JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 123.20.167.141

123.20.167.141 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 87%: ?

87%

ISP	Vietnam Posts and Telecommunications Group
Usage Type	Mobile ISP
ASN	AS45899
Domain Name	vnpt.com.vn
Country	🇻🇳 Viet Nam
City	Ho Chi Minh City, Ho Chi Minh City (HCMC)

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 123.20.167.141

Whois 123.20.167.141

IP Abuse Reports for 123.20.167.141:

This IP address has been reported a total of 32 times from 16 distinct sources. 123.20.167.141 was first reported on October 12th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 Parth Maniar	2026-07-10 17:36:12 (1 day ago)	This IP address carried out 53 SSH credential attack (attempts) on 09-07-2026. For more information ... show more This IP address carried out 53 SSH credential attack (attempts) on 09-07-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
🇮🇳 Parth Maniar	2026-07-10 15:56:04 (1 day ago)	This IP address carried out 250 port scanning attempts on 09-07-2026. For more information or to rep ... show more This IP address carried out 250 port scanning attempts on 09-07-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH
🇯🇵 knock	2026-07-09 08:01:10 (2 days ago)	Knock-Knock honeypot brute-force: SSH (1 total hits)	Brute-Force SSH
Anonymous	2026-07-09 06:13:49 (2 days ago)	Jul 9 02:11:42 www sshd\[20984\]: Invalid user sonarqube from 123.20.167.141 Jul 9 02:13:48 www ss ... show more Jul 9 02:11:42 www sshd\[20984\]: Invalid user sonarqube from 123.20.167.141 Jul 9 02:13:48 www sshd\[20988\]: Invalid user xwang from 123.20.167.141 ... show less	Brute-Force SSH
🇺🇸 sh97	2026-07-09 06:12:08 (2 days ago)	dedirock-38618307: SSH Brute Force from 123.20.167.141 at 2026-07-09 10:12:08 +04	Brute-Force SSH
🇯🇵 henda	2026-07-09 06:10:39 (2 days ago)	2026-07-09T15:06:58.696535+09:00 * sshd-session[479334]: Failed password for invalid user desktop ... show more 2026-07-09T15:06:58.696535+09:00 * sshd-session[479334]: Failed password for invalid user desktop from 123.20.167.141 port 39860 ssh2 2026-07-09T15:10:36.129694+09:00 * sshd-session[480252]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.20.167.141 user=root 2026-07-09T15:10:38.002102+09:00 * sshd-session[480252]: Failed password for root from 123.20.167.141 port 54684 ssh2 show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-07-09 04:20:48 (2 days ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇵🇱 Wepted	2026-07-09 04:18:17 (2 days ago)	2026-07-09T06:09:34.393439+02:00 axisverse sshd-session[17618]: Invalid user git from 123.20.167.141 ... show more 2026-07-09T06:09:34.393439+02:00 axisverse sshd-session[17618]: Invalid user git from 123.20.167.141 port 59726 2026-07-09T06:11:52.213880+02:00 axisverse sshd-session[23432]: Invalid user ca from 123.20.167.141 port 39684 2026-07-09T06:18:16.447737+02:00 axisverse sshd-session[39310]: Invalid user gns3 from 123.20.167.141 port 36036 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-09 04:07:50 (2 days ago)	123.20.167.141 (VN/Vietnam/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; P ... show more 123.20.167.141 (VN/Vietnam/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 8 23:07:25 21732 sshd[31993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.128.241.2 user=root Jul 8 23:01:31 21732 sshd[28879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.20.167.141 user=root Jul 8 23:01:34 21732 sshd[28879]: Failed password for root from 123.20.167.141 port 44436 ssh2 Jul 8 23:00:12 21732 sshd[28205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.209.97.14 user=root Jul 8 23:00:14 21732 sshd[28205]: Failed password for root from 178.209.97.14 port 52406 ssh2 IP Addresses Blocked: 190.128.241.2 (PY/Paraguay/-) show less	Brute-Force SSH
🇺🇸 johuang92	2026-07-09 03:46:07 (2 days ago)	Cowrie SSH honeypot: session 2c1e6b337d1c \| 1 login attempt(s) \| classified as: brute_force	Brute-Force SSH
Anonymous	2026-07-09 03:44:03 (2 days ago)	SSH brute force attempt. User: admin1, Pass: [REDACTED]	Brute-Force SSH
🇺🇸 johuang92	2026-07-09 03:29:45 (2 days ago)	Cowrie SSH honeypot: session 5603ce1ec58c \| 1 login attempt(s) \| classified as: brute_force	Brute-Force SSH
Anonymous	2026-07-09 03:13:49 (2 days ago)	SSH brute force attempt. User: elk, Pass: [REDACTED]	Brute-Force SSH
🇺🇸 johuang92	2026-07-09 03:13:18 (2 days ago)	Cowrie SSH honeypot: session c0e62dd62327 \| 1 login attempt(s) \| classified as: brute_force	Brute-Force SSH
🇺🇸 johuang92	2026-07-09 02:56:51 (2 days ago)	Cowrie SSH honeypot: session 438495c771d2 \| 1 login attempt(s) \| 2 command(s): cd ~; chattr -ia .ssh ... show more Cowrie SSH honeypot: session 438495c771d2 \| 1 login attempt(s) \| 2 command(s): cd ~; chattr -ia .ssh; lockr -ia .ssh; cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ \| 1 file transfer(s) \| classified as: brute_force, malware_deployment, persistence show less	Brute-Force SSH IoT Targeted

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 157.22.189.232

🇩🇿 154.241.54.241

🇮🇹 151.49.154.46

🇨🇳 60.166.82.119

🇳🇱 45.148.10.147

🇨🇳 14.103.126.104

🇺🇸 5.252.52.124

🇩🇪 2a04:4e40:e000:0:ee7:cb38:e9ed:e567

🇳🇱 185.196.220.130

🇺🇸 147.185.132.210

🇭🇰 119.246.15.94

🇰🇷 112.216.129.27

🇭🇰 103.229.125.106

🇺🇸 96.78.175.45

🇳🇱 91.92.40.11

🇱🇹 81.30.98.26

🇨🇳 61.52.194.211

🇬🇧 217.146.80.124

🇬🇧 213.171.208.62

🇷🇸 176.104.111.8