AbuseIPDB » 101.227.54.20

101.227.54.20 was found in our database!

This IP was reported 192 times. Confidence of Abuse is 8%: ?

ISP	CHINANET SHANGHAI PROVINCE NETWORK
Usage Type	Fixed Line ISP
Domain Name	chinatelecom.cn
Country	China
City	Shanghai, Shanghai

Report 101.227.54.20

Whois 101.227.54.20

IP Abuse Reports for 101.227.54.20:

This IP address has been reported a total of 192 times from 121 distinct sources. 101.227.54.20 was first reported on September 6th 2024, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-09-15 18:41:18 (2 months ago)	(sshd) Failed SSH login from 101.227.54.20 (CN/China/-): 5 in the last 3600 secs; Ports: ; Directio ... show more(sshd) Failed SSH login from 101.227.54.20 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Sep 15 14:41:05 server5 sshd[28529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.227.54.20 user=root Sep 15 14:41:07 server5 sshd[28529]: Failed password for root from 101.227.54.20 port 34266 ssh2 Sep 15 14:41:08 server5 sshd[28535]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.227.54.20 user=root Sep 15 14:41:10 server5 sshd[28535]: Failed password for root from 101.227.54.20 port 42056 ssh2 Sep 15 14:41:11 server5 sshd[28540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.227.54.20 user=root show less	Brute-Force
VHosting	2024-09-15 17:04:15 (2 months ago)	Attempt from 101.227.54.20	Brute-Force SSH
joãorodrigues.pt	2024-09-15 15:41:11 (2 months ago)	2024-09-15T16:40:59.376725+01:00 pi sshd[9381]: Failed password for root from 101.227.54.20 port 571 ... show more2024-09-15T16:40:59.376725+01:00 pi sshd[9381]: Failed password for root from 101.227.54.20 port 57160 ssh2 2024-09-15T16:41:02.012206+01:00 pi sshd[9486]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.227.54.20 user=root 2024-09-15T16:41:04.498116+01:00 pi sshd[9486]: Failed password for root from 101.227.54.20 port 55006 ssh2 2024-09-15T16:41:08.414176+01:00 pi sshd[9488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.227.54.20 user=root 2024-09-15T16:41:10.058555+01:00 pi sshd[9488]: Failed password for root from 101.227.54.20 port 36784 ssh2 ... show less	Brute-Force SSH
jk jk	2024-09-15 14:39:53 (2 months ago)	GoPot Honeypot 1	Hacking Web App Attack
sthoyer.de	2024-09-15 14:27:10 (2 months ago)	Sep 15 16:27:09 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:28:99:3a:4d:30:a ... show moreSep 15 16:27:09 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:28:99:3a:4d:30:af:08:00 SRC=101.227.54.20 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=16835 DF PROTO=TCP SPT=33680 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 ... show less	Port Scan
Hirte	2024-09-15 12:03:01 (2 months ago)	C2-W: TCP-Scanner. Port: 22	Port Scan
Antoine Delaporte	2024-09-15 10:12:31 (2 months ago)	Sep 15 12:12:27 yoda sshd[2236391]: Failed password for root from 101.227.54.20 port 36542 ssh2<br / ... show moreSep 15 12:12:27 yoda sshd[2236391]: Failed password for root from 101.227.54.20 port 36542 ssh2 Sep 15 12:12:29 yoda sshd[2236427]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.227.54.20 user=root Sep 15 12:12:30 yoda sshd[2236427]: Failed password for root from 101.227.54.20 port 45122 ssh2 ... show less	Brute-Force SSH
amit177	2024-09-15 10:12:11 (2 months ago)		Brute-Force SSH
Anonymous	2024-09-15 07:44:07 (2 months ago)	$f2bV_matches	Brute-Force SSH
HeliJP	2024-09-15 02:15:42 (2 months ago)	2024-09-15T01:35:10Z - Unauthorized SFTP/SSH access attempts from IP address 101.227.54.20 on port 2 ... show more2024-09-15T01:35:10Z - Unauthorized SFTP/SSH access attempts from IP address 101.227.54.20 on port 22 (1 daily hits). show less	FTP Brute-Force Brute-Force SSH
suble.org	2024-09-14 23:32:15 (2 months ago)	2024-09-15T01:32:10.449254+02:00 swsrv sshd[478855]: User root from 101.227.54.20 not allowed becaus ... show more2024-09-15T01:32:10.449254+02:00 swsrv sshd[478855]: User root from 101.227.54.20 not allowed because not listed in AllowUsers 2024-09-15T01:32:11.945790+02:00 swsrv sshd[478857]: User root from 101.227.54.20 not allowed because not listed in AllowUsers 2024-09-15T01:32:13.403539+02:00 swsrv sshd[478859]: User root from 101.227.54.20 not allowed because not listed in AllowUsers 2024-09-15T01:32:14.961207+02:00 swsrv sshd[478861]: User root from 101.227.54.20 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
urnilxfgbez	2024-09-14 22:45:00 (2 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
rollenspiel.network	2024-09-14 20:12:51 (2 months ago)	2024-09-14T22:12:19.783029+02:00 proxmox sshd[282042]: Invalid user user from 101.227.54.20 port 425 ... show more2024-09-14T22:12:19.783029+02:00 proxmox sshd[282042]: Invalid user user from 101.227.54.20 port 42502 2024-09-14T22:12:22.607556+02:00 proxmox sshd[282048]: Invalid user user from 101.227.54.20 port 46174 2024-09-14T22:12:24.163025+02:00 proxmox sshd[282073]: Invalid user user from 101.227.54.20 port 51662 2024-09-14T22:12:40.728894+02:00 proxmox sshd[282152]: Invalid user user from 101.227.54.20 port 54870 2024-09-14T22:12:50.292678+02:00 proxmox sshd[282379]: Invalid user user from 101.227.54.20 port 60294 ... show less	Brute-Force SSH
Roderic	2024-09-14 16:31:40 (2 months ago)	(sshd) Failed SSH login from 101.227.54.20 (CN/China/-)	Brute-Force SSH
Custard	2024-09-14 15:41:55 (2 months ago)	Sep 14 09:41:52 mail sshd[1714017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ... show moreSep 14 09:41:52 mail sshd[1714017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.227.54.20 user=root Sep 14 09:41:54 mail sshd[1714017]: Failed password for root from 101.227.54.20 port 45872 ssh2 show less	Brute-Force SSH