JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

124.220.12.167

Recent Activity

Abuse Confidence Score

66% Elevated

30 reports

13 reporters · latest 16 hours ago

ISP: Tencent cloud computing (Beijing) Co., Ltd.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS45090
Domain Name: tencentcloud.com
Country: 🇨🇳 China
City: Shanghai, Shanghai

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

30 from 13 distinct reporters

First reported

October 26th 2026

Most recent report

16 hours ago

Last 60 days

Top reporter locations 🇨🇳 China 22 🇦🇺 Australia 2 🇺🇸 United States of America 2

Most common categories Brute-Force 29 SSH 27 Port Scan 2 IoT Targeted 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 wolfogre	2026-11-07 04:56:53 UTC · (16 hours ago)	Funeypot detected 7 ssh attempts in 1h47m23s. Last by user "root", password "roo***234", client "russh_0.45.0".	Brute-Force SSH
🇨🇳 さいとうあすか	2026-11-07 04:27:56 UTC · (16 hours ago)	2026-11-07T12:27:52.329078+08:00 pbs sshd[826067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.220.12.167 2026-11-07T12:27:55.140515+08:00 pbs sshd[826067]: Failed password for invalid user rootbridge ... show more 2026-11-07T12:27:52.329078+08:00 pbs sshd[826067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.220.12.167 2026-11-07T12:27:55.140515+08:00 pbs sshd[826067]: Failed password for invalid user rootbridge from 124.220.12.167 port 51466 ssh2 ... show less	Brute-Force SSH
🇨🇳 wolfogre	2026-11-07 04:24:10 UTC · (16 hours ago)	Funeypot detected 5 ssh attempts in 1h14m40s. Last by user "root", password "lo***23", client "russh_0.45.0".	Brute-Force SSH
🇨🇭 Elysium Security	2026-11-06 23:37:51 UTC · (21 hours ago)	Mass port scanning on a whole network	Port Scan
🇮🇩 BanuaCloud	2026-11-06 22:00:45 UTC · (23 hours ago)	Automated honeypot probe on TCP/2222: unused service port was contacted (likely scanner/botnet). Reported by Banua Cloud MikroTik router "Distri249". Source: Banua Cloud MikroTik abuse desk.	Brute-Force
🇨🇳 wolfogre	2026-11-06 02:30:23 UTC · (1 day ago)	Funeypot detected 11 ssh attempts in 1h58m25s. Last by user "yuzhilong", password "12**56", client "russh_0.45.0".	Brute-Force SSH
🇨🇳 wolfogre	2026-11-06 01:56:37 UTC · (1 day ago)	Funeypot detected 8 ssh attempts in 1h24m39s. Last by user "yumufan", password "yu***an", client "russh_0.45.0".	Brute-Force SSH
🇨🇳 wolfogre	2026-11-06 01:22:41 UTC · (1 day ago)	Funeypot detected 5 ssh attempts in 50m44s. Last by user "zhangyuwen", password "zha****wen", client "russh_0.45.0".	Brute-Force SSH
🇨🇳 さいとうあすか	2026-11-06 00:36:38 UTC · (1 day ago)	2026-11-06T08:36:34.515745+08:00 pbs sshd[1164265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.220.12.167 2026-11-06T08:36:36.235505+08:00 pbs sshd[1164265]: Failed password for invalid user wuji from ... show more 2026-11-06T08:36:34.515745+08:00 pbs sshd[1164265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.220.12.167 2026-11-06T08:36:36.235505+08:00 pbs sshd[1164265]: Failed password for invalid user wuji from 124.220.12.167 port 44512 ssh2 ... show less	Brute-Force SSH
🇺🇸 seb6062	2026-11-04 16:31:16 UTC · (3 days ago)	SSH tarpit on port 22: 1 connection(s) in the last 24h, held 310 s in total, longest 310 s. Unsolicited SSH to a port with no SSH service: SSH client held by the tarpit (brute-force tool behavior). Automated endlessh tarpit report.	Brute-Force SSH
🇦🇺 Klaverstyn	2026-11-04 15:42:54 UTC · (3 days ago)	Connection to SSH honeypot	Brute-Force SSH
🇺🇸 johuang92	2026-11-02 18:31:37 UTC · (5 days ago)	Cowrie SSH honeypot: session 736016c28791 \| 1 login attempt(s) \| 7 command(s): /bin/sh -c 'U=$(/bin/uname -a 2>/dev/null \| /usr/bin/tr -d "\n"); N=$(/usr/bin/nproc 2>/dev/null \|\| /bin/grep -c ^processor /proc/cpuinfo 2>/dev/null); /usr/bin/printf "%s ... show more Cowrie SSH honeypot: session 736016c28791 \| 1 login attempt(s) \| 7 command(s): /bin/sh -c 'U=$(/bin/uname -a 2>/dev/null \| /usr/bin/tr -d "\n"); N=$(/usr/bin/nproc 2>/dev/null \|\| /bin/grep -c ^processor /proc/cpuinfo 2>/dev/null); /usr/bin/printf "%s CPU:%s" "$U" "$N"' ; true; /bin/uname -a 2 > /dev/null \| /usr/bin/tr -d \n; /usr/bin/nproc 2 > /dev/null; /bin/grep -c ^processor /proc/cpuinfo 2 > /dev/null; U=; N=2 processor : 0 processor : 1; /usr/bin/printf "%s CPU:%s" "$U" "$N" \| classified as: brute_force, persistence, reconnaissance show less	Brute-Force SSH IoT Targeted
🇦🇺 Klaverstyn	2026-11-02 18:23:32 UTC · (5 days ago)	Connection to SSH honeypot	Brute-Force SSH
🇨🇳 さいとうあすか	2026-10-29 16:08:12 UTC · (1 week ago)	Oct 30 00:08:10 pbs sshd[3368233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.220.12.167 user=root Oct 30 00:08:11 pbs sshd[3368233]: Failed password for root from 124.220.12.167 port 42208 ssh2 ...	Brute-Force SSH
🇨🇳 CGT Software Webmaster	2026-10-28 13:37:10 UTC · (1 week ago)	2026-10-28T21:29:06.636609+08:00 VM-8-9-debian sshd[2972662]: Failed password for invalid user dockerroot from 124.220.12.167 port 58324 ssh2 2026-10-28T21:37:06.967601+08:00 VM-8-9-debian sshd[2973680]: pam_unix(sshd:auth): authentication failure; l ... show more 2026-10-28T21:29:06.636609+08:00 VM-8-9-debian sshd[2972662]: Failed password for invalid user dockerroot from 124.220.12.167 port 58324 ssh2 2026-10-28T21:37:06.967601+08:00 VM-8-9-debian sshd[2973680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.220.12.167 user=root 2026-10-28T21:37:08.636202+08:00 VM-8-9-debian sshd[2973680]: Failed password for root from 124.220.12.167 port 47720 ssh2 ... show less	Port Scan Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 185.214.242.197

🇺🇸 165.154.162.102

🇺🇸 216.25.89.116

🇮🇩 163.7.6.41

🇧🇩 103.153.53.133

🇺🇸 66.154.106.119

🇺🇸 2a03:2880:f818:56::

🇨🇭 209.99.190.186

🇮🇳 203.145.165.2

🇧🇪 198.235.24.215

🇧🇷 177.54.41.142

🇺🇸 160.79.106.129

🇪🇨 157.100.58.189

🇨🇳 123.129.205.22

🇧🇩 103.77.252.73

🇨🇳 101.96.192.45

🇫🇷 51.77.216.62

🇨🇦 45.198.224.85

🇺🇸 45.33.80.243

🇵🇰 37.111.135.255