JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

211.161.236.146

Recent Activity

Abuse Confidence Score

100% Critical

103 reports

90 reporters · latest 15 minutes ago

ISP: Shenzhen Yunshang Wuyou Network Technology Co., Ltd
Usage Type: Fixed Line ISP
ASN: AS4816
Domain Name: wuyouyun.com
Country: 🇨🇳 China
City: Shenzhen, Guangdong

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

103 from 90 distinct reporters

First reported

November 9th 2026

Most recent report

15 minutes ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 15 🇩🇪 Germany 13 🇫🇷 France 11

Most common categories Brute-Force 85 SSH 85 Port Scan 14 Hacking 6 Exploited Host 3

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-11-12 22:06:40 UTC · (15 minutes ago)	2026-11-12T19:03:23.805101-03:00 web sshd[2665442]: Disconnected from authenticating user root 211.161.236.146 port 35018 [preauth] 2026-11-12T19:05:25.452130-03:00 web sshd[2665774]: Disconnected from authenticating user root 211.161.236.146 port 37 ... show more 2026-11-12T19:03:23.805101-03:00 web sshd[2665442]: Disconnected from authenticating user root 211.161.236.146 port 35018 [preauth] 2026-11-12T19:05:25.452130-03:00 web sshd[2665774]: Disconnected from authenticating user root 211.161.236.146 port 37636 [preauth] 2026-11-12T19:06:39.057213-03:00 web sshd[2665819]: Disconnected from authenticating user root 211.161.236.146 port 51712 [preauth] ... show less	Brute-Force SSH
🇲🇩 cbz	2026-11-12 21:00:22 UTC · (1 hour ago)	2026-11-12T20:59:36.848984+00:00 md sshd-session[307489]: Failed password for root from 211.161.236.146 port 54890 ssh2 2026-11-12T20:59:55.931044+00:00 md sshd-session[307493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=s ... show more 2026-11-12T20:59:36.848984+00:00 md sshd-session[307489]: Failed password for root from 211.161.236.146 port 54890 ssh2 2026-11-12T20:59:55.931044+00:00 md sshd-session[307493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.161.236.146 user=root 2026-11-12T20:59:57.524614+00:00 md sshd-session[307493]: Failed password for root from 211.161.236.146 port 37820 ssh2 2026-11-12T21:00:19.346961+00:00 md sshd-session[307501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.161.236.146 user=root 2026-11-12T21:00:21.733502+00:00 md sshd-session[307501]: Failed password for root from 211.161.236.146 port 47146 ssh2 ... show less	Brute-Force SSH
🇺🇸 sumnone	2026-11-12 20:23:10 UTC · (1 hour ago)	Port probing on unauthorized port 22	Port Scan Hacking Exploited Host
🇫🇮 Phish.gg	2026-11-12 20:22:34 UTC · (1 hour ago)	Nov 12 20:21:34 obsidian sshd[3454037]: Failed password for root from 211.161.236.146 port 47862 ssh2 Nov 12 20:22:32 obsidian sshd[3455776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.161.236.146 use ... show more Nov 12 20:21:34 obsidian sshd[3454037]: Failed password for root from 211.161.236.146 port 47862 ssh2 Nov 12 20:22:32 obsidian sshd[3455776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.161.236.146 user=root Nov 12 20:22:34 obsidian sshd[3455776]: Failed password for root from 211.161.236.146 port 48978 ssh2 ... show less	Brute-Force SSH
🇨🇭 EndCore Group	2026-11-12 20:07:35 UTC · (2 hours ago)	2026-11-12T20:03:30.829295ch-vmpico sshd[77721]: Failed password for root from 211.161.236.146 port 50980 ssh2 2026-11-12T20:07:12.608913ch-vmpico sshd[77732]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=21 ... show more 2026-11-12T20:03:30.829295ch-vmpico sshd[77721]: Failed password for root from 211.161.236.146 port 50980 ssh2 2026-11-12T20:07:12.608913ch-vmpico sshd[77732]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.161.236.146 user=root 2026-11-12T20:07:15.078114ch-vmpico sshd[77732]: Failed password for root from 211.161.236.146 port 37036 ssh2 ... show less	Brute-Force SSH
🇵🇱 EndCore Group	2026-11-12 19:46:16 UTC · (2 hours ago)	2026-11-12T19:43:54.998336polandend.hostes.io sshd[20450]: Failed password for root from 211.161.236.146 port 36970 ssh2 2026-11-12T19:46:14.569146polandend.hostes.io sshd[20463]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty ... show more 2026-11-12T19:43:54.998336polandend.hostes.io sshd[20450]: Failed password for root from 211.161.236.146 port 36970 ssh2 2026-11-12T19:46:14.569146polandend.hostes.io sshd[20463]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.161.236.146 user=root 2026-11-12T19:46:16.332790polandend.hostes.io sshd[20463]: Failed password for root from 211.161.236.146 port 57150 ssh2 ... show less	Brute-Force SSH
🇸🇪 NordhTech	2026-11-12 19:00:09 UTC · (3 hours ago)	Multiple malicious connection attempts detected, trying port(s) 22/tcp, then blocked by firewall.	Port Scan Hacking
🇺🇸 hl.admin	2026-11-12 17:55:41 UTC · (4 hours ago)	Fail2ban automatic: sshd, 2 attempts in 24h, Likely: Bruteforce, Logs: 2026-11-12T17:50:04.163101+00:00 HephaestusLabs sshd[1004478]: Failed password for root from 211.161.236.146 port 37856 ssh2 2026-11-12T17:55:41.003110+00:00 HephaestusLabs sshd[1 ... show more Fail2ban automatic: sshd, 2 attempts in 24h, Likely: Bruteforce, Logs: 2026-11-12T17:50:04.163101+00:00 HephaestusLabs sshd[1004478]: Failed password for root from 211.161.236.146 port 37856 ssh2 2026-11-12T17:55:41.003110+00:00 HephaestusLabs sshd[1004572]: Invalid user ubuntu from 211.161.236.146 port 50508 ... show less	Brute-Force SSH
🇦🇹 Filli Group	2026-11-12 17:36:29 UTC · (4 hours ago)	2026-11-12T18:31:03.877550+01:00 monitoring.infra.crazycraftland.net sshd-session[267410]: Invalid user student2 from 211.161.236.146 port 41716 2026-11-12T18:35:54.414324+01:00 monitoring.infra.crazycraftland.net sshd-session[268466]: User root from ... show more 2026-11-12T18:31:03.877550+01:00 monitoring.infra.crazycraftland.net sshd-session[267410]: Invalid user student2 from 211.161.236.146 port 41716 2026-11-12T18:35:54.414324+01:00 monitoring.infra.crazycraftland.net sshd-session[268466]: User root from 211.161.236.146 not allowed because not listed in AllowUsers 2026-11-12T18:36:29.086784+01:00 monitoring.infra.crazycraftland.net sshd-session[268560]: User root from 211.161.236.146 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇧🇾 lns.bz	2026-11-12 17:28:49 UTC · (4 hours ago)	SSH bruteforce [BY]	SSH
🇧🇷 radardatelecom	2026-11-12 16:55:04 UTC · (5 hours ago)	Blocked by Radar da Telecom firewall — abuseipdb	Bad Web Bot Web App Attack
🇮🇳 sh97	2026-11-12 15:41:42 UTC · (6 hours ago)	IN04-DRDP-RYZ-STOR: Blocked by Fail2Ban for SSH Brute Force from 211.161.236.146 at 2026-11-12 10:41:41 EST	Brute-Force SSH
🇩🇪 marten_o	2026-11-12 14:18:19 UTC · (8 hours ago)	2026-11-12T15:18:15.534897+01:00 serv1.blumental-server.de sshd-session[3440532]: Invalid user git from 211.161.236.146 port 34734 2026-11-12T15:18:15.539880+01:00 serv1.blumental-server.de sshd-session[3440532]: pam_unix(sshd:auth): authentication f ... show more 2026-11-12T15:18:15.534897+01:00 serv1.blumental-server.de sshd-session[3440532]: Invalid user git from 211.161.236.146 port 34734 2026-11-12T15:18:15.539880+01:00 serv1.blumental-server.de sshd-session[3440532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.161.236.146 2026-11-12T15:18:18.295534+01:00 serv1.blumental-server.de sshd-session[3440532]: Failed password for invalid user git from 211.161.236.146 port 34734 ssh2 ... show less	Brute-Force SSH
🇹🇷 Threat.live	2026-11-12 12:35:02 UTC · (9 hours ago)	SSH Brute Force Attempt	Brute-Force
🇨🇦 senkodev	2026-11-12 11:44:31 UTC · (10 hours ago)	2026-11-12T11:44:27.774733Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 211.161.236.146:53298 (158.69.22.11:2222) [session: fc58f50e1cde] 2026-11-12T11:44:31.463322Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 211.161.236.146:5482 ... show more 2026-11-12T11:44:27.774733Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 211.161.236.146:53298 (158.69.22.11:2222) [session: fc58f50e1cde] 2026-11-12T11:44:31.463322Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 211.161.236.146:54828 (158.69.22.11:2222) [session: 3b55e0dd2a96] ... show less	Brute-Force SSH

Showing 1 to 15 of 103 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 193.47.62.69

🇨🇳 117.71.54.107

🇸🇬 103.253.147.5

🇷🇺 91.144.158.62

🇹🇼 198.235.24.67

🇳🇱 195.178.110.147

🇧🇷 186.65.107.234

🇫🇷 85.217.140.38

🇧🇬 79.124.58.250

🇨🇳 58.242.117.176

🇯🇵 34.97.57.5

🇨🇳 218.90.139.10

🇸🇪 193.189.100.206

🇺🇸 162.216.149.55

🇺🇸 136.79.213.74

🇷🇺 94.188.96.177

🇵🇭 49.149.198.35

🇳🇱 193.47.62.111

🇷🇺 178.176.74.227

🇩🇪 142.132.253.177