This IP address has been reported a total of
50
times from
41 distinct
sources.
220.203.23.80 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
SSH brute-force from honeypot. 35 attempts in 24h, 2 unique usernames tried.
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: ubuntu, Pass: [REDACTED]
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: root, Pass: [REDACTED]
Brute-Force
SSH
Anonymous
SSH tarpit (endlessh) connection from 220.203.23.80
Brute-Force
SSH
Anonymous
2026-06-22T21:09:31.981253+00:00 nbg01-02-secure sshd[214894]: Invalid user ubuntu from 220.203.23.8 ...
show more2026-06-22T21:09:31.981253+00:00 nbg01-02-secure sshd[214894]: Invalid user ubuntu from 220.203.23.80 port 50952
2026-06-22T21:09:31.984244+00:00 nbg01-02-secure sshd[214894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.203.23.80
2026-06-22T21:09:33.640567+00:00 nbg01-02-secure sshd[214894]: Failed password for invalid user ubuntu from 220.203.23.80 port 50952 ssh2
...
show less
Brute-Force
Anonymous
Jun 23 05:07:41 mail sshd[9831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ...
show moreJun 23 05:07:41 mail sshd[9831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.203.23.80
Jun 23 05:07:44 mail sshd[9831]: Failed password for invalid user ubuntu from 220.203.23.80 port 42836 ssh2
show less
2026-06-23T05:47:24.507068 vps1.chirorist.org sshd[2231664]: Failed password for root from 220.203.2 ...
show more2026-06-23T05:47:24.507068 vps1.chirorist.org sshd[2231664]: Failed password for root from 220.203.23.80 port 36728 ssh2
2026-06-23T06:06:03.696596 vps1.chirorist.org sshd[2231739]: Invalid user ubuntu from 220.203.23.80 port 60496
2026-06-23T06:06:03.696596 vps1.chirorist.org sshd[2231739]: Invalid user ubuntu from 220.203.23.80 port 60496
2026-06-23T06:06:03.700138 vps1.chirorist.org sshd[2231739]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.203.23.80
2026-06-23T06:06:05.802705 vps1.chirorist.org sshd[2231739]: Failed password for invalid user ubuntu from 220.203.23.80 port 60496 ssh2
...
show less
2026-06-23T05:54:49+12:00 sshd[2314410]: Invalid user ubuntu from 220.203.23.80 port 50534
2026-06- ...
show more2026-06-23T05:54:49+12:00 sshd[2314410]: Invalid user ubuntu from 220.203.23.80 port 50534
2026-06-23T05:54:49+12:00 sshd[2314410]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.203.23.80
2026-06-23T05:54:51+12:00 sshd[2314410]: Failed password for invalid user ubuntu from 220.203.23.80 port 50534 ssh2
...
show less
(sshd) Failed SSH login from 220.203.23.80 (CN/China/-): 5 in the last 3600 secs; Ports: *; Directio ...
show more(sshd) Failed SSH login from 220.203.23.80 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 23 01:32:31 ded01 sshd[1997073]: Did not receive identification string from 220.203.23.80 port 36596
Jun 23 01:32:53 ded01 sshd[1997246]: Did not receive identification string from 220.203.23.80 port 54528
Jun 23 01:33:04 ded01 sshd[1997353]: Did not receive identification string from 220.203.23.80 port 36872
Jun 23 01:33:25 ded01 sshd[1997532]: Did not receive identification string from 220.203.23.80 port 42262
Jun 23 01:35:22 ded01 sshd[1999730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.203.23.80 user=root
show less
Malicious activity from 220.203.23.80 detected by FDC honeypots. Categories: 14,15,18,22. 6 events i ...
show moreMalicious activity from 220.203.23.80 detected by FDC honeypots. Categories: 14,15,18,22. 6 events in last 24h.
show less
2026-06-22T08:31:46.378363+00:00 thelemmy.club sshd-session[2931782]: Unable to negotiate with 220.2 ...
show more2026-06-22T08:31:46.378363+00:00 thelemmy.club sshd-session[2931782]: Unable to negotiate with 220.203.23.80 port 36486: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
2026-06-22T10:27:59.525545+00:00 thelemmy.club sshd-session[3007822]: Unable to negotiate with 220.203.23.80 port 39648: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
...
show less