Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
SSH brute-force / invalid user scan detected via journald
Brute-Force
SSH
Anonymous
Nov 8 05:35:21 dragon sshd[1439473]: Invalid user admin from 117.20.58.155 port 50105
Nov 8 05:35:22 dragon sshd[1439480]: Invalid user user from 117.20.58.155 port 50246
Nov 8 05:35:26 dragon sshd[1439492]: Invalid user admin from 117.20.58.155 p ...
show moreNov 8 05:35:21 dragon sshd[1439473]: Invalid user admin from 117.20.58.155 port 50105
Nov 8 05:35:22 dragon sshd[1439480]: Invalid user user from 117.20.58.155 port 50246
Nov 8 05:35:26 dragon sshd[1439492]: Invalid user admin from 117.20.58.155 port 50599
...
show less
2026-10-12T09:59:55.560399+02:00 gitlab-01-pro sshd-session[1422157]: Disconnected from invalid user admin 117.20.58.155 port 35384 [preauth]
2026-10-12T09:59:55.763495+02:00 gitlab-01-pro sshd-session[1422159]: Connection from 117.20.58.155 port 353 ...
show more2026-10-12T09:59:55.560399+02:00 gitlab-01-pro sshd-session[1422157]: Disconnected from invalid user admin 117.20.58.155 port 35384 [preauth]
2026-10-12T09:59:55.763495+02:00 gitlab-01-pro sshd-session[1422159]: Connection from 117.20.58.155 port 35394 on 10.100.88.64 port 22 rdomain ""
2026-10-12T09:59:56.769073+02:00 gitlab-01-pro sshd-session[1422159]: User root from 117.20.58.155 not allowed because none of user's groups are listed in AllowGroups
...
show less
2025-10-30T13:05:06.887417-04:00 oinkvps sshd[1800502]: Invalid user admin from 117.20.58.155 port 60366
2025-10-30T13:05:10.599717-04:00 oinkvps sshd[1800506]: Invalid user admin from 117.20.58.155 port 60399
2025-10-30T13:05:12.457473-04:00 oinkvps ...
show more2025-10-30T13:05:06.887417-04:00 oinkvps sshd[1800502]: Invalid user admin from 117.20.58.155 port 60366
2025-10-30T13:05:10.599717-04:00 oinkvps sshd[1800506]: Invalid user admin from 117.20.58.155 port 60399
2025-10-30T13:05:12.457473-04:00 oinkvps sshd[1800508]: Invalid user user from 117.20.58.155 port 60415
2025-10-30T13:05:14.286058-04:00 oinkvps sshd[1800510]: Invalid user user2 from 117.20.58.155 port 60432
2025-10-30T13:05:18.020598-04:00 oinkvps sshd[1800514]: Invalid user admin from 117.20.58.155 port 60466
...
show less
Oct 24 01:46:43 localhost sshd[3493395]: Invalid user admin from 117.20.58.155 port 60694
Oct 24 01:46:45 localhost sshd[3493395]: Failed password for invalid user admin from 117.20.58.155 port 60694 ssh2
Oct 24 01:46:45 localhost sshd[3493395]: Disc ...
show moreOct 24 01:46:43 localhost sshd[3493395]: Invalid user admin from 117.20.58.155 port 60694
Oct 24 01:46:45 localhost sshd[3493395]: Failed password for invalid user admin from 117.20.58.155 port 60694 ssh2
Oct 24 01:46:45 localhost sshd[3493395]: Disconnected from invalid user admin 117.20.58.155 port 60694 [preauth]
...
show less
2025-10-24T03:56:31.842366+08:00 raspberrypi sshd-session[569472]: Invalid user admin from 117.20.58.155 port 55685
2025-10-24T03:56:32.892605+08:00 raspberrypi sshd-session[569479]: Invalid user admin from 117.20.58.155 port 55694
2025-10-24T03:56:3 ...
show more2025-10-24T03:56:31.842366+08:00 raspberrypi sshd-session[569472]: Invalid user admin from 117.20.58.155 port 55685
2025-10-24T03:56:32.892605+08:00 raspberrypi sshd-session[569479]: Invalid user admin from 117.20.58.155 port 55694
2025-10-24T03:56:33.708587+08:00 raspberrypi sshd-session[569482]: Invalid user user from 117.20.58.155 port 55697
...
show less
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown