This IP address has been reported a total of
20
times from
20 distinct
sources.
120.239.80.221 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-12T16:08:19.223687+08:00 us21.cdn.420422709.xyz sshd-session[79108]: Failed password for inv ...
show more2026-07-12T16:08:19.223687+08:00 us21.cdn.420422709.xyz sshd-session[79108]: Failed password for invalid user odoo15 from 120.239.80.221 port 12452 ssh2
2026-07-12T16:26:31.599248+08:00 us21.cdn.420422709.xyz sshd-session[79323]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.239.80.221 user=root
2026-07-12T16:26:33.983493+08:00 us21.cdn.420422709.xyz sshd-session[79323]: Failed password for root from 120.239.80.221 port 7095 ssh2
...
show less
This IP address carried out 38 SSH credential attack (attempts) on 11-07-2026. For more information ...
show moreThis IP address carried out 38 SSH credential attack (attempts) on 11-07-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
2026-07-12T03:52:48.262273+02:00 axisverse sshd-session[705895]: Invalid user test from 120.239.80.2 ...
show more2026-07-12T03:52:48.262273+02:00 axisverse sshd-session[705895]: Invalid user test from 120.239.80.221 port 18936
2026-07-12T04:02:24.579947+02:00 axisverse sshd-session[724643]: Invalid user ftpadmin from 120.239.80.221 port 12802
2026-07-12T04:04:58.847582+02:00 axisverse sshd-session[729378]: Invalid user oracle from 120.239.80.221 port 12351
...
show less
Blocked by CrowdSec. Scenario: crowdsecurity/ssh-bf
Brute-Force
SSH
Anonymous
Honeypot hit: Brute-force attack detected on 22/SSH
• Credential used: root:Qq123654
• Number of log ...
show moreHoneypot hit: Brute-force attack detected on 22/SSH
• Credential used: root:Qq123654
• Number of login attempts: 1
• Client: SSH-2.0-libssh_0.9.6
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
Report 2548634 with IP 3596201 for SSH brute-force attack by source 3590859 via ssh-honeypot/0.2.1+h ...
show moreReport 2548634 with IP 3596201 for SSH brute-force attack by source 3590859 via ssh-honeypot/0.2.1+http
show less
2026-07-11T07:54:18.804068+00:00 ubuntu-4gb-fsn1-1 sshd-session[1779872]: Invalid user ubuntu from 1 ...
show more2026-07-11T07:54:18.804068+00:00 ubuntu-4gb-fsn1-1 sshd-session[1779872]: Invalid user ubuntu from 120.239.80.221 port 19266
2026-07-11T07:54:18.807600+00:00 ubuntu-4gb-fsn1-1 sshd-session[1779872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.239.80.221
2026-07-11T07:54:21.230027+00:00 ubuntu-4gb-fsn1-1 sshd-session[1779872]: Failed password for invalid user ubuntu from 120.239.80.221 port 19266 ssh2
...
show less
2026-07-11T09:50:21.000756+02:00 srv01 sshd[1816992]: Failed password for root from 120.239.80.221 p ...
show more2026-07-11T09:50:21.000756+02:00 srv01 sshd[1816992]: Failed password for root from 120.239.80.221 port 11838 ssh2
2026-07-11T09:53:33.493074+02:00 srv01 sshd[1817103]: Invalid user ubuntu from 120.239.80.221 port 12223
...
show less
Brute-Force
SSH
Showing 1 to
15
of 20 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩