JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 124.128.75.106

124.128.75.106 was found in our database!

This IP was reported 1,311 times. Confidence of Abuse is 100%: ?

100%

ISP	JINANKONGJIAN NET BAR
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	cnc-noc.net
Country	🇨🇳 China
City	Qingdao, Shandong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 124.128.75.106

Whois 124.128.75.106

IP Abuse Reports for 124.128.75.106:

This IP address has been reported a total of 1,311 times from 428 distinct sources. 124.128.75.106 was first reported on November 1st 2023, and the most recent report was 12 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 ale	2026-06-04 03:30:24 (12 minutes ago)	SSH auth scanning - multiple failed logins	Brute-Force SSH
🇧🇬 OHOST.BG	2026-06-04 00:52:10 (2 hours ago)	Jun 4 00:52:01 shu sshd[26907]: Failed password for root from 124.128.75.106 port 34889 ssh2 Jun 4 ... show more Jun 4 00:52:01 shu sshd[26907]: Failed password for root from 124.128.75.106 port 34889 ssh2 Jun 4 00:52:06 shu sshd[27018]: Failed password for root from 124.128.75.106 port 34909 ssh2 ... show less	Brute-Force SSH
🇲🇳 Public CSIRT/CC of Mongolia	2026-06-03 20:31:32 (7 hours ago)	Honeypot hit: Empty payload (likely service probe); 2222 [1] TCP	Port Scan
🇧🇷 ICS Labs	2026-06-03 12:39:54 (15 hours ago)	ICS Labs identified 124.128.75.106 as a malicious indicator from threat intelligence.	DDoS Attack Hacking Exploited Host
🇮🇹 alph44	2026-06-03 11:04:26 (16 hours ago)	SSH brute force attack detected: 5 failed attempts	Brute-Force
🇺🇸 ShadowWhisperer	2026-06-03 08:37:45 (19 hours ago)	SSH credential attempt. (credential denied)	Brute-Force SSH
🇫🇮 Luhte	2026-06-03 07:57:36 (19 hours ago)	Unauthorised SSH/Telnet login attempt with user "root" at 2026-06-03T07:57:36Z	Brute-Force SSH
🇳🇱 donarev419	2026-06-03 04:34:09 (23 hours ago)	Port scan detected on port 9022 (connection without data transfer)	Port Scan
🇫🇷 GoodOldTOS	2026-06-03 04:09:28 (23 hours ago)	Connection to SSHTarpit	Hacking SSH
🇧🇪 sid3windr	2026-06-03 01:19:02 (1 day ago)	SSH port scan (Tarpitted for 20s, wasted 31B)	Port Scan SSH
🇬🇧 andypiper	2026-06-03 01:01:00 (1 day ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇺🇸 66691337	2026-06-03 00:15:05 (1 day ago)	2026-06-02T19:32:58.985132-04:00 ashburn sshd[776388]: pam_unix(sshd:auth): authentication failure; ... show more 2026-06-02T19:32:58.985132-04:00 ashburn sshd[776388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.128.75.106 user=root 2026-06-02T19:33:00.931624-04:00 ashburn sshd[776388]: Failed password for root from 124.128.75.106 port 51028 ssh2 2026-06-02T19:33:06.745784-04:00 ashburn sshd[776450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.128.75.106 user=root 2026-06-02T19:33:09.453119-04:00 ashburn sshd[776450]: Failed password for root from 124.128.75.106 port 51043 ssh2 2026-06-02T19:32:58.985132-04:00 ashburn sshd[776388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.128.75.106 user=root 2026-06-02T19:33:00.931624-04:00 ashburn sshd[776388]: Failed password for root from 124.128.75.106 port 51028 ssh2 2026-06-02T19:33:06.745784-04:00 ashburn sshd[776450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=12 ... show less	Brute-Force SSH
🇲🇽 Luyi_ASCII	2026-06-02 09:07:28 (1 day ago)	SSH brute force attack detected by Cowrie honeypot	Brute-Force SSH
🇺🇸 bigscoots.com	2026-06-02 05:53:30 (1 day ago)	124.128.75.106 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Por ... show more 124.128.75.106 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 2 00:53:08 13545 sshd[32235]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.128.75.106 user=root Jun 2 00:53:10 13545 sshd[32235]: Failed password for root from 124.128.75.106 port 54319 ssh2 Jun 2 00:26:53 13545 sshd[19240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.203.217.105 user=root Jun 2 00:19:28 13545 sshd[15191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.203.217.105 user=root Jun 2 00:19:30 13545 sshd[15191]: Failed password for root from 185.203.217.105 port 39884 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇩🇪 Datenautobahn	2026-06-02 04:00:40 (1 day ago)	2026-06-02T04:00:33.903244+00:00 my-vps sshd-session[3351740]: Failed password for root from 124.128 ... show more 2026-06-02T04:00:33.903244+00:00 my-vps sshd-session[3351740]: Failed password for root from 124.128.75.106 port 38572 ssh2 2026-06-02T04:00:37.778825+00:00 my-vps sshd-session[3352230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.128.75.106 user=root 2026-06-02T04:00:39.207337+00:00 my-vps sshd-session[3352230]: Failed password for root from 124.128.75.106 port 38586 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 1311 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 109.105.210.68

🇧🇷 45.232.73.84

🇸🇬 43.98.170.161

🇺🇸 205.209.118.37

🇵🇭 180.191.120.78

🇧🇪 178.51.118.43

🇺🇸 170.9.16.186

🇺🇸 64.62.156.102

🇲🇦 41.142.111.153

🇷🇺 31.173.31.66

🇺🇸 20.84.145.61

🇷🇺 213.183.120.56

🇺🇸 47.89.211.155

🇭🇰 47.86.198.216

🇧🇪 198.235.24.128

🇨🇳 180.153.91.15

🇺🇸 172.217.36.16

🇯🇵 164.52.120.4

🇵🇭 126.209.16.222

🇨🇳 119.249.100.180