JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

124.121.31.202

Neutral Activity

Abuse Confidence Score

0% Low Risk

84 reports

54 reporters · latest 4 months ago

ISP: TRUEHISP
Usage Type: Fixed Line ISP
ASN: AS17552
Domain Name: true.th
Country: 🇹🇭 Thailand
City: Bangkok, Bangkok

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

124.121.31.202 has been reported 84 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

84 from 54 distinct reporters

First reported

September 17th 2021

Most recent report

4 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-07-10 19:12:07 UTC · (4 months ago)	ICS Labs identified 124.121.31.202 as a malicious indicator from threat intelligence.	DDoS Attack Port Scan Hacking Brute-Force Exploited Host
🇫🇷 SpaceHost-Server	2026-05-03 22:29:13 UTC · (6 months ago)		Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2026-05-03 01:05:21 UTC · (6 months ago)	ThreatBook Intelligence: Spam more details on http://threatbook.io/ip/124.121.31.202	SSH
🇫🇮 botwork.se	2026-05-02 21:43:32 UTC · (6 months ago)	2026-05-02T21:33:39.960209+00:00 debian-4gb-hel1-2 18fe2893d46b[3158683]: Invalid user mysql from 124.121.31.202 port 58586 2026-05-02T21:36:05.785191+00:00 debian-4gb-hel1-2 18fe2893d46b[3158683]: Invalid user testuser from 124.121.31.202 port 5982 ... show more 2026-05-02T21:33:39.960209+00:00 debian-4gb-hel1-2 18fe2893d46b[3158683]: Invalid user mysql from 124.121.31.202 port 58586 2026-05-02T21:36:05.785191+00:00 debian-4gb-hel1-2 18fe2893d46b[3158683]: Invalid user testuser from 124.121.31.202 port 59826 2026-05-02T21:37:21.515046+00:00 debian-4gb-hel1-2 18fe2893d46b[3158683]: Invalid user admin from 124.121.31.202 port 49344 2026-05-02T21:42:19.114582+00:00 debian-4gb-hel1-2 18fe2893d46b[3158683]: Invalid user admin from 124.121.31.202 port 50674 2026-05-02T21:43:28.148476+00:00 debian-4gb-hel1-2 18fe2893d46b[3158683]: Invalid user arkserver from 124.121.31.202 port 37892 ... show less	Brute-Force SSH
🇵🇱 JavaStart	2026-05-02 21:39:42 UTC · (6 months ago)	May 2 23:34:51 javastart sshd[2468812]: Failed password for invalid user git from 124.121.31.202 port 38486 ssh2 May 2 23:38:30 javastart sshd[2469332]: Invalid user mysql from 124.121.31.202 port 47422 May 2 23:38:30 javastart sshd[2469332]: pam_ ... show more May 2 23:34:51 javastart sshd[2468812]: Failed password for invalid user git from 124.121.31.202 port 38486 ssh2 May 2 23:38:30 javastart sshd[2469332]: Invalid user mysql from 124.121.31.202 port 47422 May 2 23:38:30 javastart sshd[2469332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.121.31.202 May 2 23:38:31 javastart sshd[2469332]: Failed password for invalid user mysql from 124.121.31.202 port 47422 ssh2 May 2 23:39:42 javastart sshd[2469508]: Invalid user ubuntu from 124.121.31.202 port 51838 ... show less	Brute-Force SSH
🇩🇪 js-hosting.at	2026-05-02 21:38:33 UTC · (6 months ago)	SSH Brute-Force attacks	Brute-Force SSH
🇫🇷 NoaQT	2026-05-02 21:13:43 UTC · (6 months ago)	2026-05-02T23:06:37.116262+02:00 conbox sshd-session[3764898]: Disconnected from authenticating user root 124.121.31.202 port 40028 [preauth] 2026-05-02T23:13:43.000522+02:00 conbox sshd-session[3770879]: Invalid user guest from 124.121.31.202 port 5 ... show more 2026-05-02T23:06:37.116262+02:00 conbox sshd-session[3764898]: Disconnected from authenticating user root 124.121.31.202 port 40028 [preauth] 2026-05-02T23:13:43.000522+02:00 conbox sshd-session[3770879]: Invalid user guest from 124.121.31.202 port 57894 2026-05-02T23:13:43.251692+02:00 conbox sshd-session[3770879]: Disconnected from invalid user guest 124.121.31.202 port 57894 [preauth] ... show less	Brute-Force SSH
🇮🇹 alph44	2026-05-02 20:29:22 UTC · (6 months ago)	SSH brute force attack detected: 6 failed attempts	Brute-Force
🇩🇪 formality	2026-05-02 20:12:57 UTC · (6 months ago)	Invalid user tester from 124.121.31.202 port 54094	Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-02 20:12:41 UTC · (6 months ago)	124.121.31.202 (TH/Thailand/ppp-124-121-31-202.revip2.asianet.co.th), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 2 15:12:23 14069 sshd[31151]: pam_unix(sshd:auth): au ... show more 124.121.31.202 (TH/Thailand/ppp-124-121-31-202.revip2.asianet.co.th), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 2 15:12:23 14069 sshd[31151]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.4.175.199 user=root May 2 15:05:42 14069 sshd[30633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.4.175.199 user=root May 2 15:05:44 14069 sshd[30633]: Failed password for root from 1.4.175.199 port 45700 ssh2 May 2 15:11:11 14069 sshd[31066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.121.31.202 user=root May 2 15:11:13 14069 sshd[31066]: Failed password for root from 124.121.31.202 port 55518 ssh2 IP Addresses Blocked: 1.4.175.199 (TH/Thailand/node-9fr.pool-1-4.dynamic.nt-isp.net) show less	Brute-Force SSH
🇫🇷 Sayrix	2026-05-02 18:20:38 UTC · (6 months ago)	May 2 18:17:05 Sayrix2 sshd[177785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.121.31.202 user=root May 2 18:17:06 Sayrix2 sshd[177785]: Failed password for root from 124.121.31.202 port 36170 ssh2 ... show more May 2 18:17:05 Sayrix2 sshd[177785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.121.31.202 user=root May 2 18:17:06 Sayrix2 sshd[177785]: Failed password for root from 124.121.31.202 port 36170 ssh2 May 2 18:19:21 Sayrix2 sshd[177790]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.121.31.202 user=root May 2 18:19:23 Sayrix2 sshd[177790]: Failed password for root from 124.121.31.202 port 56470 ssh2 May 2 18:20:33 Sayrix2 sshd[177808]: Invalid user david from 124.121.31.202 port 37458 ... show less	Brute-Force SSH
🇺🇸 MSchienle	2026-05-02 18:11:15 UTC · (6 months ago)	2026-05-02 13:07:40.201570-0500 localhost sshd-session[15658]: Failed password for root from 124.121.31.202 port 53296 ssh2	Brute-Force
🇺🇸 MSchienle	2026-05-02 17:46:09 UTC · (6 months ago)	2026-05-02 12:43:38.414522-0500 localhost sshd-session[5286]: Failed password for root from 124.121.31.202 port 42790 ssh2	Brute-Force
🇺🇸 bigscoots.com	2026-05-02 17:39:56 UTC · (6 months ago)	124.121.31.202 (TH/Thailand/ppp-124-121-31-202.revip2.asianet.co.th), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 2 12:30:26 15120 sshd[12038]: pam_unix(sshd:auth): au ... show more 124.121.31.202 (TH/Thailand/ppp-124-121-31-202.revip2.asianet.co.th), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 2 12:30:26 15120 sshd[12038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.165.24.20 user=root May 2 12:30:28 15120 sshd[12038]: Failed password for root from 189.165.24.20 port 35606 ssh2 May 2 12:39:46 15120 sshd[12628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.165.24.20 user=root May 2 12:12:21 15120 sshd[10462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.121.31.202 user=root May 2 12:12:23 15120 sshd[10462]: Failed password for root from 124.121.31.202 port 44920 ssh2 IP Addresses Blocked: 189.165.24.20 (MX/Mexico/dsl-20-24-165-189-dynamic.prod-infinitum.com.mx) show less	Brute-Force SSH
🇺🇸 drewf.ink	2026-05-02 17:34:42 UTC · (6 months ago)	[17:34] Attempted SSH login on port 2222 with credentials user7:user7	Brute-Force SSH

Showing 1 to 15 of 84 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇫🇮 147.185.133.88

🇨🇦 142.44.228.63

🇲🇾 120.141.19.105

🇩🇪 109.160.32.102

🇫🇷 103.110.160.75

🇺🇸 66.132.172.239

🇨🇦 54.39.203.227

🇨🇦 51.161.65.79

🇺🇸 34.106.38.173

🇨🇦 15.235.98.49

🇨🇳 221.7.147.194

🇰🇭 203.147.134.60

🇳🇱 185.242.226.73

🇺🇸 167.172.156.3

🇨🇦 148.113.128.188

🇨🇦 142.44.233.201

🇨🇦 142.44.220.57

🇸🇬 111.91.26.22

🇸🇪 77.53.79.11

🇺🇸 66.132.159.118