This IP address has been reported a total of
424
times from
243 distinct
sources.
159.223.6.120 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/159.223.6.120
2026-03-09 02 ...
show moreThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/159.223.6.120
2026-03-09 02:52:41 /
show less
Feb 23 03:40:45 localhost sshd[437177]: Failed password for root from 159.223.6.120 port 54688 ssh2
...
show moreFeb 23 03:40:45 localhost sshd[437177]: Failed password for root from 159.223.6.120 port 54688 ssh2
Feb 23 03:41:32 localhost sshd[437184]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.223.6.120 user=root
Feb 23 03:41:34 localhost sshd[437184]: Failed password for root from 159.223.6.120 port 53594 ssh2
Feb 23 03:42:18 localhost sshd[437193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.223.6.120 user=root
Feb 23 03:42:21 localhost sshd[437193]: Failed password for root from 159.223.6.120 port 39946 ssh2
...
show less
2026-02-23T03:39:54.443647+00:00 edge-sea-con01.int.pdx.net.uk sshd[9022]: Failed password for root ...
show more2026-02-23T03:39:54.443647+00:00 edge-sea-con01.int.pdx.net.uk sshd[9022]: Failed password for root from 159.223.6.120 port 55686 ssh2
2026-02-23T03:40:42.045909+00:00 edge-sea-con01.int.pdx.net.uk sshd[9120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.223.6.120 user=root
2026-02-23T03:40:43.900356+00:00 edge-sea-con01.int.pdx.net.uk sshd[9120]: Failed password for root from 159.223.6.120 port 51204 ssh2
...
show less
[rede-arem1] (sshd) Failed SSH login from 159.223.6.120 (NL/The Netherlands/-): 5 in the last 3600 s ...
show more[rede-arem1] (sshd) Failed SSH login from 159.223.6.120 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Feb 23 00:37:01 sshd[9617]: Did not receive identification string from 159.223.6.120 port 53628
Feb 23 00:39:27 sshd[9703]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.223.6.120 user=[USERNAME]
Feb 23 00:39:29 sshd[9703]: Failed password for [USERNAME] from 159.223.6.120 port 45264 ssh2
Feb 23 00:40:15 sshd[9738]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.223.6.120 user=[USERNAME]
Feb 23 00:40:16
show less
2026-02-23T05:28:22.351473+02:00 mummo sshd[3032489]: Invalid user test from 159.223.6.120 port 5540 ...
show more2026-02-23T05:28:22.351473+02:00 mummo sshd[3032489]: Invalid user test from 159.223.6.120 port 55400
...
show less
Brute-Force
SSH
Showing 1 to
15
of 424 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩