wp-login.php HTTP/2.0" 200 15627 "https://cf ... show more 111.229.141.137 - - [04/Jun/2026:04:29:07 +0200] "POST /wp-login.php HTTP/2.0" 200 15627 "https://cf-fahrkompetenz.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 111.229.141.137 - - [04/Jun/2026:04:45:50 +0200] "POST /wp-login.php HTTP/2.0" 200 15626 "https://cf-fahrkompetenz.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 111.229. ... show less	Web App Attack
🇨🇦 KIsmay	2026-06-04 03:00:29 (27 minutes ago)	Jun 3 21:42:53 www4 WPAudit[554351]: 111.229.141.137 www.amandasrestaurant.ca "Mozilla/5.0 (Windows ... show more Jun 3 21:42:53 www4 WPAudit[554351]: 111.229.141.137 www.amandasrestaurant.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" gina:gina12345678 FAIL Jun 3 22:02:33 www4 WPAudit[555657]: 111.229.141.137 bestnelson.org "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" bestnelson-admin:bestnelson-admin123456789 FAIL Jun 3 22:17:36 www4 WPAudit[556780]: 111.229.141.137 www.trilloperelloyates.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" trillo:trillo1234567890 FAIL Jun 3 22:53:40 www4 WPAudit[559193]: 111.229.141.137 www.amandasrestaurant.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" gina:gina2022 FAIL Jun 3 23:00:28 www4 WPAudit[559918]: 111.229.141.137 katharinedickerson.com "Mozilla/5.0 (Windows NT 10.0; Win64; x6 ... show less	Brute-Force Web App Attack
🇩🇪 Marc	2026-06-04 02:36:11 (52 minutes ago)	111.229.141.137 - - [04/Jun/2026:03:24:03 +0200] "GET /wp-login.php HTTP/2.0" 200 3224 "-" "Mozilla/ ... show more 111.229.141.137 - - [04/Jun/2026:03:24:03 +0200] "GET /wp-login.php HTTP/2.0" 200 3224 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 111.229.141.137 - - [04/Jun/2026:03:24:04 +0200] "POST /wp-login.php HTTP/2.0" 200 3239 "https://fachanwaelte-iserlohn.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 111.229.141.137 - - [04/Jun/2026:04:32:34 +0200] "GET /wp-login.php HTTP/2.0" 200 3289 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 111.229.141.137 - - [04/Jun/2026:04:32:34 +0200] "POST /wp-login.php HTTP/2.0" 200 3216 "https://fachanwaelte-iserlohn.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 111.229.141.137 - - [04/Jun/2026:04:36:10 +0200] "GET /wp-login.php HTTP/2.0" 200 3320 "-" "Mozilla/5.0 (Windows N show less	Brute-Force Web App Attack
🇫🇷 Campus France	2026-06-04 02:11:42 (1 hour ago)	111.229.141.137 - - [03/Jun/2026:10:32:47 +0200] "POST /wp-login.php HTTP/1.1" 200 2495 "https://per ... show more 111.229.141.137 - - [03/Jun/2026:10:32:47 +0200] "POST /wp-login.php HTTP/1.1" 200 2495 "https://perpignan.radio-campus.fr/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 111.229.141.137 - - [03/Jun/2026:12:40:35 +0200] "POST /wp-login.php HTTP/1.1" 200 2495 "https://perpignan.radio-campus.fr/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 111.229.141.137 - - [03/Jun/2026:19:51:16 +0200] "POST /wp-login.php HTTP/1.1" 200 2495 "https://perpignan.radio-campus.fr/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 111.229.141.137 - - [03/Jun/2026:20:40:20 +0200] "POST /wp-login.php HTTP/1.1" 200 2495 "https://perpignan.radio-campus.fr/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537. ... show less	Brute-Force Web App Attack
Anonymous	2026-06-04 01:52:33 (1 hour ago)	111.229.141.137 - - [04/Jun/2026:03:52:31 +0200] "POST /xmlrpc.php HTTP/1.1" 200 426 ...	Brute-Force Bad Web Bot
🇳🇱 tmiland	2026-06-03 23:11:35 (4 hours ago)	(wordpress_login) WordPress Login Attack 111.229.141.137 (CN/China/-): 3 in the last 3600 secs; IP: ... show more (wordpress_login) WordPress Login Attack 111.229.141.137 (CN/China/-): 3 in the last 3600 secs; IP: 111.229.141.137; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 111.229.141.137 - - [04/Jun/2026:01:11:28 +0200] "GET /wp-login.php HTTP/1.1" 200 1936 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 111.229.141.137 - - [04/Jun/2026:01:11:29 +0200] "GET /wp-login.php HTTP/1.1" 200 1936 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 111.229.141.137 - - [04/Jun/2026:01:11:30 +0200] "POST /wp-login.php HTTP/1.1" 200 2068 "https://.*/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Brute-Force
Anonymous	2026-06-03 22:14:18 (5 hours ago)	111.229.141.137 - - [04/Jun/2026:00:14:17 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 ...	Brute-Force Bad Web Bot
🇨🇿 huginet	2026-06-03 22:09:52 (5 hours ago)	111.229.141.137 - - [04/Jun/2026:00:09:51 +0200] "GET /wp-login.php HTTP/1.1" 200 9112 "-" "Mozilla/ ... show more 111.229.141.137 - - [04/Jun/2026:00:09:51 +0200] "GET /wp-login.php HTTP/1.1" 200 9112 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 111.229.141.137 - - [04/Jun/2026:00:09:51 +0200] "POST /wp-login.php HTTP/1.1" 200 9549 "https://centrum-eko-likvidace.org/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web Spam Blog Spam Hacking Bad Web Bot Web App Attack
🇫🇷 tecnicorioja	2026-06-03 22:00:45 (5 hours ago)	POST /xmlrpc.php [03/Jun/2026:12:18:04	Brute-Force Web App Attack
🇫🇷 Bruno	2026-06-03 21:05:59 (6 hours ago)	111.229.141.137 - - [03/Jun/2026:13:33:14 +0200] "GET /wp-login.php HTTP/2.0" 200 7536 "-" "Mozilla/ ... show more 111.229.141.137 - - [03/Jun/2026:13:33:14 +0200] "GET /wp-login.php HTTP/2.0" 200 7536 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 111.229.141.137 - - [03/Jun/2026:13:33:15 +0200] "POST /wp-login.php HTTP/2.0" 200 7446 "https://editionsansouire.fr/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 111.229.141.137 - - [03/Jun/2026:19:33:02 +0200] "GET /wp-login.php HTTP/2.0" 200 7536 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 111.229.141.137 - - [03/Jun/2026:19:33:03 +0200] "POST /wp-login.php HTTP/2.0" 200 7445 "https://editionsansouire.fr/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 111.229.141.137 - - [03/Jun/2026:23:05:58 +0200] "GET /wp-login.php HTTP/2.0" 200 7536 "-" "Mozilla/ ... show less	Web App Attack
🇫🇷 solution.it	2026-06-03 20:18:42 (7 hours ago)	[Wed Jun 03 22:18:42.414495 2026] [php7:error] [pid 843894:tid 843894] [client 111.229.141.137:44546 ... show more [Wed Jun 03 22:18:42.414495 2026] [php7:error] [pid 843894:tid 843894] [client 111.229.141.137:44546] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat show less	Web App Attack
🇨🇦 KIsmay	2026-06-03 19:11:47 (8 hours ago)	Jun 3 12:38:53 www4 WPAudit[509149]: 111.229.141.137 www.amandasrestaurant.ca "Mozilla/5.0 (Windows ... show more Jun 3 12:38:53 www4 WPAudit[509149]: 111.229.141.137 www.amandasrestaurant.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" gina:gina123456 FAIL Jun 3 13:17:24 www4 WPAudit[513951]: 111.229.141.137 www.cottonwoodc.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cottonwoodcreek-admin:cottonwoodcreekadmin2022 FAIL Jun 3 14:04:06 www4 WPAudit[519166]: 111.229.141.137 www.vhsport.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" vhsport:vhsport1234 FAIL Jun 3 14:12:32 www4 WPAudit[520045]: 111.229.141.137 katharinedickerson.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" katharinedickerson:katharinedickerson12345 FAIL Jun 3 15:11:46 www4 WPAudit[524642]: 111.229.141.137 katharinedickerson.com "Mozilla/5.0 (Windows N ... show less	Brute-Force Web App Attack
🇪🇸 masterguru	2026-06-03 18:57:05 (8 hours ago)	(wplogin) Failed WordPress login from 111.229.141.137 (CN/China/-): 5 in the last 3600 secs (0-122)	Hacking
🇫🇮 KnightIndustries	2026-06-03 18:41:42 (8 hours ago)	2026-06-03T20:00:09.862737+02:00 milkyway wordpress(learncryptography.pw)[2356580]: XML-RPC authenti ... show more 2026-06-03T20:00:09.862737+02:00 milkyway wordpress(learncryptography.pw)[2356580]: XML-RPC authentication failure for macminty from 111.229.141.137 2026-06-03T20:38:17.609312+02:00 milkyway wordpress(learncryptography.pw)[2308623]: Authentication failure for macminty from 111.229.141.137 2026-06-03T20:41:41.704617+02:00 milkyway wordpress(oldscarborough.com)[2338613]: Authentication failure for joshua from 111.229.141.137 ... show less	Brute-Force Web App Attack

Showing 1 to 15 of 280 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 223.233.82.193

🇩🇪 151.243.11.35

🇰🇷 59.21.37.60

🇩🇪 213.209.159.241

🇺🇸 162.216.150.64

🇺🇸 142.93.125.151

🇱🇹 141.98.9.227

🇵🇰 103.162.148.190

🇺🇸 65.49.1.232

🇬🇧 35.203.210.208

🇧🇷 205.210.31.235

🇧🇪 198.235.24.217

🇮🇳 182.95.181.26

🇮🇳 163.61.33.117

🇺🇸 162.216.150.233

🇺🇸 143.244.182.226

🇨🇳 113.125.165.132

🇸🇬 103.250.11.63

🇳🇱 88.210.63.126

🇨🇦 85.217.149.14