This IP address has been reported a total of
599
times from
272 distinct
sources.
180.180.123.139 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-29T18:29:14.211133+02:00 ezri sshd[3875547]: error: kex_exchange_identification: Connection ...
show more2026-06-29T18:29:14.211133+02:00 ezri sshd[3875547]: error: kex_exchange_identification: Connection closed by remote host
2026-06-29T18:29:14.212974+02:00 ezri sshd[3875547]: Connection closed by 180.180.123.139 port 26200
2026-06-29T19:36:20.427994+02:00 ezri sshd[3882121]: User root from 180.180.123.139 not allowed because not listed in AllowUsers
2026-06-29T19:36:20.591758+02:00 ezri sshd[3882121]: Connection closed by invalid user root 180.180.123.139 port 15651 [preauth]
...
show less
2026-06-29T19:18:10.083603+02:00 n23 sshd[1795257]: pam_unix(sshd:auth): authentication failure; log ...
show more2026-06-29T19:18:10.083603+02:00 n23 sshd[1795257]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.180.123.139 user=root
2026-06-29T19:18:11.627375+02:00 n23 sshd[1795257]: Failed password for root from 180.180.123.139 port 6396 ssh2
...
show less
Brute-Force
SSH
Anonymous
Jun 29 19:22:09 ipht sshd[3142073]: Failed password for root from 180.180.123.139 port 16911 ssh2
Ju ...
show moreJun 29 19:22:09 ipht sshd[3142073]: Failed password for root from 180.180.123.139 port 16911 ssh2
Jun 29 19:24:12 ipht sshd[3142531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.180.123.139 user=root
Jun 29 19:24:14 ipht sshd[3142531]: Failed password for root from 180.180.123.139 port 28739 ssh2
...
show less
session[1027590] 0.0.0.0 (180.180.123.139[180.180.123.139]): USER root (Login failed): Incorrect pas ...
show moresession[1027590] 0.0.0.0 (180.180.123.139[180.180.123.139]): USER root (Login failed): Incorrect password
session[1032154] 0.0.0.0 (180.180.123.139[180.180.123.139]): USER root (Login failed): Incorrect password
session[1037334] 0.0.0.0 (180.180.123.139[180.180.123.139]): USER root (Login failed): Incorrect password
session[1041680] 0.0.0.0 (node-oej.pool-180-180.dynamic.nt-isp.net[180.180.123.139]): USER root (Login failed): Incorrect password
session[1043766] 0.0.0.0 (180.180.123.139[180.180.123.139]): USER root (Login failed): Incorrect password
session[1050027] 0.0.0.0 (180.180.123.139[180.180.123.139]): USER root (Login failed): Incorrect password
session[1051037] 0.0.0.0 (180.180.123.139[180.180.123.139]): USER root (Login failed): Incorrect password
session[1052357] 0.0.0.0 (180.180.123.139[180.180.123.139]): USER root (Login failed): Incorrect password
...
show less
FTP Brute-Force
Brute-Force
Exploited Host
Anonymous
Jun 29 17:09:54 sd-55437 sshd[3441381]: User root from 180.180.123.139 not allowed because not liste ...
show moreJun 29 17:09:54 sd-55437 sshd[3441381]: User root from 180.180.123.139 not allowed because not listed in AllowUsers
...
show less
180.180.123.139 (TH/Thailand/node-oej.pool-180-180.dynamic.nt-isp.net), 5 distributed sshd attacks o ...
show more180.180.123.139 (TH/Thailand/node-oej.pool-180-180.dynamic.nt-isp.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 29 07:04:55 14845 sshd[6687]: Failed password for root from 68.183.191.143 port 38082 ssh2
Jun 29 07:03:21 14845 sshd[6200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.180.123.139 user=root
Jun 29 07:03:23 14845 sshd[6200]: Failed password for root from 180.180.123.139 port 22552 ssh2
Jun 29 07:05:52 14845 sshd[7087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.112.5.7 user=root
Jun 29 07:04:52 14845 sshd[6687]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.191.143 user=root
IP Addresses Blocked:
68.183.191.143 (SG/Singapore/-)
show less
Brute-Force
SSH
Anonymous
(sshd) Failed SSH login from 180.180.123.139 (TH/Thailand/-): 5 in the last 3600 secs; Ports: *; Dir ...
show more(sshd) Failed SSH login from 180.180.123.139 (TH/Thailand/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 29 12:00:55 server01 sshd-session[1398233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.180.123.139 user=root
Jun 29 12:00:57 server01 sshd-session[1398233]: Failed password for root from 180.180.123.139 port 4215 ssh2
Jun 29 12:03:24 server01 sshd-session[1398317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.180.123.139 user=root
Jun 29 12:03:26 server01 sshd-session[1398317]: Failed password for root from 180.180.123.139 port 31030 ssh2
Jun 29 12:46:27 server01 sshd-session[1399629]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.180.123.139 user=root
show less
{"event":{"DateTime":"2026-06-27T06:37:35Z","RemoteAddr":"180.180.123.139:38414","Protocol":"SSH","C ...
show more{"event":{"DateTime":"2026-06-27T06:37:35Z","RemoteAddr":"180.180.123.139:38414","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"d35dce1a-18e4-4427-9548-109fa8253c6a","Environ":"","User":"root","Password":"sitexl911","Client":"SSH-2.0-Go","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH interactive","SourceIp":"180.180.123.139","SourcePort":"38414","TLSServerName":"","Handler":""},"level":"info","msg":"New Event","status":"Stateless"}
{"event":{"DateTime":"2026-06-27T07:13:04Z","RemoteAddr":"180.180.123.139:44969","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"bbc90d04-6324-4662-be05-ca6552a1ca49","Environ":"","User":"root","Password":"sitexl23#","Client":"SSH-2.0-Go","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"S
show less