This IP address has been reported a total of
8
times from
7 distinct
sources.
123.149.31.96 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Finland
with 2
reports;
Germany
with 1
report;
France
with 1
report.
The most common categories in these recent reports were:
Brute-Force
8
times;
SSH
7
times.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
2026-09-28T08:47:10.433143-06:00 KLAS-A sshd[38417]: Connection closed by authenticating user root 1 ...
show more2026-09-28T08:47:10.433143-06:00 KLAS-A sshd[38417]: Connection closed by authenticating user root 123.149.31.96 port 7909 [preauth]
...
show less
2026-09-26T11:30:12.133249+03:00 t-service-ubs-fi sshd[309437]: Invalid user hexiang from 123.149.31 ...
show more2026-09-26T11:30:12.133249+03:00 t-service-ubs-fi sshd[309437]: Invalid user hexiang from 123.149.31.96 port 8245
2026-09-26T11:30:22.245807+03:00 t-service-ubs-fi sshd[309441]: Invalid user hexiang from 123.149.31.96 port 8963
2026-09-26T11:30:54.249028+03:00 t-service-ubs-fi sshd[309455]: Invalid user liyabo from 123.149.31.96 port 7219
2026-09-26T11:31:01.909010+03:00 t-service-ubs-fi sshd[309459]: Invalid user liyabo from 123.149.31.96 port 7879
2026-09-26T11:31:10.402783+03:00 t-service-ubs-fi sshd[309462]: Invalid user tracy from 123.149.31.96 port 8561
...
show less
Fail2Ban sshd: Sep 25 03:32:39 srv-sp sshd[558532]: Failed password for invalid user nagios from 123 ...
show moreFail2Ban sshd: Sep 25 03:32:39 srv-sp sshd[558532]: Failed password for invalid user nagios from 123.149.31.96 port 7934 ssh2
Sep 25 03:37:32 srv-sp sshd[558682]: Invalid user gjd from 123.149.31.96 port 8457
Sep 25 03:37:32 srv-sp sshd[558682]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.149.31.96
Sep 25 03:37:32 srv-sp sshd[558682]: Invalid user gjd from 123.149.31.96 port 8457
Sep 25 03:37:34 srv-sp sshd[558682]: Failed password for invalid user gjd from 123.149.31.96 port 8457 ssh2
show less
2026-09-24T23:21:29.712506+03:00 t-service-ubs-fi sshd[270607]: Invalid user tech from 123.149.31.96 ...
show more2026-09-24T23:21:29.712506+03:00 t-service-ubs-fi sshd[270607]: Invalid user tech from 123.149.31.96 port 7300
2026-09-24T23:21:57.598768+03:00 t-service-ubs-fi sshd[270655]: Invalid user chcvpr from 123.149.31.96 port 7587
2026-09-24T23:22:19.126564+03:00 t-service-ubs-fi sshd[270693]: Invalid user lightdm from 123.149.31.96 port 7508
2026-09-24T23:22:55.957124+03:00 t-service-ubs-fi sshd[270765]: Invalid user brian from 123.149.31.96 port 8698
2026-09-24T23:23:19.021168+03:00 t-service-ubs-fi sshd[270809]: Invalid user kafka from 123.149.31.96 port 8498
...
show less
2026-09-24T14:06:23.760082+00:00 rahwana-edge-1 sshd[1439914]: pam_unix(sshd:auth): authentication f ...
show more2026-09-24T14:06:23.760082+00:00 rahwana-edge-1 sshd[1439914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.149.31.96 user=root
2026-09-24T14:06:25.316912+00:00 rahwana-edge-1 sshd[1439914]: Failed password for invalid user root from 123.149.31.96 port 7865 ssh2
2026-09-24T14:06:28.122126+00:00 rahwana-edge-1 sshd[1439916]: User root from 123.149.31.96 not allowed because not listed in AllowUsers
...
show less
2026-09-24T02:14:53.458013+02:00 aurora sshd[1531839]: Connection closed by 123.149.31.96 port 8375 ...
show more2026-09-24T02:14:53.458013+02:00 aurora sshd[1531839]: Connection closed by 123.149.31.96 port 8375 [preauth]
...
show less
2026-09-23T22:45:57.083333+08:00 rosemary sshd-session[3030728]: Connection closed by 123.149.31.96 ...
show more2026-09-23T22:45:57.083333+08:00 rosemary sshd-session[3030728]: Connection closed by 123.149.31.96 port 9203 [preauth]
2026-09-23T22:53:26.501720+08:00 rosemary sshd-session[3048696]: Connection closed by 123.149.31.96 port 8573 [preauth]
2026-09-23T22:57:50.152200+08:00 rosemary sshd-session[3058821]: Connection closed by authenticating user root 123.149.31.96 port 7371 [preauth]
...
show less
Brute-Force
SSH
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
