This IP address has been reported a total of
313
times from
200 distinct
sources.
113.141.72.65 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
113.141.72.65 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Port ...
show more113.141.72.65 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 22 23:16:49 3728 sshd[23670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=204.235.242.6 user=root
May 22 23:16:51 3728 sshd[23670]: Failed password for root from 204.235.242.6 port 40278 ssh2
May 22 23:12:52 3728 sshd[23151]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.239.242.7 user=root
May 22 22:52:36 3728 sshd[20515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.141.72.65 user=root
May 22 22:52:39 3728 sshd[20515]: Failed password for root from 113.141.72.65 port 50142 ssh2
IP Addresses Blocked:
204.235.242.6 (US/United States/-)
85.239.242.7 (US/United States/vmi3316892.contaboserver.net)
show less
Brute-Force
SSH
Anonymous
2026-05-23T10:36:08.825010+08:00 HKCM1-20251208195653fcc911 sshd[85269]: pam_unix(sshd:auth): authen ...
show more2026-05-23T10:36:08.825010+08:00 HKCM1-20251208195653fcc911 sshd[85269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.141.72.65 user=root
2026-05-23T10:36:10.807264+08:00 HKCM1-20251208195653fcc911 sshd[85269]: Failed password for root from 113.141.72.65 port 58700 ssh2
2026-05-23T10:38:01.166649+08:00 HKCM1-20251208195653fcc911 sshd[85336]: Invalid user karan from 113.141.72.65 port 52412
2026-05-23T10:38:01.170633+08:00 HKCM1-20251208195653fcc911 sshd[85336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.141.72.65
2026-05-23T10:38:02.329590+08:00 HKCM1-20251208195653fcc911 sshd[85336]: Failed password for invalid user karan from 113.141.72.65 port 52412 ssh2
2026-05-23T10:41:43.957090+08:00 HKCM1-20251208195653fcc911 sshd[85510]: Invalid user me from 113.141.72.65 port 60264
...
show less
2026-05-23T04:34:20.095364+02:00 vmd177327 sshd[1418353]: Failed password for root from 113.141.72.6 ...
show more2026-05-23T04:34:20.095364+02:00 vmd177327 sshd[1418353]: Failed password for root from 113.141.72.65 port 51638 ssh2
2026-05-23T04:36:11.432602+02:00 vmd177327 sshd[1431025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.141.72.65 user=root
2026-05-23T04:36:13.825379+02:00 vmd177327 sshd[1431025]: Failed password for root from 113.141.72.65 port 34766 ssh2
...
show less
May 23 05:08:58 *** sshd[709470]: User root from 113.141.72.65 not allowed because not listed in All ...
show moreMay 23 05:08:58 *** sshd[709470]: User root from 113.141.72.65 not allowed because not listed in AllowUsers
show less
2026-05-23T08:03:15.125080+09:00 no3 sshd[1690412]: Disconnected from authenticating user root 113.1 ...
show more2026-05-23T08:03:15.125080+09:00 no3 sshd[1690412]: Disconnected from authenticating user root 113.141.72.65 port 40488 [preauth]
...
show less
2026-05-22T22:19:47.895396+02:00 transfer-srv sshd[568718]: Failed password for root from 113.141.72 ...
show more2026-05-22T22:19:47.895396+02:00 transfer-srv sshd[568718]: Failed password for root from 113.141.72.65 port 37166 ssh2
2026-05-22T22:21:38.248670+02:00 transfer-srv sshd[571096]: Connection from 113.141.72.65 port 34464 on 192.168.1.201 port 22 rdomain ""
2026-05-22T22:21:39.729189+02:00 transfer-s
...
show less
113.141.72.65 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Port ...
show more113.141.72.65 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 22 15:12:37 14170 sshd[4940]: Failed password for root from 115.190.205.202 port 47562 ssh2
May 22 15:14:43 14170 sshd[5223]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.243.161.151 user=root
May 22 15:14:44 14170 sshd[5223]: Failed password for root from 20.243.161.151 port 49346 ssh2
May 22 15:14:05 14170 sshd[5202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.141.72.65 user=root
May 22 15:14:07 14170 sshd[5202]: Failed password for root from 113.141.72.65 port 41236 ssh2
IP Addresses Blocked:
115.190.205.202 (CN/China/-)
20.243.161.151 (JP/Japan/-)
show less
Brute-Force
SSH
Showing 271 to
285
of 313 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩