JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 61.169.143.228

61.169.143.228 was found in our database!

This IP was reported 172 times. Confidence of Abuse is 100%: ?

100%

ISP	CHINANET Shanghai province network
Usage Type	Fixed Line ISP
ASN	AS4812
Domain Name	online.sh.cn
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 61.169.143.228

Whois 61.169.143.228

IP Abuse Reports for 61.169.143.228:

This IP address has been reported a total of 172 times from 119 distinct sources. 61.169.143.228 was first reported on July 18th 2026, and the most recent report was 34 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 applemooz	2026-07-27 05:05:39 (34 minutes ago)	Jul 27 07:05:38 lnxmail62 sshd[2424168]: Invalid user node from 61.169.143.228 port 30226 Jul 27 07: ... show more Jul 27 07:05:38 lnxmail62 sshd[2424168]: Invalid user node from 61.169.143.228 port 30226 Jul 27 07:05:38 lnxmail62 sshd[2424168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.169.143.228 Jul 27 07:05:38 lnxmail62 sshd[2424168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.169.143.228 ... show less	Brute-Force SSH
🇫🇷 applemooz	2026-07-27 04:30:16 (1 hour ago)	Jul 27 06:25:47 lnxmail62 sshd[2404585]: Invalid user cyber from 61.169.143.228 port 41199 Jul 27 06 ... show more Jul 27 06:25:47 lnxmail62 sshd[2404585]: Invalid user cyber from 61.169.143.228 port 41199 Jul 27 06:25:47 lnxmail62 sshd[2404585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.169.143.228 Jul 27 06:25:49 lnxmail62 sshd[2404585]: Failed password for invalid user cyber from 61.169.143.228 port 41199 ssh2 Jul 27 06:30:16 lnxmail62 sshd[2407094]: Invalid user arthur from 61.169.143.228 port 59874 Jul 27 06:30:16 lnxmail62 sshd[2407094]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.169.143.228 ... show less	Brute-Force SSH
🇦🇹 kuppit	2026-07-27 04:20:16 (1 hour ago)	Honeypot bot from CN: 9 SSH login attempts; first 2026-07-26 12:06:48, last 2026-07-26 12:57:34	Brute-Force SSH
🇩🇪 luxuria.cfd	2026-07-27 04:05:59 (1 hour ago)	Honeypot port scan detected. Auto-blocked by XUI Shield.	DDoS Attack Port Scan
🇳🇱 VMHeaven.io	2026-07-27 03:36:12 (2 hours ago)	Jul 27 03:28:21 proxy-ryzen sshd[3943171]: pam_unix(sshd:auth): authentication failure; logname= uid ... show more Jul 27 03:28:21 proxy-ryzen sshd[3943171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.169.143.228 Jul 27 03:28:23 proxy-ryzen sshd[3943171]: Failed password for invalid user zw from 61.169.143.228 port 17527 ssh2 Jul 27 03:36:10 proxy-ryzen sshd[3944425]: Invalid user coder from 61.169.143.228 port 51644 Jul 27 03:36:10 proxy-ryzen sshd[3944425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.169.143.228 Jul 27 03:36:12 proxy-ryzen sshd[3944425]: Failed password for invalid user coder from 61.169.143.228 port 51644 ssh2 ... show less	Brute-Force SSH
🇩🇪 PieKnu	2026-07-27 03:21:12 (2 hours ago)	Jul 27 05:16:09 host sshd[4078558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ... show more Jul 27 05:16:09 host sshd[4078558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.169.143.228 user=root Jul 27 05:16:11 host sshd[4078558]: Failed password for root from 61.169.143.228 port 21608 ssh2 Jul 27 05:21:10 host sshd[4079867]: Invalid user admin from 61.169.143.228 port 44205 Jul 27 05:21:10 host sshd[4079867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.169.143.228 Jul 27 05:21:12 host sshd[4079867]: Failed password for invalid user admin from 61.169.143.228 port 44205 ssh2 ... show less	Brute-Force SSH
🇦🇺 specializedtom	2026-07-27 02:38:49 (3 hours ago)	Fail2Ban triggered a ban on 61.169.143.228 for postfix-sasl	Phishing Email Spam Spoofing
🇫🇷 aza SilaS	2026-07-27 01:50:15 (3 hours ago)	Jul 27 03:50:13 vmi1858823 sshd[2804054]: Invalid user couch from 61.169.143.228 port 41781 Jul 27 0 ... show more Jul 27 03:50:13 vmi1858823 sshd[2804054]: Invalid user couch from 61.169.143.228 port 41781 Jul 27 03:50:15 vmi1858823 sshd[2804054]: Failed password for invalid user couch from 61.169.143.228 port 41781 ssh2 ... show less	Brute-Force SSH
🇧🇷 helix	2026-07-27 01:34:12 (4 hours ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇺🇸 NetGuard	2026-07-27 01:29:25 (4 hours ago)	#honeypot #netguard247 #cowrie #sshtelnetprobe Captured by NetGuard 24/7 T-Pot honeypot (netguard24- ... show more #honeypot #netguard247 #cowrie #sshtelnetprobe Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com). Timestamp: 2026-07-27T01:29:25.785+00:00 Attacker IP: 61.169.143.228 \| Port: N/A \| Country: China Honeypot: cowrie \| Attack: ssh_telnet_probe Source: NetGuard 24/7 (netguard24-7.com) \| PhantomGrid Defense show less	Brute-Force SSH
🇩🇪 sebi	2026-07-27 01:09:37 (4 hours ago)	2026-07-27T02:01:22.677887+02:00 mail.sebi.org sshd-session[235809]: Invalid user samp from 61.169.1 ... show more 2026-07-27T02:01:22.677887+02:00 mail.sebi.org sshd-session[235809]: Invalid user samp from 61.169.143.228 port 12097 2026-07-27T02:15:21.866111+02:00 mail.sebi.org sshd-session[236157]: Invalid user tanulo from 61.169.143.228 port 8056 2026-07-27T02:16:27.257178+02:00 mail.sebi.org sshd-session[236163]: Invalid user sparrow from 61.169.143.228 port 13087 2026-07-27T02:23:43.316702+02:00 mail.sebi.org sshd-session[236260]: Invalid user dima from 61.169.143.228 port 47313 2026-07-27T03:09:36.642253+02:00 mail.sebi.org sshd-session[237443]: Invalid user shiv from 61.169.143.228 port 11593 show less	Brute-Force SSH
🇬🇧 andypiper	2026-07-27 01:00:40 (4 hours ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇩🇪 LoNET	2026-07-27 00:16:09 (5 hours ago)	Report 2575647 with IP 3616604 for SSH brute-force attack by source 3617872 via ssh-honeypot/0.2.0+h ... show more Report 2575647 with IP 3616604 for SSH brute-force attack by source 3617872 via ssh-honeypot/0.2.0+http show less	Brute-Force SSH
🇫🇷 cyssou92	2026-07-27 00:09:38 (5 hours ago)	Automated SSH brute-force connection caught by endlessh tarpit	Brute-Force SSH
🇺🇸 onemightyarc	2026-07-26 22:55:11 (6 hours ago)	2026-07-26T15:53:52.338812-07:00 server.vexstria.pro sshd[849054]: Failed password for invalid user ... show more 2026-07-26T15:53:52.338812-07:00 server.vexstria.pro sshd[849054]: Failed password for invalid user cynthia from 61.169.143.228 port 32528 ssh2 2026-07-26T15:55:09.269261-07:00 server.vexstria.pro sshd[881005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.169.143.228 user=root 2026-07-26T15:55:11.005631-07:00 server.vexstria.pro sshd[881005]: Failed password for root from 61.169.143.228 port 38423 ssh2 ... show less	Brute-Force SSH Port Scan FTP Brute-Force

Showing 1 to 15 of 172 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 192.161.169.181

🇸🇬 165.154.236.104

🇰🇪 102.140.199.182

🇫🇷 91.231.89.10

🇺🇸 91.230.168.190

🇺🇸 91.230.168.136

🇳🇱 86.54.31.36

🇬🇧 86.22.12.21

🇺🇸 71.6.239.197

🇳🇱 45.148.10.141

🇺🇸 207.90.244.18

🇳🇱 195.178.110.217

🇵🇪 190.223.60.209

🇧🇷 131.100.242.102

🇨🇳 119.249.100.50

🇨🇳 106.37.72.234

🇭🇰 103.20.193.117

🇷🇺 95.104.182.217

🇫🇷 91.231.89.157

🇫🇷 85.217.140.9