124.77.34.14

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
31 reports
28 reporters · latest 38 minutes ago
ISP
CHINANET Shanghai province network
Usage Type
Fixed Line ISP
ASN
AS4812
Domain Name
online.sh.cn
Country
🇨🇳 China
City
Shanghai, Shanghai
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
31 from 28 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 7 🇩🇪 Germany 6 🇺🇸 United States of America 6
Most common categories Port Scan 24 Hacking 15 Brute-Force 7 SSH 4 IoT Targeted 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇷🇸 Smel
MH/MP Probe, Scan, Hack -
Port Scan Hacking
🇮🇹 CoreTech srl
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_unsafe_protocol
Hacking
🇨🇦 nandadytm
[2026-11-13 18:35:24] Banned 124.77.34.14 after 3 attempts: Portscan probe on TCP port 23,2323,5555
Port Scan
🇺🇸 OceanTreasure
tcp/23; Legacy Telnet remote access probe @ 2026-11-13T13:48:15Z
IoT Targeted Port Scan
🇩🇪 schuh
13-11-2026:10:00:04UTC [Port Scan] unique_ports:4 ports:23,2323,5555,8443 (4 packets). SRC=124.77.34.14 TTL=52 DF PROTO=TCP SPT=53618 DPT=23 SYN
Port Scan
🇫🇷 uthul
T-Pot honeypot: 151 hits on ports [23, 2323, 5555, 8443] (automated)
Port Scan Brute-Force Web App Attack SSH
🇫🇷 uthul
T-Pot honeypot: 47 hits on ports [5555, 8443] (automated)
Port Scan Web App Attack
🇫🇮 Luhte
Unauthorised SSH/Telnet login attempt with user "root" at 2026-11-13T03:30:35Z
Brute-Force SSH
🇩🇪 FDC
Malicious activity from 124.77.34.14 detected by FDC honeypots. Categories: 14,15,18,22. 8 events in last 24h.
Port Scan Hacking Brute-Force SSH
🇩🇪 Ilop
[v7-22] Blocked by os-abuseipdb; 4 hits, proto=tcp, ports=23,2323,5555,8443, src_ip=124.77.34.14
Port Scan Hacking
Anonymous
Suspicious brute-force activity detected by MikroTik and the source IP was added to the Brut_knock_Blacklist.
Brute-Force
🇸🇪 warriors
Telnet honeypot observed a Mirai/Gafgyt-style payload staging attempt against TCP/23. username=root. Commands: cat, cd, rm, tftp.
Hacking Brute-Force Exploited Host IoT Targeted
🇵🇱 bart@
Automated scan detection against redacted protected targets. Hits=1; port 8443 proto 6 detection dark_ip
Port Scan
🇫🇷 EvoX
🛡️ Honeypot [bsts-tpot-hive]: Brute-force attack detected on 23/TELNET • Credential used: root:root • Number of login attempts: 1
Hacking
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 220.174.30.60
🇺🇸 193.202.15.17
🇲🇽 187.216.224.85
🇬🇧 185.216.145.186
🇮🇳 183.82.3.202
🇧🇷 179.190.12.132
🇫🇮 147.185.133.202
🇨🇳 118.212.122.183
🇳🇱 77.239.124.67
🇺🇸 74.208.14.192
🇮🇩 160.19.226.68
🇧🇷 131.72.222.134
🇳🇱 93.123.109.164
🇺🇸 70.183.233.130
🇬🇧 5.226.140.59
🇬🇧 2.57.17.235
🇮🇩 202.158.36.50
🇵🇱 172.68.159.216
🇮🇶 169.224.1.191
feedback