JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 202.29.221.2

202.29.221.2 was found in our database!

This IP was reported 141 times. Confidence of Abuse is 100%: ?

100%

ISP	Office of Info.Tech. Admin. for Educational Development
Usage Type	Fixed Line ISP
ASN	AS4621
Domain Name	uni.net.th
Country	🇹🇭 Thailand
City	Buri Ram, Buriram

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 202.29.221.2

Whois 202.29.221.2

IP Abuse Reports for 202.29.221.2:

This IP address has been reported a total of 141 times from 102 distinct sources. 202.29.221.2 was first reported on January 11th 2024, and the most recent report was 15 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-12 21:36:48 (15 minutes ago)	2026-06-12T23:25:43.702250+02:00 lXXX.com sshd[932282]: Failed password for root from 202.29.221.2 p ... show more 2026-06-12T23:25:43.702250+02:00 lXXX.com sshd[932282]: Failed password for root from 202.29.221.2 port 56502 ssh2 2026-06-12T23:36:45.864197+02:00 lXXX.com sshd[933236]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.221.2 user=root 2026-06-12T23:36:48.022304+02:00 lXXX.com sshd[933236]: Failed password for root from 202.29.221.2 port 46594 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-06-12 21:25:22 (26 minutes ago)	202.29.221.2 (TH/Thailand/-), 5 distributed sshd attacks on account [deploy] in the last 3600 secs; ... show more 202.29.221.2 (TH/Thailand/-), 5 distributed sshd attacks on account [deploy] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 12 16:24:07 14238 sshd[20956]: Invalid user deploy from 202.29.221.2 port 45256 Jun 12 16:24:10 14238 sshd[20956]: Failed password for invalid user deploy from 202.29.221.2 port 45256 ssh2 Jun 12 16:25:07 14238 sshd[21559]: Invalid user deploy from 83.118.107.37 port 38666 Jun 12 16:24:39 14238 sshd[21147]: Invalid user deploy from 62.146.176.134 port 37610 Jun 12 16:24:41 14238 sshd[21147]: Failed password for invalid user deploy from 62.146.176.134 port 37610 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 wristhulk	2026-06-12 20:48:21 (1 hour ago)	Honeypot: credential attempt on OpenCanary SSH honeypot. Username: 'root' Password: 'markmoran6#'.	SSH Brute-Force
🇺🇸 wristhulk	2026-06-12 20:27:12 (1 hour ago)	Honeypot: credential attempt on OpenCanary SSH honeypot. Username: 'root' Password: 'markmoran2@1'.	SSH Brute-Force
🇺🇸 seraph.ws	2026-06-12 19:46:14 (2 hours ago)	SSH honeypot contact — automated credential stuffing attempt	Brute-Force SSH
🇺🇸 wristhulk	2026-06-12 19:14:52 (2 hours ago)	Honeypot: credential attempt on OpenCanary SSH honeypot. Username: 'root' Password: 'markmoran1234!' ... show more Honeypot: credential attempt on OpenCanary SSH honeypot. Username: 'root' Password: 'markmoran1234!'. show less	SSH Brute-Force
🇺🇸 wristhulk	2026-06-12 18:34:02 (3 hours ago)	Honeypot: credential attempt on OpenCanary SSH honeypot. Username: 'root' Password: 'markmoran2012!' ... show more Honeypot: credential attempt on OpenCanary SSH honeypot. Username: 'root' Password: 'markmoran2012!'. show less	SSH Brute-Force
🇺🇸 wristhulk	2026-06-12 18:18:17 (3 hours ago)	Honeypot: credential attempt on OpenCanary SSH honeypot. Username: 'root' Password: 'markmoran2016#' ... show more Honeypot: credential attempt on OpenCanary SSH honeypot. Username: 'root' Password: 'markmoran2016#'. show less	SSH Brute-Force
🇩🇪 fynndows.de	2026-06-12 17:09:15 (4 hours ago)	2026-06-12T19:09:12.946018+02:00 ryzen-vm-big sshd[1377465]: pam_unix(sshd:auth): authentication fai ... show more 2026-06-12T19:09:12.946018+02:00 ryzen-vm-big sshd[1377465]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.221.2 user=root 2026-06-12T19:09:14.975178+02:00 ryzen-vm-big sshd[1377465]: Failed password for root from 202.29.221.2 port 52140 ssh2 ... show less	Brute-Force SSH
🇫🇮 GG UNLUCKI	2026-06-12 16:11:33 (5 hours ago)	SSH brute-force attempt detected by Fail2Ban. Invalid login attempt against sshd.	Brute-Force SSH
🇺🇸 bigscoots.com	2026-06-12 16:03:44 (5 hours ago)	202.29.221.2 (TH/Thailand/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Po ... show more 202.29.221.2 (TH/Thailand/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 12 16:01:53 22091 sshd[17845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=133.117.72.24 user=root Jun 12 16:01:55 22091 sshd[17845]: Failed password for root from 133.117.72.24 port 46626 ssh2 Jun 12 16:03:26 22091 sshd[18752]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.210.76.170 user=root Jun 12 16:00:53 22091 sshd[17327]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.221.2 user=root Jun 12 16:00:55 22091 sshd[17327]: Failed password for root from 202.29.221.2 port 41030 ssh2 IP Addresses Blocked: 133.117.72.24 (JP/Japan/v133-117-72-24.jwwa.static.cnode.jp) 182.210.76.170 (KR/South Korea/-) show less	Brute-Force SSH
🇳🇱 myip.foo	2026-06-12 14:48:23 (7 hours ago)	[myip.foo] 2026-06-12T14:30:21.883662+00:00 sshd[924127]: Invalid user postgres from 202.29.221.2 po ... show more [myip.foo] 2026-06-12T14:30:21.883662+00:00 sshd[924127]: Invalid user postgres from 202.29.221.2 port 42394 2026-06-12T14:48:21.934743+00:00 sshd[924468]: Invalid user deploy from 202.29.221.2 port 38952 show less	Brute-Force SSH
🇩🇪 LoNET	2026-06-12 14:35:09 (7 hours ago)	Report 2455166 with IP 3502733 for SSH brute-force attack by source 3497391 via ssh-honeypot/0.2.0+h ... show more Report 2455166 with IP 3502733 for SSH brute-force attack by source 3497391 via ssh-honeypot/0.2.0+http show less	Brute-Force SSH
🇫🇮 jonahtebaa	2026-06-12 13:20:03 (8 hours ago)	SSH tarpit (endlessh) capture on jonahtebaa infra	Port Scan Brute-Force SSH
🇮🇹 Inartis	2026-06-12 13:17:37 (8 hours ago)	2026-06-12T15:17:34.494498+02:00 web5 sshd[733759]: pam_unix(sshd:auth): authentication failure; log ... show more 2026-06-12T15:17:34.494498+02:00 web5 sshd[733759]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.221.2 user=root 2026-06-12T15:17:36.568983+02:00 web5 sshd[733759]: Failed password for root from 202.29.221.2 port 33924 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 141 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇹 45.137.172.116

🇰🇷 211.221.158.216

🇫🇷 149.202.79.101

🇮🇳 148.113.3.75

🇮🇳 103.176.160.146

🇮🇩 103.154.77.48

🇫🇷 54.38.241.200

🇷🇴 2.57.122.238

🇷🇴 2.57.121.25

🇺🇸 2602:fb54:1a00::3e

🇰🇷 222.111.148.83

🇺🇸 206.189.236.133

🇧🇷 205.210.31.203

🇧🇷 38.226.106.210

🇪🇹 196.189.116.182

🇮🇳 182.76.66.186

🇺🇸 66.132.186.210

🇫🇷 45.157.112.29

🇩🇪 194.187.176.35

🇲🇰 188.44.20.31