This IP address has been reported a total of
46
times from
32 distinct
sources.
220.203.23.11 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-21T15:56:23+12:00 sshd[2249859]: Failed password for invalid user ubuntu from 220.203.23.11 ...
show more2026-06-21T15:56:23+12:00 sshd[2249859]: Failed password for invalid user ubuntu from 220.203.23.11 port 58680 ssh2
2026-06-21T16:01:49+12:00 sshd[2249988]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.203.23.11 user=root
2026-06-21T16:01:50+12:00 sshd[2249988]: Failed password for root from 220.203.23.11 port 54762 ssh2
...
show less
2026-06-21T01:58:35.952573+00:00 instance-20241019-1127 sshd[2985732]: Disconnected from authenticat ...
show more2026-06-21T01:58:35.952573+00:00 instance-20241019-1127 sshd[2985732]: Disconnected from authenticating user root 220.203.23.11 port 56910 [preauth]
...
show less
2026-06-21T01:09:38.021461+00:00 instance-20241019-1127 sshd[2985374]: Disconnected from authenticat ...
show more2026-06-21T01:09:38.021461+00:00 instance-20241019-1127 sshd[2985374]: Disconnected from authenticating user ubuntu 220.203.23.11 port 36624 [preauth]
...
show less
Hacking
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: ubuntu, Pass: [REDACTED]
2026-06-21T00:38:27.043272+00:00 instance-20241019-1127 sshd[2985158]: Disconnected from authenticat ...
show more2026-06-21T00:38:27.043272+00:00 instance-20241019-1127 sshd[2985158]: Disconnected from authenticating user ubuntu 220.203.23.11 port 44570 [preauth]
...
show less
2026-06-21T00:35:37.899485+00:00 edge-fog-swb01.int.pdx.net.uk sshd[855757]: pam_unix(sshd:auth): au ...
show more2026-06-21T00:35:37.899485+00:00 edge-fog-swb01.int.pdx.net.uk sshd[855757]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.203.23.11
2026-06-21T00:35:39.429561+00:00 edge-fog-swb01.int.pdx.net.uk sshd[855757]: Failed password for invalid user ubuntu from 220.203.23.11 port 60424 ssh2
2026-06-21T00:35:43.734258+00:00 edge-fog-swb01.int.pdx.net.uk sshd[855757]: error: PAM: Authentication failure for illegal user ubuntu from 220.203.23.11
...
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: root, Pass: [REDACTED]
2026-06-20T23:57:07.915645+00:00 instance-20241019-1127 sshd[2984805]: Disconnected from authenticat ...
show more2026-06-20T23:57:07.915645+00:00 instance-20241019-1127 sshd[2984805]: Disconnected from authenticating user root 220.203.23.11 port 52516 [preauth]
...
show less
(sshd) Failed SSH login from 220.203.23.11 (CN/China/-): 5 in the last 3600 secs; Ports: *; Directio ...
show more(sshd) Failed SSH login from 220.203.23.11 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 21 08:57:26 ded01 sshd[77700]: Did not receive identification string from 220.203.23.11 port 41504
Jun 21 08:57:38 ded01 sshd[77785]: Did not receive identification string from 220.203.23.11 port 59404
Jun 21 08:58:25 ded01 sshd[78208]: Did not receive identification string from 220.203.23.11 port 54736
Jun 21 08:58:58 ded01 sshd[78449]: Did not receive identification string from 220.203.23.11 port 42014
Jun 21 09:03:21 ded01 sshd[82101]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.203.23.11 user=root
show less
Malicious activity from 220.203.23.11 detected by FDC honeypots. Categories: 14,15,18,22. 6 events i ...
show moreMalicious activity from 220.203.23.11 detected by FDC honeypots. Categories: 14,15,18,22. 6 events in last 24h.
show less
2026-06-20T15:44:10.494352+00:00 thelemmy.club sshd-session[1471869]: Unable to negotiate with 220.2 ...
show more2026-06-20T15:44:10.494352+00:00 thelemmy.club sshd-session[1471869]: Unable to negotiate with 220.203.23.11 port 33828: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
2026-06-20T17:17:05.476784+00:00 thelemmy.club sshd-session[1524805]: Unable to negotiate with 220.203.23.11 port 53678: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
...
show less
(sshd) Failed SSH login from 220.203.23.11 (CN/-/-): 5 in the last 3600 secs; Ports: *; Direction: i ...
show more(sshd) Failed SSH login from 220.203.23.11 (CN/-/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 20 12:41:34 na-s3 sshd[1296409]: Invalid user ubuntu from 220.203.23.11 port 48766
Jun 20 12:41:56 na-s3 sshd[1301061]: Invalid user ubuntu from 220.203.23.11 port 46444
Jun 20 12:49:13 na-s3 sshd[1376577]: Invalid user ubuntu from 220.203.23.11 port 49514
Jun 20 13:12:55 na-s3 sshd[1629338]: Invalid user ubuntu from 220.203.23.11 port 52422
Jun 20 13:13:39 na-s3 sshd[1636495]: Invalid user ubuntu from 220.203.23.11 port 48450
show less
Port Scan
Showing 1 to
15
of 46 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ