AbuseIPDB » 101.227.54.20

101.227.54.20 was found in our database!

This IP was reported 192 times. Confidence of Abuse is 9%: ?

ISP	CHINANET SHANGHAI PROVINCE NETWORK
Usage Type	Fixed Line ISP
Domain Name	chinatelecom.cn
Country	China
City	Shanghai, Shanghai

Report 101.227.54.20

Whois 101.227.54.20

IP Abuse Reports for 101.227.54.20:

This IP address has been reported a total of 192 times from 121 distinct sources. 101.227.54.20 was first reported on September 6th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
smithclass.net	2024-09-14 14:24:28 (2 months ago)	Sep 14 14:24:20 taters sshd[2513896]: Invalid user user from 101.227.54.20 port 54084 Sep 14 1 ... show moreSep 14 14:24:20 taters sshd[2513896]: Invalid user user from 101.227.54.20 port 54084 Sep 14 14:24:22 taters sshd[2513898]: Invalid user user from 101.227.54.20 port 56166 Sep 14 14:24:23 taters sshd[2513900]: Invalid user user from 101.227.54.20 port 58908 Sep 14 14:24:24 taters sshd[2513902]: Invalid user user from 101.227.54.20 port 60910 Sep 14 14:24:26 taters sshd[2513904]: Invalid user user from 101.227.54.20 port 34868 Sep 14 14:24:27 taters sshd[2513906]: Invalid user user from 101.227.54.20 port 36986 show less	Brute-Force SSH
formality	2024-09-14 14:19:50 (2 months ago)	Invalid user user from 101.227.54.20 port 47580	Brute-Force SSH
blackpanther	2024-09-14 10:10:34 (2 months ago)	2024-09-14T12:10:30.785104+02:00 sshd[3085110]: Invalid user user from 101.227.54.20 port 40796<br ... show more2024-09-14T12:10:30.785104+02:00 sshd[3085110]: Invalid user user from 101.227.54.20 port 40796 2024-09-14T12:10:32.238215+02:00 sshd[3085628]: Invalid user user from 101.227.54.20 port 42918 2024-09-14T12:10:33.732118+02:00 sshd[3085633]: Invalid user user from 101.227.54.20 port 45058 show less	Brute-Force SSH
ghostwarriors	2024-09-14 08:21:36 (2 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
tg_de	2024-09-14 07:16:17 (2 months ago)	416 attempts since 14.09.2024 07:03:47 UTC - last one: 2024-09-14T09:16:17.898108+02:00 beta sshd[18 ... show more416 attempts since 14.09.2024 07:03:47 UTC - last one: 2024-09-14T09:16:17.898108+02:00 beta sshd[1890140]: Connection closed by invalid user ftp 101.227.54.20 port 60852 [preauth] show less	Brute-Force SSH
en0	2024-09-14 05:43:30 (2 months ago)	2024-09-14 00:43:29,969 fail2ban.actions [975]: NOTICE [sshd] Ban 101.227.54.20	Brute-Force SSH
Neoloop	2024-09-14 05:02:40 (2 months ago)	Sep 14 07:02:15 maximus sshd[3561296]: Failed password for root from 101.227.54.20 port 41700 ssh2<b ... show moreSep 14 07:02:15 maximus sshd[3561296]: Failed password for root from 101.227.54.20 port 41700 ssh2 Sep 14 07:02:26 maximus sshd[3561334]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.227.54.20 user=root Sep 14 07:02:28 maximus sshd[3561334]: Failed password for root from 101.227.54.20 port 38302 ssh2 Sep 14 07:02:37 maximus sshd[3561370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.227.54.20 user=root Sep 14 07:02:39 maximus sshd[3561370]: Failed password for root from 101.227.54.20 port 34698 ssh2 ... show less	Brute-Force SSH
dwmp	2024-09-14 03:40:23 (2 months ago)	Sep 14 03:40:10 news1 sshd[1336456]: refused connect from 101.227.54.20 (101.227.54.20) Sep 14 ... show moreSep 14 03:40:10 news1 sshd[1336456]: refused connect from 101.227.54.20 (101.227.54.20) Sep 14 03:40:16 news1 sshd[1336457]: refused connect from 101.227.54.20 (101.227.54.20) Sep 14 03:40:21 news1 sshd[1336458]: refused connect from 101.227.54.20 (101.227.54.20) ... show less	Brute-Force SSH
MPL	2024-09-14 01:08:13 (2 months ago)	tcp/22 (8 or more attempts)	Port Scan
H41F4	2024-09-14 00:36:08 (2 months ago)	Invalid user user from 101.227.54.20 port 47896	Brute-Force SSH
H41F4	2024-09-14 00:36:08 (2 months ago)	Invalid user user from 101.227.54.20 port 47896	Brute-Force SSH
Martin Atukunda	2024-09-13 23:39:25 (2 months ago)	Sep 13 23:39:19 unifi sshd[374933]: Connection closed by authenticating user root 101.227.54.20 port ... show moreSep 13 23:39:19 unifi sshd[374933]: Connection closed by authenticating user root 101.227.54.20 port 54062 [preauth] Sep 13 23:39:21 unifi sshd[374935]: Connection closed by authenticating user root 101.227.54.20 port 38254 [preauth] ... show less	Port Scan Hacking Brute-Force SSH
master.arknet.ch	2024-09-13 23:28:49 (2 months ago)	2024-09-14T01:28:46.409535+02:00 wels sshd[122766]: Connection closed by authenticating user root 10 ... show more2024-09-14T01:28:46.409535+02:00 wels sshd[122766]: Connection closed by authenticating user root 101.227.54.20 port 39908 [preauth] 2024-09-14T01:28:47.348871+02:00 wels sshd[122768]: Connection closed by authenticating user root 101.227.54.20 port 43326 [preauth] 2024-09-14T01:28:48.349222+02:00 wels sshd[122770]: Connection closed by authenticating user root 101.227.54.20 port 44862 [preauth] ... show less	Brute-Force SSH
dwmp	2024-09-13 22:33:41 (2 months ago)	2024-09-14T00:33:23.453070news0.dwmp.it sshd[13386]: pam_unix(sshd:auth): authentication failure; lo ... show more2024-09-14T00:33:23.453070news0.dwmp.it sshd[13386]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.227.54.20 user=root 2024-09-14T00:33:26.017693news0.dwmp.it sshd[13386]: Failed password for invalid user root from 101.227.54.20 port 41368 ssh2 2024-09-14T00:33:40.431068news0.dwmp.it sshd[13390]: User root from 101.227.54.20 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
Private Private	2024-09-13 22:11:55 (2 months ago)	Failed password for root from 101.227.54.20 port 48358 ssh2	Brute-Force SSH