This IP address has been reported a total of
21
times from
17 distinct
sources.
123.20.28.116 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
SSH Brute force: 20 attempts were recorded from 123.20.28.116
2026-06-29T13:11:09+02:00 Invalid user ...
show moreSSH Brute force: 20 attempts were recorded from 123.20.28.116
2026-06-29T13:11:09+02:00 Invalid user xj from 123.20.28.116 port 56258
2026-06-29T13:15:36+02:00 Invalid user cdl from 123.20.28.116 port 48402
2026-06-29T13:17:39+02:00 Invalid user weekend from 123.20.28.116 port 56700
2026-06-29T13:19:39+02:00 Invalid user pers from 123.20.28.116 port 36776
2026-06-29T13:21:38+02:00 Invalid user myfiles from 123.20.28.116 port 45076
2026-06-29T13:23:33+02:00 Invalid user marvin from 123.20.28.116 port 53348
2026-06-29T13:25:26+02:00 Invalid user parker from 123.20.28.116 port 33430
2026-06-29T13:27:23+02:00 Invalid user league from 123.20.28.116 port 41724
2026-06-29T13:29:22+02:00 Invalid user jas from 123.20.28.116 port 49964
2026-06-29T13:31:21+02:00 Invalid user hzcnc from 123.20.28.116 port 58238
2026-06-29T13:33:25+02:00 Invalid user c4 from 123.20.28.116 port 38328
2026-06-29T13:35:
show less
Brute-Force
SSH
Anonymous
2026-06-29T12:11:58.301363+00:00 ams-1-vm-xjvt sshd[2892]: Failed password for root from 123.20.28.1 ...
show more2026-06-29T12:11:58.301363+00:00 ams-1-vm-xjvt sshd[2892]: Failed password for root from 123.20.28.116 port 50360 ssh2
2026-06-29T12:14:34.456570+00:00 ams-1-vm-xjvt sshd[2895]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.20.28.116 user=root
2026-06-29T12:14:36.123436+00:00 ams-1-vm-xjvt sshd[2895]: Failed password for root from 123.20.28.116 port 34402 ssh2
2026-06-29T12:17:09.169607+00:00 ams-1-vm-xjvt sshd[2906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.20.28.116 user=root
2026-06-29T12:17:10.781183+00:00 ams-1-vm-xjvt sshd[2906]: Failed password for root from 123.20.28.116 port 46706 ssh2
...
show less
2026-06-29T13:09:53.805242+02:00 gw-de21-01.guestgw.net sshd[1290655]: Invalid user xj from 123.20.2 ...
show more2026-06-29T13:09:53.805242+02:00 gw-de21-01.guestgw.net sshd[1290655]: Invalid user xj from 123.20.28.116 port 39680
2026-06-29T13:09:54.040502+02:00 gw-de21-01.guestgw.net sshd[1290655]: Disconnected from invalid user xj 123.20.28.116 port 39680 [preauth]
2026-06-29T13:15:26.417958+02:00 gw-de21-01.guestgw.net sshd[1292434]: Invalid user cdl from 123.20.28.116 port 37650
2026-06-29T13:15:26.640622+02:00 gw-de21-01.guestgw.net sshd[1292434]: Disconnected from invalid user cdl 123.20.28.116 port 37650 [preauth]
2026-06-29T13:17:29.454505+02:00 gw-de21-01.guestgw.net sshd[1293055]: Invalid user weekend from 123.20.28.116 port 45944
show less
Jun 29 07:49:20 proxy-03 sshd[3208290]: Invalid user st01 from 123.20.28.116 port 48936
Jun 29 07:49 ...
show moreJun 29 07:49:20 proxy-03 sshd[3208290]: Invalid user st01 from 123.20.28.116 port 48936
Jun 29 07:49:20 proxy-03 sshd[3208290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.20.28.116
Jun 29 07:49:21 proxy-03 sshd[3208290]: Failed password for invalid user st01 from 123.20.28.116 port 48936 ssh2
Jun 29 07:49:20 proxy-03 sshd[3208290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.20.28.116
Jun 29 07:49:21 proxy-03 sshd[3208290]: Failed password for invalid user st01 from 123.20.28.116 port 48936 ssh2
...
show less
Jun 29 12:39:37 fw03 sshd[8872]: Invalid user cet from 123.20.28.116 port 55140
Jun 29 12:39:37 fw03 ...
show moreJun 29 12:39:37 fw03 sshd[8872]: Invalid user cet from 123.20.28.116 port 55140
Jun 29 12:39:37 fw03 sshd[8872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.20.28.116
Jun 29 12:39:39 fw03 sshd[8872]: Failed password for invalid user cet from 123.20.28.116 port 55140 ssh2
...
show less
Jun 29 07:21:34 proxy-03 sshd[3156134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ...
show moreJun 29 07:21:34 proxy-03 sshd[3156134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.20.28.116
Jun 29 07:21:36 proxy-03 sshd[3156134]: Failed password for invalid user novgorod from 123.20.28.116 port 59508 ssh2
Jun 29 07:21:34 proxy-03 sshd[3156134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.20.28.116
Jun 29 07:21:36 proxy-03 sshd[3156134]: Failed password for invalid user novgorod from 123.20.28.116 port 59508 ssh2
Jun 29 07:27:09 proxy-03 sshd[3164176]: Invalid user terminus from 123.20.28.116 port 34720
...
show less
2026-06-29T12:12:15.999135+02:00 epyc02 sshd-session[1328949]: Connection from 123.20.28.116 port 43 ...
show more2026-06-29T12:12:15.999135+02:00 epyc02 sshd-session[1328949]: Connection from 123.20.28.116 port 43896 on 5.231.248.233 port 22 rdomain ""
2026-06-29T12:12:17.180077+02:00 epyc02 sshd-session[1328949]: Invalid user proteus from 123.20.28.116 port 43896
2026-06-29T12:14:57.644133+02:00 epyc02 sshd-session[1330857]: Connection from 123.20.28.116 port 59804 on 5.231.248.233 port 22 rdomain ""
2026-06-29T12:14:59.065856+02:00 epyc02 sshd-session[1330857]: Invalid user tcs from 123.20.28.116 port 59804
...
show less
Jun 29 10:04:33 GT sshd[188414]: Failed password for invalid user krakow from 123.20.28.116 port 534 ...
show moreJun 29 10:04:33 GT sshd[188414]: Failed password for invalid user krakow from 123.20.28.116 port 53440 ssh2
Jun 29 10:08:32 GT sshd[188513]: Invalid user bug from 123.20.28.116 port 46840
Jun 29 10:08:32 GT sshd[188513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.20.28.116
Jun 29 10:08:34 GT sshd[188513]: Failed password for invalid user bug from 123.20.28.116 port 46840 ssh2
Jun 29 10:11:27 GT sshd[188633]: Invalid user idol from 123.20.28.116 port 34468
...
show less
(sshd) Failed SSH login from 123.20.28.116 (VN/Vietnam/-): 5 in the last 3600 secs; Ports: *; Direct ...
show more(sshd) Failed SSH login from 123.20.28.116 (VN/Vietnam/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 29 05:02:39 14190 sshd[20451]: Invalid user krakow from 123.20.28.116 port 40714
Jun 29 05:02:41 14190 sshd[20451]: Failed password for invalid user krakow from 123.20.28.116 port 40714 ssh2
Jun 29 05:08:09 14190 sshd[23553]: Invalid user bug from 123.20.28.116 port 42264
Jun 29 05:08:11 14190 sshd[23553]: Failed password for invalid user bug from 123.20.28.116 port 42264 ssh2
Jun 29 05:11:03 14190 sshd[25423]: Invalid user idol from 123.20.28.116 port 58124
show less
Jun 29 12:01:23 spotterlog sshd[852731]: Invalid user krakow from 123.20.28.116 port 34112
Jun 29 12 ...
show moreJun 29 12:01:23 spotterlog sshd[852731]: Invalid user krakow from 123.20.28.116 port 34112
Jun 29 12:07:53 spotterlog sshd[852832]: Invalid user bug from 123.20.28.116 port 41210
Jun 29 12:10:46 spotterlog sshd[853068]: Invalid user idol from 123.20.28.116 port 57072
...
show less
2026-06-29T12:01:27.324661+02:00 lw-dedi-hdz-10g2480-ams sshd-session[1464015]: Invalid user krakow ...
show more2026-06-29T12:01:27.324661+02:00 lw-dedi-hdz-10g2480-ams sshd-session[1464015]: Invalid user krakow from 123.20.28.116 port 47896
2026-06-29T12:07:54.305366+02:00 lw-dedi-hdz-10g2480-ams sshd-session[1464709]: Invalid user bug from 123.20.28.116 port 54680
2026-06-29T12:10:47.576441+02:00 lw-dedi-hdz-10g2480-ams sshd-session[1465084]: Invalid user idol from 123.20.28.116 port 42310
...
show less
Brute-Force
SSH
Showing 1 to
15
of 21 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩