This IP address has been reported a total of
819
times from
369 distinct
sources.
161.129.211.56 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-07T17:23:58.000522+00:00 expanse-johor-game-node sshd[2216569]: Invalid user user from 161.1 ...
show more2026-06-07T17:23:58.000522+00:00 expanse-johor-game-node sshd[2216569]: Invalid user user from 161.129.211.56 port 42250
2026-06-07T17:23:59.310367+00:00 expanse-johor-game-node sshd[2217449]: Invalid user user from 161.129.211.56 port 42266
2026-06-07T17:24:00.634800+00:00 expanse-johor-game-node sshd[2217564]: Invalid user user from 161.129.211.56 port 42276
2026-06-07T17:24:01.952543+00:00 expanse-johor-game-node sshd[2217732]: Invalid user user from 161.129.211.56 port 42290
2026-06-07T17:24:03.266618+00:00 expanse-johor-game-node sshd[2219497]: Invalid user user from 161.129.211.56 port 42294
...
show less
2026-06-07T06:54:23.625569+02:00 proxmox sshd[3704673]: Failed password for root from 161.129.211.56 ...
show more2026-06-07T06:54:23.625569+02:00 proxmox sshd[3704673]: Failed password for root from 161.129.211.56 port 52032 ssh2
2026-06-07T06:54:24.600946+02:00 proxmox sshd[3704731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.129.211.56 user=root
2026-06-07T06:54:26.703194+02:00 proxmox sshd[3704731]: Failed password for root from 161.129.211.56 port 52046 ssh2
...
show less
Jun 7 03:55:57 agera sshd[523735]: Failed password for root from 161.129.211.56 port 54530 ssh2
Jun ...
show moreJun 7 03:55:57 agera sshd[523735]: Failed password for root from 161.129.211.56 port 54530 ssh2
Jun 7 03:55:59 agera sshd[523737]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.129.211.56 user=root
Jun 7 03:56:01 agera sshd[523737]: Failed password for root from 161.129.211.56 port 36820 ssh2
...
show less
2026-06-07T03:32:28.331096+02:00 rt-cs-123456.rt.pbx-host.com sshd-session[1652932]: Connection clos ...
show more2026-06-07T03:32:28.331096+02:00 rt-cs-123456.rt.pbx-host.com sshd-session[1652932]: Connection closed by authenticating user root 161.129.211.56 port 37194 [preauth]
2026-06-07T03:32:29.040180+02:00 rt-cs-123456.rt.pbx-host.com sshd-session[1652937]: Connection closed by authenticating user root 161.129.211.56 port 37208 [preauth]
2026-06-07T03:32:29.741038+02:00 rt-cs-123456.rt.pbx-host.com sshd-session[1652941]: Connection closed by authenticating user root 161.129.211.56 port 37210 [preauth]
2026-06-07T03:32:30.428777+02:00 rt-cs-123456.rt.pbx-host.com sshd-session[1652943]: Connection closed by authenticating user root 161.129.211.56 port 37224 [preauth]
2026-06-07T03:32:32.129205+02:00 rt-cs-123456.rt.pbx-host.com sshd-session[1652954]: Connection closed by authenticating user root 161.129.211.56 port 37228 [preauth]
show less
2026-06-06T18:54:46.520812+00:00 edge-eqx-iad03.int.pdx.net.uk sshd[918951]: Failed password for roo ...
show more2026-06-06T18:54:46.520812+00:00 edge-eqx-iad03.int.pdx.net.uk sshd[918951]: Failed password for root from 161.129.211.56 port 57272 ssh2
2026-06-06T18:54:49.538904+00:00 edge-eqx-iad03.int.pdx.net.uk sshd[918976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.129.211.56 user=root
2026-06-06T18:54:51.430396+00:00 edge-eqx-iad03.int.pdx.net.uk sshd[918976]: Failed password for root from 161.129.211.56 port 33182 ssh2
...
show less
Brute-Force
SSH
Anonymous
$f2bV_matches
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: root, Pass: [REDACTED]
2026-06-05T14:24:16.548188+00:00 ktj-nc sshd[222884]: Connection closed by authenticating user root ...
show more2026-06-05T14:24:16.548188+00:00 ktj-nc sshd[222884]: Connection closed by authenticating user root 161.129.211.56 port 48426 [preauth]
2026-06-05T14:24:17.779419+00:00 ktj-nc sshd[222886]: Connection closed by authenticating user root 161.129.211.56 port 56676 [preauth]
...
show less
2026-06-05T12:38:23.520295+00:00 do sshd[656415]: Invalid user user from 161.129.211.56 port 57136
2 ...
show more2026-06-05T12:38:23.520295+00:00 do sshd[656415]: Invalid user user from 161.129.211.56 port 57136
2026-06-05T12:38:23.712926+00:00 do sshd[656420]: Connection from 161.129.211.56 port 57150 on 178.62.4.87 port 22 rdomain ""
2026-06-05T12:38:24.064241+00:00 do sshd[656420]: Invalid user user from 161.129.211.56 port 57150
2026-06-05T12:38:24.259087+00:00 do sshd[656422]: Connection from 161.129.211.56 port 57160 on 178.62.4.87 port 22 rdomain ""
2026-06-05T12:38:24.640885+00:00 do sshd[656422]: Invalid user user from 161.129.211.56 port 57160
...
show less
2026-06-05T08:41:23.728473+02:00 vmi768479 sshd[371955]: Connection closed by authenticating user ro ...
show more2026-06-05T08:41:23.728473+02:00 vmi768479 sshd[371955]: Connection closed by authenticating user root 161.129.211.56 port 36202 [preauth]
2026-06-05T08:41:24.332046+02:00 vmi768479 sshd[371957]: Connection closed by authenticating user root 161.129.211.56 port 36218 [preauth]
2026-06-05T08:41:24.958109+02:00 vmi768479 sshd[371959]: Connection closed by authenticating user root 161.129.211.56 port 36226 [preauth]
...
show less
Brute-Force
SSH
Showing 1 to
15
of 819 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩