This IP address has been reported a total of
1,573
times from
606 distinct
sources.
120.196.66.80 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
2026-05-29T09:51:22.952872+02:00 smvps001 sshd-session[667402]: Invalid user wireguard from 120.196. ...
show more2026-05-29T09:51:22.952872+02:00 smvps001 sshd-session[667402]: Invalid user wireguard from 120.196.66.80 port 44890
2026-05-29T09:51:23.209182+02:00 smvps001 sshd-session[667402]: Disconnected from invalid user wireguard 120.196.66.80 port 44890 [preauth]
2026-05-29T10:03:03.452396+02:00 smvps001 sshd-session[668194]: Invalid user tommy from 120.196.66.80 port 56034
...
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
May 28 23:56:32 proxy-03 sshd[4161018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ...
show moreMay 28 23:56:32 proxy-03 sshd[4161018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.196.66.80 user=root
May 28 23:56:34 proxy-03 sshd[4161018]: Failed password for root from 120.196.66.80 port 55202 ssh2
May 29 00:01:13 proxy-03 sshd[4163557]: Invalid user yf from 120.196.66.80 port 48384
May 29 00:01:13 proxy-03 sshd[4163557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.196.66.80
May 29 00:01:15 proxy-03 sshd[4163557]: Failed password for invalid user yf from 120.196.66.80 port 48384 ssh2
...
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-29T00:27:53Z and 2026-05-2 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-29T00:27:53Z and 2026-05-29T01:27:10Z
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: root, Pass: [REDACTED]
120.196.66.80 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Port ...
show more120.196.66.80 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 28 17:25:26 22634 sshd[4705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.196.66.80 user=root
May 28 17:25:28 22634 sshd[4705]: Failed password for root from 120.196.66.80 port 43242 ssh2
May 28 17:37:32 22634 sshd[6578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.121.37.21 user=root
May 28 17:32:25 22634 sshd[5800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.121.37.21 user=root
May 28 17:32:27 22634 sshd[5800]: Failed password for root from 129.121.37.21 port 34874 ssh2
IP Addresses Blocked:
show less
2026-05-28T06:13:38.941842-07:00 server.vexstria.pro sshd[843816]: pam_unix(sshd:auth): authenticati ...
show more2026-05-28T06:13:38.941842-07:00 server.vexstria.pro sshd[843816]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.196.66.80
2026-05-28T06:13:40.389128-07:00 server.vexstria.pro sshd[843816]: Failed password for invalid user admin from 120.196.66.80 port 35856 ssh2
2026-05-28T06:31:41.038759-07:00 server.vexstria.pro sshd[1197718]: Invalid user developer from 120.196.66.80 port 57088
...
show less