AbuseIPDB » 220.189.252.218

220.189.252.218 was found in our database!

This IP was reported 1,798 times. Confidence of Abuse is 10%: ?

10%

ISP	Jiashan jiayustar leuv garment co.,ltd
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	hz.zj.cn
Country	China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 220.189.252.218

Whois 220.189.252.218

IP Abuse Reports for 220.189.252.218:

This IP address has been reported a total of 1,798 times from 312 distinct sources. 220.189.252.218 was first reported on May 15th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Smel	2025-05-19 07:10:30 (1 month ago)	SSH/22 MH Probe, BF, Hack -	Hacking Brute-Force SSH
rtbh.com.tr	2025-03-26 20:48:34 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
ThreatBook.io	2025-03-26 00:03:35 (3 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/220.189.252.218	SSH
rtbh.com.tr	2025-03-25 20:48:36 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Smel	2025-03-25 15:02:12 (3 months ago)	SSH/22 MH Probe, BF, Hack -	Hacking Brute-Force SSH
brocococonut	2025-03-25 13:07:30 (3 months ago)	2025-03-25 08:38:58 dovecot_plain authenticator failed for ([220.189.252.218]) [220.189.252.218]: 53 ... show more2025-03-25 08:38:58 dovecot_plain authenticator failed for ([220.189.252.218]) [220.189.252.218]: 535 Incorrect authentication data ([email protected]) 2025-03-25 12:46:31 dovecot_plain authenticator failed for ([220.189.252.218]) [220.189.252.218]: 535 Incorrect authentication data (set_id=contracts) 2025-03-25 16:31:36 dovecot_plain authenticator failed for ([220.189.252.218]) [220.189.252.218]: 535 Incorrect authentication data (set_id=jake) 2025-03-25 08:38:58 dovecot_plain authenticator failed for ([220.189.252.218]) [220.189.252.218]: 535 Incorrect authentication data ([email protected]) 2025-03-25 12:46:31 dovecot_plain authenticator failed for ([220.189.252.218]) [220.189.252.218]: 535 Incorrect authentication data (set_id=contracts) ... show less	Brute-Force
www.tana.it	2025-03-25 12:24:56 (3 months ago)	SMTP auth dictionary attack	Brute-Force
Anonymous	2025-03-25 09:08:03 (3 months ago)	220.189.252.218 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Po ... show more220.189.252.218 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Mar 25 05:07:54 server2 sshd[22381]: Failed password for root from 196.251.87.74 port 34840 ssh2 Mar 25 04:18:27 server2 sshd[5293]: Failed password for root from 220.189.252.218 port 41934 ssh2 Mar 25 05:07:57 server2 sshd[22392]: Failed password for root from 196.251.87.74 port 34856 ssh2 Mar 25 04:43:20 server2 sshd[13925]: Failed password for root from 210.211.97.51 port 47540 ssh2 Mar 25 04:36:42 server2 sshd[11764]: Failed password for root from 119.45.143.159 port 34900 ssh2 IP Addresses Blocked: 196.251.87.74 (NG/Nigeria/-) show less	Brute-Force
HoneyPotEu	2025-03-25 08:01:12 (3 months ago)	Mar 25 09:01:09 [redacted] sshd[1256171]: pam_unix(sshd:auth): authentication failure; logname= uid= ... show moreMar 25 09:01:09 [redacted] sshd[1256171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.189.252.218 Mar 25 09:01:11 [redacted] sshd[1256171]: Failed password for inval ... show less	Brute-Force SSH
raspi4	2025-03-25 06:40:37 (3 months ago)	Fail2Ban Ban Triggered	Brute-Force SSH
raspi4	2025-03-25 06:40:37 (3 months ago)	Fail2Ban Ban Triggered	Brute-Force SSH
majo-it.nl	2025-03-25 06:05:11 (3 months ago)	Mar 25 06:05:08 fail2ban sshd[3570604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show moreMar 25 06:05:08 fail2ban sshd[3570604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.189.252.218 Mar 25 06:05:10 fail2ban sshd[3570604]: Failed password for invalid user ubnt from 220.189.252.218 port 48208 ssh2 ... show less	Brute-Force SSH
brocococonut	2025-03-25 05:31:36 (3 months ago)	2025-03-25 08:38:58 dovecot_plain authenticator failed for ([220.189.252.218]) [220.189.252.218]: 53 ... show more2025-03-25 08:38:58 dovecot_plain authenticator failed for ([220.189.252.218]) [220.189.252.218]: 535 Incorrect authentication data ([email protected]) 2025-03-25 12:46:31 dovecot_plain authenticator failed for ([220.189.252.218]) [220.189.252.218]: 535 Incorrect authentication data (set_id=contracts) 2025-03-25 12:46:31 dovecot_plain authenticator failed for ([220.189.252.218]) [220.189.252.218]: 535 Incorrect authentication data (set_id=contracts) 2025-03-25 16:31:36 dovecot_plain authenticator failed for ([220.189.252.218]) [220.189.252.218]: 535 Incorrect authentication data (set_id=jake) 2025-03-25 16:31:36 dovecot_plain authenticator failed for ([220.189.252.218]) [220.189.252.218]: 535 Incorrect authentication data (set_id=jake) ... show less	Brute-Force
Anonymous	2025-03-25 03:54:50 (3 months ago)	IMAP password guessing	Brute-Force
hanb.jp	2025-03-25 03:54:10 (3 months ago)	Mar 23 20:30:57 v4bgp sshd[1472443]: Failed password for invalid user user from 220.189.252.218 port ... show moreMar 23 20:30:57 v4bgp sshd[1472443]: Failed password for invalid user user from 220.189.252.218 port 34406 ssh2 Mar 25 03:54:08 v4bgp sshd[1508228]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.189.252.218 user=sshd Mar 25 03:54:09 v4bgp sshd[1508228]: Failed password for sshd from 220.189.252.218 port 35000 ssh2 ... show less	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩