AbuseIPDB » 123.25.30.20

123.25.30.20 was found in our database!

This IP was reported 163 times. Confidence of Abuse is 100%: ?

100%

ISP	Vietnam Posts and Telecommunications Group
Usage Type	Unknown
Domain Name	vnpt.com.vn
Country	Viet Nam
City	Hanoi, Ha Noi

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 123.25.30.20

Whois 123.25.30.20

IP Abuse Reports for 123.25.30.20:

This IP address has been reported a total of 163 times from 74 distinct sources. 123.25.30.20 was first reported on January 9th 2021, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
GeekSec	22 hours ago	"Active (failed) brute force attack"	Hacking Brute-Force Exploited Host
Custard	06 Aug 2022	Aug 6 22:38:13 localhost sshd[853654]: Connection closed by 123.25.30.20 port 35008 [preauth]	Brute-Force SSH
aorth	01 Aug 2022	Aug 01 02:30:54 Invalid user user from 123.25.30.20 port 40628	Brute-Force SSH
wee waa	01 Aug 2022	Attempt to login with false credentials	Brute-Force Web App Attack
nehost.de	29 Jul 2022	123.25.30.20 detected brute forcing	Brute-Force
el-brujo	28 Jul 2022	Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "test" at 2022-07-28T20:47:22Z	Brute-Force SSH
LRNP	28 Jul 2022	Jul 28 11:11:34 neon sshd[102318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show moreJul 28 11:11:34 neon sshd[102318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.25.30.20 Jul 28 11:11:36 neon sshd[102318]: Failed password for invalid user admin from 123.25.30.20 port 54772 ssh2 Jul 28 11:11:40 neon sshd[102318]: Connection closed by invalid user admin 123.25.30.20 port 54772 [preauth] ... show less	Brute-Force SSH
Anonymous	26 Jul 2022	Message meets Alert condition The following critical firewall event was detected: SSL VPN log ... show moreMessage meets Alert condition The following critical firewall event was detected: SSL VPN login fail. date=2022-07-26 time=06:44:45 devname=FG200E4Q16901016 devid=FG200E4Q16901016 logid=0101039426 type=event subtype=vpn level=alert vd=root logdesc="SSL VPN login fail" action="ssl-login-fail" tunneltype="ssl-web" tunnelid=0 remip=123.25.30.20 user="gdadmin" group="N/A" dst_host="N/A" reason="sslvpn_login_unknown_user" msg="SSL user failed to logged in" show less	VPN IP
Anonymous	26 Jul 2022	Message meets Alert condition The following critical firewall event was detected: SSL VPN log ... show moreMessage meets Alert condition The following critical firewall event was detected: SSL VPN login fail. date=2022-07-26 time=06:44:45 devname=FG200E4Q16901016 devid=FG200E4Q16901016 logid=0101039426 type=event subtype=vpn level=alert vd=root logdesc="SSL VPN login fail" action="ssl-login-fail" tunneltype="ssl-web" tunnelid=0 remip=123.25.30.20 user="gdadmin" group="N/A" dst_host="N/A" reason="sslvpn_login_unknown_user" msg="SSL user failed to logged in" show less	VPN IP
Anonymous	25 Jul 2022		Brute-Force SSH
kutswa.com	24 Jul 2022	$f2bV_matches	Brute-Force SSH
syokadmin	21 Jul 2022	123.25.30.20 (VN/Vietnam/-), 2 distributed imapd attacks on account [[email protected]] ... show more123.25.30.20 (VN/Vietnam/-), 2 distributed imapd attacks on account [[email protected]] in the last 3600 secs show less	Brute-Force
10dencehispahard SL	20 Jul 2022	Unauthorized login attempts [{'dovecot', 'sshd'}]	Brute-Force SSH
SecondBanana	17 Jul 2022	Jul 17 23:57:56 flask sshd[6983]: Connection closed by 123.25.30.20 port 57429 [preauth] ...	Brute-Force SSH
Anonymous	16 Jul 2022	123.25.30.20 (VN/Vietnam/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Por ... show more123.25.30.20 (VN/Vietnam/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Jul 16 03:16:55 server5 sshd[6604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.25.30.20 user=root Jul 16 03:16:57 server5 sshd[6604]: Failed password for root from 123.25.30.20 port 54518 ssh2 Jul 16 03:12:56 server5 sshd[5728]: Failed password for root from 37.187.146.134 port 39036 ssh2 Jul 16 03:13:40 server5 sshd[5783]: Failed password for root from 14.99.4.82 port 64352 ssh2 Jul 16 03:18:53 server5 sshd[6829]: Failed password for root from 59.124.205.215 port 51950 ssh2 Jul 16 03:13:38 server5 sshd[5783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.99.4.82 user=root IP Addresses Blocked: show less	Brute-Force

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩