JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 122.154.59.20

122.154.59.20 was found in our database!

This IP was reported 155 times. Confidence of Abuse is 0%: ?

ISP	National Telecom Public Company Limited
Usage Type	Fixed Line ISP
ASN	AS9931
Domain Name	ntplc.co.th
Country	🇹🇭 Thailand
City	Phatthalung, Phatthalung

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 122.154.59.20

Whois 122.154.59.20

IP Abuse Reports for 122.154.59.20:

This IP address has been reported a total of 155 times from 85 distinct sources. 122.154.59.20 was first reported on March 9th 2026, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 bigscoots.com	2026-04-21 08:55:49 (2 months ago)	122.154.59.20 (TH/Thailand/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; P ... show more 122.154.59.20 (TH/Thailand/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 21 03:54:46 14279 sshd[26143]: Failed password for root from 122.154.59.20 port 60069 ssh2 Apr 21 03:54:45 14279 sshd[26143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.154.59.20 user=root Apr 21 03:55:40 14279 sshd[26274]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.114.22.126 user=root Apr 21 03:53:55 14279 sshd[26025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.25.158.24 user=root Apr 21 03:53:57 14279 sshd[26025]: Failed password for root from 171.25.158.24 port 37076 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇨🇿 lp	2026-04-20 16:43:35 (2 months ago)	SSH Brute force: 1 attempts were recorded from 122.154.59.20 2026-04-20T11:31:06+02:00 Invalid user ... show more SSH Brute force: 1 attempts were recorded from 122.154.59.20 2026-04-20T11:31:06+02:00 Invalid user NL5xUDpV2xRa from 122.154.59.20 port 40182 show less	Brute-Force SSH
🇦🇹 urnilxfgbez	2026-04-11 22:45:00 (2 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇬🇧 andypiper	2026-04-11 01:02:22 (2 months ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇮🇩 Diskominfo Lumajang	2026-04-11 00:55:15 (2 months ago)	Security Event Detected by SOC Diskominfo Lumajang: event=ssh, hits=3	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-04-11 00:31:19 (2 months ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/122.154.59.20	SSH
🇩🇪 wlt-blocker	2026-04-11 00:10:59 (2 months ago)	Attempts to access SSH server with wrong credentials	SSH
🇺🇸 bigscoots.com	2026-04-11 00:09:04 (2 months ago)	(sshd) Failed SSH login from 122.154.59.20 (TH/Thailand/-): 5 in the last 3600 secs; Ports: ; Direc ... show more (sshd) Failed SSH login from 122.154.59.20 (TH/Thailand/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Apr 10 19:01:55 15583 sshd[21231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.154.59.20 user=root Apr 10 19:01:58 15583 sshd[21231]: Failed password for root from 122.154.59.20 port 40851 ssh2 Apr 10 19:05:58 15583 sshd[21586]: Invalid user frappe from 122.154.59.20 port 41899 Apr 10 19:06:00 15583 sshd[21586]: Failed password for invalid user frappe from 122.154.59.20 port 41899 ssh2 Apr 10 19:08:51 15583 sshd[21828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.154.59.20 user=root show less	Brute-Force SSH
🇺🇸 Cheddar	2026-04-11 00:04:20 (2 months ago)	2026-04-11T00:04:18.818942+00:00 us-lax-node1121 sshd-session[169230]: Invalid user frappe from 122. ... show more 2026-04-11T00:04:18.818942+00:00 us-lax-node1121 sshd-session[169230]: Invalid user frappe from 122.154.59.20 port 58771 2026-04-11T00:04:18.821611+00:00 us-lax-node1121 sshd-session[169230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.154.59.20 2026-04-11T00:04:20.434453+00:00 us-lax-node1121 sshd-session[169230]: Failed password for invalid user frappe from 122.154.59.20 port 58771 ssh2 ... show less	Brute-Force SSH
🇺🇸 chrisj	2026-04-10 23:49:00 (2 months ago)	2026-04-10T23:46:13.732554+00:00 aws sshd[75715]: Failed password for invalid user test from 122.154 ... show more 2026-04-10T23:46:13.732554+00:00 aws sshd[75715]: Failed password for invalid user test from 122.154.59.20 port 48433 ssh2 2026-04-10T23:48:56.889736+00:00 aws sshd[75753]: User root from 122.154.59.20 not allowed because not listed in AllowUsers 2026-04-10T23:48:56.892867+00:00 aws sshd[75753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.154.59.20 user=root 2026-04-10T23:48:59.284391+00:00 aws sshd[75753]: Failed password for invalid user root from 122.154.59.20 port 39756 ssh2 ... show less	Brute-Force SSH
🇩🇪 ddos-report	2026-04-10 23:41:50 (2 months ago)	Apr 11 01:36:04 v220241135696295643 sshd[709594]: Invalid user installer from 122.154.59.20 port 351 ... show more Apr 11 01:36:04 v220241135696295643 sshd[709594]: Invalid user installer from 122.154.59.20 port 35148 Apr 11 01:36:04 v220241135696295643 sshd[709594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.154.59.20 Apr 11 01:36:04 v220241135696295643 sshd[709594]: Invalid user installer from 122.154.59.20 port 35148 Apr 11 01:36:07 v220241135696295643 sshd[709594]: Failed password for invalid user installer from 122.154.59.20 port 35148 ssh2 Apr 11 01:38:42 v220241135696295643 sshd[709602]: Invalid user ubuntu from 122.154.59.20 port 53343 ... show less	Brute-Force SSH
🇸🇬 itachi1706	2026-04-10 23:40:19 (2 months ago)	2026-04-10T23:40:18.132788+00:00 sg-jumphost-server sshd[3499146]: Invalid user installer from 122.1 ... show more 2026-04-10T23:40:18.132788+00:00 sg-jumphost-server sshd[3499146]: Invalid user installer from 122.154.59.20 port 59983 2026-04-10T23:40:18.177648+00:00 sg-jumphost-server sshd[3499146]: Disconnected from invalid user installer 122.154.59.20 port 59983 [preauth] ... show less	Brute-Force SSH
🇺🇸 actuallyreliable	2026-04-10 23:28:26 (2 months ago)	2026-04-10T23:25:37.919036+00:00 sector-1 sshd-session[1730957]: User root from 122.154.59.20 not al ... show more 2026-04-10T23:25:37.919036+00:00 sector-1 sshd-session[1730957]: User root from 122.154.59.20 not allowed because not listed in AllowUsers 2026-04-10T23:28:25.218045+00:00 sector-1 sshd-session[1731245]: User root from 122.154.59.20 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇩🇪 ddos-report	2026-04-10 23:14:19 (2 months ago)	Apr 11 01:08:21 v220241135696295643 sshd[709200]: Failed password for invalid user frappe from 122.1 ... show more Apr 11 01:08:21 v220241135696295643 sshd[709200]: Failed password for invalid user frappe from 122.154.59.20 port 49876 ssh2 Apr 11 01:11:08 v220241135696295643 sshd[709277]: Invalid user frappe from 122.154.59.20 port 40112 Apr 11 01:11:08 v220241135696295643 sshd[709277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.154.59.20 Apr 11 01:11:08 v220241135696295643 sshd[709277]: Invalid user frappe from 122.154.59.20 port 40112 Apr 11 01:11:11 v220241135696295643 sshd[709277]: Failed password for invalid user frappe from 122.154.59.20 port 40112 ssh2 ... show less	Brute-Force SSH
🇸🇬 itachi1706	2026-04-10 23:09:48 (2 months ago)	2026-04-10T23:06:58.362238+00:00 sg-jumphost-server sshd[3498214]: Disconnected from authenticating ... show more 2026-04-10T23:06:58.362238+00:00 sg-jumphost-server sshd[3498214]: Disconnected from authenticating user root 122.154.59.20 port 38115 [preauth] 2026-04-10T23:09:47.168338+00:00 sg-jumphost-server sshd[3498274]: Disconnected from authenticating user root 122.154.59.20 port 56387 [preauth] ... show less	Brute-Force SSH

Showing 1 to 15 of 155 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 200.56.227.36

🇳🇱 194.120.230.28

🇦🇷 179.41.7.254

🇺🇸 141.11.88.13

🇨🇳 122.114.8.57

🇨🇳 121.229.156.37

🇮🇳 117.216.210.246

🇻🇳 115.79.40.41

🇮🇳 103.91.246.101

🇺🇸 64.62.156.128

🇮🇳 49.43.89.184

🇺🇸 44.113.230.6

🇳🇱 176.65.148.253

🇸🇬 119.28.101.155

🇨🇳 111.231.80.146

🇺🇸 104.152.58.233

🇳🇱 91.92.40.6

🇰🇷 59.24.133.197

🇺🇸 44.241.162.77

🇺🇸 44.56.85.88