JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 202.29.220.130

202.29.220.130 was found in our database!

This IP was reported 148 times. Confidence of Abuse is 100%: ?

100%

ISP	Office of Info.Tech. Admin. for Educational Development
Usage Type	Fixed Line ISP
ASN	AS4621
Domain Name	uni.net.th
Country	🇹🇭 Thailand
City	Bang Khla, Chachoengsao

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 202.29.220.130

Whois 202.29.220.130

IP Abuse Reports for 202.29.220.130:

This IP address has been reported a total of 148 times from 85 distinct sources. 202.29.220.130 was first reported on June 5th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 jonahtebaa	2026-06-15 07:00:09 (1 hour ago)	SSH tarpit (endlessh) capture on jonahtebaa infra	Port Scan Brute-Force SSH
🇩🇪 moretrix	2026-06-15 05:29:27 (2 hours ago)	2026-06-15T06:51:24.402544+02:00 ieyasu.moretrix.com sshd-session[1143870]: User root from 202.29.22 ... show more 2026-06-15T06:51:24.402544+02:00 ieyasu.moretrix.com sshd-session[1143870]: User root from 202.29.220.130 not allowed because none of user's groups are listed in AllowGroups 2026-06-15T07:29:25.918354+02:00 ieyasu.moretrix.com sshd-session[1146471]: Connection from 202.29.220.130 port 45762 on 176.9.64.17 port 22 rdomain "" 2026-06-15T07:29:26.518692+02:00 ieyasu.moretrix.com sshd-session[1146471]: User root from 202.29.220.130 not allowed because none of user's groups are listed in AllowGroups ... show less	Brute-Force SSH
🇩🇪 DocNetzwerk	2026-06-15 05:27:06 (2 hours ago)	202.29.220.130 (TH/Thailand/-), 3 distributed sshd attacks on account [redacted]	Brute-Force SSH
🇺🇸 bigscoots.com	2026-06-15 05:17:46 (2 hours ago)	202.29.220.130 (TH/Thailand/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; ... show more 202.29.220.130 (TH/Thailand/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 15 00:17:24 14214 sshd[27854]: Failed password for root from 202.29.220.130 port 37836 ssh2 Jun 15 00:17:22 14214 sshd[27854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.220.130 user=root Jun 15 00:08:03 14214 sshd[22953]: Failed password for root from 115.190.113.93 port 22784 ssh2 Jun 15 00:15:52 14214 sshd[27002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.248.248.2 user=root Jun 15 00:15:54 14214 sshd[27002]: Failed password for root from 103.248.248.2 port 39598 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇫🇷 bulletz	2026-06-15 04:28:03 (3 hours ago)	2026-06-15T06:08:31.998419+02:00 vps sshd[20605]: Failed password for root from 202.29.220.130 port ... show more 2026-06-15T06:08:31.998419+02:00 vps sshd[20605]: Failed password for root from 202.29.220.130 port 40082 ssh2 2026-06-15T06:28:00.688931+02:00 vps sshd[23731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.220.130 user=root 2026-06-15T06:28:03.059208+02:00 vps sshd[23731]: Failed password for root from 202.29.220.130 port 34448 ssh2 ... show less	Brute-Force SSH
🇩🇪 NetShield-DE	2026-06-15 04:07:44 (3 hours ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-15T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-15T06:07:02+0200. Last: 2026-06-15T06:07:02+0200. Samples: - 2026-06-14 05:34:27,246 fail2ban.actions [3599610]: NOTICE [abuseipdb] Ban 202.29.220.130 show less	Web App Attack
🇺🇸 bigscoots.com	2026-06-15 03:30:34 (4 hours ago)	202.29.220.130 (TH/Thailand/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; ... show more 202.29.220.130 (TH/Thailand/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 14 22:30:24 15442 sshd[24047]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.123.141.251 user=root Jun 14 22:29:54 15442 sshd[23677]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.220.130 user=root Jun 14 22:29:56 15442 sshd[23677]: Failed password for root from 202.29.220.130 port 55094 ssh2 Jun 14 22:28:58 15442 sshd[23184]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.89.209 user=root Jun 14 22:29:00 15442 sshd[23184]: Failed password for root from 174.138.89.209 port 33790 ssh2 IP Addresses Blocked: 121.123.141.251 (MY/Malaysia/-) show less	Brute-Force SSH
🇩🇪 Bigbear3	2026-06-14 23:10:15 (8 hours ago)	Report-by-bigbear3	Brute-Force SSH
🇩🇪 NetShield-DE	2026-06-14 23:07:42 (8 hours ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-15T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-15T01:07:01+0200. Last: 2026-06-15T01:07:01+0200. Samples: - 2026-06-14 05:34:27,246 fail2ban.actions [3599610]: NOTICE [abuseipdb] Ban 202.29.220.130 show less	Web App Attack
🇩🇪 flixie	2026-06-14 22:10:45 (9 hours ago)	2026-06-14T23:16:40.910007 ***** sshd[577187]: Invalid user deploy from 202.29.220.130 port 52742 ... show more 2026-06-14T23:16:40.910007 *** sshd[577187]: Invalid user deploy from 202.29.220.130 port 52742 2026-06-14T23:16:41.098234 *** sshd[577187]: Connection closed by invalid user deploy 202.29.220.130 port 52742 [preauth] 2026-06-15T00:10:44.769568 ***** sshd[596049]: Connection closed by authenticating user root 202.29.220.130 port 60000 [preauth] show less	Brute-Force SSH
🇬🇧 aug42	2026-06-14 20:06:42 (11 hours ago)	2026-06-14T23:06:40.970166+03:00 nexus6 sshd[1464675]: pam_unix(sshd:auth): authentication failure; ... show more 2026-06-14T23:06:40.970166+03:00 nexus6 sshd[1464675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.220.130 user=root 2026-06-14T23:06:42.215079+03:00 nexus6 sshd[1464675]: Failed password for root from 202.29.220.130 port 49996 ssh2 ... show less	Brute-Force SSH
🇧🇷 modscleo4	2026-06-14 19:56:14 (12 hours ago)	2026-06-14T16:56:13.981182-03:00 salada-de-fruta sshd[3105325]: Connection closed by authenticating ... show more 2026-06-14T16:56:13.981182-03:00 salada-de-fruta sshd[3105325]: Connection closed by authenticating user root 202.29.220.130 port 46024 [preauth] ... show less	Port Scan Brute-Force SSH
🇮🇹 NukeDuke	2026-06-14 19:36:30 (12 hours ago)	202.29.220.130 abuse ...	SSH Brute-Force
🇩🇪 NetShield-DE	2026-06-14 19:07:44 (12 hours ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-14T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-14T21:07:02+0200. Last: 2026-06-14T21:07:02+0200. Samples: - 2026-06-14 05:34:27,246 fail2ban.actions [3599610]: NOTICE [abuseipdb] Ban 202.29.220.130 show less	Web App Attack
🇺🇸 bigscoots.com	2026-06-14 19:06:18 (12 hours ago)	202.29.220.130 (TH/Thailand/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; ... show more 202.29.220.130 (TH/Thailand/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 14 13:43:32 14279 sshd[26614]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.75.182.132 user=root Jun 14 13:43:35 14279 sshd[26614]: Failed password for root from 103.75.182.132 port 39478 ssh2 Jun 14 14:05:59 14279 sshd[7463]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.220.130 user=root Jun 14 14:06:01 14279 sshd[7463]: Failed password for root from 202.29.220.130 port 56040 ssh2 Jun 14 13:45:39 14279 sshd[27857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.75.182.132 user=root IP Addresses Blocked: 103.75.182.132 (VN/Vietnam/-) show less	Brute-Force SSH

Showing 1 to 15 of 148 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 104.200.76.86

🇺🇸 2604:a880:400:d1:0:4:9624:c001

🇷🇺 195.128.96.81

🇨🇱 190.5.37.49

🇧🇷 177.131.132.211

🇳🇱 176.65.139.254

🇮🇳 152.52.165.34

🇸🇦 144.86.37.3

🇺🇸 128.1.172.209

🇮🇩 103.98.176.164

🇬🇧 80.7.68.237

🇺🇸 50.80.184.78

🇺🇸 35.225.198.41

🇧🇪 34.156.223.154

🇧🇪 34.52.236.5

🇹🇼 202.39.153.245

🇳🇱 195.178.110.30

🇨🇴 190.251.16.18

🇻🇳 123.58.198.35

🇰🇷 121.1.81.95