This IP address has been reported a total of
15
times from
14 distinct
sources.
211.206.29.216 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(sshd) Failed SSH login from 211.206.29.216 (KR/South Korea/-): 5 in the last 3600 secs; Ports: *; D ...
show more(sshd) Failed SSH login from 211.206.29.216 (KR/South Korea/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 7 17:02:41 arachne sshd[30451]: Did not receive identification string from 211.206.29.216 port 53162
Jul 7 17:02:41 arachne sshd[30452]: Did not receive identification string from 211.206.29.216 port 53164
Jul 7 17:02:41 arachne sshd[30455]: Did not receive identification string from 211.206.29.216 port 53158
Jul 7 17:02:41 arachne sshd[30454]: Did not receive identification string from 211.206.29.216 port 53156
Jul 7 17:02:41 arachne sshd[30453]: Did not receive identification string from 211.206.29.216 port 53166
show less
UFW BLOCK Report:
Total attempts: 8
Top ports and details:
- Port 22 (8x): SSH Brute-Force (e. ...
show moreUFW BLOCK Report:
Total attempts: 8
Top ports and details:
- Port 22 (8x): SSH Brute-Force (e.g., CVE-2024-6387 regreSSHion, botnets like Mirai, Mozi)
Source IP: 211.206.29.216
| this report is autogenerated by ZIME Cloud
show less
Jul 7 11:35:15 wp sshd[2968674]: Invalid user ubuntu from 211.206.29.216 port 54162
Jul 7 11:35:15 ...
show moreJul 7 11:35:15 wp sshd[2968674]: Invalid user ubuntu from 211.206.29.216 port 54162
Jul 7 11:35:15 wp sshd[2968676]: Invalid user ubuntu from 211.206.29.216 port 54164
Jul 7 11:35:15 wp sshd[2968675]: Invalid user ubuntu from 211.206.29.216 port 54160
...
show less
2026-07-07 16:26:28 connection from 211.206.29.216
2026-07-07 16:26:28 connection from 211.206.29.21 ...
show more2026-07-07 16:26:28 connection from 211.206.29.216
2026-07-07 16:26:28 connection from 211.206.29.216
2026-07-07 16:26:28 connection from 211.206.29.216
2026-07-07 16:26:28 connection from 211.206.29.216
2026-07-07 16:26:28 connection from 211.206.29.216
...
show less
Brute-Force
Port Scan
SSH
Anonymous
2026-07-08T00:11:18.852270+08:00 kltw-debian sshd[199265]: Connection closed by 211.206.29.216 port ...
show more2026-07-08T00:11:18.852270+08:00 kltw-debian sshd[199265]: Connection closed by 211.206.29.216 port 50304
2026-07-08T00:11:18.854338+08:00 kltw-debian sshd[199261]: error: kex_exchange_identification: Connection closed by remote host
2026-07-08T00:11:18.854889+08:00 kltw-debian sshd[199261]: Connection closed by 211.206.29.216 port 50296
2026-07-08T00:11:18.855264+08:00 kltw-debian sshd[199260]: error: kex_exchange_identification: Connection closed by remote host
2026-07-08T00:11:18.855309+08:00 kltw-debian sshd[199260]: Connection closed by 211.206.29.216 port 50306
...
show less
2026-07-07T12:03:08.919186 rhel-20gb-ash-1 sshd[3019905]: error: kex_exchange_identification: Connec ...
show more2026-07-07T12:03:08.919186 rhel-20gb-ash-1 sshd[3019905]: error: kex_exchange_identification: Connection closed by remote host
2026-07-07T12:03:08.923840 rhel-20gb-ash-1 sshd[3019905]: Connection closed by 211.206.29.216 port 38634
...
show less
(sshd) Failed SSH login from 211.206.29.216 (KR/South Korea/-): 5 in the last 3600 secs; Ports: *; D ...
show more(sshd) Failed SSH login from 211.206.29.216 (KR/South Korea/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 7 15:53:32 instance-20200224-1146 sshd[28666]: Did not receive identification string from 211.206.29.216 port 34642
Jul 7 15:53:32 instance-20200224-1146 sshd[28667]: Did not receive identification string from 211.206.29.216 port 34638
Jul 7 15:53:32 instance-20200224-1146 sshd[28670]: Did not receive identification string from 211.206.29.216 port 34630
Jul 7 15:53:32 instance-20200224-1146 sshd[28668]: Did not receive identification string from 211.206.29.216 port 34626
Jul 7 15:53:32 instance-20200224-1146 sshd[28669]: Did not receive identification string from 211.206.29.216 port 34636
show less
2026-07-07T15:30:40.315997+00:00 pl-waw01 sshd-session[3837825]: Failed keyboard-interactive/pam for ...
show more2026-07-07T15:30:40.315997+00:00 pl-waw01 sshd-session[3837825]: Failed keyboard-interactive/pam for root from 211.206.29.216 port 40642 ssh2
2026-07-07T15:30:38.118976+00:00 pl-waw01 sshd-session[3837826]: Connection from 211.206.29.216 port 40640 on 109.122.28.203 port 22 rdomain ""
2026-07-07T15:30:40.336703+00:00 pl-waw01 sshd-session[3837826]: error: PAM: Authentication failure for root from 211.206.29.216
...
show less
Brute-Force
SSH
Showing 1 to
15
of 15 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩