This IP address has been reported a total of
43
times from
30 distinct
sources.
189.222.220.31 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
(sshd) Failed SSH login from 189.222.220.31 (MX/Mexico/189.222.220.31.dsl.dyn.telnor.net): 5 in the ...
show more(sshd) Failed SSH login from 189.222.220.31 (MX/Mexico/189.222.220.31.dsl.dyn.telnor.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Mar 30 12:51:57 14250 sshd[23647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.222.220.31 user=root
Mar 30 12:51:59 14250 sshd[23647]: Failed password for root from 189.222.220.31 port 42374 ssh2
Mar 30 13:00:27 14250 sshd[24529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.222.220.31 user=root
Mar 30 13:00:29 14250 sshd[24529]: Failed password for root from 189.222.220.31 port 48338 ssh2
Mar 30 13:03:42 14250 sshd[24785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.222.220.31 user=root
show less
Brute-Force
SSH
Anonymous
2026-03-30T13:16:21.990312+00:00 subaru sshd-session[1175246]: Failed password for root from 189.222 ...
show more2026-03-30T13:16:21.990312+00:00 subaru sshd-session[1175246]: Failed password for root from 189.222.220.31 port 39407 ssh2
2026-03-30T13:16:24.376717+00:00 subaru sshd-session[1175246]: Disconnected from authenticating user root 189.222.220.31 port 39407 [preauth]
2026-03-30T13:21:03.298001+00:00 subaru sshd-session[1181754]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.222.220.31 user=root
2026-03-30T13:21:05.548425+00:00 subaru sshd-session[1181754]: Failed password for root from 189.222.220.31 port 37862 ssh2
2026-03-30T13:21:05.682686+00:00 subaru sshd-session[1181754]: Disconnected from authenticating user root 189.222.220.31 port 37862 [preauth]
...
show less
2026-03-30T15:14:10.212438+02:00 87hcet sshd[301115]: User root from 189.222.220.31 not allowed beca ...
show more2026-03-30T15:14:10.212438+02:00 87hcet sshd[301115]: User root from 189.222.220.31 not allowed because not listed in AllowUsers
2026-03-30T15:14:10.382709+02:00 87hcet sshd[301115]: Disconnected from invalid user root 189.222.220.31 port 60829 [preauth]
2026-03-30T15:18:52.635238+02:00 87hcet sshd[301237]: User root from 189.222.220.31 not allowed because not listed in AllowUsers
...
show less
2026-03-30T12:27:31.369148+01:00 s0 sshd[3937371]: Failed password for root from 189.222.220.31 port ...
show more2026-03-30T12:27:31.369148+01:00 s0 sshd[3937371]: Failed password for root from 189.222.220.31 port 41236 ssh2
2026-03-30T12:28:05.104421+01:00 s0 sshd[3937452]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.222.220.31 user=root
2026-03-30T12:28:06.444601+01:00 s0 sshd[3937452]: Failed password for root from 189.222.220.31 port 44409 ssh2
...
show less
Mar 30 13:26:10 spado sshd[25812]: Failed password for root from 189.222.220.31 port 20184 ssh2
Mar ...
show moreMar 30 13:26:10 spado sshd[25812]: Failed password for root from 189.222.220.31 port 20184 ssh2
Mar 30 13:27:19 spado sshd[25829]: Failed password for root from 189.222.220.31 port 36675 ssh2
show less
Brute-Force
SSH
Showing 1 to
15
of 43 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩