This IP address has been reported a total of
21
times from
18 distinct
sources.
180.108.149.71 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 7
reports;
Germany
with 3
reports;
Czechia
with 2
reports.
The most common categories in these recent reports were:
SSH
17
times;
Brute-Force
16
times;
Port Scan
3
times;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-04T01:32:41.617609+00:00 kocer-main-webserver sshd[3543124]: Invalid user pi from 180.108.14 ...
show more2026-10-04T01:32:41.617609+00:00 kocer-main-webserver sshd[3543124]: Invalid user pi from 180.108.149.71 port 11748
2026-10-04T01:32:48.264707+00:00 kocer-main-webserver sshd[3543140]: Invalid user user from 180.108.149.71 port 11795
2026-10-04T01:32:49.297823+00:00 kocer-main-webserver sshd[3543140]: error: maximum authentication attempts exceeded for invalid user user from 180.108.149.71 port 11795 ssh2 [preauth]
...
show less
2026-10-04T00:33:42.752158+02:00 my.hidden.domain sshd[56434]: Invalid user pi from 180.108.149.71 p ...
show more2026-10-04T00:33:42.752158+02:00 my.hidden.domain sshd[56434]: Invalid user pi from 180.108.149.71 port 11491
...
show less
Active SSH brute-force detected. Logs: 2026-10-03T17:48:10.407858+00:00 AVM-642836 sshd[430804]: pam ...
show moreActive SSH brute-force detected. Logs: 2026-10-03T17:48:10.407858+00:00 AVM-642836 sshd[430804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.108.149.71 2026-10-03T17:48:12.384851+00:00 AVM-642836 sshd[430...
show less
SSH
Brute-Force
Anonymous
2026-10-03T17:40:52.019352+00:00 ephialtes2 sshd[1141151]: pam_unix(sshd:auth): authentication failu ...
show more2026-10-03T17:40:52.019352+00:00 ephialtes2 sshd[1141151]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.108.149.71
2026-10-03T17:40:54.201992+00:00 ephialtes2 sshd[1141151]: Failed password for invalid user pi from 180.108.149.71 port 11872 ssh2
2026-10-03T17:40:57.918455+00:00 ephialtes2 sshd[1141151]: Failed password for invalid user pi from 180.108.149.71 port 11872 ssh2
2026-10-03T17:41:02.100291+00:00 ephialtes2 sshd[1141151]: Failed password for invalid user pi from 180.108.149.71 port 11872 ssh2
2026-10-03T17:41:05.959552+00:00 ephialtes2 sshd[1141151]: Failed password for invalid user pi from 180.108.149.71 port 11872 ssh2
...
show less
Sustained failed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 18 ...
show moreSustained failed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 18/100 (low) | Phase: reconnaissance (low-volume probing)
Failed auth: 41 (7 bad password, 34 invalid user) | 0 success | 52 total SSH log events | seen on 1 sensor(s)
Origin: China (CN) | AS140292 China Telecom | 180.108.149.0/24
First seen: 2026-10-03 12:26:32 UTC | Last seen: 2026-10-03 12:28:42 UTC
Source: Linux OpenSSH journalctl telemetry, multi-sensor CERT honeypot.
show less
2026-10-03T08:43:22.619035+02:00 runner3 sshd[475159]: pam_unix(sshd:auth): authentication failure; ...
show more2026-10-03T08:43:22.619035+02:00 runner3 sshd[475159]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.108.149.71
2026-10-03T08:43:24.671009+02:00 runner3 sshd[475159]: Failed password for invalid user pi from 180.108.149.71 port 10578 ssh2
2026-10-03T08:43:27.859694+02:00 runner3 sshd[475159]: Failed password for invalid user pi from 180.108.149.71 port 10578 ssh2
2026-10-03T08:43:30.717959+02:00 runner3 sshd[475159]: Failed password for invalid user pi from 180.108.149.71 port 10578 ssh2
2026-10-03T08:43:34.243234+02:00 runner3 sshd[475159]: Failed password for invalid user pi from 180.108.149.71 port 10578 ssh2
...
show less
Repeated SSH password-authentication failures against an AceRDP management endpoint on TCP/22. OpenS ...
show moreRepeated SSH password-authentication failures against an AceRDP management endpoint on TCP/22. OpenSSH Failed password events triggered a 10-failure/600-second rule. Matched failures accumulated in this queued incident: 10. Detection time(s) UTC: 2026-10-03T01:51:11+00:00 to 2026-10-03T01:51:11+00:00. Source recorded by the receiving SSH service. Usernames and destination details omitted.
show less
2026-10-03T00:53:55.281870+02:00 admin sshd[3895842]: pam_unix(sshd:auth): authentication failure; l ...
show more2026-10-03T00:53:55.281870+02:00 admin sshd[3895842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.108.149.71
2026-10-03T00:53:57.491801+02:00 admin sshd[3895842]: Failed password for invalid user pi from 180.108.149.71 port 11168 ssh2
2026-10-03T00:54:01.192229+02:00 admin sshd[3895842]: Failed password for invalid user pi from 180.108.149.71 port 11168 ssh2
2026-10-03T00:54:04.364321+02:00 admin sshd[3895842]: Failed password for invalid user pi from 180.108.149.71 port 11168 ssh2
2026-10-03T00:54:08.202790+02:00 admin sshd[3895842]: Failed password for invalid user pi from 180.108.149.71 port 11168 ssh2
...
show less
SSH Brute force: 10 attempts were recorded from 180.108.149.71
2026-10-03T00:34:33+02:00 Invalid use ...
show moreSSH Brute force: 10 attempts were recorded from 180.108.149.71
2026-10-03T00:34:33+02:00 Invalid user pi from 180.108.149.71 port 11615
2026-10-03T00:34:58+02:00 Invalid user user from 180.108.149.71 port 11846
2026-10-03T00:35:24+02:00 Invalid user user from 180.108.149.71 port 10096
2026-10-03T00:35:47+02:00 Invalid user user from 180.108.149.71 port 10342
2026-10-03T00:36:06+02:00 Invalid user usuario from 180.108.149.71 port 10516
2026-10-03T00:36:31+02:00 Invalid user usuario from 180.108.149.71 port 10748
2026-10-03T00:36:59+02:00 Invalid user usuario from 180.108.149.71 port 11019
2026-10-03T00:37:13+02:00 Invalid user test1 from 180.108.149.71 port 11146
2026-10-03T00:37:40+02:00 Invalid user test1 from 180.108.149.71 port 11438
2026-10-03T00:38:08+02:00 Invalid user test1 from 180.108.149.71 port 11694
show less
2026-10-02T19:23:49.785312+02:00 swsrv sshd[624451]: Invalid user pi from 180.108.149.71 port 10071
...
show more2026-10-02T19:23:49.785312+02:00 swsrv sshd[624451]: Invalid user pi from 180.108.149.71 port 10071
2026-10-02T19:23:50.402979+02:00 swsrv sshd[624451]: error: maximum authentication attempts exceeded for invalid user pi from 180.108.149.71 port 10071 ssh2 [preauth]
2026-10-02T19:23:55.748320+02:00 swsrv sshd[624453]: Invalid user pi from 180.108.149.71 port 10150
2026-10-02T19:24:00.982970+02:00 swsrv sshd[624455]: Invalid user user from 180.108.149.71 port 10197
...
show less
2026-10-02T16:18:31.525011+00:00 oracle sshd[2309294]: Invalid user pi from 180.108.149.71 port 1134 ...
show more2026-10-02T16:18:31.525011+00:00 oracle sshd[2309294]: Invalid user pi from 180.108.149.71 port 11349
2026-10-02T16:18:39.201427+00:00 oracle sshd[2309296]: Invalid user user from 180.108.149.71 port 11411
2026-10-02T16:18:40.877263+00:00 oracle sshd[2309296]: error: maximum authentication attempts exceeded for invalid user user from 180.108.149.71 port 11411 ssh2 [preauth]
...
show less
