This IP address has been reported a total of
132
times from
92 distinct
sources.
20.61.127.57 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Jun 13 20:40:45 * sshd[1128207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ...
show moreJun 13 20:40:45 * sshd[1128207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.61.127.57 user=root
Jun 13 20:40:47 * sshd[1128207]: Failed password for root from 20.61.127.57 port 31322 ssh2
Jun 13 20:40:47 * sshd[1128211]: Invalid user r00t from 20.61.127.57 port 31320
show less
2026-06-14T02:35:09.448306+08:00 vmi996132.contaboserver.net sshd[2488200]: pam_unix(sshd:auth): aut ...
show more2026-06-14T02:35:09.448306+08:00 vmi996132.contaboserver.net sshd[2488200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.61.127.57 user=root
2026-06-14T02:35:11.657561+08:00 vmi996132.contaboserver.net sshd[2488200]: Failed password for root from 20.61.127.57 port 31321 ssh2
...
show less
Jun 13 20:00:39 vmd80284 sshd[4281]: Invalid user r00t from 20.61.127.57 port 31323
Jun 13 20:26:00 ...
show moreJun 13 20:00:39 vmd80284 sshd[4281]: Invalid user r00t from 20.61.127.57 port 31323
Jun 13 20:26:00 vmd80284 sshd[4874]: Invalid user r00t from 20.61.127.57 port 31323
Jun 13 20:28:44 vmd80284 sshd[4942]: Invalid user r00t from 20.61.127.57 port 31323
...
show less
2026-06-13T20:11:06.059644+02:00 eproxy sshd[2072761]: User root not allowed because account is lock ...
show more2026-06-13T20:11:06.059644+02:00 eproxy sshd[2072761]: User root not allowed because account is locked
2026-06-13T20:11:06.179837+02:00 eproxy sshd[2072761]: Connection closed by invalid user root 20.61.127.57 port 31322 [preauth]
...
show less
Honeypot [fra-de-honeypot]: Unauthorized traffic (22 bytes of payload); 25565 [2] TCP
Reported by Di ...
show moreHoneypot [fra-de-honeypot]: Unauthorized traffic (22 bytes of payload); 25565 [2] TCP
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less