JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

124.95.165.207

Neutral Activity

Abuse Confidence Score

0% Low Risk

278 reports

110 reporters · latest 11 months ago

ISP: China Unicom Liaoning province network
Usage Type: Fixed Line ISP
ASN: AS4837
Domain Name: chinaunicom.cn
Country: 🇨🇳 China
City: Shenyang, Liaoning

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

124.95.165.207 has been reported 278 times. The most recent report is from 11 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

278 from 110 distinct reporters

First reported

September 27th 2023

Most recent report

11 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇪 RoboSOC	2025-12-02 16:09:55 UTC · (11 months ago)	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	Port Scan
🇺🇸 Cyber Crusader	2025-12-01 20:59:41 UTC · (11 months ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇨🇳 ThreatBook.io	2025-11-06 22:40:23 UTC · (1 year ago)	ThreatBook Intelligence: Scanner,Gateway more details on https://threatbook.io/ip/124.95.165.207 2025-11-06 21:34:52 ["curl dow.luotuoxiangzi.cc/index.html"]	Brute-Force
🇨🇳 ThreatBook.io	2025-11-04 22:44:04 UTC · (1 year ago)	ThreatBook Intelligence: Scanner,Gateway more details on https://threatbook.io/ip/124.95.165.207	SSH
🇨🇳 ThreatBook.io	2025-11-02 22:40:48 UTC · (1 year ago)	ThreatBook Intelligence: Scanner,Gateway more details on https://threatbook.io/ip/124.95.165.207	Brute-Force
🇨🇳 GoForceX	2025-10-29 10:46:10 UTC · (1 year ago)	2025-10-29T18:46:03.123383+08:00 C20241211186402 sshd[404335]: Failed password for root from 124.95.165.207 port 48706 ssh2 2025-10-29T18:46:03.552779+08:00 C20241211186402 sshd[404337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show more 2025-10-29T18:46:03.123383+08:00 C20241211186402 sshd[404335]: Failed password for root from 124.95.165.207 port 48706 ssh2 2025-10-29T18:46:03.552779+08:00 C20241211186402 sshd[404337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.95.165.207 user=root 2025-10-29T18:46:05.955418+08:00 C20241211186402 sshd[404337]: Failed password for root from 124.95.165.207 port 48858 ssh2 2025-10-29T18:46:07.735147+08:00 C20241211186402 sshd[404357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.95.165.207 user=root 2025-10-29T18:46:09.687342+08:00 C20241211186402 sshd[404357]: Failed password for root from 124.95.165.207 port 49086 ssh2 ... show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2025-10-27 22:32:16 UTC · (1 year ago)	ThreatBook Intelligence: Scanner,Gateway more details on https://threatbook.io/ip/124.95.165.207	Brute-Force
🇰🇷 Woodie	2025-10-27 01:20:25 UTC · (1 year ago)	2025-10-27T10:20:14.785074+09:00 debian sshd[3310163]: Failed password for root from 124.95.165.207 port 41612 ssh2 2025-10-27T10:20:23.273770+09:00 debian sshd[3310196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruse ... show more 2025-10-27T10:20:14.785074+09:00 debian sshd[3310163]: Failed password for root from 124.95.165.207 port 41612 ssh2 2025-10-27T10:20:23.273770+09:00 debian sshd[3310196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.95.165.207 user=root 2025-10-27T10:20:24.542830+09:00 debian sshd[3310196]: Failed password for root from 124.95.165.207 port 42676 ssh2 ... show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2025-10-24 22:34:03 UTC · (1 year ago)	ThreatBook Intelligence: Scanner,Gateway more details on https://threatbook.io/ip/124.95.165.207	SSH
🇸🇬 kipfel★	2025-10-23 10:39:32 UTC · (1 year ago)	2025-10-23T18:39:27.326635+08:00 lw-vm-v1-sgp sshd[129300]: Failed password for root from 124.95.165.207 port 48234 ssh2 2025-10-23T18:39:29.727883+08:00 lw-vm-v1-sgp sshd[129317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tt ... show more 2025-10-23T18:39:27.326635+08:00 lw-vm-v1-sgp sshd[129300]: Failed password for root from 124.95.165.207 port 48234 ssh2 2025-10-23T18:39:29.727883+08:00 lw-vm-v1-sgp sshd[129317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.95.165.207 user=root 2025-10-23T18:39:31.416814+08:00 lw-vm-v1-sgp sshd[129317]: Failed password for root from 124.95.165.207 port 48808 ssh2 ... show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2025-10-21 22:34:34 UTC · (1 year ago)	ThreatBook Intelligence: Scanner,Gateway more details on https://threatbook.io/ip/124.95.165.207	SSH
🇮🇩 Diskominfo Lumajang	2025-10-19 19:25:02 UTC · (1 year ago)	Security Event Detected by SOC Diskominfo Lumajang: event=ssh, hits=22	Brute-Force SSH
🇨🇳 ThreatBook.io	2025-10-17 22:52:17 UTC · (1 year ago)	ThreatBook Intelligence: Scanner,Gateway more details on https://threatbook.io/ip/124.95.165.207	SSH
🇦🇺 GE	2025-10-16 23:00:50 UTC · (1 year ago)	2025-10-17T09:00:46.123942+10:00 www sshd-session[1251029]: Failed password for root from 124.95.165.207 port 53534 ssh2 2025-10-17T09:00:48.483551+10:00 www sshd-session[1251032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tt ... show more 2025-10-17T09:00:46.123942+10:00 www sshd-session[1251029]: Failed password for root from 124.95.165.207 port 53534 ssh2 2025-10-17T09:00:48.483551+10:00 www sshd-session[1251032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.95.165.207 user=root 2025-10-17T09:00:50.282852+10:00 www sshd-session[1251032]: Failed password for root from 124.95.165.207 port 54798 ssh2 ... show less	SSH
🇮🇩 Diskominfo Lumajang	2025-10-16 14:25:03 UTC · (1 year ago)	Security Event Detected by SOC Diskominfo Lumajang: event=ssh, hits=27	Brute-Force SSH

Showing 1 to 15 of 278 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:5:6dbd:5001

🇺🇸 2604:a880:400:d1:0:5:6dbb:e001

🇨🇳 221.221.136.146

🇹🇼 180.177.52.76

🇨🇳 122.141.183.126

🇺🇸 98.174.45.107

🇫🇷 54.38.241.200

🇩🇪 51.89.72.2

🇮🇳 49.204.74.149

🇯🇵 47.245.54.28

🇵🇰 39.34.139.114

🇲🇽 38.22.170.10

🇬🇧 31.14.254.81

🇭🇰 8.217.211.219

🇺🇸 3.95.18.224

🇨🇴 167.250.121.77

🇺🇸 152.32.150.215

🇮🇳 143.110.241.3

🇩🇪 128.1.34.69

🇩🇿 105.106.235.95