This IP address has been reported a total of
64
times from
51 distinct
sources.
1.20.172.91 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Jul 10 13:14:19 deimos sshd[349566]: Invalid user orangepi from 1.20.172.91 port 47214
Jul 10 13:14: ...
show moreJul 10 13:14:19 deimos sshd[349566]: Invalid user orangepi from 1.20.172.91 port 47214
Jul 10 13:14:19 deimos sshd[349566]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.20.172.91
Jul 10 13:14:21 deimos sshd[349566]: Failed password for invalid user orangepi from 1.20.172.91 port 47214 ssh2
...
show less
Dropbear: Bad password attempt.
Jul 10 20:16:29 *REDACTED* dropbear[20779]: Bad password attempt fo ...
show moreDropbear: Bad password attempt.
Jul 10 20:16:29 *REDACTED* dropbear[20779]: Bad password attempt for 'admin' from 1.20.172.91:64344
show less
Brute-Force
SSH
Anonymous
2026-07-10T20:08:51.005458+02:00 vps sshd[351246]: pam_unix(sshd:auth): authentication failure; logn ...
show more2026-07-10T20:08:51.005458+02:00 vps sshd[351246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.20.172.91
2026-07-10T20:08:53.059331+02:00 vps sshd[351246]: Failed password for invalid user admin from 1.20.172.91 port 58000 ssh2
2026-07-10T20:09:26.026704+02:00 vps sshd[351597]: Invalid user orangepi from 1.20.172.91 port 38178
...
show less
Threat Intelligence via ARMTI, Web Attack: POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2 ...
show moreThreat Intelligence via ARMTI, Web Attack: POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh
show less
2026-07-10T16:35:07.356988+00:00 edge-noc-mci01.int.pdx.net.uk sshd[2422319]: Invalid user admin fro ...
show more2026-07-10T16:35:07.356988+00:00 edge-noc-mci01.int.pdx.net.uk sshd[2422319]: Invalid user admin from 1.20.172.91 port 58622
2026-07-10T16:35:54.841877+00:00 edge-noc-mci01.int.pdx.net.uk sshd[2422368]: Invalid user orangepi from 1.20.172.91 port 5288
2026-07-10T16:39:38.067131+00:00 edge-noc-mci01.int.pdx.net.uk sshd[2423055]: Invalid user test from 1.20.172.91 port 63714
...
show less
2026-07-10T16:08:32.938529+00:00 edge-hur-fmt01.int.pdx.net.uk sshd[4027872]: Invalid user admin fro ...
show more2026-07-10T16:08:32.938529+00:00 edge-hur-fmt01.int.pdx.net.uk sshd[4027872]: Invalid user admin from 1.20.172.91 port 32134
2026-07-10T16:09:04.690982+00:00 edge-hur-fmt01.int.pdx.net.uk sshd[4027923]: Invalid user orangepi from 1.20.172.91 port 25796
2026-07-10T16:12:53.072985+00:00 edge-hur-fmt01.int.pdx.net.uk sshd[4028254]: Invalid user test from 1.20.172.91 port 20274
...
show less
Blocked by UFW (TCP on 23)
Source port: 10224
TTL: 48
Packet length: 44
TOS: 0x00
This report (for ...
show moreBlocked by UFW (TCP on 23)
Source port: 10224
TTL: 48
Packet length: 44
TOS: 0x00
This report (for 1.20.172.91) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Hacking
Brute-Force
Showing 1 to
15
of 64 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩