This IP address has been reported a total of
59
times from
40 distinct
sources.
123.20.43.92 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-13T16:02:37.996332-07:00 orcas sshd[26473]: Invalid user deploy from 123.20.43.92
2026-07-13 ...
show more2026-07-13T16:02:37.996332-07:00 orcas sshd[26473]: Invalid user deploy from 123.20.43.92
2026-07-13T16:04:30.186869-07:00 orcas sshd[31289]: Invalid user yudi from 123.20.43.92
2026-07-13T16:08:06.299640-07:00 orcas sshd[42835]: Invalid user test1 from 123.20.43.92
2026-07-13T16:11:31.686566-07:00 orcas sshd[2724]: Invalid user geoserver from 123.20.43.92
2026-07-13T16:13:14.919535-07:00 orcas sshd[7224]: Invalid user wpuser from 123.20.43.92
...
show less
Jul 14 01:03:16 git sshd[1087038]: Invalid user deploy from 123.20.43.92 port 51588
Jul 14 01:05:07 ...
show moreJul 14 01:03:16 git sshd[1087038]: Invalid user deploy from 123.20.43.92 port 51588
Jul 14 01:05:07 git sshd[1087045]: Invalid user yudi from 123.20.43.92 port 57388
Jul 14 01:08:42 git sshd[1087071]: Invalid user test1 from 123.20.43.92 port 40756
...
show less
(sshd) Failed SSH login from 123.20.43.92 (VN/Vietnam/-): 5 in the last 3600 secs; Ports: *; Directi ...
show more(sshd) Failed SSH login from 123.20.43.92 (VN/Vietnam/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jul 13 17:55:51 14506 sshd[25761]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.20.43.92 user=root
Jul 13 17:55:52 14506 sshd[25761]: Failed password for root from 123.20.43.92 port 54716 ssh2
Jul 13 18:02:39 14506 sshd[29994]: Invalid user deploy from 123.20.43.92 port 58124
Jul 13 18:02:40 14506 sshd[29994]: Failed password for invalid user deploy from 123.20.43.92 port 58124 ssh2
Jul 13 18:04:31 14506 sshd[31517]: Invalid user yudi from 123.20.43.92 port 35698
show less
2026-07-13T22:52:11.637597+02:00 router02.wira-gmbh.de sshd[2560157]: Disconnected from authenticati ...
show more2026-07-13T22:52:11.637597+02:00 router02.wira-gmbh.de sshd[2560157]: Disconnected from authenticating user root 123.20.43.92 port 59618 [preauth]
2026-07-13T22:57:13.116621+02:00 router02.wira-gmbh.de sshd[2561476]: Invalid user vivek from 123.20.43.92 port 54470
2026-07-13T22:57:13.341842+02:00 router02.wira-gmbh.de sshd[2561476]: Disconnected from invalid user vivek 123.20.43.92 port 54470 [preauth]
2026-07-13T22:59:33.263194+02:00 router02.wira-gmbh.de sshd[2562058]: Disconnected from authenticating user root 123.20.43.92 port 35524 [preauth]
2026-07-13T23:01:54.919709+02:00 router02.wira-gmbh.de sshd[2562794]: Disconnected from authenticating user root 123.20.43.92 port 44810 [preauth]
show less
2026-07-13T20:45:54.268274Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 123.20.43.92:40198 ...
show more2026-07-13T20:45:54.268274Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 123.20.43.92:40198 (158.69.22.11:2222) [session: e88162341192]
2026-07-13T20:45:57.442317Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 123.20.43.92:40592 (158.69.22.11:2222) [session: fb2561814dd4]
...
show less
2026-07-13T22:02:50.721453+02:00 srv01 sshd-session[3797068]: Failed password for root from 123.20.4 ...
show more2026-07-13T22:02:50.721453+02:00 srv01 sshd-session[3797068]: Failed password for root from 123.20.43.92 port 60506 ssh2
2026-07-13T22:04:35.091581+02:00 srv01 sshd-session[3797311]: Invalid user oleg from 123.20.43.92 port 37712
2026-07-13T22:04:35.096936+02:00 srv01 sshd-session[3797311]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.20.43.92
2026-07-13T22:04:37.054589+02:00 srv01 sshd-session[3797311]: Failed password for invalid user oleg from 123.20.43.92 port 37712 ssh2
2026-07-13T22:06:24.896863+02:00 srv01 sshd-session[3797580]: Invalid user zookeeper from 123.20.43.92 port 43156
...
show less
SSH Honeypot attack.
{"client_version":"SSH-2.0-libssh_0.9.6","duser":"root","level":"info","msg":"R ...
show moreSSH Honeypot attack.
{"client_version":"SSH-2.0-libssh_0.9.6","duser":"root","level":"info","msg":"Request with password","password":"Asdfg","server_version":"SSH-2.0-OpenSSH_7.9p1 Debian-10","src":"123.20.43.92","time":"2026-07-13T19:03:08.829276518Z"}
{"client_version":"SSH-2.0-libssh_0.9.6","duser":"root","level":"info","msg":"Request with password","password":"ctrls.1234$#$","server_version":"SSH-2.0-OpenSSH_7.9p1 Debian-10","src":"123.20.43.92","time":"2026-07-13T19:13:50.731431926Z"}
{"client_version":"SSH-2.0-libssh_0.9.6","duser":"kostas","level":"info","msg":"Request with password","password":"kostas","server_version":"SSH-2.0-OpenSSH_7.9p1 Debian-10","src":"123.20.43.92","time":"2026-07-13T19:17:31.473267479Z"}
{"client_version":"SSH-2.0-libssh_0.9.6","duser":"root","level":"info","msg":"Request with password","password":"!@#qweASD","server_version":"SSH-2.0-OpenSSH_7.9p1 Debian-10","src":"123.20.43.92","time":"2026-07-13T19:19:26.584284467Z"}
{"client_version":"SSH-2.0-libssh_0.9.6","duser":"ts
...
show less
2026-07-13T21:16:40.908138+02:00 srv01 sshd-session[3788252]: Invalid user kostas from 123.20.43.92 ...
show more2026-07-13T21:16:40.908138+02:00 srv01 sshd-session[3788252]: Invalid user kostas from 123.20.43.92 port 60440
2026-07-13T21:16:40.913131+02:00 srv01 sshd-session[3788252]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.20.43.92
2026-07-13T21:16:42.876447+02:00 srv01 sshd-session[3788252]: Failed password for invalid user kostas from 123.20.43.92 port 60440 ssh2
2026-07-13T21:18:36.480033+02:00 srv01 sshd-session[3788508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.20.43.92 user=root
2026-07-13T21:18:38.792593+02:00 srv01 sshd-session[3788508]: Failed password for root from 123.20.43.92 port 37652 ssh2
...
show less
2026-07-13T21:10:18.122738+02:00 jantje sshd[4135]: Disconnected from authenticating user root 123.2 ...
show more2026-07-13T21:10:18.122738+02:00 jantje sshd[4135]: Disconnected from authenticating user root 123.20.43.92 port 56852 [preauth]
2026-07-13T21:14:39.439100+02:00 jantje sshd[4149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.20.43.92 user=root
2026-07-13T21:14:40.799086+02:00 jantje sshd[4149]: Failed password for root from 123.20.43.92 port 47240 ssh2
...
show less