This IP address has been reported a total of
34
times from
22 distinct
sources.
111.55.120.70 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-08-30T04:29:58.860453 vmi2293746.contaboserver.net sshd[507144]: Invalid user jenkins from 111. ...
show more2026-08-30T04:29:58.860453 vmi2293746.contaboserver.net sshd[507144]: Invalid user jenkins from 111.55.120.70 port 33908
2026-08-30T04:30:21.102803 vmi2293746.contaboserver.net sshd[507156]: Invalid user zhangjun from 111.55.120.70 port 33909
...
show less
2026-08-29T04:10:56.916070+01:00 mx.magpie.ma sshd-session[437393]: Invalid user blog from 111.55.12 ...
show more2026-08-29T04:10:56.916070+01:00 mx.magpie.ma sshd-session[437393]: Invalid user blog from 111.55.120.70 port 12424
2026-08-29T04:11:25.706313+01:00 mx.magpie.ma sshd-session[437401]: Invalid user vps from 111.55.120.70 port 12425
2026-08-29T04:11:47.674546+01:00 mx.magpie.ma sshd-session[437405]: Invalid user csgoserver from 111.55.120.70 port 12426
2026-08-29T04:12:14.480132+01:00 mx.magpie.ma sshd-session[437412]: Invalid user backup from 111.55.120.70 port 12427
2026-08-29T04:12:26.241273+01:00 mx.magpie.ma sshd-session[437419]: Invalid user lia from 111.55.120.70 port 12428
...
show less
200 attack(s) detected, such as these: {"event":"ssh_block","host":"127.0.1.1 185.207.107.155","ip": ...
show more200 attack(s) detected, such as these: {"event":"ssh_block","host":"127.0.1.1 185.207.107.155","ip":"111.55.120.70","user":"user","service":"ssh:notty","logentry":"user;ssh:notty;111.55.120.70;Fri;Aug;28;12:00;-;12:00;(00:00)"} * Report Details *: https://p4u.xyz/OUBFK2X0TPJ/1* IP Details *: https://p4u.xyz/OUBFK2X0TPJ/2
show less
200 attack(s) detected, such as these: {"event":"ssh_block","host":"127.0.1.1 185.207.107.155","ip": ...
show more200 attack(s) detected, such as these: {"event":"ssh_block","host":"127.0.1.1 185.207.107.155","ip":"111.55.120.70","user":"apache","service":"ssh:notty","logentry":"apache;ssh:notty;111.55.120.70;Fri;Aug;28;11:15;-;11:15;(00:00)"} * Report Details *: https://p4u.xyz/N5IDM3S0TFQ/1* IP Details *: https://p4u.xyz/N5IDM3S0TFQ/2
show less
200 attack(s) detected, such as these: {"event":"ssh_block","host":"127.0.1.1 185.207.107.155","ip": ...
show more200 attack(s) detected, such as these: {"event":"ssh_block","host":"127.0.1.1 185.207.107.155","ip":"111.55.120.70","user":"root","service":"ssh:notty","logentry":"root;ssh:notty;111.55.120.70;Fri;Aug;28;10:03;-;10:03;(00:00)"} * Report Details *: https://p4u.xyz/86V2CFKZWR4/1* IP Details *: https://p4u.xyz/86V2CFKZWR4/2
show less
200 attack(s) detected, such as these: {"event":"ssh_block","host":"127.0.1.1 185.207.107.155","ip": ...
show more200 attack(s) detected, such as these: {"event":"ssh_block","host":"127.0.1.1 185.207.107.155","ip":"111.55.120.70","user":"mongodb","service":"ssh:notty","logentry":"mongodb;ssh:notty;111.55.120.70;Fri;Aug;28;09:03;-;09:03;(00:00)"} * Report Details *: https://p4u.xyz/3UMWFLFWPAY/1* IP Details *: https://p4u.xyz/3UMWFLFWPAY/2
show less
200 attack(s) detected, such as these: {"event":"ssh_block","host":"127.0.1.1 185.207.107.155","ip": ...
show more200 attack(s) detected, such as these: {"event":"ssh_block","host":"127.0.1.1 185.207.107.155","ip":"111.55.120.70","user":"root","service":"ssh:notty","logentry":"root;ssh:notty;111.55.120.70;Fri;Aug;28;08:13;-;08:13;(00:00)"} * Report Details *: https://p4u.xyz/ZBN3MOATOQW/1* IP Details *: https://p4u.xyz/ZBN3MOATOQW/2
show less
Aug 28 08:13:31 nuremberg-1 sshd[1904]: Invalid user sophia from 111.55.120.70 port 61162
Aug 28 08: ...
show moreAug 28 08:13:31 nuremberg-1 sshd[1904]: Invalid user sophia from 111.55.120.70 port 61162
Aug 28 08:13:52 nuremberg-1 sshd[1906]: Invalid user globalflash from 111.55.120.70 port 61163
Aug 28 08:14:12 nuremberg-1 sshd[1908]: Invalid user ceng from 111.55.120.70 port 61164
...
show less
Aug 28 08:13:33 isp sshd[2847540]: Invalid user sophia from 111.55.120.70 port 28809
Aug 28 08:13:33 ...
show moreAug 28 08:13:33 isp sshd[2847540]: Invalid user sophia from 111.55.120.70 port 28809
Aug 28 08:13:33 isp sshd[2847540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.55.120.70
Aug 28 08:13:36 isp sshd[2847540]: Failed password for invalid user sophia from 111.55.120.70 port 28809 ssh2
...
show less
2026-08-28T05:26:33.026735+00:00 shrapnelnet sshd-session[533788]: Invalid user hadoop from 111.55.1 ...
show more2026-08-28T05:26:33.026735+00:00 shrapnelnet sshd-session[533788]: Invalid user hadoop from 111.55.120.70 port 5967
2026-08-28T05:26:53.810810+00:00 shrapnelnet sshd-session[533963]: Invalid user daniel from 111.55.120.70 port 5968
2026-08-28T05:27:14.455263+00:00 shrapnelnet sshd-session[534150]: Invalid user helena from 111.55.120.70 port 5969
2026-08-28T05:27:32.824905+00:00 shrapnelnet sshd-session[534357]: Invalid user tester from 111.55.120.70 port 5970
2026-08-28T05:27:50.698117+00:00 shrapnelnet sshd-session[534516]: Invalid user remote from 111.55.120.70 port 5971
...
show less
Aug 25 18:17:04 servercloud sshd[3162623]: Connection closed by 111.55.120.70 port 16351 [preauth]
A ...
show moreAug 25 18:17:04 servercloud sshd[3162623]: Connection closed by 111.55.120.70 port 16351 [preauth]
Aug 25 18:19:53 servercloud sshd[3162914]: Connection closed by authenticating user root 111.55.120.70 port 16352 [preauth]
Aug 25 18:20:44 servercloud sshd[3163076]: Invalid user chao from 111.55.120.70 port 16353
...
show less
2026-08-25T09:07:43.074215+02:00 srv02 sshd[1021894]: Invalid user msfadmin from 111.55.120.70 port ...
show more2026-08-25T09:07:43.074215+02:00 srv02 sshd[1021894]: Invalid user msfadmin from 111.55.120.70 port 54363
2026-08-25T09:08:26.500948+02:00 srv02 sshd[1022130]: Invalid user hadoop from 111.55.120.70 port 54365
2026-08-25T09:08:48.890684+02:00 srv02 sshd[1022262]: Invalid user isaac from 111.55.120.70 port 54366
...
show less
Brute-Force
Showing 1 to
15
of 34 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩