AbuseIPDB » 111.229.161.152

111.229.161.152 was found in our database!

This IP was reported 661 times. Confidence of Abuse is 100%: ?

100%

ISP	Tencent cloud computing (Beijing) Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45090
Domain Name	tencent.com
Country	China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 111.229.161.152

Whois 111.229.161.152

IP Abuse Reports for 111.229.161.152:

This IP address has been reported a total of 661 times from 297 distinct sources. 111.229.161.152 was first reported on January 6th 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
rtbh.com.tr	2025-07-02 20:07:28 (1 week ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
ghostwarriors	2025-07-02 06:50:20 (1 week ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
FunyMails	2025-07-02 05:00:34 (1 week ago)	Jul 2 04:49:00 localhost sshd[3000383]: Disconnected from authenticating user root 111.229.161.152 ... show moreJul 2 04:49:00 localhost sshd[3000383]: Disconnected from authenticating user root 111.229.161.152 port 44100 [preauth] Jul 2 05:00:31 localhost sshd[3000399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.161.152 user=root Jul 2 05:00:34 localhost sshd[3000399]: Failed password for root from 111.229.161.152 port 58328 ssh2 ... show less	Brute-Force SSH
rtbh.com.tr	2025-07-01 20:07:28 (1 week ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
ScanThe.Net	2025-07-01 03:43:50 (1 week ago)	ID: 2893616264 | PORT: 14236 | https://111-229-161-152.scanthe.net	Port Scan
ThreatBook.io	2025-07-01 00:20:34 (1 week ago)	ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/111.229.161.152	SSH
rtbh.com.tr	2025-06-30 20:07:26 (1 week ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
hacktegic.com	2025-06-29 22:15:29 (2 weeks ago)	2025-06-30T01:04:32.689489+03:00 kiv01.hacktegic.com sshd-session[1602893]: Disconnected from authen ... show more2025-06-30T01:04:32.689489+03:00 kiv01.hacktegic.com sshd-session[1602893]: Disconnected from authenticating user root 111.229.161.152 port 44930 [preauth] 2025-06-30T01:15:28.458712+03:00 kiv01.hacktegic.com sshd-session[1604863]: Invalid user odoo15 from 111.229.161.152 port 58478 2025-06-30T01:15:28.720840+03:00 kiv01.hacktegic.com sshd-session[1604863]: Disconnected from invalid user odoo15 111.229.161.152 port 58478 [preauth] ... show less	Brute-Force SSH
creations.works	2025-06-29 22:05:06 (2 weeks ago)	Blocked by UFW on vds [2222/tcp] Source port: 59644 TTL: 44 Packet length: 60<br / ... show moreBlocked by UFW on vds [2222/tcp] Source port: 59644 TTL: 44 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Brute-Force SSH
Filli Group	2025-06-29 21:36:33 (2 weeks ago)	2025-06-29T23:26:08.355467+02:00 monitoring2.crazycraftland.net sshd[129002]: User root from 111.229 ... show more2025-06-29T23:26:08.355467+02:00 monitoring2.crazycraftland.net sshd[129002]: User root from 111.229.161.152 not allowed because not listed in AllowUsers 2025-06-29T23:31:31.424088+02:00 monitoring2.crazycraftland.net sshd[130360]: User root from 111.229.161.152 not allowed because not listed in AllowUsers 2025-06-29T23:36:31.627143+02:00 monitoring2.crazycraftland.net sshd[131604]: Invalid user root123 from 111.229.161.152 port 51784 ... show less	Brute-Force SSH
ghostwarriors	2025-06-29 20:50:11 (2 weeks ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
Anonymous	2025-06-29 20:20:01 (2 weeks ago)	Failed password for root from 111.229.161.152 port 58208	Brute-Force SSH
rtbh.com.tr	2025-06-29 20:07:25 (2 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
itbyhf	2025-06-29 17:48:16 (2 weeks ago)	Jun 29 17:45:11 hardcore-tesla sshd[3410250]: pam_unix(sshd:auth): authentication failure; logname= ... show moreJun 29 17:45:11 hardcore-tesla sshd[3410250]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.161.152 user=root Jun 29 17:45:13 hardcore-tesla sshd[3410250]: Failed password for root from 111.229.161.152 port 39252 ssh2 Jun 29 17:48:13 hardcore-tesla sshd[3410266]: Invalid user wialon from 111.229.161.152 port 59424 Jun 29 17:48:13 hardcore-tesla sshd[3410266]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.161.152 Jun 29 17:48:15 hardcore-tesla sshd[3410266]: Failed password for invalid user wialon from 111.229.161.152 port 59424 ssh2 ... show less	Brute-Force SSH
itbyhf	2025-06-29 16:51:48 (2 weeks ago)	Jun 29 16:48:36 hardcore-tesla sshd[3409849]: pam_unix(sshd:auth): authentication failure; logname= ... show moreJun 29 16:48:36 hardcore-tesla sshd[3409849]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.161.152 user=root Jun 29 16:48:39 hardcore-tesla sshd[3409849]: Failed password for root from 111.229.161.152 port 42822 ssh2 Jun 29 16:51:45 hardcore-tesla sshd[3409903]: Invalid user odoo17 from 111.229.161.152 port 34790 Jun 29 16:51:45 hardcore-tesla sshd[3409903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.161.152 Jun 29 16:51:48 hardcore-tesla sshd[3409903]: Failed password for invalid user odoo17 from 111.229.161.152 port 34790 ssh2 ... show less	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩