JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.221.20.12

154.221.20.12 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 100%: ?

100%

ISP	Yisu Cloud Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS142403
Domain Name	cloudinnovation.org
Country	🇭🇰 Hong Kong
City	Tung Chung, Islands

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.221.20.12

Whois 154.221.20.12

IP Abuse Reports for 154.221.20.12:

This IP address has been reported a total of 20 times from 18 distinct sources. 154.221.20.12 was first reported on July 9th 2026, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 senkodev	2026-07-10 04:37:54 (20 hours ago)	2026-07-10T04:37:53.148194Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 154.221.20.12:4793 ... show more 2026-07-10T04:37:53.148194Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 154.221.20.12:47936 (158.69.22.11:2222) [session: 033d55a0c9a0] 2026-07-10T04:37:53.704285Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 154.221.20.12:48758 (158.69.22.11:2222) [session: 8861f543ef47] ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-10 04:10:28 (20 hours ago)	(sshd) Failed SSH login from 154.221.20.12 (HK/Hong Kong/-): 5 in the last 3600 secs; Ports: ; Dire ... show more (sshd) Failed SSH login from 154.221.20.12 (HK/Hong Kong/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Jul 9 23:09:54 14445 sshd[29532]: Did not receive identification string from 154.221.20.12 port 56956 Jul 9 23:10:09 14445 sshd[29537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.221.20.12 user=root Jul 9 23:10:11 14445 sshd[29537]: Failed password for root from 154.221.20.12 port 57348 ssh2 Jul 9 23:10:13 14445 sshd[29842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.221.20.12 user=root Jul 9 23:10:15 14445 sshd[29842]: Failed password for root from 154.221.20.12 port 58220 ssh2 show less	Brute-Force SSH
🇩🇪 XICTRON	2026-07-10 03:20:03 (21 hours ago)	SSH brute-force attempt detected by Fail2Ban	SSH
🇫🇷 900cm	2026-07-09 19:30:14 (1 day ago)	Jul 9 21:30:14 raspberrypi sshd[2381]: Failed password for root from 154.221.20.12 port 47836 ssh2 ... show more Jul 9 21:30:14 raspberrypi sshd[2381]: Failed password for root from 154.221.20.12 port 47836 ssh2 ... show less	Port Scan Brute-Force SSH
🇺🇸 amit177	2026-07-09 18:46:08 (1 day ago)		Brute-Force SSH
🇺🇸 SiteHUB Agency	2026-07-09 17:33:08 (1 day ago)	Brute force activities detected and blocked	Brute-Force
🇧🇷 ufn.edu.br	2026-07-09 17:29:25 (1 day ago)	Jul 9 14:29:18 ws22vmsma01 sshd[24165]: Failed password for root from 154.221.20.12 port 53762 ssh2 ... show more Jul 9 14:29:18 ws22vmsma01 sshd[24165]: Failed password for root from 154.221.20.12 port 53762 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-09 16:00:17 (1 day ago)	154.221.20.12 (HK/Hong Kong/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; ... show more 154.221.20.12 (HK/Hong Kong/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 9 11:00:07 14098 sshd[26895]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.221.20.12 user=root Jul 9 11:00:09 14098 sshd[26895]: Failed password for root from 154.221.20.12 port 42926 ssh2 Jul 9 11:00:12 14098 sshd[26897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.221.20.12 user=root Jul 9 10:46:12 14098 sshd[19501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.10.175.193 user=root Jul 9 10:46:13 14098 sshd[19501]: Failed password for root from 45.10.175.193 port 53610 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇫🇷 focusnic.com	2026-07-09 14:34:18 (1 day ago)	Multiple SSH login attempts from 154.221.20.12 targeting user(s): root \| Server Managed by Focusnic	Brute-Force SSH
🇬🇧 adnscom.net	2026-07-09 14:16:29 (1 day ago)	IPS trigger: Brute force SSH scanning/attack	Brute-Force SSH
🇩🇪 LoNET	2026-07-09 12:55:27 (1 day ago)	Report 2545915 with IP 3593482 for SSH brute-force attack by source 3588140 via ssh-honeypot/0.2.0+h ... show more Report 2545915 with IP 3593482 for SSH brute-force attack by source 3588140 via ssh-honeypot/0.2.0+http show less	Brute-Force SSH
🇺🇸 KBODHSupport	2026-07-09 09:59:10 (1 day ago)	2026-07-09T09:59:00.740170+00:00 localhost sshd[1313504]: Failed password for root from 154.221.20.1 ... show more 2026-07-09T09:59:00.740170+00:00 localhost sshd[1313504]: Failed password for root from 154.221.20.12 port 42886 ssh2 2026-07-09T09:59:03.150215+00:00 localhost sshd[1313506]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.221.20.12 user=root 2026-07-09T09:59:04.726491+00:00 localhost sshd[1313506]: Failed password for root from 154.221.20.12 port 44416 ssh2 2026-07-09T09:59:07.416637+00:00 localhost sshd[1313508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.221.20.12 user=root 2026-07-09T09:59:09.539985+00:00 localhost sshd[1313508]: Failed password for root from 154.221.20.12 port 45534 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-09 08:49:29 (1 day ago)	154.221.20.12 (HK/Hong Kong/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; ... show more 154.221.20.12 (HK/Hong Kong/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 9 03:13:06 12525 sshd[10811]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.221.20.12 user=root Jul 9 03:13:09 12525 sshd[10811]: Failed password for root from 154.221.20.12 port 50642 ssh2 Jul 9 03:49:07 12525 sshd[29502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.47.46.174 user=root Jul 9 03:38:52 12525 sshd[24201]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.47.46.174 user=root Jul 9 03:38:54 12525 sshd[24201]: Failed password for root from 92.47.46.174 port 57588 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 rjdefrancisco	2026-07-09 07:06:54 (1 day ago)	Unwanted traffic detected by honeypot on July 08, 2026: port scans (1 port 22 scan), and brute force ... show more Unwanted traffic detected by honeypot on July 08, 2026: port scans (1 port 22 scan), and brute force and hacking attacks (1 over ssh). show less	Port Scan Brute-Force SSH
🇩🇪 Bigbear3	2026-07-09 05:53:21 (1 day ago)	Report-by-bigbear3	Brute-Force SSH

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2001:470:1:fb5::17b

🇮🇳 223.191.1.203

🇦🇲 212.73.75.82

🇸🇦 176.19.203.230

🇬🇧 154.16.44.47

🇬🇧 141.101.99.144

🇳🇱 45.153.34.117

🇺🇸 20.65.195.124

🇨🇳 222.88.163.204

🇺🇸 216.25.89.101

🇦🇲 195.250.87.164

🇺🇦 178.136.105.56

🇨🇳 175.4.218.17

🇺🇸 165.22.134.78

🇺🇸 162.216.150.40

🇳🇱 160.119.71.136

🇺🇸 147.185.132.174

🇺🇸 147.182.250.77

🇹🇭 122.154.74.205

🇻🇳 103.90.227.203