Log in to view charts and search reports for this IP.
Log In
No reports in the last 60 days
111.161.98.140 has been reported 70
times. The most recent report is from
.
The full history is preserved below and remains searchable. A
0% score reflects the absence of recent activity, but
this is not a guarantee that earlier reports were invalid. Abuse confidence score decays,
naturally, over time, when the abusive activity stops.
(sshd) Failed SSH login from 111.161.98.140 (CN/China/dns140.online.tj.cn): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jan 17 02:25:19 14178 sshd[1239]: Did not receive identification string from 111.161.98.140 port 5400 ...
show more(sshd) Failed SSH login from 111.161.98.140 (CN/China/dns140.online.tj.cn): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jan 17 02:25:19 14178 sshd[1239]: Did not receive identification string from 111.161.98.140 port 54004
Jan 17 02:25:23 14178 sshd[1244]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.161.98.140 user=root
Jan 17 02:25:25 14178 sshd[1244]: Failed password for root from 111.161.98.140 port 54338 ssh2
Jan 17 02:25:29 14178 sshd[1247]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.161.98.140 user=root
Jan 17 02:25:32 14178 sshd[1247]: Failed password for root from 111.161.98.140 port 58090 ssh2
show less
(sshd) Failed SSH login from 111.161.98.140 (CN/China/dns140.online.tj.cn): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jan 17 00:12:05 14676 sshd[27903]: Did not receive identification string from 111.161.98.140 port 393 ...
show more(sshd) Failed SSH login from 111.161.98.140 (CN/China/dns140.online.tj.cn): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jan 17 00:12:05 14676 sshd[27903]: Did not receive identification string from 111.161.98.140 port 39328
Jan 17 00:12:10 14676 sshd[27904]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.161.98.140 user=root
Jan 17 00:12:12 14676 sshd[27904]: Failed password for root from 111.161.98.140 port 39616 ssh2
Jan 17 00:12:15 14676 sshd[27906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.161.98.140 user=root
Jan 17 00:12:17 14676 sshd[27906]: Failed password for root from 111.161.98.140 port 44498 ssh2
show less
2026-01-16T20:37:47.461493+00:00 web4 sshd[3686441]: Invalid user user from 111.161.98.140 port 60420
2026-01-16T20:37:49.016431+00:00 web4 sshd[3686459]: Invalid user user from 111.161.98.140 port 50206
2026-01-16T20:37:50.145030+00:00 web4 sshd[368 ...
show more2026-01-16T20:37:47.461493+00:00 web4 sshd[3686441]: Invalid user user from 111.161.98.140 port 60420
2026-01-16T20:37:49.016431+00:00 web4 sshd[3686459]: Invalid user user from 111.161.98.140 port 50206
2026-01-16T20:37:50.145030+00:00 web4 sshd[3686462]: Invalid user user from 111.161.98.140 port 51736
2026-01-16T20:37:51.333629+00:00 web4 sshd[3686465]: Invalid user user from 111.161.98.140 port 53522
2026-01-16T20:37:52.671705+00:00 web4 sshd[3686468]: Invalid user user from 111.161.98.140 port 54294
show less
SSH brute force attack detected: 5 failed attempts
Brute-Force
Anonymous
Jan 16 15:06:00 VM6460869 sshd[472865]: Failed password for root from 111.161.98.140 port 48382 ssh2
Jan 16 15:06:03 VM6460869 sshd[472867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.161.98.140 user= ...
show moreJan 16 15:06:00 VM6460869 sshd[472865]: Failed password for root from 111.161.98.140 port 48382 ssh2
Jan 16 15:06:03 VM6460869 sshd[472867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.161.98.140 user=root
Jan 16 15:06:05 VM6460869 sshd[472867]: Failed password for root from 111.161.98.140 port 51452 ssh2
...
show less
(sshd) Failed SSH login from 111.161.98.140 (CN/China/dns140.online.tj.cn): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jan 15 22:52:15 15454 sshd[28880]: Did not receive identification string from 111.161.98.140 port 460 ...
show more(sshd) Failed SSH login from 111.161.98.140 (CN/China/dns140.online.tj.cn): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jan 15 22:52:15 15454 sshd[28880]: Did not receive identification string from 111.161.98.140 port 46042
Jan 15 22:52:17 15454 sshd[28881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.161.98.140 user=root
Jan 15 22:52:19 15454 sshd[28881]: Failed password for root from 111.161.98.140 port 46752 ssh2
Jan 15 22:52:20 15454 sshd[28883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.161.98.140 user=root
Jan 15 22:52:22 15454 sshd[28883]: Failed password for root from 111.161.98.140 port 49622 ssh2
show less
Jan 16 05:33:40 lnxweb62 sshd[15066]: Failed password for root from 111.161.98.140 port 53442 ssh2
Jan 16 05:33:40 lnxweb62 sshd[15066]: Connection closed by authenticating user root 111.161.98.140 port 53442 [preauth]
Jan 16 05:33:42 lnxweb62 sshd[1 ...
show moreJan 16 05:33:40 lnxweb62 sshd[15066]: Failed password for root from 111.161.98.140 port 53442 ssh2
Jan 16 05:33:40 lnxweb62 sshd[15066]: Connection closed by authenticating user root 111.161.98.140 port 53442 [preauth]
Jan 16 05:33:42 lnxweb62 sshd[15077]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.161.98.140 user=root
Jan 16 05:33:44 lnxweb62 sshd[15077]: Failed password for root from 111.161.98.140 port 57034 ssh2
Jan 16 05:33:46 lnxweb62 sshd[15077]: Connection closed by authenticating user root 111.161.98.140 port 57034 [preauth]
...
show less
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown