This IP address has been reported a total of
181
times from
109 distinct
sources.
220.250.52.89 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Fail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security too ...
show moreFail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security tooling. Technical log details and local server identifiers intentionally omitted for privacy.
show less
2026-06-01T18:53:59.847216+02:00 ezri sshd[2256285]: User root from 220.250.52.89 not allowed becaus ...
show more2026-06-01T18:53:59.847216+02:00 ezri sshd[2256285]: User root from 220.250.52.89 not allowed because not listed in AllowUsers
2026-06-01T18:54:00.169436+02:00 ezri sshd[2256285]: Disconnected from invalid user root 220.250.52.89 port 51040 [preauth]
2026-06-01T19:10:01.279167+02:00 ezri sshd[2257737]: Connection closed by 220.250.52.89 port 36786 [preauth]
...
show less
2026-06-01T11:30:55.813224+02:00 smvps001 sshd-session[223301]: Invalid user rustserver from 220.250 ...
show more2026-06-01T11:30:55.813224+02:00 smvps001 sshd-session[223301]: Invalid user rustserver from 220.250.52.89 port 52526
2026-06-01T11:30:56.044026+02:00 smvps001 sshd-session[223301]: Disconnected from invalid user rustserver 220.250.52.89 port 52526 [preauth]
2026-06-01T11:48:34.775690+02:00 smvps001 sshd-session[224484]: Connection closed by 220.250.52.89 port 41358 [preauth]
...
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-01T08:45:19Z and 2026-06-0 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-01T08:45:19Z and 2026-06-01T09:34:01Z
show less
2026-06-01T08:50:43.410769+00:00 helium sshd-session[1904143]: Disconnected from authenticating user ...
show more2026-06-01T08:50:43.410769+00:00 helium sshd-session[1904143]: Disconnected from authenticating user root 220.250.52.89 port 56582 [preauth]
2026-06-01T09:00:15.968421+00:00 helium sshd-session[1906751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.250.52.89 user=root
2026-06-01T09:00:18.205708+00:00 helium sshd-session[1906751]: Failed password for root from 220.250.52.89 port 45870 ssh2
...
show less
(sshd) Failed SSH login from 220.250.52.89 (CN/China/-): 5 in the last 3600 secs; Ports: *; Directio ...
show more(sshd) Failed SSH login from 220.250.52.89 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 1 03:48:50 14474 sshd[26711]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.250.52.89 user=root
Jun 1 03:48:53 14474 sshd[26711]: Failed password for root from 220.250.52.89 port 58742 ssh2
Jun 1 03:57:20 14474 sshd[28044]: Invalid user papa from 220.250.52.89 port 43938
Jun 1 03:57:22 14474 sshd[28044]: Failed password for invalid user papa from 220.250.52.89 port 43938 ssh2
Jun 1 03:59:49 14474 sshd[28356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.250.52.89 user=root
show less
2026-06-01T09:48:21.177899+02:00 jadzia sshd-session[923662]: User root from 220.250.52.89 not allow ...
show more2026-06-01T09:48:21.177899+02:00 jadzia sshd-session[923662]: User root from 220.250.52.89 not allowed because not listed in AllowUsers
2026-06-01T09:48:21.849554+02:00 jadzia sshd-session[923662]: Disconnected from invalid user root 220.250.52.89 port 55412 [preauth]
2026-06-01T09:51:06.019564+02:00 jadzia sshd-session[923853]: Connection closed by 220.250.52.89 port 45422 [preauth]
2026-06-01T09:55:03.298610+02:00 jadzia sshd-session[924111]: Connection closed by 220.250.52.89 port 44496 [preauth]
2026-06-01T09:56:01.401561+02:00 jadzia sshd-session[924180]: Connection closed by 220.250.52.89 port 60712 [preauth]
...
show less
Jun 1 06:53:37 dev sshd[3944014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ...
show moreJun 1 06:53:37 dev sshd[3944014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.250.52.89
Jun 1 06:53:40 dev sshd[3944014]: Failed password for invalid user frontend from 220.250.52.89 port 53160 ssh2
...
show less
2026-06-01T15:14:47.828079+09:00 lw-vm-v1-nrt sshd[2724549]: Failed password for root from 220.250.5 ...
show more2026-06-01T15:14:47.828079+09:00 lw-vm-v1-nrt sshd[2724549]: Failed password for root from 220.250.52.89 port 60536 ssh2
2026-06-01T15:15:08.569850+09:00 lw-vm-v1-nrt sshd[2724752]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.250.52.89 user=root
2026-06-01T15:15:11.047093+09:00 lw-vm-v1-nrt sshd[2724752]: Failed password for root from 220.250.52.89 port 34982 ssh2
...
show less
2026-05-31T22:48:20.527170+00:00 ubuntu2204 sshd[1116652]: Failed password for root from 220.250.52. ...
show more2026-05-31T22:48:20.527170+00:00 ubuntu2204 sshd[1116652]: Failed password for root from 220.250.52.89 port 33130 ssh2
show less