This IP address has been reported a total of
9
times from
8 distinct
sources.
220.72.14.74 was first reported on
August 25th 2026 , and the most recent report was
2 hours ago Australia
with 3
reports;
United States of America
with 2
reports;
Germany
with 1
report.
The most common categories in these recent reports were:
Brute-Force
7
times;
SSH
6
times;
Port Scan
2
times;
SQL Injection
1
time;
Bad Web Bot
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
copyyy
2026-10-06 23:17:55
(2 hours ago)
sshd[191984]: Connection attempt from 220.72.14.74 port 37738 ssh2; SSH honeypot on TCP/2222.
Brute-Force
SSH
🇮🇩
xveil
2026-10-03 15:55:08
(3 days ago)
2026-10-03T22:55:06.920797 mail-honeypot postfix/submission/smtpd[2384]: warning: unknown[220.72.14. ...
show more
2026-10-03T22:55:06.920797 mail-honeypot postfix/submission/smtpd[2384]: warning: unknown[220.72.14.74]: SASL PLAIN authentication failed: authentication failure
...
show less
Brute-Force
2026-10-01 16:00:32
(5 days ago)
220.72.14.74 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; ...
show more
220.72.14.74 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct 2 02:00:25 syd2 sshd[870813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.240.146.250 user=root
Oct 2 02:00:25 syd2 sshd[870814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.72.14.74 user=root
Oct 2 01:29:56 syd2 sshd[865278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.162.218.85 user=root
Oct 2 02:00:00 syd2 sshd[870542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.51.189.164 user=root
Oct 2 02:00:01 syd2 sshd[870542]: Failed password for root from 211.51.189.164 port 60698 ssh2
IP Addresses Blocked:
171.240.146.250 (VN/Vietnam/dynamic-ip-adsl.viettel.vn)
show less
Port Scan
🇮🇹
ipald
2026-10-01 07:44:03
(5 days ago)
MIoT SecOps: Touched the SSH honeypot
Port Scan
Brute-Force
SSH
🇺🇸
Like Ma
2026-09-26 07:04:19
(1 week ago)
Sep 26 03:04:16 newage sshd[7627]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ...
show more
Sep 26 03:04:16 newage sshd[7627]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.72.14.74
Sep 26 03:04:18 newage sshd[7627]: Failed password for invalid user telecomadmin from 220.72.14.74 port 47038 ssh2
...
show less
Brute-Force
SSH
🇳🇱
ParaBug
2026-09-24 16:46:15
(1 week ago)
2026-09-24T18:46:15.143366+02:00 r2d2 sshd-session[256745]: Invalid user admin from 220.72.14.74 por ...
show more
2026-09-24T18:46:15.143366+02:00 r2d2 sshd-session[256745]: Invalid user admin from 220.72.14.74 port 41992
...
show less
Brute-Force
SSH
2026-09-17 06:17:48
(2 weeks ago)
Invalid user admin from 220.72.14.74 port 47620
Brute-Force
SSH
2026-09-17 06:17:48
(2 weeks ago)
Invalid user admin from 220.72.14.74 port 47620
Brute-Force
SSH
🇩🇪
EGP Abuse Dept
2026-08-25 08:10:39
(1 month ago)
Scanning for web/db/file exploits on mach3blocks.io
SQL Injection
Bad Web Bot
Web App Attack
Showing 1 to
9
of 9 reports
