JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

61.140.44.166

Neutral Activity

Abuse confidence score ?

0% Low Risk

7 reports

6 reporters · latest 4 years ago

ISP	CHINANET Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Guangzhou, Guangdong

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

61.140.44.166 has been reported 7 times. The most recent report is from 4 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 61.140.44.166

Export CSV

This IP address has been reported a total of 7 times from 6 distinct sources. 61.140.44.166 was first reported on November 9th 2021, and the most recent report was 4 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Francesco Lenovo	2021-11-13 08:36:30 (4 years ago)	SSH login attempts with user root.	Brute-Force Exploited Host
🇨🇿 ICT KnTl	2021-11-12 20:42:30 (4 years ago)	...	Brute-Force SSH
🇩🇪 www.blocklist.de	2021-11-12 07:41:29 (4 years ago)	Lines containing failures of 61.140.44.166 (max 1000) Nov 9 22:00:31 dns01 sshd[1135550]: pam_unix( ... show more Lines containing failures of 61.140.44.166 (max 1000) Nov 9 22:00:31 dns01 sshd[1135550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.140.44.166 user=r.r Nov 9 22:00:33 dns01 sshd[1135550]: Failed password for r.r from 61.140.44.166 port 41596 ssh2 Nov 9 22:00:35 dns01 sshd[1135550]: Received disconnect from 61.140.44.166 port 41596:11: Bye Bye [preauth] Nov 9 22:00:35 dns01 sshd[1135550]: Disconnected from authenticating user r.r 61.140.44.166 port 41596 [preauth] Nov 9 22:00:37 dns01 sshd[1135555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.140.44.166 user=r.r Nov 9 22:00:39 dns01 sshd[1135555]: Failed password for r.r from 61.140.44.166 port 41878 ssh2 Nov 9 22:00:41 dns01 sshd[1135555]: Received disconnect from 61.140.44.166 port 41878:11: Bye Bye [preauth] Nov 9 22:00:41 dns01 sshd[1135555]: Disconnected from authenticating user r.r 61.140.44.166 port 41878 [prea........ ------------------------------ show less	FTP Brute-Force Hacking
🇿🇦 IrisFlower	2021-11-11 16:51:14 (4 years ago)	Unauthorized connection attempt detected from IP address 61.140.44.166 to port 22 [J]	Port Scan Hacking
🇺🇸 amit177	2021-11-11 09:15:40 (4 years ago)		Brute-Force SSH
🇫🇮 Antti	2021-11-10 02:59:39 (4 years ago)	Nov 10 08:59:34 antti-vps sshd[1951452]: Invalid user ubnt from 61.140.44.166 port 51932 Nov 10 08:5 ... show more Nov 10 08:59:34 antti-vps sshd[1951452]: Invalid user ubnt from 61.140.44.166 port 51932 Nov 10 08:59:35 antti-vps sshd[1951465]: Connection from 61.140.44.166 port 52006 on 5.189.176.145 port 22 rdomain "" Nov 10 08:59:36 antti-vps sshd[1951465]: User root from 61.140.44.166 not allowed because none of user's groups are listed in AllowGroups Nov 10 08:59:37 antti-vps sshd[1951479]: Connection from 61.140.44.166 port 52086 on 5.189.176.145 port 22 rdomain "" Nov 10 08:59:38 antti-vps sshd[1951479]: User root from 61.140.44.166 not allowed because none of user's groups are listed in AllowGroups ... show less	Brute-Force SSH
🇩🇪 www.blocklist.de	2021-11-09 16:20:59 (4 years ago)	Lines containing failures of 61.140.44.166 (max 1000) Nov 9 22:00:31 dns01 sshd[1135550]: pam_unix( ... show more Lines containing failures of 61.140.44.166 (max 1000) Nov 9 22:00:31 dns01 sshd[1135550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.140.44.166 user=r.r Nov 9 22:00:33 dns01 sshd[1135550]: Failed password for r.r from 61.140.44.166 port 41596 ssh2 Nov 9 22:00:35 dns01 sshd[1135550]: Received disconnect from 61.140.44.166 port 41596:11: Bye Bye [preauth] Nov 9 22:00:35 dns01 sshd[1135550]: Disconnected from authenticating user r.r 61.140.44.166 port 41596 [preauth] Nov 9 22:00:37 dns01 sshd[1135555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.140.44.166 user=r.r Nov 9 22:00:39 dns01 sshd[1135555]: Failed password for r.r from 61.140.44.166 port 41878 ssh2 Nov 9 22:00:41 dns01 sshd[1135555]: Received disconnect from 61.140.44.166 port 41878:11: Bye Bye [preauth] Nov 9 22:00:41 dns01 sshd[1135555]: Disconnected from authenticating user r.r 61.140.44.166 port 41878 [prea........ ------------------------------ show less	FTP Brute-Force Hacking

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 2800:e2:2f7f:fe88:8c9f:249b:6940:18e4

🇭🇰 218.102.64.97

🇦🇪 217.165.113.44

🇺🇸 216.180.246.73

🇳🇱 213.177.179.126

🇧🇷 205.210.31.183

🇬🇧 185.216.145.165

🇧🇷 177.140.24.67

🇺🇸 172.59.14.230

🇧🇷 164.152.36.29

🇮🇩 163.7.13.17

🇳🇱 157.245.68.243

🇫🇮 147.185.133.89

🇹🇼 116.59.11.115

🇦🇲 109.75.37.137

🇲🇳 103.80.210.224

🇺🇸 91.230.168.156

🇺🇸 91.230.168.152

🇳🇱 91.92.42.201

🇦🇿 82.194.17.218