AbuseIPDB » 219.152.92.161

219.152.92.161 was found in our database!

This IP was reported 338 times. Confidence of Abuse is 100%: ?

100%

ISP	CHINANET Chongqing province network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS4134
Domain Name	cta.cq.cn
Country	China
City	Chongqing, Chongqing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 219.152.92.161

Whois 219.152.92.161

IP Abuse Reports for 219.152.92.161:

This IP address has been reported a total of 338 times from 169 distinct sources. 219.152.92.161 was first reported on April 26th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
rtbh.com.tr	2025-06-22 20:07:18 (1 hour ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2025-06-21 20:07:16 (1 day ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2025-06-20 20:07:16 (2 days ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
ghostwarriors	2025-06-20 14:20:18 (2 days ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
NetWatch	2025-06-20 07:52:49 (2 days ago)	The IP 219.152.92.161 tried multiple SSH logins	Brute-Force SSH
senkodigital	2025-06-20 07:21:58 (2 days ago)	2025-06-20T07:21:57.798453Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 219.152.92.161:416 ... show more2025-06-20T07:21:57.798453Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 219.152.92.161:41600 (158.69.22.11:2222) [session: 9278e7c7f4ff] 2025-06-20T07:21:58.383305Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 219.152.92.161:41890 (158.69.22.11:2222) [session: 1f0cccdf2be8] ... show less	Brute-Force SSH
ivotonev	2025-06-20 04:02:20 (2 days ago)	SSH login bruteforce	Brute-Force SSH
rtbh.com.tr	2025-06-19 20:07:15 (3 days ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
zwh	2025-06-19 17:50:41 (3 days ago)	SSH Brute-Force	Brute-Force SSH
FunyMails	2025-06-19 11:59:39 (3 days ago)	Jun 19 11:59:34 localhost sshd[2950941]: Connection closed by authenticating user root 219.152.92.16 ... show moreJun 19 11:59:34 localhost sshd[2950941]: Connection closed by authenticating user root 219.152.92.161 port 39214 [preauth] Jun 19 11:59:36 localhost sshd[2950943]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.152.92.161 user=root Jun 19 11:59:38 localhost sshd[2950943]: Failed password for root from 219.152.92.161 port 43286 ssh2 ... show less	Brute-Force SSH
Giacomo Mondino	2025-06-19 08:02:31 (3 days ago)	Jun 19 08:02:26 server sshd[699352]: Failed password for root from 219.152.92.161 port 37052 ssh2<br ... show moreJun 19 08:02:26 server sshd[699352]: Failed password for root from 219.152.92.161 port 37052 ssh2 Jun 19 08:02:30 server sshd[699355]: Failed password for root from 219.152.92.161 port 38772 ssh2 ... show less	Brute-Force SSH
arch3rek	2025-06-19 03:13:23 (3 days ago)	2025-06-19T04:13:22.391115+01:00 Node4-XEON sshd[2444361]: error: kex_exchange_identification: Conne ... show more2025-06-19T04:13:22.391115+01:00 Node4-XEON sshd[2444361]: error: kex_exchange_identification: Connection closed by remote host 2025-06-19T04:13:22.391154+01:00 Node4-XEON sshd[2444361]: Connection closed by 219.152.92.161 port 49000 ... show less	Brute-Force SSH
amit177	2025-06-19 02:53:24 (3 days ago)		Brute-Force SSH
ThreatBook.io	2025-06-19 00:54:08 (3 days ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/219.152.92.161	SSH
sid3windr	2025-06-19 00:01:29 (3 days ago)	SSH port scan (Tarpitted for 20s, wasted 8B)	Port Scan SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩