This IP address has been reported a total of
46
times from
25 distinct
sources.
61.145.243.161 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
ip112.20 . Oct 29 22:30:54 routeknis sshd[1505642]: Connection from 61.145.243.161 port 26801 on 203 ...
show moreip112.20 . Oct 29 22:30:54 routeknis sshd[1505642]: Connection from 61.145.243.161 port 26801 on 203.190.112.20 port 7345 rdomain ""
Oct 29 22:30:57 routeknis sshd[1505642]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.145.243.161 user=root
Oct 29 22:31:00 routeknis sshd[1505642]: Failed password for root from 61.145.243.161 port 26801 ssh2
...
show less
DDoS Attack
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
SSH
(sshd) Failed SSH login from 61.145.243.161 (CN/China/-): 5 in the last 3600 secs; Ports: *; Directi ...
show more(sshd) Failed SSH login from 61.145.243.161 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Oct 29 16:31:02 localhost sshd[3800080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.145.243.161 user=root
Oct 29 16:31:04 localhost sshd[3800080]: Failed password for root from 61.145.243.161 port 44958 ssh2
Oct 29 16:31:19 localhost sshd[3800285]: Invalid user overwritten from 61.145.243.161 port 55060
Oct 29 16:31:19 localhost sshd[3800285]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.145.243.161
Oct 29 16:31:21 localhost sshd[3800285]: Failed password for invalid user overwritten from 61.145.243.161 port 55060 ssh2
show less
[Fail2Ban]: Jail sshd triggered 3 time(s) for 61.145.243.161.
2025-10-27T15:08:56.164586+01:00 - ssh ...
show more[Fail2Ban]: Jail sshd triggered 3 time(s) for 61.145.243.161.
2025-10-27T15:08:56.164586+01:00 - sshd[2459894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.145.243.161 user=root
2025-10-27T15:08:58.948392+01:00 - sshd[2459894]: Failed password for root from 61.145.243.161 port 26229 ssh2
2025-10-27T15:08:59.763376+01:00 - sshd[2459894]: Connection closed by authenticating user root 61.145.243.161 port 26229 [preauth]
...
show less
Brute-Force
SSH
Anonymous
2025-10-27T13:03:31.859486+02:00 smvps001 sshd-session[2900895]: Connection closed by 61.145.243.161 ...
show more2025-10-27T13:03:31.859486+02:00 smvps001 sshd-session[2900895]: Connection closed by 61.145.243.161 port 53422 [preauth]
2025-10-27T13:05:38.602041+02:00 smvps001 sshd-session[2901159]: Unable to negotiate with 61.145.243.161 port 4296: no matching cipher found. Their offer: arcfour,arcfour128,arcfour256,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,[email protected],3des-cbc,[email protected] [preauth]
2025-10-27T13:06:11.537822+02:00 smvps001 sshd-session[2901182]: Unable to negotiate with 61.145.243.161 port 5356: no matching cipher found. Their offer: arcfour,arcfour128,arcfour256,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,[email protected],3des-cbc,[email protected] [preauth]
...
show less
Security Event Detected by SOC Diskominfo Lumajang: event=ssh, hits=3
Brute-Force
SSH
Anonymous
Oct 26 12:21:39 eiaf sshd[1036875]: Connection from 61.145.243.161 port 38806 on 88.218.224.13 port ...
show moreOct 26 12:21:39 eiaf sshd[1036875]: Connection from 61.145.243.161 port 38806 on 88.218.224.13 port 5123 rdomain ""
Oct 26 12:21:40 eiaf sshd[1036875]: Invalid user lizhiyao from 61.145.243.161 port 38806
...
show less