Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Automated report from ThreatCrush. 7 malicious authentication, system event(s) observed from this address across 2 detector(s) over ~7h, confirmed by a completed TCP handshake. Blocked by automated defence. No reply expected.
2026-11-05T07:28:36.311609+01:00 milkyway sshd[1744860]: Invalid user ubuntu from 182.139.163.123 port 34108
2026-11-05T07:28:36.566188+01:00 milkyway sshd[1744860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rh ...
show more2026-11-05T07:28:36.311609+01:00 milkyway sshd[1744860]: Invalid user ubuntu from 182.139.163.123 port 34108
2026-11-05T07:28:36.566188+01:00 milkyway sshd[1744860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.139.163.123
2026-11-05T07:28:38.419478+01:00 milkyway sshd[1744860]: Failed password for invalid user ubuntu from 182.139.163.123 port 34108 ssh2
...
show less
2026-11-05T07:10:08.585536+01:00 serengeti sshd-session[400448]: Failed password for root from 182.139.163.123 port 53476 ssh2
2026-11-05T07:10:10.062786+01:00 serengeti sshd-session[400450]: Invalid user ubuntu from 182.139.163.123 port 53972
2026-1 ...
show more2026-11-05T07:10:08.585536+01:00 serengeti sshd-session[400448]: Failed password for root from 182.139.163.123 port 53476 ssh2
2026-11-05T07:10:10.062786+01:00 serengeti sshd-session[400450]: Invalid user ubuntu from 182.139.163.123 port 53972
2026-11-05T07:10:10.294754+01:00 serengeti sshd-session[400450]: Failed password for invalid user ubuntu from 182.139.163.123 port 53972 ssh2
2026-11-05T07:10:12.993379+01:00 serengeti sshd-session[400452]: Invalid user knotas from 182.139.163.123 port 54664
2026-11-05T07:10:13.234636+01:00 serengeti sshd-session[400452]: Failed password for invalid user knotas from 182.139.163.123 port 54664 ssh2
...
show less
Nov 5 07:09:28 web1 sshd[682166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.139.163.123
Nov 5 07:09:30 web1 sshd[682166]: Failed password for invalid user ubuntu from 182.139.163.123 port 45450 ssh ...
show moreNov 5 07:09:28 web1 sshd[682166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.139.163.123
Nov 5 07:09:30 web1 sshd[682166]: Failed password for invalid user ubuntu from 182.139.163.123 port 45450 ssh2
Nov 5 07:09:32 web1 sshd[682167]: Invalid user florenzosrl from 182.139.163.123 port 46624
Nov 5 07:09:32 web1 sshd[682167]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.139.163.123
Nov 5 07:09:34 web1 sshd[682167]: Failed password for invalid user florenzosrl from 182.139.163.123 port 46624 ssh2
...
show less
2026-11-05T07:55:22.211001+02:00 server.neoadvanced.solutions sshd[2141990]: Invalid user ubuntu from 182.139.163.123 port 56234
2026-11-05T07:55:22.469248+02:00 server.neoadvanced.solutions sshd[2141990]: pam_unix(sshd:auth): authentication failure; ...
show more2026-11-05T07:55:22.211001+02:00 server.neoadvanced.solutions sshd[2141990]: Invalid user ubuntu from 182.139.163.123 port 56234
2026-11-05T07:55:22.469248+02:00 server.neoadvanced.solutions sshd[2141990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.139.163.123
2026-11-05T07:55:23.914596+02:00 server.neoadvanced.solutions sshd[2141990]: Failed password for invalid user ubuntu from 182.139.163.123 port 56234 ssh2
...
show less
Nov 5 05:17:19 obsidian sshd[243165]: Failed password for root from 182.139.163.123 port 53144 ssh2
Nov 5 05:18:58 obsidian sshd[243452]: Invalid user ubuntu from 182.139.163.123 port 54312
Nov 5 05:19:05 obsidian sshd[243498]: Invalid user gener8 ...
show moreNov 5 05:17:19 obsidian sshd[243165]: Failed password for root from 182.139.163.123 port 53144 ssh2
Nov 5 05:18:58 obsidian sshd[243452]: Invalid user ubuntu from 182.139.163.123 port 54312
Nov 5 05:19:05 obsidian sshd[243498]: Invalid user gener8ads from 182.139.163.123 port 55506
...
show less
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown
