JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 124.152.185.112

124.152.185.112 was found in our database!

This IP was reported 120 times. Confidence of Abuse is 79%: ?

79%

ISP	China Unicom Gansu province network
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Lanzhou, Gansu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 124.152.185.112

Whois 124.152.185.112

IP Abuse Reports for 124.152.185.112:

This IP address has been reported a total of 120 times from 59 distinct sources. 124.152.185.112 was first reported on September 17th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 thierolf.org (Abuse reporting)	2026-06-04 14:45:13 (1 day ago)	Fail2Ban: Mail-Server	Brute-Force SSH
🇩🇪 ghostwarriors	2026-06-02 03:20:18 (4 days ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇫🇮 42	2026-06-02 02:52:52 (4 days ago)	2026-06-02T04:52:23.544620+02:00 nyx sshd-session[322184]: pam_unix(sshd:auth): authentication failu ... show more 2026-06-02T04:52:23.544620+02:00 nyx sshd-session[322184]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.152.185.112 2026-06-02T04:52:25.349626+02:00 nyx sshd-session[322184]: Failed password for invalid user logstah from 124.152.185.112 port 44898 ssh2 2026-06-02T04:52:49.651577+02:00 nyx sshd-session[322186]: Invalid user delhi from 124.152.185.112 port 49510 2026-06-02T04:52:49.920120+02:00 nyx sshd-session[322186]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.152.185.112 2026-06-02T04:52:51.895051+02:00 nyx sshd-session[322186]: Failed password for invalid user delhi from 124.152.185.112 port 49510 ssh2 ... show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-06-01 03:20:11 (5 days ago)	Unauthorized connection to FTP port 21	FTP Brute-Force Brute-Force
🇫🇷 bongcloud.de	2026-05-31 13:48:14 (5 days ago)	May 31 15:48:14 web sshd[1451827]: Invalid user intern02 from 124.152.185.112 port 41678 ...	Brute-Force SSH
🇩🇪 Ba-Yu	2026-05-30 13:30:27 (6 days ago)	Unauthorized ssh login attempt	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇩🇪 -SK-	2026-05-27 08:29:40 (1 week ago)	FALK (f2b sshd, abuse	Brute-Force SSH
🇩🇪 fds.io	2026-05-25 14:22:34 (1 week ago)	detected ssh attack on a non-default port	Brute-Force SSH
🇩🇪 GrafSchnüffel	2026-05-20 09:00:42 (2 weeks ago)	2026-05-20T10:59:50.331931+02:00 admin sshd[1107677]: pam_unix(sshd:auth): authentication failure; l ... show more 2026-05-20T10:59:50.331931+02:00 admin sshd[1107677]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.152.185.112 2026-05-20T10:59:51.850201+02:00 admin sshd[1107677]: Failed password for invalid user wuzhikun from 124.152.185.112 port 56304 ssh2 2026-05-20T11:00:15.826867+02:00 admin sshd[1108341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.152.185.112 user=root 2026-05-20T11:00:18.113381+02:00 admin sshd[1108341]: Failed password for root from 124.152.185.112 port 57698 ssh2 2026-05-20T11:00:41.433457+02:00 admin sshd[1108347]: Invalid user smartv from 124.152.185.112 port 59060 ... show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-05-19 09:20:10 (2 weeks ago)	Unauthorized connection to FTP port 21	FTP Brute-Force Brute-Force
Anonymous	2026-05-19 02:51:27 (2 weeks ago)	"Unauthorized connection attempt on SSHD detected"	Brute-Force SSH
🇫🇷 Fasetech	2026-05-17 01:59:34 (2 weeks ago)	SecLedge detected suspicious activity. Score: 1117.8. Sensor: T-Pot.	Brute-Force Web App Attack
🇩🇪 rooty	2026-05-16 14:24:07 (2 weeks ago)	May 16 17:21:28 rooty sshd-session[2170]: Invalid user amsftp from 124.152.185.112 port 41178 May 16 ... show more May 16 17:21:28 rooty sshd-session[2170]: Invalid user amsftp from 124.152.185.112 port 41178 May 16 17:21:57 rooty sshd-session[2184]: Invalid user git from 124.152.185.112 port 42634 May 16 17:22:27 rooty sshd-session[2204]: Invalid user server from 124.152.185.112 port 44070 May 16 17:22:56 rooty sshd-session[2217]: Invalid user vnc from 124.152.185.112 port 45424 May 16 17:24:06 rooty sshd-session[2254]: Invalid user developer from 124.152.185.112 port 49048 ... show less	Brute-Force SSH
🇩🇪 hserv	2026-05-16 08:30:12 (3 weeks ago)	2026-05-16T10:28:34.096004+02:00 h04 sshd[2861944]: Invalid user dbuser from 124.152.185.112 port 44 ... show more 2026-05-16T10:28:34.096004+02:00 h04 sshd[2861944]: Invalid user dbuser from 124.152.185.112 port 44628 2026-05-16T10:29:01.069187+02:00 h04 sshd[2870692]: Invalid user openstack from 124.152.185.112 port 46036 2026-05-16T10:29:27.654038+02:00 h04 sshd[2881210]: Invalid user sysadmin from 124.152.185.112 port 47372 2026-05-16T10:29:51.545010+02:00 h04 sshd[2889523]: Invalid user glassfish from 124.152.185.112 port 48562 2026-05-16T10:30:12.411666+02:00 h04 sshd[2898108]: Invalid user www from 124.152.185.112 port 49848 ... show less	Brute-Force SSH
Anonymous	2026-05-14 12:40:39 (3 weeks ago)	May 14 14:38:58 server21 sshd-session[24855]: User root from 124.152.185.112 not allowed because not ... show more May 14 14:38:58 server21 sshd-session[24855]: User root from 124.152.185.112 not allowed because not listed in AllowUsers May 14 14:39:25 server21 sshd-session[24872]: Invalid user wordpress from 124.152.185.112 port 42116 May 14 14:39:52 server21 sshd-session[24877]: Invalid user django from 124.152.185.112 port 43502 May 14 14:40:17 server21 sshd-session[25310]: Invalid user postgres from 124.152.185.112 port 44862 May 14 14:40:38 server21 sshd-session[25350]: Invalid user busybox from 124.152.185.112 port 46064 ... show less	Brute-Force SSH

Showing 1 to 15 of 120 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 186.96.145.241

🇷🇴 162.249.125.150

🇮🇳 122.187.251.73

🇩🇪 69.5.169.222

🇺🇸 34.134.228.157

🇧🇪 34.62.253.166

🇸🇪 16.171.181.251

🇭🇰 8.217.133.144

🇫🇷 2a02:c207:2326:4744::1

🇭🇰 194.187.178.108

🇨🇳 182.121.68.156

🇭🇰 118.193.44.184

🇨🇦 85.217.149.46

🇳🇱 77.83.39.217

🇺🇸 66.132.195.88

🇳🇱 45.144.212.75

🇬🇭 41.242.115.84

🇧🇷 205.210.31.205

🇫🇷 176.191.43.176

🇺🇸 172.253.91.145