AbuseIPDB » 201.124.22.224

201.124.22.224 was found in our database!

This IP was reported 6 times. Confidence of Abuse is 20%: ?

20%

ISP	Gestion de Direccionamiento Uninet
Usage Type	Unknown
Hostname(s)	dsl-201-124-22-224-dyn.prod-infinitum.com.mx
Domain Name	telmex.com
Country	Mexico
City	Mexico City, Ciudad de Mexico

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 201.124.22.224

Whois 201.124.22.224

IP Abuse Reports for 201.124.22.224:

This IP address has been reported a total of 6 times from 5 distinct sources. 201.124.22.224 was first reported on August 9th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
lp	2024-08-09 19:50:00 (1 month ago)	SSH Brute force: 5 attempts were recorded from 201.124.22.224 2024-08-09T21:20:11+02:00 Invali ... show moreSSH Brute force: 5 attempts were recorded from 201.124.22.224 2024-08-09T21:20:11+02:00 Invalid user baidu from 201.124.22.224 port 37042 2024-08-09T21:24:02+02:00 Disconnected from authenticating user root 201.124.22.224 port 40748 [preauth] 2024-08-09T21:24:51+02:00 Disconnected from authenticating user root 201.124.22.224 port 54494 [preauth] 2024-08-09T21:25:46+02:00 Invalid user f1 from 201.124.22.224 port 40006 2024-08-09T21:26:36+02:00 Disconnected from authenticating user root 201.124.22.224 port 53742 [preauth] show less	Brute-Force SSH
Anonymous	2024-08-09 19:25:34 (1 month ago)	Aug 9 21:23:50 server2 sshd[2359449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show moreAug 9 21:23:50 server2 sshd[2359449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.124.22.224 user=root Aug 9 21:23:52 server2 sshd[2359449]: Failed password for root from 201.124.22.224 port 60514 ssh2 Aug 9 21:24:39 server2 sshd[2359575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.124.22.224 user=root Aug 9 21:24:41 server2 sshd[2359575]: Failed password for root from 201.124.22.224 port 46026 ssh2 Aug 9 21:25:33 server2 sshd[2359765]: Invalid user f1 from 201.124.22.224 port 59772 ... show less	Brute-Force SSH
bigscoots.com	2024-08-09 19:24:35 (1 month ago)	(sshd) Failed SSH login from 201.124.22.224 (MX/Mexico/dsl-201-124-22-224-dyn.prod-infinitum.com.mx) ... show more(sshd) Failed SSH login from 201.124.22.224 (MX/Mexico/dsl-201-124-22-224-dyn.prod-infinitum.com.mx): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Aug 9 14:16:14 16676 sshd[23804]: Invalid user baidu from 201.124.22.224 port 36968 Aug 9 14:16:16 16676 sshd[23804]: Failed password for invalid user baidu from 201.124.22.224 port 36968 ssh2 Aug 9 14:23:43 16676 sshd[24281]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.124.22.224 user=root Aug 9 14:23:45 16676 sshd[24281]: Failed password for root from 201.124.22.224 port 34248 ssh2 Aug 9 14:24:32 16676 sshd[24350]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.124.22.224 user=root show less	Brute-Force SSH
659761066	2024-08-09 19:19:10 (1 month ago)	Aug 10 00:49:10 localhost sshd[867191]: Invalid user baidu from 201.124.22.224 port 39442 ...	Port Scan Hacking Brute-Force Exploited Host Web App Attack
NotCool	2024-08-09 18:49:47 (1 month ago)	(sshd) Failed SSH login from 201.124.22.224 (MX/Mexico/dsl-201-124-22-224-dyn.prod-infinitum.com.mx) ... show more(sshd) Failed SSH login from 201.124.22.224 (MX/Mexico/dsl-201-124-22-224-dyn.prod-infinitum.com.mx): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER show less	Brute-Force
bigscoots.com	2024-08-09 18:46:54 (1 month ago)	201.124.22.224 (MX/Mexico/dsl-201-124-22-224-dyn.prod-infinitum.com.mx), 5 distributed sshd attacks ... show more201.124.22.224 (MX/Mexico/dsl-201-124-22-224-dyn.prod-infinitum.com.mx), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Aug 9 13:46:45 15122 sshd[14040]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.124.22.224 user=root Aug 9 13:46:47 15122 sshd[14040]: Failed password for root from 201.124.22.224 port 59586 ssh2 Aug 9 13:28:52 15122 sshd[12822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.106.51.133 user=root Aug 9 13:28:23 15122 sshd[12817]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.106.51.133 user=root Aug 9 13:28:26 15122 sshd[12817]: Failed password for root from 39.106.51.133 port 49722 ssh2 IP Addresses Blocked: show less	Brute-Force SSH