This IP address has been reported a total of
58
times from
42 distinct
sources.
124.223.109.138 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Report 2525185 with IP 3572746 for SSH brute-force attack by source 3567410 via ssh-honeypot/0.2.1+h ...
show moreReport 2525185 with IP 3572746 for SSH brute-force attack by source 3567410 via ssh-honeypot/0.2.1+http
show less
2026-07-02T10:22:52.038912+02:00 router01.ib-heddier.de sshd[898802]: Connection closed by 124.223.1 ...
show more2026-07-02T10:22:52.038912+02:00 router01.ib-heddier.de sshd[898802]: Connection closed by 124.223.109.138 port 50776 [preauth]
2026-07-02T10:24:29.755082+02:00 router01.ib-heddier.de sshd[899203]: Invalid user gear from 124.223.109.138 port 51432
2026-07-02T10:24:30.003932+02:00 router01.ib-heddier.de sshd[899203]: Disconnected from invalid user gear 124.223.109.138 port 51432 [preauth]
2026-07-02T10:27:19.609198+02:00 router01.ib-heddier.de sshd[899639]: Invalid user ctc from 124.223.109.138 port 52090
2026-07-02T10:27:19.864818+02:00 router01.ib-heddier.de sshd[899639]: Disconnected from invalid user ctc 124.223.109.138 port 52090 [preauth]
show less
SSH Brute force: 1 attempts were recorded from 124.223.109.138
2026-07-01T09:11:27+02:00 Disconnecte ...
show moreSSH Brute force: 1 attempts were recorded from 124.223.109.138
2026-07-01T09:11:27+02:00 Disconnected from authenticating user root 124.223.109.138 port 46228 [preauth]
show less
SSH Brute force: 1 attempts were recorded from 124.223.109.138
2026-06-27T20:07:30+02:00 Invalid use ...
show moreSSH Brute force: 1 attempts were recorded from 124.223.109.138
2026-06-27T20:07:30+02:00 Invalid user esuser from 124.223.109.138 port 35430
show less
SSH Brute force: 11 attempts were recorded from 124.223.109.138
2026-06-26T16:11:56+02:00 Disconnect ...
show moreSSH Brute force: 11 attempts were recorded from 124.223.109.138
2026-06-26T16:11:56+02:00 Disconnected from authenticating user root 124.223.109.138 port 41710 [preauth]
2026-06-26T16:20:04+02:00 Disconnected from authenticating user root 124.223.109.138 port 35974 [preauth]
2026-06-26T16:21:12+02:00 Connection from 124.223.109.138 port 48360 on <redacted> port 22 rdomain ""
2026-06-26T16:21:13+02:00 Invalid user bitrix from 124.223.109.138 port 48360
2026-06-26T16:21:14+02:00 Disconnected from invalid user bitrix 124.223.109.138 port 48360 [preauth]
2026-06-26T16:22:12+02:00 Disconnected from authenticating user root 124.223.109.138 port 60716 [preauth]
2026-06-26T16:23:16+02:00 Connection from 124.223.109.138 port 44850 on <redacted> port 22 rdomain ""
2026-06-26T16:24:02+02:00 Connection closed by 124.223.109.138 port 44850 [preauth]
2026-06-26T16:24:31+02:00 Connection from 124.223.1
show less
2026-06-25T21:04:09.193877+08:00 *hostname* sshd-session[1859285]: Invalid user dirac from 124.223.1 ...
show more2026-06-25T21:04:09.193877+08:00 *hostname* sshd-session[1859285]: Invalid user dirac from 124.223.109.138 port 51708
2026-06-25T21:05:50.060576+08:00 *hostname* sshd-session[1859299]: Connection from 124.223.109.138 port 48166 on 157.90.9.74 port 22 rdomain ""
2026-06-25T21:05:51.294142+08:00 *hostname* sshd-session[1859299]: Invalid user asap from 124.223.109.138 port 48166
2026-06-25T21:07:28.296519+08:00 *hostname* sshd-session[1859309]: Connection from 124.223.109.138 port 44622 on 157.90.9.74 port 22 rdomain ""
2026-06-25T21:07:29.408383+08:00 *hostname* sshd-session[1859309]: Invalid user bdd from 124.223.109.138 port 44622
show less
Jun 25 15:01:48 oa sshd[3917328]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ...
show moreJun 25 15:01:48 oa sshd[3917328]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.223.109.138
Jun 25 15:01:50 oa sshd[3917328]: Failed password for invalid user minerva from 124.223.109.138 port 51982 ssh2
Jun 25 15:03:41 oa sshd[3917347]: Invalid user inside from 124.223.109.138 port 48446
Jun 25 15:03:41 oa sshd[3917347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.223.109.138
Jun 25 15:03:42 oa sshd[3917347]: Failed password for invalid user inside from 124.223.109.138 port 48446 ssh2
Jun 25 15:05:25 oa sshd[3917369]: Invalid user dirac from 124.223.109.138 port 44908
Jun 25 15:05:25 oa sshd[3917369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.223.109.138
Jun 25 15:05:27 oa sshd[3917369]: Failed password for invalid user dirac from 124.223.109.138 port 44908 ssh2
...
show less
2026-06-25T14:56:37.178631+02:00 adsnew sshd[1851517]: Failed password for invalid user reference fr ...
show more2026-06-25T14:56:37.178631+02:00 adsnew sshd[1851517]: Failed password for invalid user reference from 124.223.109.138 port 34340 ssh2
2026-06-25T15:01:22.024463+02:00 adsnew sshd[1852512]: Invalid user minerva from 124.223.109.138 port 46390
2026-06-25T15:01:22.037738+02:00 adsnew sshd[1852512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.223.109.138
2026-06-25T15:01:23.469970+02:00 adsnew sshd[1852512]: Failed password for invalid user minerva from 124.223.109.138 port 46390 ssh2
2026-06-25T15:03:08.113705+02:00 adsnew sshd[1852863]: Invalid user inside from 124.223.109.138 port 42858
...
show less
Brute-Force
SSH
Showing 1 to
15
of 58 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩