This IP address has been reported a total of
38
times from
13 distinct
sources.
122.161.198.233 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Repeated SSH brute force and user enumeration attempts against a secured web server. Multiple failed ...
show moreRepeated SSH brute force and user enumeration attempts against a secured web server. Multiple failed authentication attempts from this IP across an extended period.
show less
Brute-Force
SSH
Anonymous
Repeated SSH brute force and user enumeration attempts against azcu.edu (Arizona Christian Universit ...
show moreRepeated SSH brute force and user enumeration attempts against azcu.edu (Arizona Christian University). Multiple failed authentication attempts from this IP across an extended period.
show less
Brute-Force
SSH
Anonymous
Repeated SSH brute force and user enumeration attempts against azcu.edu (Arizona Christian Universit ...
show moreRepeated SSH brute force and user enumeration attempts against azcu.edu (Arizona Christian University). Multiple failed authentication attempts from this IP across an extended period.
show less
Brute-Force
SSH
Anonymous
Brute force SSH attack detected by fail2ban on azcu.edu server
Brute-Force
SSH
Anonymous
2026-04-07T14:44:55.235839+02:00 host.nilsbossaller.de sshd[1835596]: Connection closed by 122.161.1 ...
show more2026-04-07T14:44:55.235839+02:00 host.nilsbossaller.de sshd[1835596]: Connection closed by 122.161.198.233 port 48362 [preauth]
...
show less
2026-04-06T17:11:28.389938+02:00 87hcet sshd[904996]: Connection closed by 122.161.198.233 port 6004 ...
show more2026-04-06T17:11:28.389938+02:00 87hcet sshd[904996]: Connection closed by 122.161.198.233 port 60042 [preauth]
2026-04-06T17:15:34.585454+02:00 87hcet sshd[906590]: User root from 122.161.198.233 not allowed because not listed in AllowUsers
2026-04-06T17:15:35.224297+02:00 87hcet sshd[906590]: Connection closed by invalid user root 122.161.198.233 port 42568 [preauth]
...
show less
2026-04-06T08:21:33.144034[redacted] sshd[2289119]: Connection reset by 122.161.198.233 port 52442 [ ...
show more2026-04-06T08:21:33.144034[redacted] sshd[2289119]: Connection reset by 122.161.198.233 port 52442 [preauth]
show less
Brute-Force
SSH
Anonymous
2026-04-06T14:04:18.881481+01:00 webserver.mordor.land sshd-session[2250602]: Connection closed by 1 ...
show more2026-04-06T14:04:18.881481+01:00 webserver.mordor.land sshd-session[2250602]: Connection closed by 122.161.198.233 port 38884 [preauth]
...
show less
2026-04-06T12:55:55.247097+01:00 linode1.eskil.net sshd[177915]: refused connect from 122.161.198.23 ...
show more2026-04-06T12:55:55.247097+01:00 linode1.eskil.net sshd[177915]: refused connect from 122.161.198.233 (122.161.198.233)
...
show less
Brute-Force
SSH
Anonymous
2026-04-06T00:24:27.106608+02:00 host.nilsbossaller.de sshd[1206070]: Connection reset by 122.161.19 ...
show more2026-04-06T00:24:27.106608+02:00 host.nilsbossaller.de sshd[1206070]: Connection reset by 122.161.198.233 port 40042 [preauth]
...
show less
2026-04-05T15:34:55.358061+01:00 linode1.eskil.net sshd[167158]: refused connect from 122.161.198.23 ...
show more2026-04-05T15:34:55.358061+01:00 linode1.eskil.net sshd[167158]: refused connect from 122.161.198.233 (122.161.198.233)
...
show less
2026-04-05T08:18:10.355448[redacted] sshd[2241298]: Connection closed by 122.161.198.233 port 41220 ...
show more2026-04-05T08:18:10.355448[redacted] sshd[2241298]: Connection closed by 122.161.198.233 port 41220 [preauth]
show less
Brute-Force
SSH
Anonymous
2026-04-05T14:01:21.283256+01:00 webserver.mordor.land sshd-session[2138557]: Connection reset by 12 ...
show more2026-04-05T14:01:21.283256+01:00 webserver.mordor.land sshd-session[2138557]: Connection reset by 122.161.198.233 port 36720 [preauth]
...
show less
Brute-Force
SSH
Showing 1 to
15
of 38 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩