This IP address has been reported a total of
466
times from
279 distinct
sources.
201.222.20.20 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
2026-07-05T00:58:44.658105-07:00 teslamate.docsit.net sshd[2660542]: pam_unix(sshd:auth): authentica ...
show more2026-07-05T00:58:44.658105-07:00 teslamate.docsit.net sshd[2660542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.222.20.20
2026-07-05T00:58:46.798695-07:00 teslamate.docsit.net sshd[2660542]: Failed password for invalid user ali from 201.222.20.20 port 58856 ssh2
...
show less
2026-07-05T09:21:52.965747+02:00 rico-j.de sshd-session[1295795]: Connection from 201.222.20.20 port ...
show more2026-07-05T09:21:52.965747+02:00 rico-j.de sshd-session[1295795]: Connection from 201.222.20.20 port 36976 on 5.45.102.214 port 22 rdomain ""
2026-07-05T09:21:54.061467+02:00 rico-j.de sshd-session[1295795]: User root from 201.222.20.20 not allowed because not listed in AllowUsers
2026-07-05T09:23:36.393429+02:00 rico-j.de sshd-session[1297345]: Connection from 201.222.20.20 port 42898 on 5.45.102.214 port 22 rdomain ""
2026-07-05T09:23:37.490085+02:00 rico-j.de sshd-session[1297345]: User root from 201.222.20.20 not allowed because not listed in AllowUsers
...
show less
2026-07-05T07:12:57.373647+00:00 vps1 sshd[340751]: Disconnected from authenticating user root 201.2 ...
show more2026-07-05T07:12:57.373647+00:00 vps1 sshd[340751]: Disconnected from authenticating user root 201.222.20.20 port 56446 [preauth]
2026-07-05T07:18:53.964728+00:00 vps1 sshd[341347]: Disconnected from authenticating user root 201.222.20.20 port 46788 [preauth]
2026-07-05T07:20:44.634400+00:00 vps1 sshd[341537]: Invalid user testtest from 201.222.20.20 port 58404
...
show less
2026-07-05T06:30:06.118161+00:00 TP sshd[595365]: Failed password for root from 201.222.20.20 port 3 ...
show more2026-07-05T06:30:06.118161+00:00 TP sshd[595365]: Failed password for root from 201.222.20.20 port 39460 ssh2
2026-07-05T06:32:10.984921+00:00 TP sshd[596324]: Invalid user mine from 201.222.20.20 port 53676
2026-07-05T06:32:10.987021+00:00 TP sshd[596324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.222.20.20
2026-07-05T06:32:12.415271+00:00 TP sshd[596324]: Failed password for invalid user mine from 201.222.20.20 port 53676 ssh2
2026-07-05T06:34:00.060337+00:00 TP sshd[597146]: Invalid user sftpuser from 201.222.20.20 port 57406
2026-07-05T06:34:00.062212+00:00 TP sshd[597146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.222.20.20
2026-07-05T06:34:02.259187+00:00 TP sshd[597146]: Failed password for invalid user sftpuser from 201.222.20.20 port 57406 ssh2
2026-07-05T06:35:58.654780+00:00 TP sshd[598074]: Invalid user git from 201.222.20.20 po
...
show less
Jul 5 00:15:00 digamma sshd[205104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreJul 5 00:15:00 digamma sshd[205104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.222.20.20 user=root
Jul 5 00:15:02 digamma sshd[205104]: Failed password for invalid user root from 201.222.20.20 port 35266 ssh2
Jul 5 00:26:23 digamma sshd[205229]: User root from 201.222.20.20 not allowed because none of user's groups are listed in AllowGroups
...
show less
Jul 5 07:40:20 jira sshd[3045376]: Failed password for root from 201.222.20.20 port 36206 ssh2
Jul ...
show moreJul 5 07:40:20 jira sshd[3045376]: Failed password for root from 201.222.20.20 port 36206 ssh2
Jul 5 07:40:22 jira sshd[3045376]: Disconnected from authenticating user root 201.222.20.20 port 36206 [preauth]
Jul 5 07:42:34 jira sshd[3045419]: Connection from 201.222.20.20 port 44280 on 138.201.123.138 port 22 rdomain ""
Jul 5 07:42:35 jira sshd[3045419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.222.20.20 user=root
Jul 5 07:42:37 jira sshd[3045419]: Failed password for root from 201.222.20.20 port 44280 ssh2
...
show less
2026-07-05T07:20:07.800526+02:00 nc-vm-rs2kg95-nue sshd[2284016]: Invalid user oracle1 from 201.222. ...
show more2026-07-05T07:20:07.800526+02:00 nc-vm-rs2kg95-nue sshd[2284016]: Invalid user oracle1 from 201.222.20.20 port 34702
2026-07-05T07:31:28.223037+02:00 nc-vm-rs2kg95-nue sshd[2284124]: Invalid user dev from 201.222.20.20 port 47072
2026-07-05T07:33:51.579152+02:00 nc-vm-rs2kg95-nue sshd[2284144]: Invalid user ess from 201.222.20.20 port 53398
...
show less
Brute-Force
SSH
Anonymous
Jul 5 07:30:41 prisma sshd[2898887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreJul 5 07:30:41 prisma sshd[2898887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.222.20.20
Jul 5 07:30:43 prisma sshd[2898887]: Failed password for invalid user dev from 201.222.20.20 port 36942 ssh2
Jul 5 07:33:05 prisma sshd[2900583]: Invalid user ess from 201.222.20.20 port 39758
Jul 5 07:33:05 prisma sshd[2900583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.222.20.20
Jul 5 07:33:07 prisma sshd[2900583]: Failed password for invalid user ess from 201.222.20.20 port 39758 ssh2
...
show less
Jul 5 07:19:02 jira sshd[3044950]: Disconnected from invalid user oracle1 201.222.20.20 port 46050 ...
show moreJul 5 07:19:02 jira sshd[3044950]: Disconnected from invalid user oracle1 201.222.20.20 port 46050 [preauth]
Jul 5 07:26:29 jira sshd[3045094]: Connection from 201.222.20.20 port 49094 on 138.201.123.138 port 22 rdomain ""
Jul 5 07:26:30 jira sshd[3045094]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.222.20.20 user=root
Jul 5 07:26:33 jira sshd[3045094]: Failed password for root from 201.222.20.20 port 49094 ssh2
Jul 5 07:26:33 jira sshd[3045094]: Disconnected from authenticating user root 201.222.20.20 port 49094 [preauth]
...
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: root, Pass: [REDACTED]
2026-07-05T12:33:35.383261+08:00 r901613 sshd[37311]: Invalid user ftptest from 201.222.20.20 port 3 ...
show more2026-07-05T12:33:35.383261+08:00 r901613 sshd[37311]: Invalid user ftptest from 201.222.20.20 port 37184
2026-07-05T12:33:35.394180+08:00 r901613 sshd[37311]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.222.20.20
2026-07-05T12:33:37.055390+08:00 r901613 sshd[37311]: Failed password for invalid user ftptest from 201.222.20.20 port 37184 ssh2
2026-07-05T12:35:34.834295+08:00 r901613 sshd[37466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.222.20.20 user=root
2026-07-05T12:35:36.499493+08:00 r901613 sshd[37466]: Failed password for root from 201.222.20.20 port 42640 ssh2
...
show less