AbuseIPDB » 101.227.54.20

101.227.54.20 was found in our database!

This IP was reported 192 times. Confidence of Abuse is 8%: ?

ISP	CHINANET SHANGHAI PROVINCE NETWORK
Usage Type	Fixed Line ISP
Domain Name	chinatelecom.cn
Country	China
City	Shanghai, Shanghai

Report 101.227.54.20

Whois 101.227.54.20

IP Abuse Reports for 101.227.54.20:

This IP address has been reported a total of 192 times from 121 distinct sources. 101.227.54.20 was first reported on September 6th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
applemooz	2024-09-16 23:15:11 (2 months ago)	Sep 17 01:14:58 lnxweb61 sshd[24382]: Failed password for root from 101.227.54.20 port 50344 ssh2<br ... show moreSep 17 01:14:58 lnxweb61 sshd[24382]: Failed password for root from 101.227.54.20 port 50344 ssh2 Sep 17 01:15:00 lnxweb61 sshd[24382]: Connection closed by authenticating user root 101.227.54.20 port 50344 [preauth] Sep 17 01:15:06 lnxweb61 sshd[24478]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.227.54.20 user=root Sep 17 01:15:08 lnxweb61 sshd[24478]: Failed password for root from 101.227.54.20 port 38252 ssh2 Sep 17 01:15:10 lnxweb61 sshd[24478]: Connection closed by authenticating user root 101.227.54.20 port 38252 [preauth] ... show less	Brute-Force SSH
Anonymous	2024-09-16 23:13:30 (2 months ago)	(sshd) Failed SSH login from 101.227.54.20 (CN/China/-): 5 in the last 3600 secs; Ports: ; Directio ... show more(sshd) Failed SSH login from 101.227.54.20 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Sep 16 19:13:22 server2 sshd[24426]: Failed password for root from 101.227.54.20 port 34070 ssh2 Sep 16 19:13:24 server2 sshd[24787]: Failed password for root from 101.227.54.20 port 45926 ssh2 Sep 16 19:13:25 server2 sshd[24792]: Failed password for root from 101.227.54.20 port 48050 ssh2 Sep 16 19:13:26 server2 sshd[24799]: Failed password for root from 101.227.54.20 port 49938 ssh2 Sep 16 19:13:28 server2 sshd[24806]: Failed password for root from 101.227.54.20 port 52086 ssh2 show less	Brute-Force
rtbh.com.tr	2024-09-16 20:54:36 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
MPL	2024-09-16 18:24:40 (2 months ago)	tcp/22 (6 or more attempts)	Port Scan
chris_yooo	2024-09-16 13:46:59 (2 months ago)	2024-09-16T15:46:50.950546+02:00 proxmox sshd[842924]: Failed password for root from 101.227.54.20 p ... show more2024-09-16T15:46:50.950546+02:00 proxmox sshd[842924]: Failed password for root from 101.227.54.20 port 60122 ssh2 2024-09-16T15:46:57.055246+02:00 proxmox sshd[843036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.227.54.20 user=root 2024-09-16T15:46:58.723273+02:00 proxmox sshd[843036]: Failed password for root from 101.227.54.20 port 36566 ssh2 ... show less	Brute-Force SSH
Markiemm	2024-09-16 11:51:28 (2 months ago)	Sep 16 11:51:25 authentik-server sshd[813095]: Invalid user user from 101.227.54.20 port 45788 ... show moreSep 16 11:51:25 authentik-server sshd[813095]: Invalid user user from 101.227.54.20 port 45788 Sep 16 11:51:26 authentik-server sshd[813119]: Invalid user user from 101.227.54.20 port 48208 Sep 16 11:51:28 authentik-server sshd[813164]: Invalid user user from 101.227.54.20 port 50294 ... show less	Brute-Force SSH
ISPLtd	2024-09-16 06:59:24 (2 months ago)	Sep 16 03:59:23 SRC=101.227.54.20 PROTO=TCP SPT=59830 DPT=22 SYN ...	Port Scan SSH
NetWatch	2024-09-16 04:50:30 (2 months ago)	The IP 101.227.54.20 tried multiple SSH logins	Brute-Force SSH
Mailguard-FRD	2024-09-16 03:52:07 (2 months ago)	Sep 16 05:52:04 [redacted] sshd[3031378]: pam_unix(sshd:auth): authentication failure; logname= uid= ... show moreSep 16 05:52:04 [redacted] sshd[3031378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.227.54.20 user=root Sep 16 05:52:06 [redacted] sshd[3031378]: Failed password f ... show less	Brute-Force SSH
Scan	2024-09-16 01:11:49 (2 months ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
laotuo	2024-09-16 00:19:49 (2 months ago)	Sep 16 02:19:46 h2930838 sshd[8003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show moreSep 16 02:19:46 h2930838 sshd[8003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.227.54.20 user=root Sep 16 02:19:48 h2930838 sshd[8003]: Failed password for invalid user root from 101.227.54.20 port 43234 ssh2 show less	Brute-Force SSH
LUKE_Networker	2024-09-15 23:29:04 (2 months ago)	VPS-DE-L-NLCheck	Brute-Force SSH
it.inpglobal.com	2024-09-15 23:26:41 (2 months ago)	$f2bV_matches	Brute-Force SSH
rtbh.com.tr	2024-09-15 20:54:38 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
McBuzz	2024-09-15 19:33:02 (2 months ago)	Sep 15 21:32:56 ourumov-web sshd\[25972\]: pam_unix$sshd:auth$: authentication failure\; logname= ... show moreSep 15 21:32:56 ourumov-web sshd\[25972\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.227.54.20 user=root Sep 15 21:32:58 ourumov-web sshd\[25972\]: Failed password for root from 101.227.54.20 port 40394 ssh2 Sep 15 21:33:00 ourumov-web sshd\[26024\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.227.54.20 user=root ... show less	Brute-Force SSH