This IP address has been reported a total of
52
times from
49 distinct
sources.
123.249.78.196 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 13
reports;
United States of America
with 9
reports;
France
with 6
reports.
The most common categories in these recent reports were:
SSH
49
times;
Brute-Force
48
times;
Port Scan
5
times;
Hacking
2
times;
DDoS Attack
1
time;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-23T23:18:20.807838 phoenix sshd-session[702911]: Failed password for root from 123.249.78.19 ...
show more2026-10-23T23:18:20.807838 phoenix sshd-session[702911]: Failed password for root from 123.249.78.196 port 52982 ssh2
2026-10-23T23:18:21.781300 phoenix sshd-session[702911]: Disconnected from authenticating user root 123.249.78.196 port 52982 [preauth]
2026-10-23T23:34:58.367544 phoenix sshd-session[714177]: Connection closed by 123.249.78.196 port 34100 [preauth]
...
show less
2026-10-23T21:51:11.546198+02:00 vmd177327 sshd-session[3091429]: Failed password for root from 123. ...
show more2026-10-23T21:51:11.546198+02:00 vmd177327 sshd-session[3091429]: Failed password for root from 123.249.78.196 port 43932 ssh2
2026-10-23T22:02:20.644977+02:00 vmd177327 sshd-session[3096403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.249.78.196 user=root
2026-10-23T22:02:22.649034+02:00 vmd177327 sshd-session[3096403]: Failed password for root from 123.249.78.196 port 53950 ssh2
...
show less
Automated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 us ...
show moreAutomated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 using multiple usernames and password guesses within a short timeframe.
show less
Brute-Force
SSH
Anonymous
2026-10-23T18:47:47.179994+01:00 [masked] sshd-session[3421729]: Disconnected from authenticating us ...
show more2026-10-23T18:47:47.179994+01:00 [masked] sshd-session[3421729]: Disconnected from authenticating user root 123.249.78.196 port 37128 [preauth]
2026-10-23T18:57:29.123804+01:00 [masked] sshd-session[3425322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.249.78.196 user=root
2026-10-23T18:57:30.848726+01:00 [masked] sshd-session[3425322]: Failed password for root from 123.249.78.196 port 50018 ssh2
2026-10-23T18:57:32.244662+01:00 [masked] sshd-session[3425322]: Disconnected from authenticating user root 123.249.78.196 port 50018 [preauth]
2026-10-23T19:01:55.765498+01:00 [masked] sshd[607417]: Timeout before authentication for connection from 123.249.78.196 to 192.168.1.160, pid = 3423302
...
show less
2026-10-23T19:19:33.604430+02:00 ubuntu-iqw sshd[5799]: Disconnected from authenticating user root 1 ...
show more2026-10-23T19:19:33.604430+02:00 ubuntu-iqw sshd[5799]: Disconnected from authenticating user root 123.249.78.196 port 46042 [preauth]
2026-10-23T19:23:26.554718+02:00 ubuntu-iqw sshd[17168]: Disconnected from authenticating user root 123.249.78.196 port 41742 [preauth]
2026-10-23T19:24:48.171711+02:00 ubuntu-iqw sshd[17175]: Disconnected from authenticating user root 123.249.78.196 port 53978 [preauth]
...
show less
Brute-Force
SSH
Anonymous
2026-10-23T19:08:44.322409+02:00 eiaf.de sshd-session[1758063]: User root from 123.249.78.196 not al ...
show more2026-10-23T19:08:44.322409+02:00 eiaf.de sshd-session[1758063]: User root from 123.249.78.196 not allowed because not listed in AllowUsers
2026-10-23T19:23:50.898726+02:00 eiaf.de sshd-session[1760981]: User root from 123.249.78.196 not allowed because not listed in AllowUsers
...
show less
This IP address carried out 2 port scanning attempts on 22-10-2026. For more information or to repor ...
show moreThis IP address carried out 2 port scanning attempts on 22-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
2026-10-23T18:03:23.683385+02:00 ktw.servers.marmak.net.pl sshd-session[1797880]: Disconnected from ...
show more2026-10-23T18:03:23.683385+02:00 ktw.servers.marmak.net.pl sshd-session[1797880]: Disconnected from authenticating user root 123.249.78.196 port 52090 [preauth]
...
show less
