This IP address has been reported a total of
47
times from
36 distinct
sources.
1.209.124.248 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-31T03:02:02.635042 servers.open-bs.ru sshd[1187272]: Failed password for root from 1.209.124 ...
show more2026-07-31T03:02:02.635042 servers.open-bs.ru sshd[1187272]: Failed password for root from 1.209.124.248 port 51982 ssh2
2026-07-31T03:02:05.923747 servers.open-bs.ru sshd[1187272]: Failed password for root from 1.209.124.248 port 51982 ssh2
2026-07-31T03:02:09.407850 servers.open-bs.ru sshd[1187272]: Failed password for root from 1.209.124.248 port 51982 ssh2
2026-07-31T03:02:11.663163 servers.open-bs.ru sshd[1187272]: Failed password for root from 1.209.124.248 port 51982 ssh2
2026-07-31T03:02:15.622176 servers.open-bs.ru sshd[1187272]: Failed password for root from 1.209.124.248 port 51982 ssh2
...
show less
SSH credential brute-force observed by honeypot.
Source IP: 1.209.124.248
Targeted device: NAS
First ...
show moreSSH credential brute-force observed by honeypot.
Source IP: 1.209.124.248
Targeted device: NAS
First seen: 30 Jul 2026 23:56:56 UTC
Last seen: 30 Jul 2026 23:57:01 UTC
Attempts: 5
Client: SSH-2.0-libssh2_1.7.0
Sample credentials: root:<Any pass>, root:0001, root:0002, root:0003, root:0004
show less
Brute-Force
SSH
IoT Targeted
Anonymous
Jul 30 16:53:15 sshd-session[22013]: Unable to negotiate with 1.209.124.248 port 59801: no matching ...
show moreJul 30 16:53:15 sshd-session[22013]: Unable to negotiate with 1.209.124.248 port 59801: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]
Jul 31 01:46:31 sshd-session[24867]: Unable to negotiate with 1.209.124.248 port 63098: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]
...
show less
2026-07-31T01:36:31.076746 server8.ohost.net sshd[1526806]: Failed password for root from 1.209.124. ...
show more2026-07-31T01:36:31.076746 server8.ohost.net sshd[1526806]: Failed password for root from 1.209.124.248 port 56603 ssh2
2026-07-31T01:36:33.377785 server8.ohost.net sshd[1526806]: Failed password for root from 1.209.124.248 port 56603 ssh2
2026-07-31T01:36:37.093769 server8.ohost.net sshd[1526806]: Failed password for root from 1.209.124.248 port 56603 ssh2
2026-07-31T01:36:40.283782 server8.ohost.net sshd[1526806]: Failed password for root from 1.209.124.248 port 56603 ssh2
2026-07-31T01:36:43.330792 server8.ohost.net sshd[1526806]: Failed password for root from 1.209.124.248 port 56603 ssh2
...
show less
2026-07-30T22:08:14.888208shield sshd\[21196\]: pam_unix\(sshd:auth\): authentication failure\; logn ...
show more2026-07-30T22:08:14.888208shield sshd\[21196\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.209.124.248 user=root
2026-07-30T22:08:16.702586shield sshd\[21196\]: Failed password for root from 1.209.124.248 port 64579 ssh2
2026-07-30T22:08:18.671093shield sshd\[21196\]: Failed password for root from 1.209.124.248 port 64579 ssh2
2026-07-30T22:08:20.581102shield sshd\[21196\]: Failed password for root from 1.209.124.248 port 64579 ssh2
2026-07-30T22:08:22.431957shield sshd\[21196\]: Failed password for root from 1.209.124.248 port 64579 ssh2
show less
Jul 30 13:07:41 centrum sshd-session[19686]: Unable to negotiate with 1.209.124.248 port 49185: no m ...
show moreJul 30 13:07:41 centrum sshd-session[19686]: Unable to negotiate with 1.209.124.248 port 49185: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]
Jul 30 23:51:32 centrum sshd-session[7802]: Unable to negotiate with 1.209.124.248 port 52460: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]
...
show less
Brute-Force
SSH
Anonymous
2026-07-30T21:12:10.751822zimbra sshd[20326]: pam_unix(sshd:auth): authentication failure; logname= ...
show more2026-07-30T21:12:10.751822zimbra sshd[20326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.209.124.248 user=root
2026-07-30T21:12:12.764221zimbra sshd[20326]: Failed password for root from 1.209.124.248 port 51575 ssh2
...
show less
2026-07-30T20:01:57.004454 proxy-ssh.dsi.uvsq.fr sshd[471048]: Failed password for root from 1.209.1 ...
show more2026-07-30T20:01:57.004454 proxy-ssh.dsi.uvsq.fr sshd[471048]: Failed password for root from 1.209.124.248 port 49170 ssh2
2026-07-30T20:02:00.910105 proxy-ssh.dsi.uvsq.fr sshd[471048]: Failed password for root from 1.209.124.248 port 49170 ssh2
2026-07-30T20:02:03.438154 proxy-ssh.dsi.uvsq.fr sshd[471048]: Failed password for root from 1.209.124.248 port 49170 ssh2
2026-07-30T20:02:07.200052 proxy-ssh.dsi.uvsq.fr sshd[471048]: Failed password for root from 1.209.124.248 port 49170 ssh2
2026-07-30T20:02:09.718526 proxy-ssh.dsi.uvsq.fr sshd[471048]: Failed password for root from 1.209.124.248 port 49170 ssh2
...
show less
Honeypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH
• Credentials: root:<Any pass> ...
show moreHoneypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH
• Credentials: root:<Any pass>, root:1, root:12, root:123, root:1234
• Number of login attempts: 5
• Client: SSH-2.0-libssh2_1.7.0
show less
Brute-Force
SSH
Anonymous
2026-07-30T20:24:07.405009 localhost.localdomain sshd[2705856]: pam_unix(sshd:auth): authentication ...
show more2026-07-30T20:24:07.405009 localhost.localdomain sshd[2705856]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.209.124.248 user=root
2026-07-30T20:24:09.297545 localhost.localdomain sshd[2705856]: Failed password for root from 1.209.124.248 port 56730 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-07-30T11:16:12.151051 DDMZLXSFV01 sshd[1071552]: Failed password for root from 1.209.124.248 po ...
show more2026-07-30T11:16:12.151051 DDMZLXSFV01 sshd[1071552]: Failed password for root from 1.209.124.248 port 49576 ssh2
2026-07-30T11:16:16.621451 DDMZLXSFV01 sshd[1071552]: Failed password for root from 1.209.124.248 port 49576 ssh2
2026-07-30T11:16:20.419012 DDMZLXSFV01 sshd[1071552]: Failed password for root from 1.209.124.248 port 49576 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 47 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩