JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.169.58.163

116.169.58.163 was found in our database!

This IP was reported 214 times. Confidence of Abuse is 0%: ?

ISP	China United Network Communications Corporation Limited
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Chengdu, Sichuan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 116.169.58.163

Whois 116.169.58.163

IP Abuse Reports for 116.169.58.163:

This IP address has been reported a total of 214 times from 138 distinct sources. 116.169.58.163 was first reported on April 18th 2026, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-07-03 07:05:16 (2 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇺🇸 dotnetdork	2026-07-03 00:48:41 (2 months ago)	SSH honeypot detection (Endlessh tarpit, port 22). 1 probe(s) sustained for 0m total hold time. Cons ... show more SSH honeypot detection (Endlessh tarpit, port 22). 1 probe(s) sustained for 0m total hold time. Consistent with automated SSH scanning/brute-force. Reported by dotnetdork.dev security honeypot. show less	Brute-Force SSH
🇮🇳 evicky2002	2026-07-02 04:51:18 (2 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇧🇷 ICS Labs	2026-06-30 13:54:17 (2 months ago)	ICS Labs identified 116.169.58.163 as a malicious indicator from threat intelligence.	DDoS Attack Port Scan Hacking Brute-Force Exploited Host
🇩🇪 Lazentis	2026-05-17 16:13:42 (3 months ago)	Unauthorized access attempt to port 22 (tcp)	Brute-Force SSH
🇩🇰 swrlly	2026-05-17 16:04:47 (3 months ago)	2 ssh bruteforce attempts (30d)	Brute-Force SSH
🇫🇮 GamesGames	2026-05-17 13:46:54 (3 months ago)	SSH login attempts	Brute-Force SSH
🇨🇦 senkodev	2026-05-17 07:08:36 (3 months ago)	2026-05-17T07:08:35.822313Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 116.169.58.163:560 ... show more 2026-05-17T07:08:35.822313Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 116.169.58.163:56090 (158.69.22.11:2222) [session: 3e3a9ebd1dd7] 2026-05-17T07:08:36.454910Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 116.169.58.163:57382 (158.69.22.11:2222) [session: f5122736bbfe] ... show less	Brute-Force SSH
Anonymous	2026-05-17 01:50:58 (3 months ago)	SSH Brute Force (3 attempts). Evidence: sshd:auth): authentication failure; logname= uid=0 euid=0 tt ... show more SSH Brute Force (3 attempts). Evidence: sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.169.58.163 user=root;sshd[32765]: Failed password for root from 116.169.58.163 port 59976 ssh2 show less	Brute-Force SSH
🇹🇼 taiwanfrp.me	2026-05-17 01:24:43 (3 months ago)	taiwanfrp NewUserConn auto-ban: reason=ip_over_target_scan_limit_60s1, conn10s=1, targets10m=1, targ ... show more taiwanfrp NewUserConn auto-ban: reason=ip_over_target_scan_limit_60s1, conn10s=1, targets10m=1, target=proxy:kiwicanary.MinecraftJava5fi\|port:- show less	Port Scan Hacking
🇩🇪 vanlueckn	2026-05-16 23:59:04 (3 months ago)	2026-05-16T19:58:59.742828-04:00 castle3d sshd-session[2491012]: pam_unix(sshd:auth): authentication ... show more 2026-05-16T19:58:59.742828-04:00 castle3d sshd-session[2491012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.169.58.163 user=root 2026-05-16T19:59:01.369416-04:00 castle3d sshd-session[2491012]: Failed password for root from 116.169.58.163 port 57074 ssh2 2026-05-16T19:59:03.128031-04:00 castle3d sshd-session[2491012]: Connection closed by authenticating user root 116.169.58.163 port 57074 [preauth] ... show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-05-16 23:32:06 (3 months ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/116.169.58.163	Brute-Force
🇺🇸 bigscoots.com	2026-05-16 21:24:07 (3 months ago)	116.169.58.163 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Por ... show more 116.169.58.163 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 16 16:23:19 13969 sshd[6674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.169.250.238 user=root May 16 16:23:21 13969 sshd[6674]: Failed password for root from 192.169.250.238 port 60504 ssh2 May 16 16:23:47 13969 sshd[6706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.145.149.82 user=root May 16 16:13:05 13969 sshd[5336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.169.58.163 user=root May 16 16:13:07 13969 sshd[5336]: Failed password for root from 116.169.58.163 port 38698 ssh2 IP Addresses Blocked: 192.169.250.238 (US/United States/238.250.169.192.host.secureserver.net) 201.145.149.82 (MX/Mexico/acceso-201-145-149-82.prod-infinitum.com.mx) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-16 20:15:39 (3 months ago)	116.169.58.163 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Por ... show more 116.169.58.163 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 16 14:42:47 14181 sshd[14673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.169.58.163 user=root May 16 14:42:49 14181 sshd[14673]: Failed password for root from 116.169.58.163 port 57982 ssh2 May 16 15:11:11 14181 sshd[17140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.159.35.21 user=root May 16 15:11:13 14181 sshd[17140]: Failed password for root from 43.159.35.21 port 54286 ssh2 May 16 15:15:34 14181 sshd[17489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.159.35.21 user=root IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-16 19:42:57 (3 months ago)	116.169.58.163 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Por ... show more 116.169.58.163 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 16 14:42:49 14836 sshd[20140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.169.58.163 user=root May 16 14:39:29 14836 sshd[19669]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.205.28 user=root May 16 14:38:08 14836 sshd[19413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.205.28 user=root May 16 14:38:10 14836 sshd[19413]: Failed password for root from 124.156.205.28 port 37584 ssh2 May 16 14:33:09 14836 sshd[18630]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.205.28 user=root May 16 14:33:12 14836 sshd[18630]: Failed password for root from 124.156.205.28 port 57252 ssh2 IP Addresses Blocked: show less	Brute-Force SSH

Showing 1 to 15 of 214 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.187

🇮🇳 180.188.253.150

🇫🇷 146.70.194.246

🇧🇼 41.216.215.145

🇺🇸 162.216.150.189

🇺🇸 162.216.150.148

🇺🇸 91.230.168.240

🇺🇸 91.230.168.182

🇳🇱 91.92.42.7

🇵🇱 34.158.233.78

🇨🇦 20.104.49.130

🇦🇷 186.18.76.99

🇺🇸 172.234.192.12

🇺🇦 37.221.132.96

🇺🇸 20.150.195.233

🇺🇸 2604:a880:400:d1:0:4:e8b9:d001

🇺🇸 216.219.89.86

🇧🇷 205.210.31.176

🇲🇽 189.234.99.150

🇦🇷 181.46.39.117