JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 220.161.160.152

220.161.160.152 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 39%: ?

39%

ISP	CHINANET Fujian province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Fuzhou, Fujian

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 220.161.160.152

Whois 220.161.160.152

IP Abuse Reports for 220.161.160.152:

This IP address has been reported a total of 18 times from 16 distinct sources. 220.161.160.152 was first reported on May 26th 2022, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 AetherFox	2026-10-26 20:59:47 (11 hours ago)	AetherFox VoidGuard detected: 2026-10-26T20:58:46.456027+00:00 AetherFox-gate-01 sshd[704370]: Faile ... show more AetherFox VoidGuard detected: 2026-10-26T20:58:46.456027+00:00 AetherFox-gate-01 sshd[704370]: Failed password for root from 220.161.160.152 port 58538 ssh2 2026-10-26T20:59:15.435184+00:00 AetherFox-gate-01 sshd[704402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.161.160.152 user=root 2026-10-26T20:59:16.976073+00:00 AetherFox-gate-01 sshd[704402]: Failed password for root from 220.161.160.152 port 60660 ssh2 2026-10-26T20:59:45.627176+00:00 AetherFox-gate-01 sshd[704452]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.161.160.152 user=root 2026-10-26T20:59:47.283980+00:00 AetherFox-gate-01 sshd[704452]: Failed password for root from 220.161.160.152 port 34754 ssh2 ... show less	Brute-Force SSH
🇫🇮 xenonprotik	2026-10-26 20:07:13 (12 hours ago)	SSH honeypot: 1 login attempt, 1 shell command.	Hacking Brute-Force SSH
🇫🇷 asemen	2026-10-26 19:37:32 (13 hours ago)	2026-10-26T20:35:52.258769mbox.semen.de sshd[1965634]: Failed password for root from 220.161.160.152 ... show more 2026-10-26T20:35:52.258769mbox.semen.de sshd[1965634]: Failed password for root from 220.161.160.152 port 60659 ssh2 2026-10-26T20:36:26.998436mbox.semen.de sshd[1965819]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.161.160.152 user=root 2026-10-26T20:36:28.379981mbox.semen.de sshd[1965819]: Failed password for root from 220.161.160.152 port 34225 ssh2 2026-10-26T20:36:56.216462mbox.semen.de sshd[1965823]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.161.160.152 user=root 2026-10-26T20:36:57.718253mbox.semen.de sshd[1965823]: Failed password for root from 220.161.160.152 port 37718 ssh2 2026-10-26T20:37:29.047296mbox.semen.de sshd[1966006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.161.160.152 user=root 2026-10-26T20:37:31.276705mbox.semen.de sshd[1966006]: Failed password for root from 220.161.160.152 port 40491 ssh2 ... show less	Port Scan Brute-Force SSH
🇳🇱 vftable	2026-10-26 18:21:05 (14 hours ago)	2026-10-26T19:20:50.399777+01:00 naomi sshd[550952]: Connection closed by authenticating user root 2 ... show more 2026-10-26T19:20:50.399777+01:00 naomi sshd[550952]: Connection closed by authenticating user root 220.161.160.152 port 59593 [preauth] 2026-10-26T19:21:01.977678+01:00 naomi sshd[550958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.161.160.152 user=root 2026-10-26T19:21:04.157501+01:00 naomi sshd[550958]: Failed password for root from 220.161.160.152 port 33462 ssh2 ... show less	Brute-Force SSH
🇩🇪 tentwentyfour	2026-10-26 15:54:37 (16 hours ago)	Blocked for probing SSH accounts	Brute-Force SSH
🇫🇮 bittiguru.fi	2026-10-26 15:27:54 (17 hours ago)	Oct 26 17:27:04 site2 sshd\[26621\]: Address 220.161.160.152 maps to 152.160.161.220.broad.pt.fj.dyn ... show more Oct 26 17:27:04 site2 sshd\[26621\]: Address 220.161.160.152 maps to 152.160.161.220.broad.pt.fj.dynamic.163data.com.cn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Oct 26 17:27:06 site2 sshd\[26621\]: Failed password for root from 220.161.160.152 port 60981 ssh2Oct 26 17:27:38 site2 sshd\[26625\]: Address 220.161.160.152 maps to 152.160.161.220.broad.pt.fj.dynamic.163data.com.cn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Oct 26 17:27:39 site2 sshd\[26625\]: Failed password for root from 220.161.160.152 port 34704 ssh2Oct 26 17:27:51 site2 sshd\[26627\]: Address 220.161.160.152 maps to 152.160.161.220.broad.pt.fj.dynamic.163data.com.cn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! ... show less	Brute-Force SSH
🇺🇸 RAP	2023-08-17 07:11:44 (3 years ago)	2023-08-17 07:11:44 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 RAP	2023-08-17 02:05:17 (3 years ago)	2023-08-17 02:05:17 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 MPL	2023-08-17 00:49:27 (3 years ago)	tcp/23	Port Scan
🇱🇺 Tha_14	2023-08-16 14:55:26 (3 years ago)	Incoming TCP Connection from 220.161.160.152 to port: 23. Honeypot was triggered at 8/16/2023 02:55: ... show more Incoming TCP Connection from 220.161.160.152 to port: 23. Honeypot was triggered at 8/16/2023 02:55:15 PM. show less	Port Scan Brute-Force
🇺🇸 RAP	2023-08-16 10:06:56 (3 years ago)	2023-08-16 10:06:56 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇫🇷 oonux.net	2023-08-03 02:27:33 (3 years ago)	RouterOS: Scanning detected TCP 220.161.160.152:54483 > x.x.x.x:23	Port Scan
🇺🇸 gu-alvareza	2022-05-27 13:04:07 (4 years ago)	Shenzhen.TVT.DVR.Remote.Code.Execution	Hacking Web App Attack
🇳🇱 EGP Abuse Dept	2022-05-26 18:15:46 (4 years ago)	Unauthorized connection to Telnet port 23	Port Scan Hacking
🇺🇸 sumnone	2022-05-26 17:56:53 (4 years ago)	Port probing on unauthorized port 23	Port Scan Hacking Exploited Host

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 194.88.98.92

🇵🇾 181.91.87.13

🇺🇸 178.128.189.116

🇺🇸 162.216.149.110

🇺🇸 147.185.132.63

🇪🇬 81.10.46.91

🇧🇬 79.124.60.218

🇸🇪 46.59.109.199

🇳🇱 204.76.203.219

🇻🇳 171.231.179.219

🇳🇱 141.11.0.18

🇨🇳 124.174.39.136

🇳🇱 45.148.10.152

🇷🇴 193.46.255.86

🇹🇭 182.53.176.207

🇨🇴 181.51.89.39

🇺🇸 162.216.149.205

🇭🇰 152.32.191.191

🇺🇸 66.132.172.216

🇺🇸 54.183.159.11