JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

123.1.189.199

Neutral Activity

Abuse confidence score ?

0% Low Risk

138 reports

79 reporters · latest 5 months ago

ISP	NWT Broadband Service
Usage Type	Fixed Line ISP
ASN	AS10103
Domain Name	hkbn.net
Country	🇭🇰 Hong Kong
City	Hong Kong

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

123.1.189.199 has been reported 138 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 123.1.189.199

Export CSV

This IP address has been reported a total of 138 times from 79 distinct sources. 123.1.189.199 was first reported on March 6th 2026, and the most recent report was 5 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 gooko	2026-05-11 13:52:08 (5 months ago)	SSH brute-force attack detected by fail2ban jail 'sshd'	Brute-Force SSH
🇮🇳 evicky2002	2026-04-30 13:02:46 (5 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇪🇸 helix	2026-04-22 04:41:02 (6 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇪🇸 helix	2026-04-09 04:47:46 (6 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-04-08 20:12:23 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-04-06 20:12:22 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-04-05 20:12:22 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-04-03 20:12:21 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-04-01 20:12:24 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-03-30 20:12:19 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-03-29 20:12:19 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 RobertR11	2026-03-29 15:53:22 (6 months ago)	2026-03-29T16:53:19.625260+01:00 HAMA sshd-session[561807]: pam_unix(sshd:auth): authentication fail ... show more 2026-03-29T16:53:19.625260+01:00 HAMA sshd-session[561807]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.1.189.199 user=root 2026-03-29T16:53:21.763657+01:00 HAMA sshd-session[561807]: Failed password for root from 123.1.189.199 port 52970 ssh2 ... show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-03-29 15:20:22 (6 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇺🇸 SiteHUB Agency	2026-03-29 12:24:00 (6 months ago)	Brute force activities detected and blocked	Brute-Force
🇮🇱 31323334.xyz	2026-03-29 02:59:42 (6 months ago)	Mar 29 02:58:33 instance-20241026-2018 sshd[506203]: Failed password for root from 123.1.189.199 por ... show more Mar 29 02:58:33 instance-20241026-2018 sshd[506203]: Failed password for root from 123.1.189.199 port 35772 ssh2 Mar 29 02:58:54 instance-20241026-2018 sshd[506217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.1.189.199 user=root Mar 29 02:58:56 instance-20241026-2018 sshd[506217]: Failed password for root from 123.1.189.199 port 36888 ssh2 Mar 29 02:59:40 instance-20241026-2018 sshd[506267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.1.189.199 user=root Mar 29 02:59:42 instance-20241026-2018 sshd[506267]: Failed password for root from 123.1.189.199 port 39068 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 138 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 189.163.22.148

🇳🇱 188.166.78.61

🇺🇸 185.165.44.40

🇵🇰 182.184.72.172

🇳🇱 85.11.167.154

🇨🇳 47.115.92.162

🇬🇧 5.252.83.253

🇹🇭 160.250.202.65

🇬🇧 134.209.26.41

🇨🇳 101.227.236.176

🇺🇸 91.230.168.203

🇸🇪 90.230.226.175

🇳🇱 81.19.216.90

🇺🇸 68.225.58.243

🇩🇪 57.129.74.123

🇫🇷 51.178.84.57

🇵🇱 51.83.192.41

🇬🇧 5.252.83.159

🇬🇧 5.252.83.93

🇰🇷 175.207.111.38