This IP address has been reported a total of
25
times from
19 distinct
sources.
124.152.1.70 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(sshd) Failed SSH login from 124.152.1.70 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction ...
show more(sshd) Failed SSH login from 124.152.1.70 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 17 02:16:36 10231 sshd[25552]: Did not receive identification string from 124.152.1.70 port 54199
Jun 17 02:17:45 10231 sshd[25553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.152.1.70 user=root
Jun 17 02:17:47 10231 sshd[25553]: Failed password for root from 124.152.1.70 port 54232 ssh2
Jun 17 02:18:06 10231 sshd[26173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.152.1.70 user=root
Jun 17 02:18:08 10231 sshd[26173]: Failed password for root from 124.152.1.70 port 49414 ssh2
show less
2026-06-16T11:05:36.830136+00:00 r1.sp1.as64172.enrut.ar sshd[4139252]: Failed password for root fro ...
show more2026-06-16T11:05:36.830136+00:00 r1.sp1.as64172.enrut.ar sshd[4139252]: Failed password for root from 124.152.1.70 port 11104 ssh2
2026-06-16T11:05:39.624433+00:00 r1.sp1.as64172.enrut.ar sshd[4139254]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.152.1.70 user=root
2026-06-16T11:05:42.301988+00:00 r1.sp1.as64172.enrut.ar sshd[4139254]: Failed password for root from 124.152.1.70 port 11686 ssh2
...
show less
Report 2463908 with IP 3511475 for SSH brute-force attack by source 3506133 via ssh-honeypot/0.2.0+h ...
show moreReport 2463908 with IP 3511475 for SSH brute-force attack by source 3506133 via ssh-honeypot/0.2.0+http
show less
Jun 13 08:21:55 C1D543E sshd[3122280]: User root from 124.152.1.70 not allowed because not listed in ...
show moreJun 13 08:21:55 C1D543E sshd[3122280]: User root from 124.152.1.70 not allowed because not listed in AllowUsers
Jun 13 08:21:56 C1D543E sshd[3122280]: Failed password for invalid user root from 124.152.1.70 port 4265 ssh2
Jun 13 08:21:57 C1D543E sshd[3122282]: User root from 124.152.1.70 not allowed because not listed in AllowUsers
Jun 13 08:21:57 C1D543E sshd[3122282]: Failed password for invalid user root from 124.152.1.70 port 59653 ssh2
Jun 13 08:21:59 C1D543E sshd[3122284]: User root from 124.152.1.70 not allowed because not listed in AllowUsers
...
show less
Brute-Force
SSH
Showing 1 to
15
of 25 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩