JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 112.29.248.164

112.29.248.164

Recent Activity

69 reports found in our database

44% ▲ ▲ ▲ Elevated

Abuse confidence score ?

ISP

China Mobile Communications Corporation

Usage Type

Fixed Line ISP

ASN

AS9808

Domain Name

chinamobile.com

Country

🇨🇳 China

City

Huainan, Anhui

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 112.29.248.164:

This IP address has been reported a total of 69 times from 45 distinct sources. 112.29.248.164 was first reported on February 15th 2025, and the most recent report was 4 days ago. In the last 60 days, the top reporter locations were: Germany with 6 reports; United Kingdom of Great Britain and Northern Ireland with 2 reports; United States of America with 2 reports. The most common categories in these recent reports were: Brute-Force 7 times; SSH 7 times; Port Scan 6 times; Exploited Host 2 times; Hacking 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 wagnerbocchi	2026-08-31 13:19:56 (4 days ago)	2026-08-31T10:19:42.270936-03:00 pentest sshd[2095462]: pam_unix(sshd:auth): authentication failure; ... show more 2026-08-31T10:19:42.270936-03:00 pentest sshd[2095462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.29.248.164 user=root 2026-08-31T10:19:44.468680-03:00 pentest sshd[2095462]: Failed password for root from 112.29.248.164 port 21418 ssh2 2026-08-31T10:19:53.038617-03:00 pentest sshd[2095764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.29.248.164 user=root 2026-08-31T10:19:55.412118-03:00 pentest sshd[2095764]: Failed password for root from 112.29.248.164 port 35582 ssh2 ... show less	Brute-Force SSH
🇩🇪 xdee111	2026-08-30 06:00:06 (6 days ago)	Unauthorized SSH connection attempt (cowrie) on home server, banned by fail2ban	Brute-Force SSH
🇺🇸 m2jest1c	2026-08-30 05:43:58 (6 days ago)	Aug 30 05:43:58 instance1 sshd[380151]: Connection closed by authenticating user root 112.29.248.164 ... show more Aug 30 05:43:58 instance1 sshd[380151]: Connection closed by authenticating user root 112.29.248.164 port 22527 [preauth] ... show less	Brute-Force SSH
🇩🇪 dispaisyenterprises	2026-08-28 03:09:55 (1 week ago)	Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 22222 [1] TCP Reported by DisPaisy ... show more Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 22222 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇵🇱 swiszczu	2026-08-20 07:57:49 (2 weeks ago)	Fail2Ban automatic report: SSH multiple root login attempts: Aug 20 09:57:48 serw sshd[577350]: Conn ... show more Fail2Ban automatic report: SSH multiple root login attempts: Aug 20 09:57:48 serw sshd[577350]: Connection closed by authenticating user root 112.29.248.164 port 7064 [preauth] show less	Brute-Force SSH
Anonymous	2026-08-15 05:56:30 (3 weeks ago)	denied traffic to a non-approved destination port. destination port 5555.	Port Scan
🇬🇧 aug42	2026-08-13 01:11:10 (3 weeks ago)	2026-08-13T04:11:08.413355+03:00 nexus6 sshd[2045882]: pam_unix(sshd:auth): authentication failure; ... show more 2026-08-13T04:11:08.413355+03:00 nexus6 sshd[2045882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.29.248.164 user=root 2026-08-13T04:11:10.232468+03:00 nexus6 sshd[2045882]: Failed password for root from 112.29.248.164 port 51327 ssh2 ... show less	Brute-Force SSH
🇩🇪 jjjjj	2026-08-09 18:48:29 (3 weeks ago)	ssh fail2ban: 2026-08-09 20:48:00 +02:00 conn closed by, port=31149 [preauth] 2026-08-09 20:48:03 +0 ... show more ssh fail2ban: 2026-08-09 20:48:00 +02:00 conn closed by, port=31149 [preauth] 2026-08-09 20:48:03 +02:00 auth fail: user=root 2026-08-09 20:48:06 +02:00 wrong password: user=root, port=32065 2026-08-09 20:48:08 +02:00 conn closed by authing user root, port=32065 [preauth] 2026-08-09 20:48:26 +02:00 auth fail: user=root 2026-08-09 20:48:27 +02:00 wrong password: user=root, port=42403 2026-08-09 20:48:28 +02:00 conn closed by authing user root, port=42403 [preauth] (automated) show less	Brute-Force SSH
🇬🇧 adnscom.net	2026-08-03 07:03:56 (1 month ago)	IPS trigger: Brute force SSH scanning/attack	Brute-Force SSH
🇺🇸 xmission.com	2026-08-02 07:35:41 (1 month ago)	Blocked by UFW (TCP on 5555) Source port: 44129 TTL: 48 Packet length: 44 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 5555) Source port: 44129 TTL: 48 Packet length: 44 TOS: 0x08 This report (for 112.29.248.164) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 EGP Abuse Dept	2026-08-02 04:48:41 (1 month ago)	Port connection indicating compromised host	Port Scan Hacking Exploited Host
Anonymous	2026-07-18 22:03:11 (1 month ago)	denied traffic to a non-approved destination port. destination port 5555.	Port Scan
Anonymous	2026-07-17 09:45:33 (1 month ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
Anonymous	2026-06-27 19:11:50 (2 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇬🇧 PeravixGroup	2026-06-03 11:04:02 (3 months ago)	Honeypot detection: Android Debug Bridge (ADB) unauthorized access attempt on port 5555. Severity: M ... show more Honeypot detection: Android Debug Bridge (ADB) unauthorized access attempt on port 5555. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Hacking

Showing 1 to 15 of 69 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.143.73.210

🇩🇪 139.162.182.157

🇲🇾 113.23.225.9

🇫🇷 85.217.140.49

🇮🇹 83.221.103.137

🇱🇺 45.132.195.130

🇭🇰 220.246.43.60

🇧🇷 200.175.201.167

🇷🇺 185.47.206.39

🇺🇸 162.240.104.176

🇷🇸 160.99.81.8

🇭🇰 154.83.15.101

🇺🇸 147.185.132.234

🇵🇱 57.128.222.79

🇬🇧 51.38.71.171

🇪🇨 45.183.140.177

🇳🇱 45.148.10.152

🇭🇰 39.109.99.120

🇳🇱 195.178.110.30

🇧🇬 193.24.211.218