Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Shaanxi Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackbots
"fail2ban match"
2020-07-21 02:01:48
attack
Jul 14 19:39:44 game-panel sshd[30831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.141.166.40
Jul 14 19:39:46 game-panel sshd[30831]: Failed password for invalid user xt from 113.141.166.40 port 58862 ssh2
Jul 14 19:42:29 game-panel sshd[30954]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.141.166.40
2020-07-15 04:32:51
attackspam
Jun 13 06:11:34 jane sshd[27884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.141.166.40 
Jun 13 06:11:36 jane sshd[27884]: Failed password for invalid user russ from 113.141.166.40 port 51076 ssh2
...
2020-06-13 12:26:48
attackbots
"fail2ban match"
2020-06-12 23:00:54
attackbots
2020-06-10T20:41:43.880658rocketchat.forhosting.nl sshd[29802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.141.166.40
2020-06-10T20:41:43.878316rocketchat.forhosting.nl sshd[29802]: Invalid user ia from 113.141.166.40 port 52538
2020-06-10T20:41:45.700314rocketchat.forhosting.nl sshd[29802]: Failed password for invalid user ia from 113.141.166.40 port 52538 ssh2
...
2020-06-11 02:52:01
attackbotsspam
Jun  6 09:32:02 firewall sshd[16590]: Failed password for root from 113.141.166.40 port 40206 ssh2
Jun  6 09:34:42 firewall sshd[16679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.141.166.40  user=root
Jun  6 09:34:43 firewall sshd[16679]: Failed password for root from 113.141.166.40 port 47214 ssh2
...
2020-06-06 21:15:43
attackbots
2020-05-30T21:32:46.012442server.espacesoutien.com sshd[7967]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.141.166.40  user=root
2020-05-30T21:32:48.259844server.espacesoutien.com sshd[7967]: Failed password for root from 113.141.166.40 port 48524 ssh2
2020-05-30T21:35:11.111044server.espacesoutien.com sshd[9846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.141.166.40  user=root
2020-05-30T21:35:13.067348server.espacesoutien.com sshd[9846]: Failed password for root from 113.141.166.40 port 58938 ssh2
...
2020-05-31 08:01:01
attack
May 29 05:50:59 mail sshd[20214]: Failed password for root from 113.141.166.40 port 33608 ssh2
...
2020-05-29 12:19:21
attackspam
2020-05-27T03:53:08.990777abusebot-3.cloudsearch.cf sshd[18662]: Invalid user ghost from 113.141.166.40 port 38762
2020-05-27T03:53:09.010069abusebot-3.cloudsearch.cf sshd[18662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.141.166.40
2020-05-27T03:53:08.990777abusebot-3.cloudsearch.cf sshd[18662]: Invalid user ghost from 113.141.166.40 port 38762
2020-05-27T03:53:11.401738abusebot-3.cloudsearch.cf sshd[18662]: Failed password for invalid user ghost from 113.141.166.40 port 38762 ssh2
2020-05-27T03:57:54.315701abusebot-3.cloudsearch.cf sshd[18949]: Invalid user atscale from 113.141.166.40 port 56648
2020-05-27T03:57:54.324061abusebot-3.cloudsearch.cf sshd[18949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.141.166.40
2020-05-27T03:57:54.315701abusebot-3.cloudsearch.cf sshd[18949]: Invalid user atscale from 113.141.166.40 port 56648
2020-05-27T03:57:56.505293abusebot-3.cloudsearch.cf sshd[189
...
2020-05-27 12:22:50
attackbotsspam
SSH authentication failure x 6 reported by Fail2Ban
...
2020-05-20 00:06:05
attackspambots
May  9 04:41:52 h1745522 sshd[18956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.141.166.40  user=root
May  9 04:41:55 h1745522 sshd[18956]: Failed password for root from 113.141.166.40 port 57214 ssh2
May  9 04:44:19 h1745522 sshd[19080]: Invalid user crv from 113.141.166.40 port 60580
May  9 04:44:19 h1745522 sshd[19080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.141.166.40
May  9 04:44:19 h1745522 sshd[19080]: Invalid user crv from 113.141.166.40 port 60580
May  9 04:44:21 h1745522 sshd[19080]: Failed password for invalid user crv from 113.141.166.40 port 60580 ssh2
May  9 04:46:44 h1745522 sshd[19356]: Invalid user kamran from 113.141.166.40 port 35710
May  9 04:46:44 h1745522 sshd[19356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.141.166.40
May  9 04:46:44 h1745522 sshd[19356]: Invalid user kamran from 113.141.166.40 port 35710
May  9
...
2020-05-09 13:46:26
attackbotsspam
Apr 21 22:07:08 itv-usvr-01 sshd[32589]: Invalid user dv from 113.141.166.40
Apr 21 22:07:08 itv-usvr-01 sshd[32589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.141.166.40
Apr 21 22:07:08 itv-usvr-01 sshd[32589]: Invalid user dv from 113.141.166.40
Apr 21 22:07:10 itv-usvr-01 sshd[32589]: Failed password for invalid user dv from 113.141.166.40 port 42784 ssh2
Apr 21 22:12:26 itv-usvr-01 sshd[458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.141.166.40  user=root
Apr 21 22:12:27 itv-usvr-01 sshd[458]: Failed password for root from 113.141.166.40 port 38722 ssh2
2020-04-21 23:46:28
attack
$f2bV_matches
2020-04-21 14:17:07
Comments on same subnet:
IP Type Details Datetime
113.141.166.197 attackspam
Aug 14 04:33:16 php1 sshd\[14550\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.141.166.197  user=root
Aug 14 04:33:18 php1 sshd\[14550\]: Failed password for root from 113.141.166.197 port 57310 ssh2
Aug 14 04:36:30 php1 sshd\[14811\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.141.166.197  user=root
Aug 14 04:36:32 php1 sshd\[14811\]: Failed password for root from 113.141.166.197 port 56082 ssh2
Aug 14 04:39:18 php1 sshd\[15178\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.141.166.197  user=root
2020-08-15 00:11:58
113.141.166.197 attackbots
Invalid user ela from 113.141.166.197 port 55654
2020-08-01 16:27:06
113.141.166.197 attackbots
$f2bV_matches
2020-07-27 01:09:55
113.141.166.138 attack
20/7/19@19:37:26: FAIL: Alarm-Network address from=113.141.166.138
20/7/19@19:37:26: FAIL: Alarm-Network address from=113.141.166.138
...
2020-07-20 07:38:29
113.141.166.197 attackbotsspam
Invalid user mzd from 113.141.166.197 port 49808
2020-07-19 20:05:20
113.141.166.197 attackspambots
Invalid user jh from 113.141.166.197 port 45800
2020-07-19 06:17:58
113.141.166.197 attack
Jul 12 06:06:37 srv-ubuntu-dev3 sshd[74537]: Invalid user emma from 113.141.166.197
Jul 12 06:06:37 srv-ubuntu-dev3 sshd[74537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.141.166.197
Jul 12 06:06:37 srv-ubuntu-dev3 sshd[74537]: Invalid user emma from 113.141.166.197
Jul 12 06:06:39 srv-ubuntu-dev3 sshd[74537]: Failed password for invalid user emma from 113.141.166.197 port 39964 ssh2
Jul 12 06:10:31 srv-ubuntu-dev3 sshd[75148]: Invalid user doug from 113.141.166.197
Jul 12 06:10:31 srv-ubuntu-dev3 sshd[75148]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.141.166.197
Jul 12 06:10:31 srv-ubuntu-dev3 sshd[75148]: Invalid user doug from 113.141.166.197
Jul 12 06:10:33 srv-ubuntu-dev3 sshd[75148]: Failed password for invalid user doug from 113.141.166.197 port 58776 ssh2
...
2020-07-12 13:40:11
113.141.166.197 attackspam
Jul 11 08:20:24 ns381471 sshd[5556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.141.166.197
Jul 11 08:20:26 ns381471 sshd[5556]: Failed password for invalid user muriel from 113.141.166.197 port 48342 ssh2
2020-07-11 16:49:13
113.141.166.197 attackspam
ssh brute force
2020-07-08 13:25:07
113.141.166.197 attackspambots
failed root login
2020-06-14 23:29:27
113.141.166.197 attackspam
DATE:2020-06-02 19:05:07, IP:113.141.166.197, PORT:ssh SSH brute force auth (docker-dc)
2020-06-03 04:09:06
113.141.166.197 attack
Invalid user sistemas from 113.141.166.197 port 56894
2020-05-29 01:50:24
113.141.166.197 attackspam
May 27 21:11:00  sshd\[15595\]: User root from 113.141.166.197 not allowed because not listed in AllowUsersMay 27 21:11:02  sshd\[15595\]: Failed password for invalid user root from 113.141.166.197 port 44614 ssh2
...
2020-05-28 05:26:05
113.141.166.197 attackspambots
Scanned 3 times in the last 24 hours on port 22
2020-05-27 08:11:20
113.141.166.197 attackbots
2020-05-22T17:31:12.653763abusebot-6.cloudsearch.cf sshd[20711]: Invalid user qzn from 113.141.166.197 port 38572
2020-05-22T17:31:12.660621abusebot-6.cloudsearch.cf sshd[20711]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.141.166.197
2020-05-22T17:31:12.653763abusebot-6.cloudsearch.cf sshd[20711]: Invalid user qzn from 113.141.166.197 port 38572
2020-05-22T17:31:14.547603abusebot-6.cloudsearch.cf sshd[20711]: Failed password for invalid user qzn from 113.141.166.197 port 38572 ssh2
2020-05-22T17:36:05.210491abusebot-6.cloudsearch.cf sshd[21018]: Invalid user mmk from 113.141.166.197 port 55354
2020-05-22T17:36:05.217534abusebot-6.cloudsearch.cf sshd[21018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.141.166.197
2020-05-22T17:36:05.210491abusebot-6.cloudsearch.cf sshd[21018]: Invalid user mmk from 113.141.166.197 port 55354
2020-05-22T17:36:06.662714abusebot-6.cloudsearch.cf sshd[21018]: Fa
...
2020-05-23 03:50:29
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 113.141.166.40
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31202
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;113.141.166.40.			IN	A

;; AUTHORITY SECTION:
.			596	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020042100 1800 900 604800 86400

;; Query time: 180 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Apr 21 14:17:03 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 40.166.141.113.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 40.166.141.113.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
103.86.177.217 attack
Brute forcing Wordpress login
2019-08-13 12:48:29
104.248.112.166 attack
Brute forcing Wordpress login
2019-08-13 12:47:42
185.53.131.94 attack
Brute forcing Wordpress login
2019-08-13 12:31:59
35.204.115.182 attack
Brute forcing Wordpress login
2019-08-13 13:11:08
176.99.9.19 attackbotsspam
Brute forcing Wordpress login
2019-08-13 12:35:34
49.247.211.10 attackspam
Brute forcing Wordpress login
2019-08-13 13:01:21
81.169.215.70 attackbotsspam
Brute forcing Wordpress login
2019-08-13 12:53:13
185.66.141.119 attackspambots
Brute forcing Wordpress login
2019-08-13 12:31:29
178.62.54.120 attackbotsspam
Brute forcing Wordpress login
2019-08-13 12:35:10
80.232.220.79 attack
Brute forcing Wordpress login
2019-08-13 12:54:06
188.166.172.79 attackbotsspam
33022/tcp 221/tcp 1224/tcp...
[2019-06-12/08-12]11pkt,9pt.(tcp)
2019-08-13 12:29:34
5.196.64.36 attack
Brute forcing Wordpress login
2019-08-13 13:15:07
185.36.81.37 attack
Brute forcing Wordpress login
2019-08-13 12:33:24
138.68.145.73 attack
Brute forcing Wordpress login
2019-08-13 12:42:55
78.46.33.203 attackbotsspam
Brute forcing Wordpress login
2019-08-13 12:54:41

Recently Reported IPs

110.99.22.208 46.29.248.198 246.65.212.18 164.238.77.170
86.26.252.221 36.81.90.182 57.75.255.234 176.75.102.189
228.29.207.175 18.46.130.223 156.237.131.167 23.231.15.134
169.0.50.119 14.241.230.89 12.225.121.126 111.230.149.74
77.55.220.215 210.211.125.203 182.140.233.214 45.143.220.146