JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 171.221.163.138

171.221.163.138 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 100%: ?

100%

ISP	CHINANET Sichuan province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	sctel.com.cn
Country	🇨🇳 China
City	Chengdu, Sichuan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 171.221.163.138

Whois 171.221.163.138

IP Abuse Reports for 171.221.163.138:

This IP address has been reported a total of 35 times from 31 distinct sources. 171.221.163.138 was first reported on September 13th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 SentinalX by uzumaru	2026-09-15 07:21:28 (4 days ago)	SSH brute-force detected: 12 failed login attempts in the last 1 hour.	Brute-Force SSH
🇫🇮 pr0vieh	2026-09-15 06:17:40 (4 days ago)	2026-09-15T08:15:18.212081+02:00 Linux10 sshd-session[3750967]: pam_unix(sshd:auth): authentication ... show more 2026-09-15T08:15:18.212081+02:00 Linux10 sshd-session[3750967]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.221.163.138 user=root 2026-09-15T08:15:19.744246+02:00 Linux10 sshd-session[3750967]: Failed password for root from 171.221.163.138 port 13726 ssh2 2026-09-15T08:15:22.494773+02:00 Linux10 sshd-session[3751114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.221.163.138 user=root 2026-09-15T08:15:24.677246+02:00 Linux10 sshd-session[3751114]: Failed password for root from 171.221.163.138 port 13727 ssh2 2026-09-15T08:15:27.641015+02:00 Linux10 sshd-session[3751354]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.221.163.138 user=root 2026-09-15T08:15:29.612242+02:00 Linux10 sshd-session[3751354]: Failed password for root from 171.221.163.138 port 13728 ssh2 2026-09-15T08:15:31.945568+02:00 Linux10 sshd-session[3751690]: pam_unix(sshd:auth): ... show less	Brute-Force SSH
🇮🇳 evicky2002	2026-09-15 06:00:01 (5 days ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇩🇪 SentinalX by uzumaru	2026-09-15 05:21:29 (5 days ago)	SSH brute-force detected: 181 failed login attempts in the last 1 hour.	Brute-Force SSH
🇳🇱 EGP Abuse Dept	2026-09-15 04:06:06 (5 days ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
🇵🇱 webadmin	2026-09-15 00:47:18 (5 days ago)	Failed password for root from 171.221.163.138 port 13736 ssh2 Connection closed by authenticating us ... show more Failed password for root from 171.221.163.138 port 13736 ssh2 Connection closed by authenticating user root 171.221.163.138 port 13736 [preauth] Failed password for root from 171.221.163.138 port 13738 ssh2 show less	SSH
🇩🇪 ghostwarriors	2026-09-14 23:50:20 (5 days ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇩🇪 Kotiacat_one	2026-09-14 16:02:45 (5 days ago)	2026-09-14T19:02:44.492594+03:00 kotiacat.nexus sshd-session[6132]: Invalid user user from 171.221.1 ... show more 2026-09-14T19:02:44.492594+03:00 kotiacat.nexus sshd-session[6132]: Invalid user user from 171.221.163.138 port 12715 ... show less	Brute-Force SSH
Anonymous	2026-09-14 15:55:46 (5 days ago)	2026-09-14T15:54:01.474827+00:00 NexNode sshd[2887963]: Invalid user user from 171.221.163.138 port ... show more 2026-09-14T15:54:01.474827+00:00 NexNode sshd[2887963]: Invalid user user from 171.221.163.138 port 12707 2026-09-14T15:55:04.502238+00:00 NexNode sshd[2888712]: Invalid user user from 171.221.163.138 port 12710 2026-09-14T15:55:06.580426+00:00 NexNode sshd[2888721]: Invalid user user from 171.221.163.138 port 12711 2026-09-14T15:55:08.798049+00:00 NexNode sshd[2888790]: Invalid user user from 171.221.163.138 port 12712 2026-09-14T15:55:45.351495+00:00 NexNode sshd[2889847]: Invalid user user from 171.221.163.138 port 12714 ... show less	Brute-Force SSH
🇮🇹 alph44	2026-09-14 14:09:45 (5 days ago)	SSH brute force attack detected: 5 failed attempts	Brute-Force
🇹🇷 Threat.live	2026-09-14 13:25:03 (5 days ago)	Suspicious Connection Attempts	Brute-Force
🇩🇪 kev-ac	2026-09-14 12:18:09 (5 days ago)	Automated SSH brute-force activity detected and blocked by Fail2Ban	Brute-Force SSH
🇻🇳 edata-vn	2026-09-14 11:39:03 (5 days ago)	2026-09-14T18:27:37.656051+07:00 euxcvn124025 sshd[3708503]: Invalid user user from 171.221.163.138 ... show more 2026-09-14T18:27:37.656051+07:00 euxcvn124025 sshd[3708503]: Invalid user user from 171.221.163.138 port 12717 2026-09-14T18:34:18.711690+07:00 euxcvn124025 sshd[3708557]: Invalid user user from 171.221.163.138 port 12720 2026-09-14T18:38:55.489462+07:00 euxcvn124025 sshd[3708597]: Invalid user user from 171.221.163.138 port 12724 2026-09-14T18:38:58.808689+07:00 euxcvn124025 sshd[3708603]: Invalid user user from 171.221.163.138 port 12725 2026-09-14T18:39:02.917229+07:00 euxcvn124025 sshd[3708605]: Invalid user user from 171.221.163.138 port 12726 ... show less	Brute-Force SSH
🇫🇷 Ariane Blow	2026-09-14 11:20:16 (5 days ago)	2026-09-14T13:20:14.031553+02:00 ariane-Precision-Tower-5810 sshd[114773]: pam_unix(sshd:auth): auth ... show more 2026-09-14T13:20:14.031553+02:00 ariane-Precision-Tower-5810 sshd[114773]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.221.163.138 user=root 2026-09-14T13:20:15.866120+02:00 ariane-Precision-Tower-5810 sshd[114773]: Failed password for root from 171.221.163.138 port 13709 ssh2 ... show less	Brute-Force SSH
🇺🇦 Luk	2026-09-14 11:12:37 (5 days ago)	Sep 14 14:12:28 box sshd-session[29263]: Connection closed by authenticating user root 171.221.163.1 ... show more Sep 14 14:12:28 box sshd-session[29263]: Connection closed by authenticating user root 171.221.163.138 port 13712 [preauth] Sep 14 14:12:29 box sshd-session[29265]: Connection closed by authenticating user root 171.221.163.138 port 13713 [preauth] Sep 14 14:12:31 box sshd-session[29267]: Connection closed by authenticating user root 171.221.163.138 port 13714 [preauth] Sep 14 14:12:33 box sshd-session[29269]: Connection closed by authenticating user root 171.221.163.138 port 13715 [preauth] Sep 14 14:12:35 box sshd-session[29271]: Connection closed by authenticating user root 171.221.163.138 port 13716 [preauth] ... show less	Brute-Force SSH

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.199.120.244

🇹🇼 198.235.24.127

🇲🇽 189.133.145.164

🇺🇸 185.180.141.112

🇨🇳 118.145.118.102

🇺🇸 118.26.109.224

🇧🇩 103.164.255.90

🇮🇷 84.47.253.162

🇨🇴 38.210.108.254

🇰🇷 8.220.209.206

🇦🇪 217.165.62.116

🇰🇷 211.46.188.16

🇫🇷 176.31.21.38

🇧🇩 103.60.175.199

🇩🇪 91.40.147.72

🇺🇸 35.88.240.242

🇧🇪 34.78.19.174

🇺🇸 209.38.71.45

🇧🇷 177.10.203.106

🇺🇸 159.223.115.67