JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 124.116.23.182

124.116.23.182 was found in our database!

This IP was reported 868 times. Confidence of Abuse is 100%: ?

100%

ISP	CHINANET Shanxi(SN) province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	xa.sn.cn
Country	🇨🇳 China
City	Xi'an, Shaanxi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 124.116.23.182

Whois 124.116.23.182

IP Abuse Reports for 124.116.23.182:

This IP address has been reported a total of 868 times from 102 distinct sources. 124.116.23.182 was first reported on March 17th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 bdonvr	2026-03-20 03:20:29 (2 months ago)	2026-03-20T02:09:50.136157+00:00 thelemmy.club sshd-session[3786385]: Unable to negotiate with 124.1 ... show more 2026-03-20T02:09:50.136157+00:00 thelemmy.club sshd-session[3786385]: Unable to negotiate with 124.116.23.182 port 58042: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth] 2026-03-20T03:20:28.947409+00:00 thelemmy.club sshd-session[3825474]: Unable to negotiate with 124.116.23.182 port 44922: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth] ... show less	Brute-Force SSH
🇭🇰 apnic.network	2026-03-20 03:14:17 (2 months ago)	Invalid user ubuntu from 124.116.23.182 port 46014	Brute-Force SSH
🇺🇸 RHNoah	2026-03-20 02:33:58 (2 months ago)	(sshd) Failed SSH login from 124.116.23.182 (CN/-/-): 5 in the last 3600 secs; Ports: ; Direction: ... show more (sshd) Failed SSH login from 124.116.23.182 (CN/-/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Mar 19 22:18:31 na-s3 sshd[762249]: Invalid user ubuntu from 124.116.23.182 port 45796 Mar 19 22:21:41 na-s3 sshd[791185]: Invalid user ubuntu from 124.116.23.182 port 57224 Mar 19 22:27:05 na-s3 sshd[843245]: Invalid user ubuntu from 124.116.23.182 port 50364 Mar 19 22:31:30 na-s3 sshd[884326]: Invalid user ubuntu from 124.116.23.182 port 46642 Mar 19 22:33:52 na-s3 sshd[907430]: Invalid user ubuntu from 124.116.23.182 port 34358 show less	Port Scan
🇭🇰 bing	2026-03-20 02:22:42 (2 months ago)	2026-03-19T22:22:40.665059 MikuHK sshd[2705821]: pam_unix(sshd:auth): authentication failure; lognam ... show more 2026-03-19T22:22:40.665059 MikuHK sshd[2705821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.116.23.182 2026-03-19T22:22:42.280789 MikuHK sshd[2705821]: Failed password for invalid user ubuntu from 124.116.23.182 port 40162 ssh2 ... show less	Brute-Force SSH
🇺🇸 ras07	2026-03-20 01:00:15 (2 months ago)	Brute force SSH login attempts.	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-03-19 22:41:09 (2 months ago)	ThreatBook Intelligence: Scanner,Gateway more details on https://threatbook.io/ip/124.116.23.182 202 ... show more ThreatBook Intelligence: Scanner,Gateway more details on https://threatbook.io/ip/124.116.23.182 2026-03-19 01:04:50 ["uname -a"] 2026-03-19 01:00:26 ["uname -a"] 2026-03-19 00:50:23 ["uname -a"] 2026-03-19 00:55:05 ["uname -a"] 2026-03-19 01:03:22 ["uname -a"] 2026-03-19 01:14:59 ["uname -a"] 2026-03-19 00:52:10 ["uname -a"] 2026-03-19 00:57:28 ["uname -a"] show less	Brute-Force
🇭🇰 edisonjwa	2026-03-19 02:39:24 (2 months ago)	2026-03-18T21:00:10.707017+00:00 localhost sshd-session[504022]: error: PAM: Authentication failure ... show more 2026-03-18T21:00:10.707017+00:00 localhost sshd-session[504022]: error: PAM: Authentication failure for root from 124.116.23.182 2026-03-18T22:21:03.683280+00:00 localhost sshd-session[504525]: Invalid user ubuntu from 124.116.23.182 port 33354 2026-03-18T23:42:16.431093+00:00 localhost sshd-session[505081]: Invalid user ubuntu from 124.116.23.182 port 36662 2026-03-19T01:08:00.492984+00:00 localhost sshd-session[505828]: Invalid user ubuntu from 124.116.23.182 port 34444 2026-03-19T02:39:22.451691+00:00 localhost sshd-session[506464]: error: PAM: Authentication failure for root from 124.116.23.182 ... show less	Port Scan Brute-Force SSH
🇲🇳 Public CSIRT/CC of Mongolia	2026-03-19 01:16:54 (2 months ago)	Honeypot hit: Brute-force attack detected on 22/SSH • Credential used: root:root@root • Number of lo ... show more Honeypot hit: Brute-force attack detected on 22/SSH • Credential used: root:root@root • Number of login attempts: 1 • Client: SSH-2.0-phpseclib_1.0 (openssl) show less	Hacking SSH
🇧🇩 sakibmas	2026-03-19 00:30:03 (2 months ago)	Mar 19 06:30:00 rcloud sshd[116242]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show more Mar 19 06:30:00 rcloud sshd[116242]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.116.23.182 Mar 19 06:30:02 rcloud sshd[116242]: Failed password for invalid user ubuntu from 124.116.23.182 port 54566 ssh2 ... show less	Brute-Force SSH
🇧🇩 sakibmas	2026-03-19 00:05:45 (2 months ago)	2026-03-19T06:05:42.950045+06:00 passbolt sshd[1291577]: pam_unix(sshd:auth): authentication failure ... show more 2026-03-19T06:05:42.950045+06:00 passbolt sshd[1291577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.116.23.182 2026-03-19T06:05:45.164035+06:00 passbolt sshd[1291577]: Failed password for invalid user ubuntu from 124.116.23.182 port 53134 ssh2 ... show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-03-18 22:39:35 (2 months ago)	ThreatBook Intelligence: Scanner,Gateway more details on https://threatbook.io/ip/124.116.23.182 202 ... show more ThreatBook Intelligence: Scanner,Gateway more details on https://threatbook.io/ip/124.116.23.182 2026-03-18 07:47:23 ["uname -a"] 2026-03-18 10:19:44 ["uname -a"] 2026-03-18 13:05:52 ["uname -a"] 2026-03-18 12:02:09 ["uname -a"] show less	Brute-Force
🇳🇱 Selckie	2026-03-18 21:17:06 (2 months ago)	fail2ban: SSH Brute-Force	SSH Brute-Force
🇳🇬 gbzret4d	2026-03-18 19:44:27 (2 months ago)	Blocked by CrowdSec. Scenario: crowdsecurity/ssh-bf	Brute-Force SSH
🇹🇷 Threat.live	2026-03-18 19:35:21 (2 months ago)	Brute Force, tcp/22	Brute-Force
🇯🇵 mkaraki	2026-03-18 19:29:38 (2 months ago)	1773862176 # Service_probe # SIGNATURE_SEND # source_ip:124.116.23.182 # dst_port:22 ...	Port Scan

Showing 841 to 855 of 868 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 203.210.237.184

🇮🇳 182.95.230.150

🇮🇳 182.95.181.138

🇮🇳 182.95.181.50

🇸🇬 167.172.86.134

🇸🇬 103.20.122.54

🇫🇷 91.231.89.251

🇬🇧 35.203.210.185

🇺🇸 195.184.76.150

🇨🇷 190.113.84.142

🇮🇳 182.95.43.86

🇮🇩 182.8.178.180

🇩🇪 178.105.187.230

🇳🇱 172.94.9.120

🇵🇱 172.64.200.28

🇩🇪 144.76.132.76

🇮🇳 122.185.100.218

🇮🇳 122.167.72.60

🇩🇪 89.58.10.55

🇺🇸 20.64.104.195