This IP address has been reported a total of
1,388
times from
439 distinct
sources.
220.205.122.227 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
220.205.122.227 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Po ...
show more220.205.122.227 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 10 04:33:28 15512 sshd[32258]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.103.114.136 user=root
Feb 10 03:53:18 15512 sshd[26898]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.205.122.227 user=root
Feb 10 03:53:20 15512 sshd[26898]: Failed password for root from 220.205.122.227 port 54638 ssh2
Feb 10 04:31:54 15512 sshd[32017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.193.33.74 user=root
Feb 10 04:31:57 15512 sshd[32017]: Failed password for root from 118.193.33.74 port 38618 ssh2
IP Addresses Blocked:
14.103.114.136 (CN/China/-)
show less
Feb 10 08:47:07 es sshd[2976850]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ...
show moreFeb 10 08:47:07 es sshd[2976850]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.205.122.227
Feb 10 08:47:09 es sshd[2976850]: Failed password for invalid user gao from 220.205.122.227 port 3594 ssh2
...
show less
Brute-Force
SSH
Anonymous
Feb 10 06:57:32 f2b auth.info sshd[1031709]: Invalid user cs from 220.205.122.227 port 15254
Feb 10 ...
show moreFeb 10 06:57:32 f2b auth.info sshd[1031709]: Invalid user cs from 220.205.122.227 port 15254
Feb 10 06:57:32 f2b auth.info sshd[1031709]: Failed password for invalid user cs from 220.205.122.227 port 15254 ssh2
Feb 10 06:57:33 f2b auth.info sshd[1031709]: Disconnected from invalid user cs 220.205.122.227 port 15254 [preauth]
...
show less
2026-02-10T03:57:04.749701+01:00 Linux07 sshd[51713]: Failed password for invalid user test from 220 ...
show more2026-02-10T03:57:04.749701+01:00 Linux07 sshd[51713]: Failed password for invalid user test from 220.205.122.227 port 27315 ssh2
2026-02-10T03:58:35.489120+01:00 Linux07 sshd[55263]: Invalid user ftpuser from 220.205.122.227 port 5390
2026-02-10T03:58:35.491307+01:00 Linux07 sshd[55263]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.205.122.227
2026-02-10T03:58:37.107578+01:00 Linux07 sshd[55263]: Failed password for invalid user ftpuser from 220.205.122.227 port 5390 ssh2
2026-02-10T03:59:21.372579+01:00 Linux07 sshd[57221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.205.122.227 user=root
2026-02-10T03:59:23.971677+01:00 Linux07 sshd[57221]: Failed password for root from 220.205.122.227 port 1190 ssh2
2026-02-10T04:00:06.949573+01:00 Linux07 sshd[59431]: Invalid user group1 from 220.205.122.227 port 60799
2026-02-10T04:00:06.956975+01:00 Linux07 sshd[59431]: pam_unix(sshd:auth): authentica
...
show less
2026-02-10T03:21:59.783204+01:00 CORE-0 sshd[343483]: Failed password for invalid user admin from 22 ...
show more2026-02-10T03:21:59.783204+01:00 CORE-0 sshd[343483]: Failed password for invalid user admin from 220.205.122.227 port 52006 ssh2
2026-02-10T03:22:01.236769+01:00 CORE-0 sshd[343483]: Disconnected from invalid user admin 220.205.122.227 port 52006 [preauth]
2026-02-10T03:23:55.470338+01:00 CORE-0 sshd[386902]: Invalid user nagios from 220.205.122.227 port 25628
2026-02-10T03:23:55.474802+01:00 CORE-0 sshd[386902]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.205.122.227
2026-02-10T03:23:57.542131+01:00 CORE-0 sshd[386902]: Failed password for invalid user nagios from 220.205.122.227 port 25628 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 1388 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩